From 044c2311996fbdffc665106992e21710cfa7e8f5 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 3 Jul 2026 05:02:39 +0300 Subject: [PATCH] Backup for MikroGig created successfully at Jul 03 05:02:39. --- .../20260703/20260703050235-Binary.backup | Bin 0 -> 182688 bytes MikroGig/20260703/20260703050235-Config.rsc | 3126 ++++++++++++++ .../20260703/20260703050235-Diff-Config.rsc | 14 + .../20260703/20260703044003-Config.rsc | 3701 +++++++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 3618 ---------------- 5 files changed, 6841 insertions(+), 3618 deletions(-) create mode 100644 MikroGig/20260703/20260703050235-Binary.backup create mode 100644 MikroGig/20260703/20260703050235-Config.rsc create mode 100644 MikroGig/history/20260703/20260703050235-Diff-Config.rsc create mode 100644 MikroMaster/20260703/20260703044003-Config.rsc delete mode 100644 MikroMaster/tmp/Diff-Config.rsc diff --git a/MikroGig/20260703/20260703050235-Binary.backup b/MikroGig/20260703/20260703050235-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..9ed251b19b4a6719cb31f81d908955ecb51432f7 GIT binary patch literal 182688 zcmV+aKLEh*sF8D^$pQc=mXZ;;u=EQx|72h}J%eNb0002|`~QBR0tEnA!s&La%nB&5 z>7*g0?Mbrpg~kNm!ayS$EH@R|8b6I$!>FZN5AyMY*DF-GXkd8!kOEd6NvOG-(0~pa z0K?qjM!< zNML0~|8-I{ZEA=qpNAzrA3X9W0e*tBIGwaRPykV}{1DFM=f=lX-Ne2+kGhdYfq0Y@ zm=3$lqubGmrV8MdjHy2SbY>{KaJ7bv%KL|+wc$qszSbv%j{!pX7Te=yj8#5^?n)!z z4XC#KKnozjXc%4_?}Mv*as-&5H_^l?a?QQbg;WUnA=;GFSf3$WzSY%fC9xGcKe@I# z#}0lDEEL|LbAXLi`yT5Tt_^zFStF>NDWbqcPbz#U9qzJQV*YOz@EGM`h>vcJ){Hyj z-q&D`&gpY!xUI9;>z0M|6yj)oT2Mct4oKzjns3AGaa}YA=D82bF@gNNLWz69Hzn4R zl>m?yN1Ec48j>em#dD;P6-+ystM?4Mu@<2fcQcM?Ol9z>l{mufp6t)GlClN{$a6pyk~AkPBl?C2K(9VK$F_j9N0|4 z5>N8A04RmI9V#xe=TDH%XE3Z@P%@h}iYLYx{&lzZaAW-(XWFY0la3H*#sb1s=j7t2 zwBa9XHw$U{POZK0sw zVw9&DgCN1WeM>RlBSGV!H>3HJxGz7tzP*P@(!5aWVV#;{a0mJ|&zk+FvO7P3CDxxq zkfONe?eA{Mcr4x@OhF-^`Lqx-2S}JZdxdL>28L=up+CUX-@B1rv=7z6S>nRu?eMvc z7ZDo{%mEi)viYS1pSGq6L;98JWS;>{ogv$x}G-vC2M)#%ZO7IlUJp!`JBOdrhU8W}v+91BCoTA1XkN}I6h z_lsij=Fu_oP;!}+%9cB6y5m-pjh7{W$s)poA>ykJ;PMR2X+A8W~yC=b7Nr@&l{o8|#&JCiSqEu)tD*$OMT zMIlHi5SZYH#(b>_@@(=G0#Dm0@@Cs}{htLXN1;*IaX}z&&+fM3{MZ|wqn*7m-I0BE zA;ivB-U&l;P^7~Hb+oJx%mPJ5&zcb$Q$#=t|6ayW1v^rJS4U#2fhYL55|6pCp3UP| zhLtt^9ie;_7kd0l3bOMz0jLl-Ucl?Q(9*~C*Uk3&Z-0x3%oDN~%kc+~^&H!}O8MGT z;RJbZLfxBl+IieO&k7d>l)2T}r1~rC3&O+FM8ZJc(8?h^uT-jZ+>^(gpm7ZU= zRfy?M{5|WpR~yB7ICz^YWBKjMZ1PdQTs8Zv-jLHTo$d6QFl@d^hHdl~Z#W9z!J*qm z2P>AC2wfj>J0 zs5SC#DVX0CVbxTLc;Y`OZwGDu)#mv~cu3KF!FY0Qp%O$pg?9QI8+7^o{*!RK&st4x z!FlT)4XcTMlk{Vz;N3GZG%Mo5Uoc*M z&86UOX?%{Z@~y9U8FQi4&(4S|oAC}~LN79JxG(gRB5VemSn>S08}Fy7DUj>DkFb8gJUg>9me?WWC59a43i-{BizUFXrW2GkATjdNCIp>I1yXKX z2{Yc4uZFMCH~mNrLN8)|2C1xKiPNGKZ*A=;uwwcn&mWb|BZ0i(ALy|H+ImwZdiAFF zlSpK9DiwXJP61RKlTCp2XFu@}4lSUVgkA;@j`pJ>mtbDzW1yW&>mkGJ8P&5@HJ66~mivO`awhBfW*ow)wT-63*|j6WRtwt=Yxm z>SMj@C3j0RuaLXQo3rpNwX?vqug19{MV2zE1{?4mBhqWN$0f7$)ou&pwQU9wKq`Y6 zWyM+lD<)|LN$>lVcu&oMhO(;}GTHsY=x>~N9l3A{9GAByMeaPZQjhIyZ=yH}r()3MdRpABIS(Cu3lv7X1;VYSJ7lC@SYPH_8( zHdHc;J=fdysgNE(I|Nq_;{G4_C*CIDjN!;A%2FI$<*MO{SCt?;@6YHnRv-xvR}bP4 zf@yF@L+lpQOjTa`h^`-`1ZsiCdsn=>j*WE~CPw5nyPFAXRS)S z5;0g|;l~Wp_1{Cqd(_vK9ztk-i^I__wxxYjVLE1bXo)FWt=74YLRCGfu&=5`{QznKobvM*u(0xQmqm zyXi_L0-a%T%stpdz?RXs@$+nX4gAVj@au6Xk7_C~*}dT0bFw|`s((<05JXD&ljAcM z(&%~oje|E$d*@&BNy;3B(nuZTA4#<}{-Rd}{vjwu?fyHh6EIV*k3}1c)3?LzvYstg zyBL0m-vL2X!^2`hqC^=}y#a$P&VB_ihF^8s!{)V(n4EDH^@g>Wtd5F(!jpChjH!(C z*%99(`UATjT9bXeToG~{P~rw0G5HAXz>)!jyNH4{9g8^spz&@_`5S~`t(r{ejJaa0 zD_qP@zqvD3#qEH4B9+yhY}5Y1LpN8*@tdM>$*hRv!u-SE{fAJFQyfHFa;tMvXLads zZ?JlCb+KvOcIco9an?Z3k{KsB;E?wWcVrKmM6$b|GyAaiYd|nU4%}h}ju{$ahCs+8$jEtWb$3CJw<~&Eol)!haKVO1@lL`j4GNhIb!aZgU`x?x z7rz*tk9@<$$9?=KyI+-6upB%Cbn5HCP{hJtzinp$02KLbrFquTpipWV~>3c2)k?%yj_J zBj$0zcvj@#!-IJUC(Dl`lbV;ab3I%cQ$UsQ+UGCDGChke4kF;WimWWdhR@`cMDbR2 zLG%l820~38fk*ezMgC8|Wl8|4Xy~m#UJi)N`wnNb?$mKIJHED<&0L$Mdt&YMf9Sy< z!urd(Sbx1xTBq_2jYy=l>fv67MvzSTJQpbI_;opXAZ=`T?+l%BtfTmNClAPC~P|6wLItGt7gz=)3PPdQSLFpEsEkFo=_Uxw2!Z0rOc1N zlE~DHj|3p;bz(jBd&rXbYaOY|z`s+~%^t0hwnTx^Wh}o5q1URJ;7dAbVnZ~oc!Gqg z@s+;0SpoN?QXev57(CyJl(YT5YBeZKZ()C5tBkbDskm7Zu+G=5bcn?V>KQ0>0@s?u zYm;_?M>1aJsgzX0T`%+}d)_6FugcUu>zL@Mv`N^Oi}X#6Hp=A(kAJc39(j~~=+Wm2 zPo9jb8aDdY8D8R9H)>9}I3@$a`J}SO_W;Cp0g2H{^kNWL18`?h#*ZRfi$s-5OKDA= z?AWT28F`*?%sd5h#5l(c6FqiTS=8nq*`5uwrOjrIJ9@2B?-j~_LSai`aO*+Hg;s-l zEpxrAB>-QBZcbTJJD_UC5O}21tQ_B!bYo;4I98|BWrcCj9}Z0bJCN8>O`|8Wuvu7d z*c>tAio;VjFO^iWno`>>PG3&vs&7#FP|km301!YwYHZH_ZkKM$Dz02}QFh@R{@79D z&nyGO>=eosO8vJDcL5X|q z8j7>00pDjcV`Q^0+}%i1H-NOgW-KK8_gHyvBlH+LN+%+a$%Zo^tD&x&eq^9gS_bLY zCJ;3p_hvCYh?b8kE2hf z2px&kN9Zb-Gse2?B2~EqfC)kj3F6p;M#IA;hChS$GcqGCS&jP)ez%l@ts44go zb$4gtaa(jHn(;D;%daZA1din^cW4hSnNFrfJ|SxeY7etwz#M|y8!QUozmnF&M2g*8^K0v^5y&kNf4+1ZceWhzEeox) z?~j8e`;|r-`qgPS+6&@MHswGKERm9L$}aeQ=ya-OOO2otVLH;1m~7y+X;4`*D~p=j zwd{((8!gf`YmO`E~pqaD}G&J?N>=@Pd~1F;q}t=RD)F zcM8$3oc>u2`r$84S3+Q8Pws+r3yqYedzY zX&79ua}Pebgniv9Xk2w3GYF3(G?RHQ#R^kEy zu3oVxQa=JxnUfZjCERPW)JAej4T2)W&S*P)QNzi2ETny$VckbM9d&21EJNO>-v@I+ zCwxwgAvzm~Jx~LbJ`LTdSch`z=j8%p*p|*C7a&J|H@$hq)7YQMZW8)eTBTXPCvQsV z+xxVqkahL^zydI4Cpt9fy$?=WLUtf~D`yFUB*0>9T>(FfOV2ws$hB0A)|+IT1AXP9 z8O;scfh;%@42_tiF!#pz#mneMZw9FYK!5_`(0Q=%aUaw+Z6e8n{p2`){jlsGzFPg_ z=4z4uBLbepacz$d7IHs072l{Qp0qWuYoNfVBAFXl^g|uBna32INghQ3y(C|^rzoyM zR-u}}4$;u?di0yDTGua_vQr17=Qgl4l086Z$S@T}SvJXbDWgKBkRa}R; zxx|@38E*~g)7oN=aKF9%F2c|lVz*9Wg8I{u%UF%6A+WL~*swCOuI3?f?Aef!vLn2% zR_T#yig}ZI6LI=DTIvN#mP!9)sPbU#bUH$Q#42b|L;{hglf6r8C6OA#UuTD-YnJbI z3$SDNwU^q^M+Wr_w2u6th0(t&S2)%OlQVyl;^Na5Pnqw%Iz>`)Tf4sH8AO4v`hz|$ zv;VUWNFj8e6%JqOJ^<4D5U~G8_L3x6k zvmxUz{MJ}J7nUdeR3&awJI_eT2ZG8(63TZV<9+Ipha^P;2PXt%;jq6r?B=hGe{Yt1sDKiEfQIDd)W3IJe&0PtOqXEx{ zbf|6@=ifX!WR>V%$M4`Bop)4lA()O_SPW443F ze;27pe|e#`&GNeh%C~B-FIM5D-WpZ@Y^(S_)DP5?`}39$9)}5N9ppk8xxJuxoQ@ zqA`xzoPobfh-@0yYEYLO`jied?E9$;FBkdGVpL?PD3$Vl?e-G$3p8Rm>aKpnqVi)>(@@r{!?b)g zV>aOY!(Qm}$t4NBb8Rgx{|&%p@nsRrvu*slmDmeh5P!$H4lS!?^pIbyt=r*K<_MF; zmckY5uxPBT|9Pik1F=DPpzNwgA2EW>xCB&DxLWtaInD7SHG3ZO@3{?@ECWOE7(xEo zNR_fN$0Xbxv^-ZWaWh@Af=2v^3(UFhV!6{?1=>|10X%0sm#OicLDi?e?a|-P#_`13 z{q`WsjUdZfFk#Gb>J(xo&UA?Q)p#`gl+W_URfz{$=*>=Erd)D*a;7J+YUrb@Rwjoj zi1<^kxD!?%`HstPG!ma|9+s!MJH0=0B8#JX){A`*0oSs8J9;`su8x3=TNsDMUoWNEJNqKJHrPfP zO+4hp@8iEAlh0ll_qaV=^bshw;%@YTGPef0I`%N7*#!v-9ge1lfwMGP_P^MqA0vq^ zvMEM9c{Z0Cx+?nTF+(Y6a8XdjO1qQ2&nnU~@l9KrAh=oHpCA$3(>Dy7;lo(p2<8t!erMx%G|2~_!2C1m{py}b_> zJqC?VmABzkMr+4Ll@3uYgkO`>Fn8TI@Ccvat9GmY4>z*K6xyOI%%3L0^gaQRvu+odMrx+F-}U4E5VeB{C}==N2i4f4qGxhzQi6jw77UtxBR;=q9u#!% zzg)FDB1r2RaA`ryoHqd!%=FpX6*04RJ?~WpGWA zJ?sr)zYKUdp@=x&?<=iMED7ypsIk4V$=5K27Qz4!-F65ZK)qTySce|Y+L!HYcrK47 z?X9b$Z8Gk=8JMVMMv5k|4ZF(6-ns6|FpfCi%wp5MR@I0{1CQA(cl*tM<4G>O3=Y4^y=N$$! zJ+pV^TZ9sw#l6mACo0{dq)cH!mJQvfp*urR`|Nw=n4Hn*ZP`97cjg#cCrTH3XcGxK3nJEx%b-8)cQdJ(IneNo270Y;D{&uLk?1*&%CfR<^u%-)qXg2=6dm~o7QtS7BjEWq zFAO&=2xyB`Q(DZlXKK|LDb_@S>S-7d6`3TqdtyEDkeN{%=>U76FklsJ!=r`)Ak|;j zlGrrpgF4`JEWAZo#LR9*jw^+}(P3VkK1R0iu*VEn#7bx>?d9qzgaKIZMPqHcKLM$P zV3^PK6#owjkO!kb!~f2RnEavydCm%j1=J8`*QzZOmv9cSR2w&ryR;VY*A4KtpYGEj zL_@6rZz`3bH#X_5NiLY%t96V05a_Hn@e!>~tICRnb%G&k-;H=X4p1){*f3JC(i$A3 zz%7Mzh-yB#%*`=^d8DoNGMWN33o`)~ z6?m&#M+lKjrkh&pz)zpuU(ncjD32U^UShMB`(~5MV2Jxf30UNyB4qkMhOD{}9{*zu z(xP$!#zQ6cIyveL98YRW z7#T)5fkVFvE`ll}UwWa6Kw+c@t$)D*(JM-Px10RdsUOOMa6{O8V2Iy~e4S?bA4IOy;dDO+F0#F7!Xn!~#lDXX0z+ zuANbL&P*ny@RizNth=QzDimlIkN{2ia{@Z3Pt!uXlS`o6 z@Al4M5{_z}*0Pk)5^0Y=-iY{$0c3++nh|lgvZyWVucA+(^d7$w$z5*o= zdgsvr_u!XM;z|GCA9#q8CXZA*y2s60*@Q6RODlMv!;B=aa#PREdAp?mv1JOUdYe@L&@y)1ba50wX|C4Pp2`uriB5WWSOzlT7>B~pR zMf*v@5qOFS9^Yc7vS8uhZ?I zl*G=19Y2X%EP{Fx(rv&v2MQt37Huz(5>MhUwC91sZ@E?TpYHXoil3QH5zBZT*nm^e z-?&Z%N<5iL)-4Cj>BZnW-Se?-`}T3qA1@Apvi@sU842KL_PZ1_^`^|JSd&B-oq1kX zHDHJCy3Dl}K)uq1ue&Qpj65L^9%n(clzx-vI8RW$4I^n79hYNK#syq4MnMOt)Ns3c}McztveKXYx45NsfeqMS4Bx;?^h{Lg{$4{@mu z&Si(vpfy3pB)Zs6a|^8RPvs40JB$+@fl%w2TMNXe7SoyXC)=EzHc66f);!a&xX0Ic z^jVpS4&9r4(iO8+O}t7=GJhcKX}4es^9Iqh;fv%-FZ%F#9^vsXB@mQT{A+;Yk+HJW^#C&r@{%; zMqJHlQ@_{*?yx(y{~BQ4m?Cy61+WaHi>ohkEJosX#74<|RVPajG^ulyXw(lHl)dY+ z127CK9P_&s65($vw)q(9U&=vW$pTa;#p69lnioMK%7fo{QL4uE$X2pb&o1Gw<>ZTsUxV69b|;(Vjim7!%t zB%YjdK4Ua&WGshRGflfAX;TCsO+bUvUh1#K1gtLKRbw{{CB;p>?vKLKE1bWFWS+0| zpWg2HOtdE&{&K>*3V#b7HBy{|us#4Lc?YnIH`^Rrg&yO>@c`MZrGLbG{WH)UVaxg~ z2$Nm#ofHG)U#5I*>%(O&&KjoM)W@lk<)qoU`Wp1C{qAP2`UTD@;4>N{6DX3s+eZNv#GkduYL%$^{DouuzT^|iGIA7CoyVI;< zL@`#&N%CW{`#69=21z1fHu;rc4ei!26xHO7dh{2;i0>&olMG1p8nrrDj-4)rv>q)V zy@+6u^<5Ur=mYa74MC=wv+coYyi}hYgOGR3w~7&J|1>?zINhhr^~rW9o-}Wm=Wi}$ zH9TQycj3zy{d{OaK+|DCQH1VcYV#5=(!&U21lf*F576G-#k%$h2`hym#owMZJ}C9& zu?Wq7NRvE7i~P_Z(LDYQt)1oTF7%>E#iN+mGm9nf3Y*arcXPce@|WB4CKC>)gcXj& zh1i48CxQCc%aR`sT|sXm!Haw651Xf2Db7jAyf9p!i4-&AR(&)-5ueCdRn_OloEDF( zzo-I%K&KyzO~n66+d;XU^@ zjd06&1T;m9n`f`$RySypSO@4Q>;)#-WJN|Fkt@j4<1fpO53ek$@X88Aa5@L(POorY z=PQ~_anr^UK$8N)+=pge@bkD=)t-mvh!s}N?yh-W#$mknBdXj(Ux-*i0)zbGKMW*% zRh5IV$ms-|ZW=?dsZ0n%2kX`Ujg%w_Wtrh`7;cOzXzw%!OXwbOlfj-RJ8kdST-AjQ z-R)98tEOHDa(v>d3@(B&o}zH-gd;j>=WH)B)OlIxn}ixwgc}7(+P(TLE0I?gQ&i9E zUui{K9Mg_6pxoEm>$9*}PE0fp&n%!Iuttw5CANrj6urlZ0Ov^qrF4Zb$6kwEcjXb{ zx0_ZbAaWoOM(v#l4@+CHZ0$!OsFmZrbZd}}WckBrB%rGkIa?pq(PJCemZxl8XIB&O z=A3EswP3tixm^5GE^V6TNt)VxcuM{b|EW*p+P2|cJ3W&3Av#&0Nw3{?&=u$(ijn+x z1C-G4R#BgV4ex50&Xd)oHbus^Aof*t+CZo(7*3N`XZXLd(FEbm#sFA$N${NwZ+UeP zjpJ<{jG;~NPG9H2oU(tF{5v1at{fko}rnxXcA>qES zpb3c!!he>St}+lk)QN9QPtmL61jkU+xYMk6@P4oa5W`5xs_xpma-uh?IdZ4GLK4nR zXZmV!nK5wov94G1yYSWPLw!v>_~H#nXzrl3051X2zA$+bSab zT8dD-C0l&(ABOdrxzlcnXgkot7xz^MqDr(q;}h)dbQwfUhjivYAxEkU(b_f4p+(}T zG}Dh=g;0VZ5qoQX7Ku}@Mx9gQd+k$@}*^=8BjnKTNxx!uN-Bf8^G z5vmj=UZ20=DrhY>9@U;=1ubqCj)2eU+d=e%`Cd`D_qbNpKEdxg1}u-ai8wYVnF?Ml zc@_`~C`2*SY-P0qz4(r313*he*y1Q`?SazpjVSr+5N8l1<DA-m;vz<2e3{$1 zCkv4`+NWmWz{I3r?fOTxct$TiqhAJ9eG;{;@H-;VWw%n%Q$G2`pa?vSLP7aEQ>;P~ zdi@4fv@qK_u={FxB<-p6k_peRx{yO!Nf*nvaS~>`Pt3>eDc%-{Ep{$2MvJRbquEZs zDM~dx0Ki3D<2QWHrgRlvO>#B=kw(+WF(Q7$wN8bC&A+T&g?nY{MuM7zw#k#Yu*oCG zC~g(vWm7`JAg=nvT8_~qHXtH`%cdlIh4g+3=FK@5m@sYwa1p z4hg;sQmFJSJ!*1rTd7ZmAdm;78sf;NVC6!@5h;{(@G0!M`;@qV8o9Y@Rpx6tJ~cJb z4R6CjE&@28pW@~VEBziJ?H}Q=VrqWCug(JyX*dfpbcI5aRG=-jd!M_i>pXJ)tC43W z)qwLInOZIJbRg%%aZwo>L*I$fZm^*t5-Pr;vV%$7A_g9skC}d`bxz(vdb*gyZmbtt zU1YkB-OIAe5hLson|uvBsm*Z+emHk5Bb`gon2FO0>k@YhDoQG5i$pU7RF%n*Ra*G7 zy~UE{%ahm1lw8ltj{<6)vQxL>lx~kuh)RHEUp>Q^l7Fd+SC?d0Npmm?cUOihiRVTp z-K_~VY8XRon#_`96UA+=>*}&OcW?lkYq9;(!~725W6G-Mcq4-if(0C7)TTm@MBq? za!_+Uq2}NEW~GjSBX5r&*l(#bbyWHXOPH7vu3sq^;8oIE*7j^dED0|4*RG>4$P(Na zkAQ0%_;fB#rj$Sfv|6NDQhge4y#3Pi7!aE(Rg*(o=;vsW&gis`YN1o#fs4Wt!JLM&htkvA-Cbyc5>zf#=fJ=H$h z@cKE^a`{tGukC$Ew3czz9EvuiF1=U&&OS@eo5Xba3`n-N$_%rK%Vx2=86U#Ox9!8a zJdMyw=$Ih@HhB(R2tCu0PlI_8Mp0tap=Ljp zYoy34wY$ccg!+B`g{WWIc)20rHtNltJI*HE`R5Lg>0BR$)Bsw2uE>2^VXOC-JCD4& zc6G$tEoY`FOeg#9C8r`zQZ7~gac;8rZNvo|1TFdzLYN(A#f*SeS}yEa>}W*GWB3qG z1rRCmpJcZnvDpI{J>pbcSSfj(BOn|!Hcp+$kl|aZ35IuKy7iib$ zrhA7@0}jH~<${k{|me#KN`9{Z9ab=$aU8BUurP2^lNjjLp+EdfllJN?{G5re|mOFr!a*FMY zF^xeSkH2eEko%jw_XgnPtf@G>D;}%Jxyq4T{apau%b*(dzr$K^rGuK>H>Pq|TZ=im z%R9+DP{^tQHA(i|1c&aHjpaZJ=#7p);ISV*tZ6q8m^$8>{8>eKCkUJhxD=g`Ly!UP zbhNYy`I?oJgH5wzRIeDVG644asji;A{@NpE{`besHh01bekxP{DO>d=mQ4B%6Z3X1 zKMlVGX%;3?YQ*vf<_bp0!u*MJj={W*`$=TFPW$9!nl3WJ%ujjUPUm(Ly-~x^uEN7p z6|C}l1WfLR<`AeSJh65T(c+2`KF!hHIM43ru`Mw;*H2$0dd1CF`@lg zO^D(2Rg!z+-GP+B(uwtAb$-9h`#x7c0Ea|7fMY1XKDy9M=o9!;&0-k+BCY9LYD zyvJuW5MR=J!h4voi<`d%?1@Zc)f0Kc%FhVweid?uy35>U`P!Tci@T0Hm}u~G1r)U@ z4npbZl~e;}jhI!pOdF0uuhT2u9NwL9cyi&T{`~T96lp2Sa2eK;Iet@b5zfl(X1WU{ zTfTso9b}YZ47+Vt$=#9fQ&t>?q9C;=fAL6l6@vMONeUJ%(tWF{?$lEg(;~^ax9~meu*L-&cLG{= zU@3HaedRMl@pvp_WPD^XNK2q9-(3%hbF|ccrnEhXnFrg$vipx^SRhM?Be{gnOEA)j z78bM5;E3lri|qeX`vYv4Yc>|3zOR6f!;GxHbO&E0^9Q3k*KLDJCUQ{zY$=DgAuB@U zX!!i$Ku^qlu_V~Xlp2-fY(;`PnW-RmzL_WINh28ie8c3pg35Vu6)+U$gIy?j*8VtP3xJQ8eNBuHv zpwe{mVOTmBCS$>UVaH9%#0zN^m6c3*txIOiz*L`(LF$6U zIbnrN=RP$oynm_}vwLt!rT!J&o~$t#<=RZp2SAypaQQsYCvF!30`ENC1woDC^MT40 z^Mx*fMijYymMfwuQ5{F{3=Wnqt zr`6^YpT;khT}L~Mfy7ZOb_$nXzXMP1$KE|cjO(&D9GBYvMAlOa(11O|JsF;QN&bW2 z#6|E>6z#>oSH_leEUD$sx`-L>i=N~ikucObwYHO@@h)w%Rz0^?CZef;9D&5o^Wjrl zJ#-Ntjb@s>qVTv9m#0nl!jFv@ueK&;zt97$5ReuKK-lA*Znl{z^s8Z%eHoS4*)W4s7-+o=O~x zg8+z@g*eds>NN9~58B>BsT@yk+|Q?5`@9U330Pwb{}0&&t`2|3nyz#UBXmO#m#%Cf z`>;QNfR+q9l2K|gosr0_xN0P`$KpyEMaJJYo1w{qYSqhkAnb$c5ML2$jIcmEK`k=_M;Mh@cq90FJyv~t?nwa-nfpk-H;-a zGov?_EB(cc;*qCBT1&ImU1D4#U^);>Diz^AKne}6$tD+7#bN|bLF1HyZC>k6%rJ}K z|NEio%rItgR|7R=c$h(%k*7Z)?x0hLgh!n9M4W5JIu(#I%cQ1iGXs597E~AxL2~8Z_z6Zk%?%pbKZ$|1y!ZQuC7DS}K-O%o0`5 z;Sc1Q)4f@eIZW(Tb{QLD_B?z7(tA5cX1LhjeoNc8#E1?Gj#%B%6P5|;tWgzq32L*w z?9BLLzk*Cm9zR)AcDVA_L$wCBDJg$)0HPr;M+Rmt6@JfPQy1N8P%(L=y;U!=lrF|! z98NE!sL4b{>1KO63!WgrTS{9laN$wSV-Atg#jf0ApG5ly#D17UoDSg11*2BC9Z#H} zoK>9w05USl+4SWYVWlUzRQ$dowA9=ZwVp^2OLSA=)|<(|Uf0rp$rc4j_>2iYN8TB5 z=k$XnB3r8?GdH^0d6dQ@x@r*r?RochGBoWx`IttY7B~4~y2Nm^rs)cdP3~CVFH3%( z9-8F-(na20W~5KE=)rR$j-otkSdDc{wQ(@5N|#sp|9m+Ng?u>m z_yBBG+>r^>gqVf?DL9m@^yeuK<~+_T;div3~U}#cZ_B10wR6 z?1(>_)bp1KmL&7YL~t)@cz^KHkHA3%Gpj(-haAtV{zrOxh+z>ly=~POBp%z#%}r>M z=X$%lw8)&8peBEepxP3Xi_Fn}o6KVuItIE*^hf^ruS_|L@$L`Gw7SLIi7VhNPgaE{ z&;BKoYf>8uLZ~H; z9AVc^JM?%SPyT7MU;c5I zSp;Iw=5tGL&#Fv&Y%=LmQ%@{3-Qu4NLKgywb^^A#%IaM(4i$W^WybbpO=~>Z7BOcq zcueJp;x*1&xpmru(ca*2+yrwcS}RGbsViHW+`gW2`zA7;KqqyIdfkzKlY+Q!v2cK_ z$U&J#z-~X@sK58qj<2O96fd+{b*H?36WdoYVgBLR@zSkQwl7grxNsD4P zMRBEEDhFHivPQTS9$m_s`+><78zG#+cE0VYiH!48lZ)LjSSV{>1hJPQCRL}BgAN)adV-@?A}XfniK zm#C|t>tAPF3t`b8G0IWt$y1OKAWH+BV@I=X-Z9n5O@NBpm^&Uw)C+eqEr5BOjvC0s z89KnWbCsJw@+j1`T@&H}aIw9N zp9fg0C~U*Q!kUyr@Glj{s)pnAK*IP@NFKEo1B9adzI*aqrw~$NV*DG%!KuU^VHJmZ z=wJ`n?DJ;TnN`|6LGPc;@}G*t(uw{kswtyHGmw$LB=ChnkcsBv4U<=?fc4}mStVxx za2ViO|2!&%wtdJ)9P~@|2dq$^6!LSuyR7{Lo;$M}KIKo3(NWT`Poi9$u=YTLmsgTnRRi9#|$8+3EAM{F5AvFL9 zBQe|rFKd*I)`cdY-R{X8V-?At|5?~Pky~0z)cnF27|!_wAMl3tzAXzT9-_gd(RZ*u*^2n6%0TW>l8QbyMD{ z4T$u;S|emBr}Y(UbXHm%7Auj+a?^L8XPxQK&_>I)dii%9#Gx|Soe>2AhqSOTaB!bI z60Xt5DP0RQRA)Y8lB0^gfq+CxiK?wSt~+p(BEKZERO_D-q|j%hBw)6phwws$duF_H zN$33iOq2OeenOv+FN^6|^aT1}+V1c;E(Bb7tpaPdgP^L==7V9PBV+}Rs;U2#7KkA# z^fT2XtM5_X^lJIm{Jeq4Tb((EwK=%Yt~R$>vL z%~*2eMU1JB@oyj)=Rhw8&JRa;WD~9rXrT)AIuvyLdOL$UYj-a)-3$1E0OLzUL8x` zK>sQA=Z$xdBU^hRv`RM@l%lIIK1_lV1!7u@>}2e$UP=j1(5)M(7iUkM?k3%LU`FeI zVRIA@_N5P_=PW}Iltct-sT;P}sfQ2bz3~cx>ZyZ~jm~rQOr5xz{SN1v^!!;b`E62; zYd^4T04PXo3$AN6(1hT`Co~9!n?X2Wxmi_}^s13?K4c$sb+!@GF++sa>!Zxd+ZnCs z=j-j|CQA=tFOkncq&pG=3YeZg(Uq|1iGa6HAu4qbhBw7xe{THZZePW3M(+KO8Yt@m@Z-Fo)wj^g`H+WDIJ$iSTiig!y|{z|7wGaK6y=$ig7rO-pli?m+WR4_bhY)Ib3BU{tkXeUHR z{KIefMDDy69JSJ3F$;=b<-&zV^8X3dNN0kEN-F6&dK6agY+bTx)mepJVc;Ir%Ec3ImXQphE$iVzE z#KGb-;{d;bs)mf&dYT=#2j{PzG9K33ewz=x#T*|L7k6TKYq>lA~qE|@WMGk39smL|5+bFr=RYD88G%Hk1!GxSY za;xvy!B|p4;i&-sKLEgloN*4`mr{YG+i&dPAm^ZvaA&lfAdcj`W%WID%C%WR((9Y; zeVbdy^U!eQt`Ux-+*gM=MUH*sVK47VgdAKt?kOp5u&^y&cTWH6A7x&jE=6#nj4g5e4BZUK%bvb>O4rI259b|tY{;j-$vDrWMxOL%5E@^F`0BidB zCz}R&XT@5>hQX$@bA}jGtwHil2z*dGyrh6+IessFn;KOhNo8bZC^%hXc@w z^<9R3y1ABd94wiHJ_~u8hz2O9V7V3e&Yz-E3A;)BuJ)4s@QEb+F zq&D7qlo1O5aX)R63u9=m@bLI9BnxLrsKSt&y*)~=m3%nT5ZmyYl zlO}TP%S`dZW?RoY?28Mrqzt%hx>2`-$CGw4;!SbAkB&0F z!WmAY;13gzwWiesc?kaeP~@T_G6p}{`7yOtdL~N~E6!Fd=$RKEaU<&ItEiHL3`T8m zq^L{Ra{<_#KwU=ZrSbnIE&6BqJJZ$4%7E>y=Hl%e`D$Wbwa!HJLc1A*;x_VB{WJlG zFa?buTaD!Q#z|!gbqFha^O1w>r)Sdhw|#Zr@O(lhcaKnPb~um%CNqo^FdD-XP;s}}JDm|1gbL~ezb4zGoD z#flZ(aKSM@BTG;wY>dfknLbp8Rd6*J`{AB%x)w1BfHMXzkrJl7lM`#geVZX~9hB+2Lv{wX(K4`;z4_S1C&ShMZl~B=# zTz}d}9>YhTjr#{6IP52^1NIzg0efe^iqxs4Khq209KP9p?u6Qlbas3^|9_DVXph)! z+&9T)!>KaDJ77ni0a;M5j5@aA3kC6M5r22SvzwV<@y&1X8&(wwK=g7x+!+$J*F0EA zYzAF5M8rbW={Dj!xgPeU^$am-R?~XM>K_!I5R`7M%ueC+i5G^4JI-tlr?5P%BNv-m zO|oI$MOv9ipi(X00VuCWylsZ9XLEIK3I(uH$+*XB>D3;0*z%#qWYJ@h8kCDVHmtXq z?}Df3oO5xv23hhy!WW}(htBrMf9Nf3!LE6H)I5k0s_1?u4{umjh#=FyDXbdW4rdgF zr;D-@f6-40I?2eF7XVdtU&e)`sf#f3OGd`JCZGbTf1^#NJ_-zS4d96gK{TTt@5=Md zG2S7mAN4Qy?q!$3DB84>L|73&Ermd?zwla)U!tsjc=rw(?TO!=9C~&ei`5)waYyaP zza#vMG{}{&x4^-gZ9+}%_a(sL!XG`&IVDp#!p zysVm}cu>UCMtLp)l0KLbEjTFNByJXcA+5NP*KXE)mpm*BAtOV$X`gxacqx~LoCZZc{ zcje?Z9*y45QMDScrJbzf@QE;}Wk`;%b9SCR0>1>)^moIL1 z^0|elj;}!rur5Wffy$n&fVXKy%|eaw>rF*}FwmmTMSoA?Q$YJ5<*8E`U*;54F@=?` zExjIp0LdZb_KnunY=rwt!mqtfVcW1H-v$N7A3h{}JX$w@Yn1Oh&DdB98awmJSAH;)S^)MN?@QGm9fhzWw3 zPXJl3VB*Bsj!}LSsUb>N^wk4O?Ty*PdyY^1UfDZ4v_lu}o-Xac9Z=KfrKK5HVoS6P zdnK`l74>XwVNed`gK@D@S*IkB;6crn!lljkQ7c!CBtQQxiUYkV#;Ad~nSil>`HM1= zQ7MLG7x(7^y6egA$|4@|*c~GsnhmOwhkJC@RgBJAM)Qm=2efmeBIYf_oT@Q-OEO-P z7R9rD_Hoe(0B?^TIzGG&&m;=?_g(agZDm1`oyi?m>_9OZ7mjfF*s}(+A(a;HbgL)K zjhZ50daM~A-KB`9y`U`gTWJ0{UEv&V_AaombE7>C9b%vsj7Pu?b}p2t?2J@QKAtw~nIW;d)h%Yl8hSzb{ag!) z@fbR5X@iG+$Tu2wSQ+he1|eg<%4_jee^_{N7Da2s8MLFB;`O&w(~PtlXBv zHN7KTD}^bgdukvKy;RCehMz7 zn(RlPBVN%(Um%3pRXSkPSX0H^jk&y@;S{d0Z>;gqf9vMt7$68De&`S19K1~!*y+5T zNM%X;J+>aHK#7U1g$q}S3*5$vrk|A|HMU|o?*xZ79_24F8~WmGLjivZ6!7G3Fp?DQ zr}GfEi!hg@Bm4`CxzJtHwDf%utYT~YGuTGbL;R%k&j05?Lhtk7TB0e(**cY6`HFbLu{WwQu`~KF}I|SpiGkZ0z*GwR%9iTHKA&eb-vF zwXh~MFrb8o=}hIbZZjN;-4nNz{_&;MrwtZO-Xv^aQCT|{Kmx8*n~Uk<&0|VOQ~M{# zRf?yh`PwPAtoJhIp+$2(Q!(aK;+&HeM1C1aXDbGcG!K02M`H1N@lS|6ng#z0o)dGo zb|mZ*E9_x9Vf7n>bQdb-vEg6b$c*>=_13Xu2``a zKu;fy^Xp8NDH=gND8r2;sRJ*+GzI9N3XR)1_>RRY0|m%GG=WD?D$4*o-g;2jbQJ6g zX=b%zJM^3h7i9V%xYky<4Hr3V(#LY$4T1kOk&(0IrJ=U@Fh}s)sXit_+NhxVpE-p@ zRjMFR%i;Av(6g(ex{a7*1tw)`K8T|VZ!#UH;zH_}7?V>E1gg9GZ27y)f)YxL9>K3+l$X7x3yxJXl2WD#WJz;0IyzP(issFe#u8GDS(6 zMBYPyE(G)Wk3Q~=CNPAZ$?j&NTX_$39Qw}LZgau~Rs7pEH9SDrC4Ahs>YlXE;bOVl zR%4wZu1>TobpQp3iMVQy5R)C$bkmq3^^Y@cplU70OHuW0VUutA^e93nfR?=*F?qyM z9+HUH=gJc7cA8<{SfZ&Ca=9;+1Q%Csjb!j{0#YkGJJ<-0>OEYJl`o@S(^s5a(rG|& zYbUwFnos}hc%2U64RC+j%8h-Jn6o}sel!QZJ*)#zGcBrT1j^J5^ zP8fPOaGKdJMT6W7U5b^X8i=xF7PcyMt?IUoo;Vnx6a@mY6MK3)Y0ylV=z@s_J}oDy z%Z8jh2fU}~w05u)nM-Vd&tFQD2tG%6QfSOV{ku!arpu3}ctLc<4r;3aR_EVrac$^E2|y=EA2hu}d^ z@*76+eG)EJy$O<*O6^P1ecycsmgMgev<)`?3QefM8HQ7yIELS-B0N`8E%0h!orq{>0AK%zwd?d&;^jvU&gpEhH0tm5Bzcg5O@NqL%xQR+VVhNaLIf?cgP>c1lYtk z@-eYy`>VSk$JZKdo0o?^NyovwODFU)p|&1-TkLNhlr(`Yhzh7%m<=a2$~;xgY4W1K zH>1_`VMnzJ_StkHG{!5BQ9p4n@iX1Cg@s(JyhpW1!q#FRXBeYBz-%1@k>ojL&$pY}FEt}o%!<&m##fKLz z?muxq)u%lUSmZkgy1?8ae$P0FHw3r(K{cX2XL<;B zfY(;n6kAcuWU@U`>Qd)2k%D+h+!qAeW^;yJuE;LrwR79%pMB2g>Tb2N0uOareCfv0j6fWlHQVm@U`hj_{w zc5uMDeb63mrP>;@x*j8)j^caB&Pef4v=S zg8>lkHX__hT`q>%<+EFUb?<#G0I%6t@&D<}WFeV8dAVFr4Yunr+#ZE0JZiwsT}R9Z zVArVD#a$}jSIopHuFoI%RlfIG6W}Yk!~1~Wia2iroD8h|=DUr+7$Z@dm!BZ%mY4{+ zDdHM}6JyfIN)}fL(c_~-dJpXq9dUnGw2}V;Qt&W51bAqgYUMcx+Ovih*0!ln1b zc<@cq_42>zk$UQEdP4oIZAo^ij`B8((LH8CBrA7Mh*4=<$f$bkz)Ft4i+?bWV=NSF zy$FK(fMi#sPAEK6LiXkS@R!Sfp=`98###HyZFF= zhDz0gVFvtISHnO~7GN5LtU5NEtdr4;jMBN5!Pti05(w4IKA03cJk^sXWmEp7X9JgP z65Y-i8P_ZNi1iN?+C)inR`T^yB zVLcc?i|c}m;-N-vh5xH`qB$4*4t-ap?;^O9%8C|U-UtDwQ%!0c%V?MUfOa(t2@bHZ zQ=Ku`KDx20=p8b&2m&m`T2X7>@ZAVUAg#v9gV2*}X#e8cxNwpu%FUt9#|he-oClz) zIL`KUHB5d^2_@zch;7q6*2v}fsw}UG@(1g!uYn@AG6d_(t$3XFGF3gZbyaZ)!nzUh^(G>MRBE9~X5=(FJ;pJ@x&}7WiUSN{ zIFiMmB=l_^|CB-7UUmLRVTF;$VfF~N{bbnL$JH=}|HeM=o?W^bd-w1k=r}F)cKf?rWWR)*x}b7(74D)R21M&J!eud7aK~F z&Ol4Vmx4NVaxoOgG9H#C^;pDpCMRmZFyILoz_P@{-q3Pn@pZK*koTaDYw3!jwP=2Z z0GSy?ucXswaG7zC>cHkqD(K8FYS4#Y6YjXT+7g!Cdwh`&Q1JqiqzWY{FqHqalnm-S{>C5{3ko zyJMtZO=QG2HR1DZ6zgQ$=*aVIYw+@$pwydpiJ}XbvSdJfU`qp{ZtQ&Nw zi!aZN$GX?p9jm6f000dOPbUuf3qz6BD}bFLsmok`9GUjTI;5>GGJG9!HPCw*(|?RR z(ZuY_8F@RM1J)Zs`LSv++ow_KQfl|*pV1t;1|HxXd-4aJUv9<|0|Hv^NgcW%owQW# zMS?7pMa?S+WUjgqKqv(KGit({I_k~(XD zq#FuVkJvjy<1VuSOoEaLZH6FFqrMf4$-NYL{~;bFjg8490giL~!Fc~4|NJ`jLo->q zb9~T%-lF5tI07=m#t{H;4F5)?gOTZ(Q(R^z!$!=-jbkKaEJmha{g@lI{ZhPoq1sERE<_xF8{+}Dmg`G8JhpJp&FvMhqq z{k^p(EtUw~h9YGN1>YjkDBoI8rm@hMwx#nw+oJQwFYhKr&4YTenHAn?Q7kjtNoKo= zeTC=xf+j=42g@J1w$AxB>T?7ozbj_`2}|hq8w{A~UbskvVP2^byUWe~ttR3AmS(5q zqi>`Hhy1X0#%{p&oXR{B*7qrGcpI6YRgU^9r~UKau3ML{dL8{iL7O3q7MhYp#La0X zu95Zthq3||>+%>Dc7AaOxPH>!0Bvtbl+3U^-MnefydH^_U=bV@TEGGnTYpeKlgy*t zRk1PP7n{*(1c2{I`}8LU2tlTh<_Fn<9|MSB|%S1*{*QV+2oa z{06rv3n8~JWH@WKnbC|OiSJU-k6fMMFJ_c^dU&P8k3`rHw#e27?t=b1(c%Yz|2Z(% zFmJ=}re!L6aeL%9;HJ+CJq-}B;iP&;4G{z1aLEorGEU$>v5O~VIHBvo(O+kELoPGp zKBWAD1BuaiFwb1!6yPL`X96+V2GHCkLd9N#+J~to*)-Xm;WD1+>64WFPQi#0?9}AP z`T_^LauX||6LmS|M`bG$M2Ffpo#P9x3|mSTk%O(Nu9v5f!z1f-FyZ!|Ojin2Ik^_6 z*;Tdzrmnu6Kj|H}PR%Q5{_lfch$gu&D@zX&9P7xPXt^dD!NTRQSh`DP2pViVgic4a zpLPv>IDeq&xL&&1W>Z(hxaxC90f)X}fyrG@ZNrgls}Q7Qmf~#pZal^w2c1>?f#Zx~ zXlf2^2n!JvWj{5Fm{&uiJQo7iNzW14tW4$feJnHaG-UKkIz$Z|(XLY-Phy_70%w$v z*B`ma_RR%;<4On~EzO%oWX~RoapxZXmW;@WF`^vut!_2?zS_5jA33YPgE+zo-ey^` zyJ9;v;)H_q>{1L>R2O?Kx1mz?rc=7~hN#*FOyZo*edT$7VlS`^4;YVGBJjXw8NWWJ zl8_&6p*g)xI$ghbyXg}ef3N#Pv~xL&T+dSRt9*dy$#k`Fx!lF5xMrs^;3u&dTpp;{ z=?@g2c$S^ZYEGvg_y7ozfI&?rG20to5^IFTQ8x;hl#hM#3A`ou6e|AXIkM^AB*Ey& zG4EVx;r+u$u_F3^_;iU35lcWQcYkbR+`RNPf~4m1@ocs5L08ujF0tOjx=TkwoG&^t zD1c=lWGXx0{ggh3MEy8^L58e;@ik>t{u>xS{~5%g=lZf<)3f?EFj6#Mx-|kuWR_BL z@|vU|ZxwTxtI7k(K(*K%fP6=5rh5yeDqHK0J;G^!sHWQ(0!X*we#!XpDSwWDyfr7b zGtV@=DeNu%OMVzbcc60R3(ly0i|-{k80U?pvm|VncFug{nuV{G1qL}et=OiEnlAu1 zfqr1Y9l9~-=^FDyf)89B;*c6zJZ{%$NL>2=`B0Xw|FASM;FL3fZA6NtZgSdq#D4Pk zSAM_++6(<6IfxRDm*|zCb*?Xn*qatw@h_J6Y^V*qV-oc{V?z~YN$hawUMT{CWY4?B z_kd=msubb)BlfpZF42jYgnEHCH0%lvq%Z=e3}FurO{$7-52dbFI$?#2;RSXfPNsU# zwV2L_euzYtqhLIcyILZw?VW+=PK-XRCq+>FxBhvZS0=fqsg|n7S(K%-Oe~}dwS+)L zTSPN0lI_{i(^Z4+2_nwD%Hz(9+&Bpw)4ZZ0j zDR5>Wh6A)wKzW#qp+8DVB3(&u@)v691l#+GUhrVQpdnS$v{qBJ7z|zQeQ7RO45Tf- zeqsR%b&?dB2gWpAy%HvmbCj=Jw{fhLdHFhpW9HGspmDHwVGl1M!>lg*ariEEPiu6{ zQqW*W_%7-V+(smvbAWBmKf?KfXx+WlS)>cSPQs^5a@0FC(b)S&0>TLy3(lft*m+8g zWOff^;gBujOSLn%@y4<06LC%qfN_q^q^cKjeYdf)iL2*)c0JPRK}TAnz1|W3eCG4U z4v1C}v0#N`JAqH{6fuC4u|sTa>{0|xgD{55m@p@7=8Z`@#C<$6+a+$iG>rvJP)%=j zG~Q*g?=Qq^zd?Y;j{&pTtgvms&)wQvIxSmKc)={{?c=Yx@$CxJJhYRVl}?2oc!S$e ztMvYq&n8}o1k}0Ylk9gq#EePjQQhYi6sDf+hAj>OO}dLhAw?2!Ne$=&_u(kk;2wDh zQ*HfwP}vmgj)UzUdQ5x-6`k%=jFe(EWN?1wA)a0+*cy7_J?}&Ye3H)*IuIsT(Ry9d zL8q8yf-j3r0B;WlzAR6Hhq*Nx%HU;6KN$)1c)_Bv?D{iVp4Fn5JPOBow>71Q%z>(g zd}nftr;Hf`5}HUu@wDu0T~vwDRwEh(3rypoBHJ+Gfgf>V8oNtxajwf3#X;n>YEJ4@ON;fdVPe>WV8ticd^4HC zBtGU;tI>Ff=C)!_%23!RLx0SCd#|Pfc0`FK`g+-K1>3R88ctRw6o(3e3yH`?hPPEw zPAcuFB}ZJNvDy^1)>uZRxNv=`7qP(5oz@7HFL6&R!S@<`yz^&tlVm*`dv#sFJzbJP zfSu@DvCDqD9IAZZH0EIxr&22dyn{>(jMcPS7f#jYlx{oRVNnC=?4mOtyvO&(fNto5YIY5m2o zX3k=QN|fhjtl_s}1$j4#s))37j6js@+2)>cnyf=ki0xogZ%l5AV+2vnw#?jGz^~Bz zL%I6no=2iKv#`m1QCwDc%Wn9~@UIO)9<9l>j6D0Owhpw8@#bUtWn1*+W}Br;`84vb zvBSC!s*o*lrl;s2wKsliP_7`)C|p`-|B3fXv+u(sJp++U)E)K;Uhbp-Ky}nN({&vo z`6yi{0(1KidCHi$B>ffF_gt!hEphO?pDk8HW=PVcs_g#k_>* z!p%4~UY6vq(Dz2JS~-^>6u^LN<`ID(nr%L|yc^+MtSG*g58As&!!_ECCY$C9NGUCg zuutpVte+x_iYTjG3CR@5+=MC_G(u^lyN02MCNLh2*@$9$D0z;1GLeRfp;bDUu0}`& z)A-p>WPd;U0^U~J)ROR1}4e4u%DovX?Ed|`tDyUTUzOlJUiK_Gs$nAk`P0h+d98HA0OW* z$4Anqut`41EH-^aD}#Zm0cI}qJRoguXB}nXH_&ZMN=}0Bvvk}m%sFqw0g6Zwwini{ z<A!}k=Dd+Vzxhl&6Zco^F~(W>;YYoQ& zkX{&HZb~xhwb{BQPKd(w4Do(%frTnjr5X+P)QJO<&9oi2esp|^ZO;s?jk!54pmvm= z)I=FHpl3ZwHXlThic$a&b*%j7Lfa>~^JZ63=vC~uf}SAIeD@sLt1dKak(|dTjnF_* zFS)ZI9|nmbmI!4LFO{gmV#I2(z7tNK4Q`C#g{srqDu}3SMI}>s(>cV2q z9G-M8jh^+9C@T-ozuW3o?^%;BD+Hqq)>0DHvRRx*g>Q%H>A|-~>&1TAfdKKJa}4$5 z%G+S>J2`yfdDC{#ah_fm+}!ZF&KjG-2H{kWG1iFk5(lf)AD(gU1T0!RMduKUN1rpD z9K4x8ej?tODHqw^J*oeA5q@m=w)c*Tqk`ORPqI4=DC$qMOFEC)ya`87XMJwRI7`p- zfka88=0JVc(dNXR7`FE+HY9e#U=^vTWlIdm736+9!I z=D})wEI{L_l#V7rR_o_;HGC8d> zc{%j0G|&5x!G>dICC7jlYZuS0?}S&+QHCK4)xjH79+Pq?cgec6wJlzI2j#CuLVI~2ugA{1@;ttoTXoQ7yDkc-HE=7h=q zBuOb^nsLt3fU)o_8p|{$pj=FtL3!3Nr#DNsPq{=lZg@G$pimp<27qoW_BzJM+L7%V z3lucRc}BoLFSxSz&^*$7J{QHGL7_^m+({zWJd$x`P=3G!BMP3$1uz(&0>^O(#WuXV zQ$RCGqxBaw&Jukj22JC)U>JayO+Zu`-5To8h4DGSw>nato9T?rCG-?PCDf5sVA)|+ zy5F%@%k?`LeyR3btpCuw>@e+_tC&5llnSY=9!@D>!A?_6Jjw9m&?2jn`5AE@U&%5- zge)x=;Uw0pow$5?1{0;P=J^O|RzfQ%Q^o_)HPw2(lr|+y8uaB!3E*2k1S^F66lGSX zZ386Mj}L42ej(%D`|=3bsjp$|kq5nphMaQfDj}ZFti%U}b<463;0890U@Zqvn-CIQ zQVH`%m@CXh0AsQ3|ywB*3n*}Zf^_mwZP{AAXN&MrQ z;>2qE_pbcUV1yke)tnt+de^1533HW5Aq>&tvG}gZT0LuneT!4KsuNZdTe`%X2&Ayc z8Wrd2naX4sTKyWLMZJa<#^rQ0n&`bf5#Wad*z4_~hpF_|Q*56AViM96f9WmLE+^KJAmLKkLJxwWABViZ|Oyq%#~1PCxm1a^_9WGha?1)2TfeJ3*#^D}{y`xbj9e}T> z;ss4L!akWEIx}BTQoW+I(rD_Xiivi9XO01&mKAakeGQwOa~ybe@-CjKp5Oo+jbp6> zrIAvD`2iqUoP2=#ZGmY&etCzCcYecAn(2T&exk38i~sA;Vk+yhlI+)50==8Z(0~Sj zWjW&TOiyN-9}l<4;l|Q^3Qc(Od;*Lt3S~L#W4QQ#%LAo|Lo$k73IU-&poOKdDt$`6 zi~mV02~}?^{Lu`ha6TeepodAZg$=CI-~Q?{-=xX*s(I%n;Ii*HO$psmo=A`As%Y06Mw9}bubx2SJ%rwCzM!e*6o{%WnmJz20)rZ6y7`? zUCpff%Ah`ypfeL~3*D4AUiHP zkHsDqm-ej~L4i$Q-Cypyy1!#@ko%io3OKn2DeyMPY#tFB6O7Fga9m-3tOtW7Ewf+A zKpF9)JO9m`yfsvkZiROk?L8~{RGkFjoxTF3m<@{?S-|=%1t%ith#%^8c8#Vj#@+{e z5dXg}%Ki$=i4vdU^>jN`_LHE#cHo9qKciyudW@5d-bt#S86u@djK8JRDsr?2Z|cpw zu*Ar#$-!QM_L#b0t){taMCDHV^8;ezaHrK6wgG~4+(kCG(F}6Ov^8=7eH1swoKM^>gq;BAYNe0i8*ifGUV~y`pxgBt-h`FD8qu1* zFX-iPlz5%qv}*k?Zwi}KR}_RJ@fKBlj0ozV_}D2`0)>w+4~U1fV zAB;NGr=Q5J?OeEYQECHuz0D|BVl=jZ+No&>9S`=CV^tVIkyV z!bS5twa=YKC_*<-np>7Zmy;5#0t+0GEpHG$`~s!bpa2xO-ObxOHhiW;RGA@87tlS; zA&pXpqtN^>v3WMJetYFZt~-KhN+t>Rb(MJrxD}m~MSf=La3x!!wm|JE{#!%uU5}xZ zivRsX;5{AU^D6~GJD5RtqdJnzXCxgO%e<)7s4H6pSF6tD`3iWw)Ph37czh%4jBi@gC zl2|Tf6Qu<_Vg)GWN?ksJ-*%*g1FTkAUQRtTLqV@rTfPgr=HrPU{ReIEofull$?)#U zs_ElrV>=CCOz6lw3;3;&Jd98kyMwPZHe3u~&sSlJEY(&q!CzpeX^4iUUtT$*sQT0W zr;nnlg_217zLDDhVl)99`!;FS;Nq?k%I%)NgA|PusF91wp;)}wpHe*ii@~d?Dr_a< zno=t?c2coC>ay|h6{N-w*gv#tlyDkQa zNsD}1gNh%rB7P|fd$(DKV~z!OXfg2IONI|B{GPk`uD2<)N2NkS%-_J|)Nd}iY;oR_*^JIko}{K(eoVI=g7sh163Ys^)ALk6zkXrmf1sluYZ5H1 zSP~1(X2!4eB%DJ~FK$W%2=%#(!;&Z-^)S{^jdB0Sq;Y{w-wnS`lCg z8CVsG8Wey6)H-@V@a}$p+;6%3%t7bdl`59SXN?2w`ot(OWp3L4W6ZcnpIFgtI5GDF z*qqi@-5Ffrq!7_XLGdDnkpw6xw^VzqdD#kUjCZehoK-VOn#F z{OjBKIXT;~Sf$IgP)QmNUY12)XNF&i9KnoipwGwcQ0q>gN1%Y~SoNmR{AF<~cM>=% z4c%kP-7l5YQVrlSQWB{e+YQwLkOWjSALXI0aZ(+mBh|a5JlkVIZaE4v)rPsL zB^eI}ym!=Qjh_H80izIpTUaprN~H+zWLqTbVyn#l?FH=11To{Hi<@k1Deu@4;~~N_ z`@G^nJM%Kkk~Wysf}fO?lwg0-Uc*RF)UOkH7ye}&_{eeh2o$u z_=F{d|HaI%E5-L@I$m7422-@Ux9+k;)L?|Sf)bD+lr(oX+)Lg|*<4e= zAsLaFXMDlQEqQM9R@mgSjy&TO!I9-Ee%kM1I=z5mUPPTmY@^oOkx$5o)WwrA*;=`2 z=Jq;y1o70Lb`m1PG_YixTM3)a=Q)rgH)?oc5*b* zM+pS-xo0O$?3^?Jk@LS`r|8nR^Nb|&Hw(xWs+Sdi3xDwwsC1vk3Ojol*yE$NOmb8NDVC9TRw> zNj`tgtG|7287%-mJ|;C(_`MI`;O+bG!Ny64$J0{J9`SDjW^kVMQ>sOLIplkrfm)m3 zA2Lz))6LM+wtw_ZZNfV5Jx9f3(z9LhNF?s0?Sk*D23TNlx<6hHn`u+BwVXbqRskqz z9|%`AVGjK@v<2kF5le@)gz*t{1EXm_&u)Jf3sPL3pvKe5zSvWN`g}I)Qrv*9PBE@$ z5r%9iBvM@sA(`I`UalZ{$EhNFtT^d$s)A`9(QMrTZ&D8`wbd-FV`V$a_blM<7=ocq zhEsCBNFbJtg!THid;cRSsdF<{L~_L+LBTZFA1AN!4g@g&+@y%J@h&ebWKy(|ODC$| z2mAvmlvjj0BFa*kLtGc<b$j@j(@7^;1Vi;n#_&Vg>k6&2^m8J$Vl^S?%7vO?~(txc7wp#G(qt zW27w%;ELz(HUh?dL!)5t(-@*|EPCi95uv+`^ioi=)_iIrLQO|nlrp}_8&ALsf*;|r z0LniyO~KyrdXrG`~Em)e&?-hMo;&kdDnlQYEk+> zT|I<-X^JB#CvmBJp`CbW#_S9qgwlm6#BK&XBhVF_(sC0q={nxir2plA=PJItA5lrZ;nBqpHpYK||sf8-!qPo?NtZS+t?%{7P`I3Gz+Dt^oLnwM52|&+Q z@-_GNU`ut()g_{jM2inRqx3vy?Ou_B5HmN76ta6NvcjD0mjn=7z?H4W)0NW9c)&oC zFj)4=s%;>6c(I?)-c}rVsqQuZUXqDS3lyC)yg{4-2I@rr?!@v@v_BzvIXsGEPsI#v z_OZ;~bxTnb4_TE?@Hxu{?2W3Ueb6}Un1hJx3^z1XWBW;TVa{S^x71j{!GpXM z?jZi&cwKO52O>zWyhHW1Y-DG;{r=*Pzqowai*!>awk^4t$?2>HL#5eDy1aG4b8yve zknc$p7K6jtR|j4?+Z8CpSXm%5>sU)(BNCVqq#s|mw@-#e^ZSMaz&ktHli(r0_Ay5l z!t?Kr!4$yrLltsgC|6^>ul*%a`6m4n^^o{SqtAfnIZcQ^1^Nim9T-M;N{D-0l4a-Ocl6@4RO8^#Zy>JpwUUj|qvr>YD zht&%Yo0JzZ8ll4b9PX8R5y;k^$0bhKIrS$sr*;P_f<}3f%-ID|ZZHar`q@xm0sPAB zzxFxhyRW^X0SAD^k{>6MZMRL)+o-BLk}g-OYo}*=}($ffX>~WC`@V`2tX?qv7cX%ZjYbD z?*^0nze)zkR3T^uL$7E;!W90pDfZ=fyDF1O3jS@w1M4!X&}vR*1fH2cQ z$Mu4#{8*4Z<#eLO|3`>RK+1Hl!I<~@*9W(HT@)g&wx(cX&%%lDQuV+|h#CJR+@z4~ zl$Ne!y$Xy^By~j^12u(AquF_enOV=oOpEiQOdcyTm}S()MX~+duO{4_V2Qznc4uA2 z?xe(HRCtSzA3DW;Jhy;`RCO-Z_aa3gvk^rvh%cwuv=6`b%gWANKo?OG3#CnT+oB>w z^$;2~_HshlcS7m6KR1IxxeG4|`JScj=Md|3g@AszTl(`v&^O(n0#K&zU9P(K#eyB? z_2P0&-d9L>xK(V69rar+(jg6MT2qQu?Xjwnr_Z8Yo`V+Is6JPH9&`8$>%7DL-vx`; z(PcH&HGh@k+&$Fa*&1FimFH_SYz(Pbx^E8+#jQG$sImO#w`}o?AF28{ix!J8Cp z3j-9Dg=S33x_z>`cqvAb6f&3EcD}jQ420;qOR7W{dFu!un<{Qb3ez7N&6-ktV_|}% zO&95KGN-Ch_QqPCBj0j)6#wM>s;m}WqvnVY!0R&yeA?Bui}z7R2qwuRn&Z;|KbrjU3=0$Lz(#$!~G#Fq`Jx+{85@UpNS*073a6N<7PP1$dAW5Dq$PhXm`y^ zhEE#B@v2>&Pi)@}h`y>J#dRQiQl;!0mO@`XaB_Z4&|d*ea|c~BE3VX4o|eC;krvQc zX*U98<7v}m_Ff81B0L>zO1xw=i}P(%I1Xd3YtdQ&zDqYY1a!671*ra)_}3l+x5dcp zl|Nk#v(D*^lu2Y8Kg9)THQ&O*s>}0L*C;qBos1_(3xHI40$<3kFtqrqUF)+P%l?xp4f=S+K?uKiGP?082Uk6lj!Q0;;C;1g}QI`N$qO zl$U6J-f^XJ(tO~`=|LNG7*|@S9vZOkH%Iu1v2uue(LpH4^798seehc!$rk(vEx!TI zNIybRp_Hn)A(QE;rhS%TCHS%x5vk#ru+Tqm{RL}o-??mKapR&Rk(%4UpNv5Y9SiuN zH=Ls3>La97=wFd>sHs)ls5`uoUxFWRZ>ZRqL5828UqO`G_bAqfQ2K5yDUL>Mx8)$* z2*;>B+Pz$f^XHkaXEp zGZko+DR4o$*7LisMAHY~V0T1{#@Zrg3M{0u_Azgpsz+el^87k^C>PqsVcc#7#=1!i z=x5|TqOc`*j|(6!-rKE-ZOHf2;^`OM2fDpnhYrOhFZ-pzzZpm}Yx_1oT7GVgE{)e9 zA2W{P9cWqWF&tC5M_m^K zo4Ll9q;|7r?O$YF;a-&HzY zjqBxVd9H5ra`JBnl+XU3r*e2S0LG}(wlMXD`fEZU`z=?J!=Gw+QB@Ylp zUx+_8EwhS-9^F7os^VQp8(zMGC%~^Rpfej77@s>$*V@<`Kk2m)?RzyW;Pt4a;~KZX zGr}Z|L+UUSF-}`dS3a)U$VCZa7x40H-@BZLanB)sx-<{-=Ol_*PN6sGyl?$*-(Fn_ z_lr-on{+a8fH2h5>?O|9*#BX&_n3L;h4Y5V9#Tf*-R@rHKNGV*t2KF4?tw`XYmmXs zD&{*~_>&;&j#H6it6@V}A)(XJ7BAf@`XloQ8-x;(`t8u=q*Q1*#OBL{nJp*iEWgZF0vp;2nkX)l#|1ak;X))}qS!PidKpPUTr z5UL*$gSUIlYGnF$C~3r%d+O!J#t7j58OFC`jD;9+wEpVzQ7KKC`MLQJ%``!z#`wTENSh9J`6*adb*alCWH44;G%hg1@$}N1@I&Q+ zl1~$y0wwoLO%f@Wq%7uuxVDLwBQynmB~>|G2`|?=e3-9w0d`LzePp3rX3CWihXZKlimQK4#mA-WhjLx^Xy&Ld zG2uK?Y@ep{XVz%1#{k3w+=^Jbs<<|N>&h^@dtvgy{4dhO77tRcbfft2{V+lR!q<{?XV9?Q8Uiu9SKyJOtXTSHWS>I|Fz4|;2Q#C z8Gb`;IQA|xzhyUGmqZ4|Y{QW=X&}?lFP?S!P1}T$>Y?Xb%5`wbRs#)O6#ps79DnG& z_W0s^HK3kuLShlD8GFSPp0+`sO#hvr)4YHAE$l!!IA`hts8%r^dOcqUHR~h#zn^xD z)$kubX58hyTG+_CJ>fsFcxMF?$1v&-m}}c!ax0oCLYJI!!WXx%)jDf^GTUNaRganWxoPk{ zkyy~V?K5Sj|Ge;UJ%>73gD9_*SZjuE7JY|Ig;h|4Tr-~SHH@Pc;w2lQe{z0D&$+3* zQrBEa@g~cX(RQIlUJ43i%549XMSn4(dPJ@Rq zr=C8dzI3^|)-(eF+L`<1oj`85=EGkAOAe992ja7!i`7&i($bE}xejb#GUG@WQM$N4E`1rfNjzJc@pAE zqI-|Q@Rh2c30~NYiGjTl4c6II6#VTi(At;-2&s*f%>T zhR1!a50{Qa%(3c*>na>&Odb4v$%<&X)d%VxVu`7c$>(7B$Ii_u8&1m|4z?05nh~M6 zh1mmjTl8~w2mj$a`W!yIPn;B9c?eIgwn%z9QxR5#ib zazs19CUV+D`BkX9MA-FhTMm|R6KveJ-P3{fxbfdhE=I&pNtfEd!|C!4K+?r>$PkSz# zYGyE&0-s3?`Vg2j%2XXDUSJ*25GA}DJU8=lW;RBHd6 z@1nDoks?l$lmp}+3my>s3QZab2pwIRoM;vhPnRYFop}Y#BN$U#po&-jym!48Vx1mf zvG>XpJ>Up22W{x~+UKA(Hsk}PVonTRaKTK0M!9^KyPlKUbz{XoziMPt-IA ztAICWsm$PbL_(|tSVL`iT@9t)I0lYhxNMco3c1_SY6+~KRbI{;3?*B!-$hdGV=A~gpHMr8=?Ea$U z;a09shbS(LH1Cb$oWjF;s!{$-faO0sci5%$+(V14s4N^U?Bb|EIs+o3Ryj2IcoG=3 zxEvULhA$KYz(8OCUO~eh_{TrSmI&^KPYrjUU&(TRx`^am zHLhqQLF%i@Lsv?o%C-%lO|?BqUez|=5=LZ)LUzWe#BeSw4W}t#Cib>1t_6`P2^|g` zk$-dl20fq-x$w4nc$1j`#J6rvc%-Io$D^%Q`v*fHT;6@iG?2-B{}YagxBV>8gM{TP z>@eAYE-JR9ywqzJG;2r48uZ&^Cj)#o)0Id$JoWy2zj6zz>^c)eU~$nzD$qmpM%|cgY~xO0dLu{N-Sh;^T$Dn z6Gb25xh7PivYUIb?4MKvgapm3!UO6ClcDOZjKzC-iFh+m4gS@KI1w?25G#vxJ`+7c z{~U`LFiKDN%isud2ONP)=@HfOe7T&3dn$7oc!y8lMaaCyPun6Jv z!Xnb0f`)_=JYTavJTATUrvW_0Q71_SJcNZ$A75eN`ak6-n*1ckSZDZ;nv2tH zeGJ#7-BryoRP4wZhP=Ss&C3Q8aNapFcx?RPoybeI)x=WRYSc#isM9$olt)#MTCW1g zw4RKZ>{U|dG-DJxZ)pWdne$z3*caTOY?&?-Z>;XV&dRTCkWD&aZ9|y6b8%D0a+D@rMXMx*vu$Z zP0=!FrFr!$TZTx}cLd|C)BXT{bkS}N?SzF6)lpcWC-SU2Nv(jcr4Lllx^8ixI%$`1 z<}&Mq`!c~vWxx}`C7{q0Dqw~1$Ht+~F2O(fXKevo3bepHjbrMZxa33Xw0)qa`URtY zG7@*0eGjd$!028#6|)l+>l+(bKt?li9y2`YhO^vsu@X;kvk4`CL>BC#beSyp2`xJ; zAmWPQZ%^i_sUtkHd@?u0Xrfw^K<&4%MsoQ6Eip6b=g<0T&8G}iwMg-tVZqQS;f3M z2Xx{bYA9Joh8s5^fTRN4J;MYfvRP4me;5a~3K|X%YHTrRUU{{)XC7_Y^<$UJ@2W>K zlDA^z=p?GtXpBuRJBj9U7cn=mOKF8bgIAP`@!`vqg5ggv~Et%8|$8qZ~7I`feS`= zN9qP_6r5oCB40*Z_N4H25VTX7w^REjM1QQHZ7&rT9`w$Sz(}GyEMZ#+I=-Syh!X-2 z7&`V9sAzXH&NWIOs|R}GEUl#a8j2&ZZL9zmk#&ezPdO-EP%jo$#x)6~O^DK;?3XJH z50NtERhWGE<*V5zDC~WLp=uS0z}l(fmQg>r4DWft6a}sBWvrheMF#Kz+ac>rA5ggh z-U_7j_WEDl%D0dDH=S;&(j3uG7f~n4p=N#Eyr{qz{9KCI%nBy(u0Z}4eT>ZmP$>yQ zlWUY81$vDwJUmn2V5;Np*7Fs4T8+IlQ)G64L$#Q})`)h+EbK70DC?N5@q}uJC zUR2nQoqC1NTbR$mMLf-|VxWQzj0OUg1=qF96*vb8a@$(_guO8JlgfNdxC@CoW67U^ z51_M!_Ci3g1%PoL8V2{?R=dZ$Di9oN*dr=v?^{eBfJW+%Sn+giFCpFg?uriZlowiI zmM059@Bd|(J0jhI^z&7|ZbOK2QSPzbj$=ETx(C*_2ywJaH%Rr8Ar2kUn{w!?jq+(r zNgwgyT|EP$8Ti1}ZvmJ(ZsZJ!rx~tG2XrRy`^I3U$H}&EB9%S36245`$+YKVGu_7V zFIMS@?QesU?)a&zuoTTDhocVc8g5KLU`o{x!E6agrw3X8QKq&Bq3J?tde_S_xoT2} zcl8_?ei?8L_?8#J>qe@V=T%1eP*(8HPj@PsB)e(l&}Em^{*A?ONINsiDCj}0)WLnM z)x9+br?^48%oAw{sN!kkdbp`j-OTUYW&xaH$7$L*NgQoG*Jx*i;hp?KJ&)k_E8dsh z6KYjLUwCDDF)X+d8e-jvq(O6Cx(soLa>7ua-*zp-i+N`6nmfL9=>U5;Go3?Aj$^^> z^$~|{8odnAmjiudA&8bF{x@ZjAwT?QC=Xmk)4G=F_V53Qln4Sq(K!6D9I*-bUs8q! z+qHXPewmmEBbNx_3Wcj znROcvJdDqSlof zS6-pFy)lt_5*szmBS8UrIHL~OB#CHA_?4-By@IG34I1hgxy-B{WkqagE@p8woqY$) z#JkPX^=lPeAL>x(k;1@-naDW}r!*D!kjWxCS!IFnhcmY>j*>sB?_gW+g{f)RJo5|x z7P-j(^I~6+OK0haXZjHr0IF{e)Mk9_6d@^)Pi6}MC8uTY0YBuBU0%}Y;9jii#h<}n z1z@<9Qrx>~V3=>ka3g$h5r?&zym2Y&R735kThY7cDdU#p&tSkft}9XEgHnu`$mE(A zxnR5H0R_c7u0dl`d+QZgBO@SY6r*XN>mHdGf;J+WY{b;+{5xWBNaCFF3|Zx5Mf~;{pT(+CqGt+fHxG;f@a&Y2&pCIU zrhg=;fG5A27`sj6JY;c> zr{3@35gO6%3BA3ct+vUeud!RRGo1kbFhtO({3(Iq}0%|U~#Zl~~DA0lM!Za)CA;{D|=bj)DkG7Xa zyq#&;daLcVyLkzFsngEWVUvONzu;}nH(;n$#A=Tqn5w`f9U0Fv7B~p=P%$$4jgMx0 zNgtiV=-Wz#U;D|2&&EjynJ#G+#Qc_`_&I%bf_dV0O{I?qrjD@`d@bH$IIq4xaw6t+ zoLNS`(>Gc>9_$pTG&(Cw(GCBYt09UP=->r?=8O6TkQz6tLGJS9vAH=5AqJ1cf5(e$ zs+GA74jOE4%F8=^wbK#@-{XxH{dGBc4)qaHY8H<&4_yiOLLBoK%nbj%WlzU*3IYpE zhOL8P7Ykae5Xy7$oB?6)>$8}mBDAuXIV$NG(>k;tE-s;BqCg&LmfJNTCg&G_oB=n@ z7-`IcMJF9T7@tpDTC<}))SKfQ@!|@r_*_6BUtS2J@mtMY5)hdShD1Q^SzmKRL*aPT zFwk`7NpEYEO90HiT(S~#Xal?YjyDW;v8bDOC8$48%r*s;a;F~dW#Q*rMsG?ff@|7zkL%pzv+74*gi!0xmc?1_ghry1awlXROpg%| z4jVm9K3J*2TpAPR0{3Vs+A5>cH5{b}|Bb$93F<)#ok=8nrA;|eAsBCZza|7&O?JI9 z6}@bfwO0Jm*#J;s)gq8X&}*~`sEil+RMtGI;ibohzDJ~+JC;z+P2};`tMqOj(CT5A zu!t32(P(EeP!^=!m9zySc&E|$Rw_6o1AydE81l&bOusXm+Z#3iwqXaI0cDVU8#+; zcru12s{Wj_(Ihn;7QwCRe3F#{fy+`0=L^yo-wcx68F&L4pXu3lA!Wdb`hVsDm-Ahi zamG)3K}kzJ%tX_^KTa;oBoy&s=!P1I_?3_p^wq{aOPzwSD7ccP&H5`8^ww~&j<(%c z#oDozF1Px)C}NzA@A~ULI;`gh+NxA4$fdKP$}0mMYN9^$T- zVMs;g@6~k~Ws)Og1}cN(T&KMwFlmZYxfrfk#D^OUUDQrPmfT#<*2`jBcJ}1H-_p|; z(5BJ;s~an|i{sIO4$*+pB1FN&U3Jq1+2VrTiV`ENm>cxrG*T=B;x8~EL@G!oEB%~% zwzZxSlG$H3yEkYAOu7I2I@Ksc4NM?gP`S*H2-zbwr(tBGM#tF~G+W@CZah`Qiua1! zA$`&S^3ur-DKB<+O}j0LruP?g=!IlYmLczET+&B7X85o^Q%I|zyJHKj8qhqt^n*95 z`3>qPR^Pc+In;v^EXKF!}a*6g63|Ov2N!K%87S@<~ zv0sB()f%)vJ$@P5UhA43BizzMu&dF*yrq5MET)H2(wuT$F^9tVwn(EziXt#p2ClQe zNGd>y>YK9Bhyn0nx%{Zwm%hfJ{$h;Fd%-n>s?^?I+7aO<;Y5H+*j#x73x38D)Eu4lxd z*k@u?BpsH#j=bpfyafc|FUweQJG&eS(T#0i;m zCWAWlHb5{8{;z2{|JY3};s-q!7(=mIXEeAu)R*W>$@fbewmr^bg0Suy&ERIAQ{Q0pTS7r+fLfs;8K0bpp^|SAy{* zm@nh2U}C#I{NT|RG`&_zBFTqnL6N(MjgN{O=AW=1bW6ka#T7Dw7G-5Gw_SL_Dk4P+ zIbb|H4Cx?ei{Q@l>)&M9rH1UL9O2WK3<4=+zQc*|;r$H`;NM*ne0YekVFO&{Wx!7@ zR~AIW@43Zh+Ge4Mm=brV3sgN!=kw3wi#oin{EYNjuWlkd-*^avzx*4DsTl=pN;1)>OkCg=l~sRPPod$&urkxRp&9Fl&|qtbs2@1VK9@}|4lgCh?DwyiI^AvMx^ zoU;=-^2y|vCc^bP<}9nFv#dx75d)#}iiWeQfHV*z^#kp3s?@d@*n2xOK(RBh#U^GY zpnmb6JuYHrrc}{|{3>#O^@n@qEy!-!hwdOEE|x0t`boP)FR(8YKl14xUlHvDjP-O9 z42APMvKQbFKba&>-CL#$+m~rTz~G3_EImiSw;k1h+R4U~tE!ZyAlbS!HZmy=LLOeo^Jv34wjm+bhVaDh~Mc zf@~AsU^YAAuG3$2GYRkl{&U~5vmb^CV?7w$YY(dzak{$pz4h>L&(1fn^jqn$h#)C|G( z4@%KQII(@4(Ady?(8KqOUoKXR{yX(|(vH@hxno^tFcajXOYTOrQrNmTZInOYu|-YB z8)(WAhbeX#?kd`|i|O3sW7Pl5G_(!!C*I{}@fc)D=}dq7~fSHkZXMobtb5Xw# z)oK7Wp|G=7LEH*&N80TfMLcgyogH!A)Bi4OMaK>Zt)z~CidOoOu%xG{11qB7Y#Eq8 z*rSC%d_p>pn8CILz+EMa_bm~9klnFgy|Q((E92>rlmF1W+5~Q6?Y&KdMLft;8TQj= zjFN#ast`oKRZ6*WP)Dz&phf;$7t8QdH}t+x^2W00mu7ueduU+X+RT-f$Q^zZQ-tqw>Nlm4Sr@Ox2C zKjha~6T?q`jRJ1f0k@vY18?;5v@A@EZ6I&^laB@YR;{z?6R?ppiFz`G6-o+(ANX!E zMGrLF{8&qczWx9J_o~c|T9U(KF|NG>kCv*)+%3B?S5Eu$J#O0pm zyj~SifMF#LBHcdj0}ur8aNBgj8|d&CwnF#u7qDJ?8z@gzK)JDGap|3^Y!g4H_y@)E zYj5825~XzCRY#k+B={2ay{p1u%OkU6K{VQzgn5{S8D^$+I$%a(D4TJp%pBEWNBl*s z9viDw+aFAt?%`{`8W+ z3If=qjnGvGU=-rxBbd#zGrE9<(pl6tJUgPoDS8FxVT(3j!B~nX4M?NE4BbOS-sAc~ z^#2>T9d%o5qR~3d7At_~1|&D5h@$WGY0M5ZAl0UGGS9ZKKG!gn>r0db%nx}}%f$AD zU99C}nWG3FUI5~m)#-(6SJ^nFo+@8!{y=QzL6xP|*nz4%Au(ZY;!dJvBmKguzl9_q zX5kQr7Hv`$(Qx&|shZ(%X&36NS{2U&Mg%g#Cr=1e|4QBF?#SY2w7#osYvo?GU>N zurkCG=(FsHB3Bok$Q9)swHKy&)vv)Ag<%@VRFi6JVwxpjBF+|JQ1@XkvT=UsDL|XH`?MS-i{?b-6xA@hBYIdq&^N20R=!dH%F0d}xIdzcfP&GR(n$5MxaMBwUjP7{c>d|5maYe@FB#v9zYqA*!*hNJUrW7Cg9&6 zvJ=pd!Yg~xB-wIwMo0#MPtM?;c( z7UHA{)aPiaIo*1(5UT8 z;}pA51L#KPbJdpkp2ic2X%Kl7NH!AS=wTvnZIbkBxc~g7f<&c4%9WH?URPj~w{3sJ zscf+Zr-DzQ9uBhYa_2bjm^ueH*T{m*+@_{ok}+Y0+Mrg0uiQ1zp>UxE(O&7I(Z-Kz z{7(SuG6eCF+VGvLJa5NO*5pJ82r#a?E@*-Le&M3H{rQ~!$hz`S!`K0s2ANR2+(#Q2 zu;kd*dE=z;Ew>RJA_ETlGf}7BB6P;ob)S0Xk-_E1VH-Z{X&P#gAc!!l{%ZSrxik1u zQ{@+O=-Th)_u4o!Dh*VLY7p=6Mi^tbp)~DaoF4gsrt7a@T<0nmQGR)KZ^|Wm3w76; z@T$&56gt4vXlt(~N&fcM_W2lbkqS}aM`SuYS4)HnYDT$x z8{v?slXc6FvmbpYz8sq(iODfikXfqg@-CA_&sSU+wvDB=(hUt!YoAe@xUFNs)x|qQ7C((-t{$+ z`%|s(R>UZ+v zq+X$o$f*e$THYNI(QrR%nCZ@k2h3~s#=z*cKZRmQeNwwMaI4m$M4Uu~#8OJ!OY#Oc zhb@Z@$TqHYaTGoqh${~SNWs|7gfV(o42*dV*NN=j0Yl<@-dXrA6Y9Mq*KNtmd2^bo zA)L^H|EV@b+lhWyakEBJ85GXhh5rlX6NS%uq)vtE<}fcg=buFoWKQVBAkGd^~$s3&xtto?+y_M2{A7T{1@RfxR6 zs+@7*%VZxBO>~c=r!>r9TSw#?T<{};OKHGj))}>7Wp3>CIkTek_@VqsrcTkgqd~`L z00OaMY5%A_GZ^;Cg9wPrGhAr0aQH-rf4q^o)RT+uUk-KJu$k;)45csbZ9BmGZTu*! zXt&)QIX3zKipib>56#E$W;Mn`R zm95mAaaRX_B4yNZX%LdYa*eO*Q%luw>i7Q!o3oKVv%HyBIJCiUQ1Z-!3=>z%TW&== z&I(Z*6cv3&LVz%t3=IkN4v%?jhftI;vY{G!u2$#qWJU*jKB)T7X_RnmLy6wb)<=P8 zixz~q;Xnth_^VJolfeY~8we#$mj?~fQ^{z?wE^Yeq@#v0gz6-Lh~n))qiIU*{}x$b`5#ZmYK}- zxaw7ity!DMqdp8k#o$jV1^6J3KWLJn(NtitQ@eQ9AZE}V`d25q(`^O=8EDMT$PpWD z%h%OUn4yQpfU?8l)`~oeZYltJ40FGQA()Sba8_SGavh^jmYpKT)}U16n0}^2B=r_M zvp86bq@$D8peHUAUI8kNXLdeJ0*}>gUDz4Wz+|06uRH%hueOpZ^--r~er#Dt4y`PF z2%`J7HBvtZNkk6U82XyEU!&glpQ2*H89wDc;x#jK`yV$9;G-jEqTIQSpltY_y0MoH zy}*%lTV^46EZu)1AaoaR;1cuXawz}{(;81lt9h@u% zdU9zQmSK7a=26&yV*$9n*nu$xfLSOoUzirL#3U792uj}cXmsjn?@!3$$ir^+=M0D- zG-Yz)qn@MkdZZ#`3cp8f9zh=RykZl1TnHlGk|rFCXso_FFmIZ4L*ba=vv70NRLQm6 z1-W?#Kyl_Y@axa)nRySazi@|{j1X>zcgCM5CMeTwm2CgP2wJZ_A9RF!Q3?!8a*`}q zyT2eZ_w+Tr6(xP8R@UqMaKDEUVUo0~ua}3R{)&A??+Rs1f_FVYCCxh5xk=4TYZL;?4X++F`Gke&=3rghO ze;m1RO0>ICD=G*TRBqUkg-W~yNMyA3(SSex!&MeOT9>_ z69w+9N96{uGdFk8 z)EyUb3_n_gz7DT*6h-u!k0vv_9@O^`$1^D&wr3t8UKZ6~-?w~*;km*&CD00X9p(*( zFaUxpY0{&DLK4=DwSY&-LAooJa(``~sIFCZPxN^a)qnlDOfCusvUyNvPcr}6tL!RO zw2p6CJUecOM`uKWC>!SbjwMgb2{tkejQFkmdGM`5Zzh1x89tHLFAjBs+?}R9^U&w@ zES**jJreq;zDRKH-}U=u$$VC#CkeI<89M>l7rHuv!ET^}i%xab(+r~lX^2{82Y?F2 z0b5DHa~BMJE-44Nx%BPA6w)u#?h8rDbCvY!d`2x%id`!_PTJ!>cLISakhnhSo!ly7 z;x1>6yd}3@jkCbRXa4cfGfYS0cQpK;vntU_p<|om1k6f`Kj0D{OiU(xuJ_GCXNtM( z-oOK4oR5>?=2akZM@%J&E@xJCO1Z-H7Ah|F1})ZW2_l|dn7;*Yi5$!e0CdCirguk1 zC48hh!Rfv@vAHx_RMHnJKgKX!rX@>^{RhVDx)8CV!~yZ8ZO70Z=fSMWFC|bNBr96Gpgl**u zh7MvR7NCb$KUDQ%{$>owsIf|m-?=(-un^3{0~#C+K~2;s`$gkJFjMfEO~;2 z@hPf2l(Q9~$sEwfnGWz3SfCRQd;k$*+|A}S2j#mCg@*@&RL34b^Zq~cdajJ0D&Z-^ z;97@M<}P%P`$9GfmiaKukNXPD%rPA(l*0jf(~>^X+i{&B$T}~fG|e{ek_q64Cmt6c zB=Ws=GESxc_&Kneq`u?vJd9#eha2}-8u|f_ms|kYawTJ|c`L-knA$9LWa1_xAbtv6 zXy-}*Q1_jpBhECr=$Gk}zJ<~_?5seukiEuIJD1~vj#gB%8_yv~(T9#p@{fm$9vBuW zb4Xari~?Mmd&mGTN`y#K49saw{=N~4L)A2JbgLwOb<_{S(nvODG(7cc zbWoMUXpxiwcLQoUD^MeSw7w9Hx@_Ic14JZE8-If(e({@rU!@r%V_;za8rzudt;jOp z^31)J-1Gr1Kor^%kPzpd0 zkdPs>0iIP(ZzWyV+m_&9@iRpXfnoCFdO$z-Zi4izGoaz;IC25DhUCG^|6C!5(h=H# z=k$Kl!RP1@GwQ3^zuUe;*s2dL-@qMqV6WVo9mSHS*(3$NLRo#ST; zioG7c*XhOZm5Kii@bM&c7%?8J>fH#fMNrYITd# zi>6rcc5~@zgAEk;%5^V}*n~40Jkm{SMe81}rI5NW&XrH)ZYO|W6zUx$X>{(kk;aMAa-ZhOQ^W#WG z1WCW9IA8vhr(nQARwL6f_HY1k03i?*y!!Xh@FrwSI;dqSk76EkGH>~#5W(gs(-~+4 zZNTp^yCoaPfmr;}wSO~!nn~g@)mB!1QNy0Gpq#N0@zth}x3fK_PS6%cE5YFx-X&~N>19YgUF>*+=gu$#6RNvc9^F1RzPP)w!e^; z7>8nx@5w=dQl>J{)D8+*z=p`7Wm>$v6++eCEM2W1PF;A8r}|aa9Z_`|HrxA^5)eS` zj&fk4Lk8LYFr?J7YvDY#je>4tngK>&;&D~klt0Na{V+oH&u_f8BVhI0vESwdmFQI7 zq1SSIt@?r@G?rgGrOhRXZSiO^%K1V3r|rbhC*T6!e`R5f+L1Tu%@ivGT9NB773J{r z;3R&x=V<@M^R(K1VH5=nKH{virg3V-M3tNkV7Gt>4yTTbRXQt!S$UP+;K?Le`v{eoQ@my@>BKbR zHkcbbCC0R$`HvFzBLmLtU(}5lOGs<g7zW8@YY1?MEG2A)V_Sa>NM-Dnu)ST%nc)z+ zvp&53#$R3*W@X}lr5=Kf>inijIOoPDjqZs*4~CKqL+2KNHRyZ9w1h`Ic7Fc*4IoMo z;2~kVZ;>twOg{rX!>I;uU{6mLmvh>Xo)eFoe(Hhts zU45aExu_U&Pcq)F#R(f+ROD|yO7ad0e24v_5rg7H2{ykhKf1*-^BzyZV$!rRI-Rg- zV@K7nm+Nw%R+mKKQ*IXU&HzS;%x==fD?;k{ZN_yL=VV4sNTdN17o_qTl&uONfoWWA z@Kitzh^=oGLn`NDxBd)u_9+sWr<6-4ZOijWl|e--EP4SQYZr$sxL4nO_+=b|)6{$I zZs&{RWfZ?N-An@pH<&9$@8!D=>x4(h=(rDV`(*xk3JV&1dULO85TWf7t9tBZzh);* zkY1i*O_K(&AE|Ff?ertcHUT0B0L37B)jgBeH%yuy+S>OrJk6PhC1C1!@_4GRvMl?M zaT?9CLf6yux+BfY^CR@|g&-o5pjdyf5j2@kAfc4Fsfr7{EEbGfda-OK`tGQgVPQAT zGjA&&rHmdCy$JC`pf_7<^EU~tBWQe$j|ZeZ43Tc5>P(JU`FmdhNR;NXsDEedS*jJ= zX`A{neL_uqXxk`;R7NS%ES&}TYq=rZ^B?8v7x`$rp66y6vBWeJn#Y#E=k@7Kh0igq zZa$4ecE1w+4m2P44qgM*2hXK^fvxQ>s6ZU~crh(bF=)*!_0$=S%t5hUt6P`c3vS?Y zSZUAyNC3=+1TS(q)^9<*6sqypv$69bZiq+)6nty@s6}-(p)LFoQ<1Lb!@>b?c7Kuq|VmiDuj#*nPcZSrB;pa zuf#7Cj^l)PIQNrQ>)ZI{mNIr`z}&wJISRQ_?IrIwQ1e!v*8D0z79|=)L~j(2jCMc8 zX>fc{`2#%Xk5j0S#4MJ`JSdn9o~U*l-4%uQz}BaLQSNwN-k1yY`73B;vTUBXHSp56 z!kMg@4gq-~mXN=0$&;wwC$^lp@fg0?sLIW7^iEd}^wB|pTXtH7_z7${MMBmPFvx>* zw$+mGQA_?~Z;O4;0~TqE+fLNMr}Zx#s_avp(YyPavC7Gihqp~HhmylW2m-QqHLH){ z;Kiv_jg1R>aLPERWK0b5@3H0DSt?n(`=@t-cLbjx`8V{Yi|p`3vPU)2 zn2HuM7X6 zUtpU@7jDx)D+8ktPd<}T7TiT7^*}Q{xg|S)bA+@1?%GaE&(DEvc1!n4oU`W4eg`z5GlaRe$nn7ev2CPacwtNVU@z z0za1$KI|iTe|Z>N(h8c zGB00=2tF*f6Ev8T^C0crxn- z=WqFM#&tuHQzfhpRsS-`&Vq(=hR03+3q>Hd2Nt%* zzwjef2s-pB4FjfUxS2%69zeibUbQwLKm`E*KLEhRo)J!YcJo%OxH?YY`Uk;Gz{jxHP zCOb6b7CsmF6N+~$@)PPk(*?x@Zy)ifQ=k9aB8tOAemM!c?+i~w*O4Y`wYFNQp1i~9E@B>ykO?8s`opcL#pINBH-lJ{-~y>(1syi?q-%EV}Z(|eJpxx8^ywCtx#8Ud!yAFE`N$jV!aV+y7tLtE->U?Bh1hTm&U6k6{tToV z4{MKZ=IoYAg+L`kjY-ENX1$f?IItejsXH}28a;nwiD^jN3)Zeu8HjL(YW6S;AwySl z67g@x0^Xe^lkKs2&3F^qHjNGlLI7S+J&(+E&jCX=79^}l9=+A7FzK&yEGDTtN<5>{H5C;necTp+}m;Sn4TQ5ik^r=Sf-A*8{`$8Kj2 zL@-4%Y5Oui;ZGTqGsyD?L|%d%l&Q^mlQW?GnFcpFA#YctIW#Nq$Xi0uEcmgUzE{?- z*}65N+48(bRD%ai)RzmIfSDjv=dp*yRKg@|8b5&TH3H%1n(xS`unS^7 z0{u*4oP`kw1yUNvUSE{Sw}`x*i(DA|Vrd6^N)L|;y$0R^7|c|=Tc`S~?t?%b2-oqi zpA?v|;yVDh-r%x5;Fx$u_EsR${EG5utz)P*-}m?#9;5q%82f|iOvO31AcWUa4`Ho$ zRJQQ6x@`^q#%g`u5?UKptBR8c^?$-TCd~3WghXabd|5^4B8zE-{E{trE|Y4KD-Q$k zC`j*#rdcbzt8-kQ!3}lB2_jU+KH17xdzb#dN=RW>af!0vR|I_x`cFCW-V}Y)UW(qo z4{hp51kx|Y4_g-C8oeCu2|o?>2xtm6A(&{Jp-u4_u@`a5=EthiU-Qdeya=p+{U?B1 z41}dXf)!1A*58!~1W`aIdz;&GmZ#<`)^y|67>r)?2*GL}Q>{2LXx$ zDllQQ*T*MO*OZ->ft(W0MIk1wGx7*koLQ1d$`fKtx$Chk4EhA0mu%oA8@sQbDmB24 z+5-n@{sgIy7}aEqCAg!Ek|2c39Rq>>NFvk7;Y@)~shL=I_}X)r`X>tRfKKNk^RA)X zh*Vlw7dyH+LIrtSg$1cbg<_LZTC>gYb1ZLPAem5NqJL?l_EXyC5ssp%w%@0NgT;jDs_53`~Kgi5qq~6ts@S<3;eOip~~U}1e;(U#rA_8+@<YJ8O8P=p>0{Q+SshOlcwIh{L zF$O5hOR$c~_nI=hwcFz;JYHI_=LVT8V@;S~7y&D`S$C7hSWHB?W1-acp$K0OkgDlB zcymK#YwTavVY-i1H{IX*ocTDFCf_q=q5f7&V!W{~4)?8Y^Gbk*%seppK_V#ha=sa$ z1TMp(BSet$?EDvvplKrE9|`80EbJ)IY@(e}_Y1jS*6HpO|Lf{K=@A-YqstezqR6;jQotj+e7NL8cgDQ}QXQOc2%fi#6h7Rg)-AOgN7>k|%zr z+WOskS8PepcwZSJ*mXZu{^~68;d$ZXzDk%dG$Lj46&@eQnyUlD$!$WTd;UIKp6GFp z^J|s=bO@b7)r*`EV&#O^)FK0)bJQ;FpjcfRbm(zA5JP4qwFg~(Q5pTHOSCBMD8$P0 zU5U|h9ay~XBzg5)b%qPUaFi{rV={$E$AJJOv6QIRBaUZIiOfrPseuWM`~6zasE{oO zHr=Qo?AFrlK_f1!o@E_|yb5uYcuC;obz{mbHdPL-+j!c@&92qz+YI50a88x}y#DQ{;eR=#Mt1p8nkvtKfvE1_$=qoauc?6;TVj*I%0yv%5Cp6fiN1L*66x&XXar7?x2OlDc9h=y@S|)^tA^6g5pWFvR=HAVU4cUZV;1 zMby^inXg_lTa&0&Zq5=8Q$apOQ zlrKQ(%>6ct^NS9P6M^wGMrwUPe@=V;;YV*a-^b+_Ym6RkA0x#90c2xPimgL>Vhdg9 zYSF9j7r{PK&;9z%88Y5lcaC+- zB~E{V++7W>6Ep|E4 zWgdg6A>6((ZGFilg_yX;2JI4IALG&Bq8+2`uvu6W=VN5LgIlEu9AoK}soJ$u_jI>H zii#V?i$lgQZ#Lzeg`iv~`HK@|njmUS5)JaMJi%KS*o|3xt=v{Qj*WigG{ZOyF5Lr+ zV|B$eKP3|Ad`SQnlFwIPZi&%D$$qe*@x;Xm*8vM}V9u!}a?rY(7nvQq_!P;_O^$c& z86QC-4%_gU`8ZXEmN6W2JZ&l(7C=e+{G(am37oF8K-29lXjLd_i9F?!(``IMIkUG_ z5pH5f##$rsdcV7eA;HeQ3EY%mft59X+SYLqIhk*tXOkl3qV9m#wp_Mka7F94WkTe% zWl|chTSFYZI1D8pb0_Qn&*S5n%?{g~;BBMa+tG3mrzHIjHzdl8Y1fTr*w=|y6Lc(j zj;4|oHjdVHZ236yQuS($L!*!1{)iW>kNP8f)K|?-4gswYiuX#x{~f;~hV=PbncUq* zfYYA}kPeZ+v2Mnp*pLd10~3F?V>5KbB)o9R54*7Kn6MB*I^!912Ki?8!H>53uQQFY zKZ#FaQ(dCp5@N5BB}V6ifL8~!--^qn%&Pv9$nm#)|Dm1^m&J&mll_0IHZMrT368=uk0)L z?4&bkA->f;wWGG%!$0Vb;jt<(=*gjkjyKCbO6LLgaJ%b4OZavcqUg%&Sj3d`vA|7N zL3~A%#{nmtMi?YhyQ_J;Hy%eot78M8i;P2yK6HbmT#oE|?9EYFy*m}sP&!RDJdS(U zTlsZ(^vbr@5k&X6zt9aFtno)JD(|p6AOMDW-TgiInZW3Deu`{{MXtN-=wT1`G7)}z zeVwN3_KFoth0fg@4i75A|B5>!e3uXTaraNox{cX$C657{Lb>bo+x z8I@QrkHzuLdyA&c5TihREdggPon=~{ARQ_77S|vgDRk$U`}a%v-woR@J*GZ$JYpxmmc?G4fgds`Q{9B=QbJu!jpr? z8d&sl02TuSf2PkSB?yj{cSc~?k?v>7~;iwTN{ zA)f)36nzS68n*tr<7Z0n8j-6OYET@fA z@NR&Cw)X&1VLg(UO7#{Rr&vcjyPM?rq9CGjuN5-Ezlf-eV@gCjIE|;Q)j@M>l?iH2 zhPG-d4LTO&IwO0%N81(j&296JKr&SNyLAR>XjU1y^i}J+AFoi8CH+&7$aF>stN=I1 zh!x zhP}$?SO6;fh%~_fy_ztzC@ln-t zIGa$r00|=8eT{8t(|I?KW`^9A|t z4Vb2IePS=gs)1tdk0Y=O9)*6`auy7|F+mGvcXZm9k0>xEBg?!&#k`cJ!T=q2%-aR#$FZNveD4VfrL}5w!5fp%J zB-ja*WxJXskQcydKVM=QCl82$QYNlR%`R~S^zVqW95LOlBykzPadwFl+LH2GmfWpitlxMG_3{`bqxN$8ti*Jo-t z>kseFt;eKD%{dL(Rh7IEN<=h1(ZOPJP-^W}(7khZ;N>{=_5yFL^Xt?V$Uqt3!{1R% z87d>zI)xH~eU;Hnr0S2;fA#u=C14Sf_7>o@LiK$AD7*$QuQ{I8YTeGmLsA!!RlPsQ z4kMF0&Br8Z_)h}(<1eUo0f<&|dN_p|&iDzOS7A}kIP`J*ggA)lQ>G^ckCTAU}Lt(oHkQFsIeZ3UiU!5(}UEo|sWv(d= zB;H7T$Ju7VF8}Fgn^|m_$5yqGro%j<<{UJGu#u+U2^aVv9{Foi^na!W$tNLyZ_hsU zEU*f&S;IztW@nS>WQH}xMFKKq!sIyPu%$LB0QiAz?727A-p(KCbXZw}pH>JVk*g%u z57d$24GpVKw0)gWt(!S+U^1{?z4{DREYo0X^4nK(%wDF8x1Sr5Xtk_w02s;NBXA$e zVgvi&BF3UtD9mV>fRr)(EaE;zKV)Tc<}v?fF!lEL-ym|1>7;>^(B-X${)gh53%~}O88NPktQdQ^qTw(= zoThyF{KLWNT#0yS8z*nvVRO*S2O$ATenxdTsSosYg&rLytSUB_1TumQ#Yo?oF!~ZT7Ep$QR2`k;rbLt( zskp*Ry{%*=lo6|pkpToNM&)vO3`R#;V((O)C?@Q&aZOT)7KLNbmb8_N`(@Ms$=A{O z2#OHUeOUL<;fXhb2)eJwvv%-K^X6nRZu0u+tD}ssEQ}=Ksk(n(wqwS!N9cvUjY)EY z5kfM9!E0s9s9}*9_awAtH-5w%7XRVeHP>q*+Sj>htWA6y(I#v2n19jDA3CsLmT~t# zMow>YPoEh(IyizG0&07c6!5&+C%*VD06|EKw4aGALhc&`xKOd;*g>e!ypD@NxHRXN zJ#f@#b#ypFGwdg3L?*ShnqjnKTTZG?s;ps%^_dN>zM%4yD%;6c@udGFL< zNc?5q?5g~O;)j-RP6Ie^VC9$BBJ7~|)qz2INxeWL$I{72{`S9`-_vOHV z&rE#R8Yp?SST(t|PA``{=@oO%6FJa0vg5VO(vC%82JiMJ(w7t+Gu{~}9<5wlNPuWm z5jhdjEnI90)}p$@!Ne)g>o^=oCy~x?-4f8!HmVQwJe8#b*KM2S#7_wt0f3F&{t*y= zE5xf}lp}M{38p7!M3WFU!V*K*i zgJ?Joq~P{rVISw7fktb8q|3oS7kcd0u}HDn`51Cn80}35^2H4mpDOF@6@I#vm3U{} z$g#n^AO?Ew{IqU^snj{0ee*uKrz79M71223nr!gXwtiLYVKVRxx`+Nql;xEAu9nvz zRWag17Q2G(OqfI;etc=tC%~i9>!3Joe;Du|_!e%$nD1&cWJp)yS>Br2YQ273o)=KI z(iaHZ*li3}@5#<*i#4m9$-9*(n7xmClah})rxNh#C7jLgG>_{r-@&C_lp0gUDusMs zf7OCt3-E>*x@icdU7R`vbS$kw>>5uN(5ZXe+U+q}qsw^>p4Zn~XUw>Q!-o47C?H3S z;Sm$8a~8WxHp4;y5Q`CTQ>Q616QAkN{FX+bIr=8XrTRK>4>bjFQAD+FS>_SY4eQTv z-|MuYrNZC#LvoBhnL%EW>0*a}uT@7|uzplyXP!p4G=NQ@FR{#ip!R=&)?>>{Ns&zm zSc;!SVS?+(oA&?0jo;1GT6geQz?g^8P4V+~K3=}&9=|Pq>&~p&>4(?=>S-l-?k^cO z+kXk*TmYLBGz3T&m|A(OMV*X^S4 zJ{jgXLT@7rc694Athga*bO{=a`mEA-+P`xzZe+tu-ZNC^pEmwsV`|6Ld(?(SilUru zjyL61|7z^)r3^l;hB6j17DDQ1w7hXVJ@|J$+EdEvMuYE&rY@^oTt5|?G!bXo(hfhSo#EnT+Y&kJXtFqN(^Q+>7eHp|8 z$8D=^o4auZR7?D%rug%LJGm&daHQ<+V?=4W{(fCs_~2&%Y^pC#7ckYd-trw|!?>0k zoC4{J?qSg|mhW9F3xOt%26O$`c|~s^3qH{3rL3~JZaEPLrrxE?`FZvjLua6Yw^If7 zYXSizh6HAOTmF%Iqo#UDzv6Hw3Cl>j_xN!N7vy0;6hCuURkMJCgU~hyY~Il_=(h6L z@$wqH4xKNzY@%&3)S$pkpYm0MUm=C3^YI^EhBVisV_@Ifp1gKMMmOXDOC6WLZlr-2 z);qAhtb#?}y1Nx+L6lAcv3CDifC+5ITKzQxeoqN=)8)HSa1)UJx_2aFTr*TYJ>I6N zm@Cq}2mzpTiMCP}9g6;^D_>}lbJylQNcS}fVo!Fz$fhOJoDJ;?nB-xND*RVA29TH? zPU>BmYP#mN{<4BWHMMwXaJ)e#B>#Yz_w=@m?pGM_2HoppEAn8k?umr~&9<$;SSHoM8AB(7?OrO( z|MiiLiu}JP5G1Q~+!cMQJ~*KL>jh*Rj6WF!TpY4@(upaY2koAGN(eJ25C%$5H1MhI z#bZA-UUzG^%x@S{75=!U!q#t=05|1s{H9J(-l9GdIkOT8%P8KZBqCZF_Slz|h8^Bj z{y3ZOik4AQ9h!nELA)NMtP4xG^Apl?$0cT1gK-j0_Gr;9Mb2NN!hRY(bBp8V(7%jC z$d6MbPELD9SU-G}a2veZ6#1BgH>O6kjGRxkrH8+5*Z#}JwhPbmD1ggWu(33t`^tBz=Jk>b0AqtNb*&N?gu2x6Q z_6ZWsSm8rPe4mA5lQdz_PCLI2?>n!RYlK`?J>HJyHmK-S;q{r7P}Y+InD&4oYm9LktQ| z4Xy*-<4b#~uzTGh!6Dq?psE5GyHbdWAGG1>mvENU^CX2XP^A#EP|<~~_|GiMOtE}w zv$dn6Y^k~Fd3U`jfB5dxclU&?_I%n@SlFwR6e3k#Voog|0}%)br3XV?UV|dyi@n)k z&30h$D6UL&#P0x*pPafk)eJ|iXPX8hj{Y5kd8j^p_UaSK+sV0pK!r;=iQ1L~IE=o* z(1g58D6{eEypFg8u^fy_T72m_%L=T!I&TP}lqAR^0blg4;-T zc^497x}+0*8CE`;MC^ppv((~2no{iqUwM`)*&Q_2HaBt5u{D0kMvd$%Neunh%U$%X zjzu4M;Z9Kv3zI+4LyC=22A?yyLsyJJF^K89xaQXcj{;TppTX&70UCnNJ-Huw1~ykP zI5}OpvMLG_!26(ZsHYUt!WvB-mk#Fev=ElwhV`a(&a*@0{C*R~O0kH$6`-er3FV$Pmkf)IcHoe<;s1v)-lh zU4+&W`uFbJdQcw=!t=tCBAOO-OsWIIK2{mr`j>mz=_DY1$+SQocp@VsE`qx;{RckjhnQ(ey z%tVTlPrQ-%{>G?60u;nrqu^O+vzRxBw^KkL4Wh~JJHLW-sgW-|WD*h^^oMWcd|-yY%I z(`epn0Sv>$oJw>x_#!)B0WIe$0tmafM+TcP|9ZURdi;-v6Qy$iQvvc6K_>YzA3h#- z73Yu`!UF#%nylz^L)h00L5iu#znhj;x0cNs8#m22xndWDq2Z*@vg}ThBS_@+h$TWT zN{ZQPE}4WHUsD*b{3j_#ZnP*)=ukke0Q5z|#SkJ3*cbscCd@J0X zFn)#_(mGsDzw@NVti2=mZyBGIDGx3vXZ<094S5a_%$a$yNc9h3xS;{CI2&{fGf zT&z2RYJqpOR63**#FpRN;H0)H?L`RowpThf#;`R_m5RCX3yX723XcN)LmL;C3KmP; z7KsM-;9My$iF?=&ID@uZjtFO-5oMdF|0fSC_e6z`#B2PTp(oscB!&YDv%@;9N)d!YMey2KJfj)OO`T1>PSGp%2<#P?mNN5KPZa!;Vv_rNUR8tP zc2p~xZ=ha7ddM}LYf%piG$`hDe5;{SnWUp(nA!-C<|X0!i6BtslF~_ls9w z*4g#rzW8mYC`Jh9pbv`A@nGgAL_X`C7h20f#L||Ru>WlO>pphLj#X4B%Q&`D)D~p< zt(Nc%-DWJ9wmK)hE{_X`&D7-*HCRRZ{Do<|CsrFlaA{B z;&(8C6_h%%9h3O>e_MZ{yV<(JWkqtQn3Ji)Nwt`HGLv*%eRkV4)uG+wVP;FY^;-(p zupK|eX-RV4(I_3Ikc|bANfU0X6jqNGkL>+!!Lb;lY?(^E(R3Ehp3HxNHpvmC)AT8# zi1?X+zjy-dSltQLc^?Z9Zi{Zy5aPcOhaHUE2pubLW^PGjvY$_ff8r!B|FPSzd`3oC z+DOC7(u*hI>1NP0OAL%k*g;bKF?Qg*iTTEHdmUcW6!v=E zWz$cC+K#%oGW_HC=~Y-ybk}ZzFttu>2hY;SWPBn8hO3c!Z{2-GIv}ib+POR3t~mj+ z7f??I`~;cYa&DF|qxtWrgE?pA9 z+-8QXW6EaxAAEipO46kx4?ZkKt(Jpe)Y*@&HeP&h+!~>UR@e<#vZGLm(!t*PyZ6o^ z64j%#M0y0h#uI|Y3*^+l2wJpMDbrqdO%8WJ!0(&gAO(rXH!6$6an!WTrx~g$I=kc~ z1pvTG%ivJm4dE|Ltx1y#G=0(%$;k2im?MaxJ6EIA&J!8^6H&NE?tfI6nfk96CnJR^ z!;5Yzx9$JM>u**}q)gn3vi%}{gcAJk*d9x7qqbQC@VETJtdl&!|{dA5hzyfCd)1^Q);YPUR0k-6-u{M!mhJf#4;nzhpS6 zCtESJXuW;IS4cZ1qw*M~VtGCvIWDxrux}GZ-y^8bU6xz?S)^u!gO>_mV57d0Lnom} z7|;iSM{+JRwm8tn!T^&}-!(s1TVI~6hlW#(WV zug=@TC-&Hdm`su>L*Li`Kp{{)b9L8I;e)G2e7x?iw^%dvw(}lrgcr`qw1OPj; z9K&m(ugLrJ$=(<9Zfza&OkdWWDd-?L?Xr&^T2rfa$Dft)@y3M$Yj1>06+K4H`T$MM zH$Wl>?g&;Qd6{IlXL&syzn4Nty2!zDn+lWa3U5k>V)mg70faN(LL+dQCHLxLEYh+- zzf~{>A`5)H9Zu09dMI=H!aSMC1naLV{xL>F+L?;184TYl!c$z8J%Zd)5g7SH|Xd%h% zM@~Zq7fXi$8<=jb5E&)mtbcpPfmwFLSxNGcD=N#(lToKucxC4BHm;L7Xr+y|FNAkYU^B{v_?Z!DDdyY5}-`q=V(8 z;S-4usp9a1#f-YD&*gN7<8Z`5>Ssl^=_FSAmAPPxsfA%cREzjAn35sfFCzts~~wT_b`p8~yjZtSs>jnO~$POTdXHYLsW zXp?h7@JUZNNkZ|a`cWE|w~4luoY=S|0Qr^1U%zVctb!`37NY5ysybuKwF?pZ6|u54 zO0dUZWAm~9wrtxb0}L$v*(2qi{+i|b(c5+x5D%1;57&WXpTPA+t<%QKi;+mMkrnO(HiPdB;ZfE?rqwPr zcPtL|GVAJRxPn=1T*~Pw_?Rr#^~+xQp{*U48*4Jc%|`4))#}Q)a-Uo&k=7JyzB}o4-jhQvuX&}C^t0I4wCsej&_xq1!fY4L$P-gB6 z=vdoPjQ|I)x5Pk@({BKJc%lea4!`xb(52b3N_5@2hIdfbs?J|t$YIa|lA077jUT|X z*^XdI{tlW_A4L%I&k@K9h?47Q(~lrEN4lWt2hC{B9Vk&x{X=WP|9{b&RpD3?H zggMj>P}be-tC-(c;Gzk!ZzaF_1w5y2e}ShQb|VvNm<+v)Z+~hUIyJ?eB&By+RDI<2 zPXxiLhk4iGX0{1g5ka+1dx!sUS2Xtj*jn?@=n{L?9lN3GKl!QNIG4@c;!N#9Mo*l+ zTfa^%aaw&f4L&+_*X@)q6Qi#QE&I)m7}?>M6@{H%$QBlxYJ_fnC0ytPiS`@M3U+sk z2gA99mJ*TmVX=2bpIMXXnNlSjYyemMp5;t`x4Hoh{JUH|7!599@>Rvc4Qo8q-b}*J zC74RRg?j@9-+N+Bw9Gaz!TWF=9pdr+td{_>6<&tu)OxWt0scsxnYtUzu_Qit-izBP`7V4I42BS}l#Cr`j+bNq z5K^9nta?-NSDPbXZ3?0=naE$8BkJyKBfPQWVM-)xSgXs$gm} zZ>Zs)XLpKU=j{$fgu3GG6J8k&9}}2Nbs}@OQ~(=gO3)u6=e=T%lnZyLKDci+(-ZpH zy$wKi%)6OJlgImS25OjKgxDQUGUq3J8`-FLyCH=1THFc4uj<$wO~)DhE}0d5l$|m` zvktJHNLV^)nQ%tF-8|36T{urAtr|^){OYbN(q(X0M)T|;`OlG3iXZD*yk0BDa+iH8 zPRa{{QRz_vv@Bpl=UwM>o#e=;oIdqrK>0IbUW09}I`jzf>@&jYjHTLp>qj@uGduSw z_aPH>5oW^l#!Bt))uSQK=n0S9*&M63)eIlCBcIe2uQM_Yb*}Oq$ zIUC&OBCd$VJRs#lOpK(lc>Q|h?5A1&(vg|^kv-v&u5a2W7;bEfH`HnXoV+#wr;ag- zWm`WX1<$yH-$T};eN=t)#k$Y7Bi9IQfpJV20U+FZ;a^t`Ut2Si^2OH9F-sXgoJxqU z)TW{ANef2vLajb76gvMLgLVwO=Pzzzx}6j_FkK~Ajqz?V+Jfixz3mu7u3tV@qab&4 zj0RzW`ted7R>ULsB=`G4ER2zFYcQXfUi0`Mi9~ zqk7XeANlqPyzq_lR^Mb`yfMFM%%I7kFl!tX3bc~lKp^HPiL~~4Fz8xrU1o>oNJumK zC}uKe5h}^iaC!p|$%?@~5M%6Au|L%!t!m*yDP(;awA5ATUauUY&4Pa~lUSHu8-z__ z`*%Au#XOz4?}25AQRZn0*biJE zEeOuN@eLYYzef@%Nar`PhknNRww-vQ0`k2@+!oC>eW_ARd5^;;Zwu2OU%YqcaIkCgnXouun*t*iU}rC({0FKo&ezzLdbgQ zb#c}QO1eU<35?j!UQIBG##W|cZOih?{LWH}&4P6-q7|Va&|_?(2LzT!>jLloV)#jw z{6{%+ifoOF0E|?;c`hX#W*gl%8NyS?7^%fK!B0DkG=9#PviRQn8Z8F+4oN+Li0sbAyp zQFAbqlhQdEIb+jQ(k$mF(A&66`CF);S?QK1j6c8=)PPR;Dgi;^#3Ceghg~-h|3?n7 z`Hh@Cxh@buW;%)~6mc1I0rl}wSW$ZdiDrzB9H>3f96??+#h);*<52IA<5o7kaqe)M zF?M*TMu*Br2lpThitCjfbJCHfvmUON{P)6eOi)y=V60LLXK^lyDNFlAH1Cp^%NfEN zHEz!zRsXqAMzrq0MlqGpL0SglX$F1PUljcS>H9l-U55dR;22Mk_MeCBl;ZfirEn(e zt!;EqW6=pM&lyeAf(67G1~4n8<-1B+tibhhj`B#6D@!hF>OyNTY>WC+xIz`9{b*Q+g}{N_WJ zy_1i@&Dyu6j1{)RBm({si2q z+$*K>SMdtO6x{x6JEQ~w!v28^LkA{2LJ?nu5k+lh&D*{vYBh(ScDgpcuyuZ^3=!Lg2{L{jk9sRsyN)&BP-qDU7o2asF(t0MH&heXpF-< zzh>d(>MN6QO*w0V!(RLHZ!eI4tHy_#0!0(ZXk_b0PZjz3K#aD!yLU&4iDp7d#2U2Y zsDL3EggV6x<0z_l-9IY~Wn(g-(hq*9B(cS9g0xgMuf|-ta9mMIYphrk)@$CD*PG*gjMH9t*yf+yZ#)#d%JeRJ$J0;w3-H) zmTkIE*j*6{q11QaR=!FM`)!aw)g|ZW{++1NqP6`WXX_PRED6KTN>aAB4<}CfQ|S$J zZtGQB=bIJ$&4f&y*H{wAR8bn~u^A$lefQo2tI+!Wb>`85*q|Y$+PafB=t|0bzFMD6 zlZ>zb(ozy9(+Py1s#;>c>i$?KuW|B0dVz8RZV;=#cn^>iqRV2R)q=yZ!jc6#iYj;mBvc`Ejv{KxkRm=r*uB5L8&O>#v zoDqKj1lxLi&2*(0B)nO*QBRima>1sQv9p7Gm@Lkh0(PW0f>RWV;?R^T10b7#?XgfXtuSX*Jl?I7O_+J*Wd5MbP9o zM9vZMU~;ZzAl6GTP{uF&$TFjnWDMz>{^_OS#Orl3oJx&CV*=M zvydU|SC5x(kB>osw?RhTX((%SrQGp~wd9zxkTAFA5gP}+8Sp>o9kptk+olEudbfDe z6v{Ck**#@Gn0`g6Fd~|l4{_3x)Om5<&8~D&;+4<#cU)t`pz8XVsYxmciV|MG_$OHa zo*7o1oN9IhO_9C$1-1!IRbY>PJHQB(ON#Sdth95(2BX>Bv!A|_#V9%)qn}mYV%6Pm zl_>ULKrAXQa&ukfmv;|p$Vn{5_CIMi6wvp>zx)tS%L%rY$}LC50xH$G{2Gt1*nq#; z>>PcurJ1eWS<{{Or5svtAgM17R1LeP(p`vf{!zo3x^-MsE={IAI~_0Pi@R)B|CFrp&@#0 zxj&Pj`?c{w+W&73RAQ1U1u>J6-o_O@oEFp1h5dm0T?@C;;G{Ium`wc|zW&o} zi*KwM#~~sv<mk>U^_RP9?nQ7Ov#3}m^Eex)3bICvEfA!QJsy|0J;(zzz|UjjW( z1JX`h6}*9YzB1W>8@rY0?uN~I+Q3Lh(Oeh5X92kS2ht~Q8bi#Wn%~(4HQTz^Fz4dI zeHlS!wiL{Qsn`4TU{P&@Z;#U`pQv$K^W2;W&M+(u+N|@s(Ha953SdZ?1ib)kRae&} znWE3W)95A8bc^w}c9Xbal9J!|KB82dxpe&F#5t_;JX4OB`y7+^-$7!hbK##G?-RrQ zCLb7Jw!>|tMQ#64mZq8Hg&9l)Hk;_04JuNZ4_$_pPtOo z-&+r)giKPBN$3(B1nu+(v<`-rT7r};dE6jVR};794uGA!+{0>uczKwD6@bA0$3iq6 zC<>8@RkK!1i^^b^DXOcFD($lys*&bT-u3di&t7#bM8p99KLEh(`Ovn|y0SO*d$1kl z9unaN2K{&QlxxN5`&Mj(%do|Ki!%xo*`wJ|pLO8to^G=!I5w}BO$Y0>6e{nxd=cim zeh#Zaj3xt~!7PhSNzIpYBrAI5k3FxD)8BA7$W9IcF80(--wJFCONeuQb~-KXBn(pi zJ1(kbf!~$BWs*g|?;NI+1{7f^$k;Wb5$kcF(neU&$Zo*6DrklpRtkH>&>+iQK zJ(M8Pcs}*ID=LtdeaWfsns6ioMrKIj*IjqKa5YP^hnUtcXlK*_6rAE13Oa)rzq)&! z-VPb5;F>esJ{ANR@6f(Xha%a@#uui0&A2ZxzTN+Vqa@xPqQrXuhQeQU}Rq;6o#>%F#Ne`2aju3 z1*uGwRCAN(Mg8VF5%dj_r-i{9rU0^!ZqAaGq4x0T^dIS>)A+YoFHbzQ24p}560sSV zi)r5sVA03A!8<4BbOioQ_p8l9T7MO~E-*P%_<$8wsLR#CD-nC%A^=$9;JfZ4_Gyv^ zw^r*#^3UW7pa6;AK>~~3aeP+F2l~g?+syBn3uU_wBl*Gc z)3|ID7pi}?RQCRykM`D`~W1t#mDe|40! z79QsPa~pna=Btukh-e5N*1z<}+;?MetI+Q}b@1vw8) zEWBQxLuXVxa(B2+7U1bzZNPL+bO=K2SjzAKYOOE}m9=BT*YH4==FDL{4O9fuX{XcK z-5bdn7x(r*mm`N&H%^ab=Rxm-mJ#p8%ML5PgaS@!lBY&H0 z<$~eu(zPIeb|mw906-L-E^G%EW>770+r%MkL|rm1yy08hUu3vy62wq_e5DG{`PzvM zso?6jj{@kVsYbbBUcwoAMd<0{_v*-8NeZdq+!F^vx$Ue^BhzxVym^hEkIWCKq5f!| zeErWqJY>A132>WM%^T01y_TW3r>jPdy6R`jX|B3FMSNoTBy)#fSvu-h9zmyT#Nn6x z-rS(I9F*KN$-6W75q8L$q3G0Ln+rYtKMQ%)O)YL zp<0G_hY6CwR#B~WKe7mP6Q>+-VN%}u}9fv zl2-#B;hi3eoEn67kDO+{HMlJ4WL(y_aefwGozYjpkldM#eFC?Ufe=i{O`4eY>#*g&wv04KTCEDzL*QN- zx$BP}(tOHSz|;jmsLU^;5jHlSO&oI?Plq|d*&>c$A&;CN!%ldfU7ME7lZ^5ris~+W zWO6hLp=hmR2f)-v1WJKki46H-PhUPq6h1|<;nhgM8 zV5s0a;tX32H|S`Z0BPYz7K-X%B7k{e$(=l#cMySU@>}lM@4yu7?n+=X-l?xfFUiB( z+V>W|)o0aM@fD#;r=~tlJ_^XJg)^zc>9I|d2ZMO%$#UANs1k0CMCb z$!q9p+l?grbP>Ox5oQPi`Q=LCc|LiO=}8;WQUOdNE!|{sJHWUO;^gaU(ttH0sA5&W zX!#w^oM;PeW}~<0kCdG5F{>z zUNYds=JP*91}-HFktM4y3jl8KhpP&tv;$27p6FD1RF@>=1&{IQ)0=D(5{ z8c8`UO^WAt#*2M`tp4xg5S@KtJTHPg)0f9Hajvt~sC^-NS{*1q5NxL_!@%n$q#pYA z5r_ucF?y!WdEnIMNWw8o!HbTXM%Q(o-}Q1FLgZNkKxI$gBItgwZ&@5#ti2jH;7LU^ z%p>AG<^wT0aE+76Izz>CHyRxi=3No+-n?k&LoA>^2JL+?(FFa89fBt?X{JUM-EZWP_z98 zI%tRg(FAY#Pa4LU0xKus#wLy!nDB=~FnFPC8m{JghHp9t$Ew^uw6^(A*IAs)1YLm$ z)3+^j3}W&XgKsN50M%slxr)BcPyO@Sq`r;E1y51$AW78H#(Vl1Qm z=ilk)C4!&-1_&_-5StyKubjx~8mdLIAs5>^xUEP-lETpo=<(i!9lVY2f=Wp3>s?fl za0Y7>H(EF{Z1>tL_PL2edgF!Bu40}?Q==lW_0FclARC8BHA^MvU8tE_k)J2A+mJ|SkvT@z)AB=c$|zwA{YGiM|) zDEaEHA5RzNCtFFWmbpV6R^Cv^_=x`naD|$$Zz7fKemy*@i4WMHWoOrjM|M`t9+m>5 zuo-hW1M!S+$>v*`!W3WcY3WOCxjELlCj!{TfWENs1Ss-H1AuK)|aZ1-aE0kL}x+# zzfRxp4&eCJm8;^d;DBVi#0i2)OiZk~4R#*Rnv4)WE5yrfN53Gz`+$ZnJaX|p403Zd z#l)Kd?T?x6CSa5;pD5g7Ik?3X3FJ4g(dg3iJdD9?Czb869?hK)t50i*ZX>8F#wBoV z5vU!{1+S&GBtytoX))tYr(8(Y%CPIvH;CIzXlI3Oa4|Cjyv7|s=zl^8Y4F@>@k@4m zY#--M&@nR&GeDb*;fFW&s$Z#Q0o&e(nB)|9_*m-s)k%3X{8fWVp2-Y1rbo_k%8?%I zxNx+2&J`oWaiw!W*IQ2BGFO9wzi%jgDq!DNj!&#@B{>4fM ze=$)uY)d?Yu56p`)oxDE2@nO;e_r;lbjh*VRO#Spq34^F~p>b26%B zI%_85=han+xeWhzs;g64i}aNCAj#wU#<NO%8)!q6QyCzA}N#5UZn+A@DcJAtTr~YPM-qF$M4JT%ine4aIH2N2;d% zS$`u&%gVG|Aj+X>Fb~GkeVww6!nQSvX~*L<@zE)>ibsAT2F$ljFIQ+hG`ti~ElF!$ zZPH*VX}L8%-^RT*RrC!;jl;EkV=058v`Y{a&L@`p_}2`bDSmQ;gzCs{v>gLQ%gsIY z?|nOBbt2~RMZ#8xbB_ZUt)5URQZvc9WJ=JwBHtbRz^r+|;~?Uy1m__@#uZv98Sa^M%3#V|$CwD`BRY`5;ub2fdKV%{m^t-I5+nP~t(i%X$>7ps)D=ax zePOltj`xMli)qjaR_Q2%EF_fk3$7OgWhU+kp%3K>(T;hw$WiP9$N*IHQiEb}k;1ui zd!?UonaS{t>DF@@^ntR|1#8P6JTGZSznvx$= z1aeXVXe;faaz?oe2Cra&&+evz&6NNi=ISNoVUE)>$M$MYjIMPp-84Kg4E&+2nVyp9Z=rdW7_amGkc= zE9x3`O|GIU9$*^1F|Cj*Fd| zaY~_;({IsWr76)Osje%C^PXUoBS60%^6ji2UI<@;Gs>E$RhJ59UscypEbhHd@^gN; zV25+({C}4ZVksdlUUBt;NV~GMeja=*Ao?9_N2cik6*)TtOk(MZ624cG&Dc#`kL6Z% zH4W@f2WSk{2vky|lrOOKQVUUJ5G*=tJ|Mpe?(Gii|3EwDIhCfa4QBm@V38BJinR+S z0Dp$J{Az8&b?*?gq{# zr@mis5EWMA8v=C(C0xBSk=*}dhD9Wr6Y%S85Q#^YtIzyt`PJ{+0J!gvdtM3_azs?8*MB-HuCJAQj@4<;0>JkzZ4K zKHd(I8s@IIk`z)t9Or6--Sq+6q5y6-fF=->r<6kVHWFK&C9-YRWZ;r@Pvp)h%eq#~ zquy1H$Qn-XzOWofRB}|=tyIHO=|&iep27R(=B?3htrUm5PLXUiHJw;LJ^ZHTf~RwP6;3Hatwtsv6W>6VpK(ocJm ze62JaTavWNq_OPWBosRnkf)y8tBZBTFZ+A>9P${mJHE@WvqO$)(S2B3nyf_rH9yYX zsd++Ia;}S~eCuTcx-1yeWf-^!_oVXohTUv`0)opG?}885#CB8QBZcIno_}LEtcXcJ5kgBY?2=-`mnGC>oAmBAv{Oz zb53J~4v-e!O?K_1)P9c()lhoyPOU2X@t#3Mw%o0??J=K<*w3*o^3%cb?r1FUbTNBW zfuhKx)xEzi_=T!5ZA1k`I&gT4?irK}N&YMyOt*P)Q=DPkn*6LxU8eyeJoW~KbiUj1 zRGFG$n@$Jc2&4+6ISI>SiI=eIOi)`*6k>dQ%BBdI06;ZeKT0Q;Z|86zQio6^634|k zsr?N3_JbHY+&5C4&4)-7_wLrVX;qCt(kGR9Y)BmH>645qKiH1udV_1e zfD_ZNuchKydIfQDQ7(5|Lt1?w6M&DZ8tVy7@w&BApFGhf>z6dv?p(5-t^9lE^ct4h z&Q~7Pe!tfZ-j2`O6eT$9dKx@HM7gL{G}$1_-AZDT)!SA}qXr@nX9BVV#{^{7nq8r)Db%NZ?pYfTzdEC+@UIQ$z!L2*X%6j z;rc4h)IF|xIGWA{UMraC2xq2`Ss5#YuMPm11FGD+#gV;q(`A*2;GFvr*+bAAXk(4j z3rx*qw3!E!IsIrzBU`o@Zu-=cGv^N(mxlYAxH`rTxnSO&>rsM&2q1L9JU+=;{!WIc z6|r+(2VAkn)&;tn!2+Vw1!sOW{G6jE%$8Z9)#U~HMR)YU#n9m zfC}H|ahw-1HXqlVw)DUga#=WBQw=qR&! zxmd5S6wk;3Ao-s$R=bJQCuU%-c&G*IM}_&+fi?>|&;7u8>zm*U5oCi7Go#K-y1Hgm zJMkhV#slY>E$s-JO;}Z5f9lz{nsQeSlI*A4nK)N2e<3^=m!E-0&b(3T*s|YAf>Gzu zvFd}Vl#51Ij_cL&dk7F~$PYp6<)E}#9b{RMirq8n5}bHYq&lGaM@t5;`&ut9Ni;TC zD!#j z8|Bt2PcY_evPK2*J)=}P6YDkZJ#E_Ynom<_|F_(F_7CawR9lxZ21?rR1IA5clJLVc zHyd-*&2Sp~mrvPZMWQj2z;>iozQc7MK+#ua!Et>rZ_ybe-mO~WTKrnrGJnJv5-<)i zn4N)Mwl$ONSAH~Z*(#nNu*x-7`K&Pge;uAR6B_PeCd4zLHE#}(-hU>2#r$>-Do>hf zHPIS*??M#NDTQzHF=RGLSzq*!D?dAIOD0Uu03Me@cl=Kpg>zBj>rL)8r~wuDP9!P= z-Bq4d4nNG|zO(s@JhszbY@EW)<*hqIj33Kvqdq+Z%$E|vr-f#tBm0fr4v0Cto2mB? z+NF>&T>q~RR^LdT|9CC%E)YwCN*#b02<5Pjz|T^%lFsZUkb_UTnjW!WXHM`vs1oQe zOh65Q_Gx-~@f|)t3M81)cTJ9sdLW6pD6w`)oG3eo?YY41_!@KU3>I7r$zUhLq-yk6 zVyqH>!;=EpEGzqTjI2pMT?rOPncWbG1FzB`d6|*JZ!~jrFlJc}0-3Z_p78LuTd}yE zAmxFS=E_X=@sYi3Hs-c^IQWNT;Mc{DZPGs0OPR<07Mz&D%BjiG^f%Sf-NeY zszSQ7a;xh{8B#TM(~1lqS2S$MbdzhRU0uTx-p<_fO1790^@cu-)Ls@xU3M!uTnE2& z+Y8?VnU0>H9v1sM{k%BzE$ay+fn2x=NPM4bs7hrX@fHR)=v<3~G9>2<0y&DPUE zCU+kH+~gFzfw2=*7cO|KRbf+DVAA4Kdyhe5{_t1dW^HWFLLT`hv{P;tudwNwgJ2U& z^HFpF&f>m(z&g2s6wxRQ`9=>O8UPm&h8|m>TX0XWw91?suwTqfw=Rr9PK&N^9un9b zoEjHHdwNdeaW&Q*P11b(vuJz*y%%YB2lu)(pJ5<)ELxAp@Fu(BVHdMwH*tq{6dM^M zRN_UXhm+*ca*2#eY6wmQwt7DoH5;XO1{-b{JNNcG{U%6pKWk#k2tEMF`cw}c7OSYo zmk--I8Jrl2mKqVFeASp2KAWTdIwk3+-x`-he;X^FD1+<3a<2`#(&k@(8*<01L(cE=jx!jJNMkFOF&~&aJ8H7l%5CTMtew zEpRv(5#quc@V`SF74|9n(Lc{`n9)Y#U}n3tf&#~eY#r(Tn1P_~=)4(;dg@x>hzX0E z(86VGlHKo)`5QEgvI>`Owg7#G#SYzmC<&glT$gj`dVcD<5 z={THbYb3%Lbo}$Y{e>uTs!lut-pbfg_#(mOMpq3GhrVw3u$>#a%5uCj{k?N`Qb5AL zi;E+%iAMzzt2B8SZ$TFIG(%FmWX_`5izdY9#m+8Jiw?|{X!%b4BY>j@sGc|yp;*~F zV`sK>1TACnZr-cEyNSl31+YIcl7TLIP4N1q>eVS?PLuDLMY)`WJ_Mt_K6sD1X91<_ zaBmG{=ReD(Ayg5;B<89B$W))9AW*&?p@653lG=_%p4D6TRY9dI^8^ALO80>ymjyeB zQ-`yG_koeDe*VBj=u6=nn9={N#*Vm=3}3Xsa)P;8KRy7dIPmi)oM3tjCgz}9y!1mq zgH3owwPenC<9VT>tj$|ym_FgJ-54KZq{uoT%GOpRe1Oc}0FZ^Ekoy~~nQ*+S3)AH+ z+z!R0;&`kCTYkc#(I6jU$YeV=sLS*+$>B_4vxD#4B})67o=!oWx+?R(Rx~J?T_nOv zA`Q6NAgwYOZ?clnr8s=cVT@cfvWT-=P-BDY566w#qq>^RS&OcIVckK)NXF9cBgyxO zsMb}5^>rRAi+c7pF z-*KAdk7@{HH%s+ZG@&3NH?L8W&8CzKj~_M8v`FEDbt7rqYpFpkl@V>mfw(B%IUHGs zVcIXD9wA5x{3P6nTeSPWDf7QjSB;aOG006(bos~7D*Q2(|W zqkK&9+LQDi7u(&b^(T87xh4Nk-uhoQCje1>4?Hd98|7K2K9NF*%10epg|h&&3YOxy zw_h}$&@yh_xxjb5t=xtv#+Sy@s^L>o?2>UYbwhqGXNL3~%^pig%rtQZ&SbtePyS4I zg|LD`WbPH?3Ra9jRyF3vD3KQhj=KYgMcgF9BXcB+JPZv`(8+80A8h-wMFAfW>Cf?K4i}cKtM~VF3UN(g(nj?=CVC9R5cWlNy0Tn4| zNvICmUR7M=WsGh6oJHzE^MQNuq~JvpY@6DBr<0FZB>B!=MgEsbt^dJDt4{B1H7EY+ zw={}Gr1p!O#t%e%q(s>;W?OmvjzGHjfs!)hKI(%W9f8y}uHk_E6W<0xP`-Vb(;d~Y zybE&UUxvwzlHAwgkecR!!r|;od))_kY;n_B%mCrB<^N%nYOVh~yh21dFP-5hDnG+! zKZNg5n*)GCnkD^|Bx*^pq3LAqA8s2@I$}m;WU#gudPcF&e3@QI3BbB~&Vihw0CL?f zp@Q`e+%l4cE#v$vwytr~%tVt99s9KvQzOkx&`POFQ(hXh3#FB>(IrJgofDJ0N~X&o z#eWC!0sx#{&hT;jT9KtCG@uyE9_+9p8<;*hEr~WK-Y-LuF9OcCi9clmF@BUvo28+P zHu=955TYY|UPiYNS0K zxJw5ka0;*CR&WAq>G@`1oGR-Ji00IMh~kY)?OCYm3Ob^emx?S-z811VN)akO0VB> zb}LDgqd7g*^7O#J6<3`DOiV=jDs23|OcZh*ob7A|^N5D`c|2QO;a%;+5Lotf-eweB zXpx)C_c~RwP+Lmkm;3*Wp-PbW5hA~nR}{f?`)k}FHobwR@j}5;PnM#Gj1+P;EGtULd9c8$ zucUu6`TzoZJK4gUQ#@@K8J0E5w^aUDIC^S*)*2DlF7!-+z+fGnU5V{&OPZ% zoZRK{=~3o(^8H>StXljgTjV3=Zd%Fb2pt1zc~_~3L}w{Bg6z5=zV}EX%P?{Fn^qP2e7BG^)?kqt%o4-zWl7Yk!2=riSbB=s zPLuS~Sf$t58P|@bQUIg}MIfJY4l8C&`;*!0g|jvBLhW4c4grd&@5)AfOeHS+TClZ7 z_}0n1_Q$y^Xkt$LPzFLU-pH^+Bgw7~B(QkUO~*JXt+ti#T^d9_MczeVRb;SzS6&ti z{g_!8X^iy6t1JLco=KJ%&Z%BqK6byso%vQ3&fIF(Wm(G|1v>Ebr|Zp{u+)LugHi0> zm+*Y!?bx_3JaylYQ_w@C-vW5|Ya^e1FTuiwkQ|a65L~i)7hym|7xiGQejrTo0$^!` zWwxD+vL;5{@({f|vucuv8ZFOvqPL=jhSqH{gAs{fK@>-# zA_`c%J`=()2UpXr(ptW;gmalDn+O*(J$LZ)q||fsr;J7WxEPtL-$l?VSvFH2(I1*) zV_OhBjh?#5$z>)>Qkh`Xit+H=N-%{Jvmg_W&IAcOnkmXEHDo%ad?tl{%_F`UBU6Cy zXXiMgIq=GB0C;=vcZU{m0Jc(+w=QgGiopqKwVm$-5K-memEVozfNB2Zv}?>LPbT)^K|5s0Y+dxl(#l}1!<-p7wul5mvK1Z-cqUsn5Q;$!cW$GOUz zPOMvRHoUv1NnBnr{F@!WXvd9-Pq@C}19RmRYdU5KcSkO~F*|+*f?MLaUUehjgTY2^ zzdC`+D##5JI?ixW`y-gTMy5JxIE`Bf;0f#IIqoMhkxK?8risS;Af;zG=&Sbsey<)U4< zQwGF3STupjgVUHt$@3l96|r16E21~DThRyUieHSCSX7@JlAEeV|F}f5&MmieuQISt zTgv@abAcBEjy0cHzMk4I}Xp4ZMI|# zZ*M}I#Jo>d+koH&Ubb z)14N0E9Kuh8ORzyfj(?2b$!femf7#AhUxD+geEEwFHu-!_+Dc3&f6yHrnY3TIX595 z8$*Ag$g>81)fm72vd-c!b$pgx<&gCY2bh)L*(ie(zp>qSbz38211V^9gB{+OJFrcD zrNu)eu=&v3)R5&40Ps(p>}_53SocvS8mx@HWfw05 zd5F`#DiGu9D$U}zsbJ)}k8XzJ^&#D5{4$G-J;z|#oF*Mysno2x-9EZZ2#d&;e|(Ntj}d`9xH2PA&$Z(+Ws6{@)B+tvo7DgV#%FFNFs@S zFC1x8QWYGo@@Z0`qnQ+E)UKWA9-=AH1yHyu74De4_PSf(K%IlHVPh#09$ zDq>nlY{Kr?^bcNKRIhCskEr<*saLqMuXkDvqsJIA~P_jWu83T)fc(3q@5ju#wE%%dM z(hELTn=S1t{Wnsb$layCLbjZuzM$)?CE*q)On6r;*Yi$th9@100)LgvT2i%CSv(Y0 zNbSvp`9=I#$SfV=%#CezEr~xrTK2n7?~I=;oL+LDZZri?8Wj@uXQ`dxA4Z9#{Aa$s^6uhX-t%!B!6m$a`{gaQA|^ca*lL0{}!Hv^qO9u%>wo*D|# zd3v54K~6?G&EYg8Y!>C(_JpK&n$y0~UioyN0TTbz+kv>!(DG^10|(2R1tz{SdCCZ` z@Z?z#lTO?#Y;zB&nz4E0ZgB_vw%mv>)NdwV<=|w5zy|PoTlghzhx*pTf%-Kdup z*f1#&Ium~G^Ss-|J15EF3I2HuZ;V}?Y4zArx$yR7CcC*my0;|B5HF}|EwHoWWOK%7 zqyBR)TDGO>AV1>VPTu8o@EY7kl{fSCoYhJf2)6MwqHKM%5;a23S6INb7vK5dfk%%; z*dpgL7hYSaVXdwzyc93p08+;$>wVgq85poY=DwJ+j6#)X8SG@WPTE!MukPuUUpZqp zK9_*)ntNx}OLm|Z2!hRj&q&f6=1V$gZXrRBs}zH#(H*)ev(uw2St($jNup41=PPx< z2$|n`hg5;l6Ni)}cNZy_|9TK2C8f*w>t$+t1AbjR7`9L=O#isEOveOHSp-qrdc^<| z^?bD|p=*ppLt~;bKMbvW{uLzh``R^@GZ`SL)8%)t`gLLu$XvzSB098~(ZK6sb;AD5 zw%?Sdu5uL`7=5bMPfp<{`4KMk)_=FdqZ6yT%V-eq-b=F}U8)eP{LZmnd3UAFrct8* zGRw^6!eB}oxEGfx7WuUo<;=;>*1yw{$h>^}g$dNzt;$9yZ4Xc(k@89HGpYat! zRgf&Biq9M}l`RA)VNq3;lgMf3W2~atWiE-2oP>iS1Mm)iKZCyPKxbMdGY(9>#zu;1 zFM2-(KJGFG@07?E1<~QGXy@_|6B?9pxNmLsT25U#YKA!oFfr<5Z6d&7eesFSdrsVIw;%1=sCN{D z@y(;rFA!|AUQBtO^k9voe}+l-AGz$W^s@eqM9R7Q`9_mRNPM*>S`HZ*Z-~WcH$A zTzZa4*h$WF_;$*rS-Ccp?ln~sY_j{r^(6a|m-TmGqN18*cta8jzC-2s1ASA;jL#0S|a=S7SBd=F!h;Z`J4u#+LE@-Yq`ujA@~(ZsL>>bOD?yctVVY&#QEzg-JsW z7cKU&jslbg9sLD8PPLMST0vj$bF6&mS-04Vh{j?M5B7Kz)josC6Ma9&dcBz07q^(i zA$F}_6o{{oiFYYnVz?^}E-ZUqH?aaOt+PWxK#wI87RZH`|wP>xu(y2qa8Uz z?AicG=-FR&J@+9ks=Mo3i|%w7yMSdK#~^pJH7>$q%-*sWfyphmC7wpTdKL zWYY-;{6SztT0Pv-ZQkf*OM`hv!c4}rX6H#rNKq*P3WVumkcAjH@D9mv7EEC;;T)xm@g?7fJNPdX4a8LUkhA+EDzOKLuz}PQp zVtpcwGrtfeM=H?)XHbfKkNh4OWdm}Cfi|^lSEMb3Hxl*mG^JA;$wI7{a0E0=gzSYf z{cw;kx&pQsA;GV5(_blz1%R9tsR)1HhEnhq-Wni9(R>yO5a8_rm`amKHAO44?LPZS zLSyU(SS+S|G7()SOjv^evj+tu7wUoyy7NYYv!N8!IXTv8@&iZ@W7LF}o!i81 zN7om*Z5VZ75DlNRh~2Dl2dNton6lLZf1?4md1XQdz&Q4$CMlu>?|O%p$nU8V zE1q&LiK$A+s0cgtjL>C11AfQd-06ZLb{*=i)jI?&{_({gSW+u4-tc583pD6B=;bna zurqSPZSE*Xv$#TY2sib1(ofQcpto4r*uv)a4l|hq#uoQ+XjkRGPI^$`I-M*SX$T^w z+g%9+?>(G0MG9AS_p@^3LG@{S5pqorXY78t&7u_mhA(y{x!avw#U*L7j<>L}{;m`%`YG=WhPuDZz$cW2%3bNCU2#-u-BhUU>MpIOL*J?L?4dgo|8BwsL-eS7o z(_J+jyBDqX4s~)mXs#xpBI2e)q#wf6k3B&XDb6e)1?-mp5jHNJ)I%U~vG{6LmBY3A zq{#bd0B@6jcfZJ5x%+;0SJf<=X>x_&fjUJT+eKXbx#8nkKy2pnNij5z2sGb*R9pe) zl`-yekCux%h#h&vhAcsN9L&tE6bKtP0mnbqzee-Skm-dao5uR-{OI^j6Fb>j6820+ zr26=bf<4p?%yS`i!l>RIMnubjn^N}UDDJy|;$%c`C2&(|BOs3OfJ|heYzsbJ{jWGq zjPGJ*t|4(;k>Y@7p0>FQ(w2xb0ya8U3vwvGut-;GIj(rZl-HhFZkT3N6C+^02<6jd zb0Va>E>?*R5)j0O`A4iTje8!7*%!k!98@%g!flx%;kKefEw1t zsy{VH#h8`T4W=k((el_qS@>M(lBY106)izrf*IwcaF~ z=vOcas&3h*cTjg^vF_ACP*gO(wkD3L+yp||^)JtNhqX`GY~UA|f6z)bg5P8K zJS;!F5ag!^q>DCyrlqN`+882R%|0t}o_>X}y8?KMd|TS`B0dsq5RJg_LQU-~>Iueo zEv@-Q;-KuQ%5d%3aAQA7lepaF;WS}0c9PkdfRqOFC|{2p?XKc7lD|gRn!90$kNU-k zeyk~@e=1RBi*3k#OIxRc�&4L;ku_PBuc+cbNV$)DyQBZ3*;)~#}ttCf%840Jwx zb+Ow-S^xQGV&fS9zwutfvkXkF-n{JM(>oyzIC2gYkWr?)_$hACP$MkHP{<$MQ;hFW}@Mka6x`hw9rFOFrYP z97O~tF>t*JWHColeY)1SLUpE0a|6bkJG_8%m(bCs-{aTp)s+R|eeR@RR$|AVsiqmG zrg3yq?6^_9eAjq~uzwApN1r;X;&TCha9D?C7WZYMlSY&a zC9?2o#X|QpIT!Mu#75n8*&%Sh5X4QnO5Ps~gdYmX>oEurU0sI%d_9>RG=mtoN0XE- zmQog+y`EfRP;%}`7Se-_zsEVYHdr?lw?uK$*}(q9q}XzYR>E;=Dv}|8 zCN+WCowW%~@I=ubg;Q*teW&Eh8HimPhoJB9Rf%g)6WW$qlliiosJGeXyzE)(!nbHy z@bN7dcm~N(sO-e;f5k#aolUP*&IhCT z$b6Ja%Hh_PQS7M%SK%oK;VkBmMqGotiXp}9PM0+zR+Xln5>vOW!Q%@{M%7uXrn0B; z>vN{8k^P70wqA+%2($9|En81Xk$n&PO7xz1U*0ovj^`@RL8-)<+9`wNJrS(n6Xgpx z3GSCS)xFEq&s^665?svh?HBFOoO3o=wL%EaO=-f=E84k-U%w`j=jA=JjyXkV@DO~> z^}AUfM|dYlW=kErrv;vXI*C}1N)!r1UM4Ahl7t3Fn+{G3spi(KL^6EZE~D@#5$|HPVwynKArguCkDK_ka$~%5M@+b+JbvFtN~;?yRBWrn zsMYM?j}pn|k|_vCEvG-H4>AAIepGpRZ!p>X!l@XPp`Eev5Bt``#H6~+kM?}*M4iDh{LQ) z{t9)~tcl~n*I_eM3GB96E)m$bm;Iiaw_d}@{l@L@px8xlQe6XpL5=mkULV81bBa{R z$shYy?+u&-EkUK9HIoD3G%D|l$K4Q9obyR-ptG23S__$za_QaB_N;F~ENP8bDYRgP z6RnH?J%l}m*D5-zj@fe`p1Q1tPaPCer^xK_Uu2%48!2QkgCJ<`#|Q@3+22*brq zq!9~A*a6#8PNV3goD2^k_I|u6P1S4{Jt8=hy6Mm~-`Lrn8@m98r^06u5HbQxf1KG! zalej60l1v9;bO>^ySK}{m|0}&?S}zXeA<**Y-qu;LEW$+Pss$7dZ?+;!wAKvrP68n}T^OZWE(oxC*@FQ?ZjzorwZCHjl~v7VO~_LFM3yA<8+f6JPE_V*S0F z$4LzS3NvB^0g4zuxW0rBlUdZ}NLmLx6MM;2f+XZrBhF=v)-In3;R%0V^WEVEge%G8 zhM&GHr1H8q(&>2C#QjW9zNzG%Q$TZS{!|!jVLI0sedOznrqT*}%wNJh72!KX;D4ao zj6(>>_P>T&6QC1(`G@YLk%Wcyo3ihpUNHK%s}`gE{6(VP#a(2Iybv-;_#(1J0rjG4 zFD@?OQZQ5_df@NT;r?I_cD`mqG~W(g~cw2pGMayOlaKS zZx0g;5dhQN5(uFqz6FGgg^1r@V7-}wHnXb04=`lh@A2v#s+~HZvSrI_Yero}11=JX zh@?;My2vp0sSVAF7lzN)6(GgRqyTNT&^2L{g`DtF=agt3jMS}J>Mmg0O-PZfhK5%o z<}go=9HTVeDZm%W(^QjULuBf9ico0xqlqfDGrFP3FdI$Ud>#e^`Nz26iCCRQkULR11?8uiGP1R_y>N;KCA zLtY|Oxe)3%+fLvQcxYR7v{RWY0SYmxqrhrkv06Xu$f$$l@!xNn3*Wth6uUVlo*S=P z?7MtfY}smSm(Dc4u)7$g;w<}qQC{wHvDSX$8Smj0&;l^k5ftt_Zo(fQem%N#pheo4 zX0KtgIy`SPAlMzw)_)3{dsM=5F+HU_!Ig8I$+I{*jyp**Lfta zPWylFZaGJK)RqdKM>_jK5jm?1kBYh8W6;`oTfR%E9s3d_sm|{zydFTdmc9@iMfC;T ztE*uyCOA!Jr>xnoHDa>3Xd^o5Riw!^{!taGRGZ#yu{a}J+EX7QtX-xPEH0&T$`(SMSyG!w*)}d$WsocEXyl@VP`3iWdtD zX?G|5GiY!$46)A=-MK56Q3)(3ldr>z3Q8;{6dQ1yVv7!}C-o4H>dmdD+F*pCp&n}- zd#?S9H2b3w#{PTDP0~E|Il>Cja&lyDkfcUJPd|afeitELkZnzRvp#+Hg8{fpRA?oe zeLb}3_Hm{79~Wc4PA_l2H%};(Sc=b(_K@ARW<72z$#hF8-BETYo@|6`Px{kQZ`cZL zl3<5F7vPcELQpIaNYVXAfUbz{&irED*h~ZE)%!%mFLobVhgnR(k8()v{wKesjvQsK z!9;2`LTnNMn8;r^M(p+{;4<5L{l}Cj_vIP&QyZ7qjHxWJj4(1#CfrbqVHxH6|WBK}{tZ zi&@=+-tjy}KEZ%TN!F41G)enL!jdT$LXUF#m}h!qI0s0*t~xbIS6P~GeDzlFsp~k_ zyPn^RysVakMLbmC-oLSt1b7%0@{Wi|51Sd=^UT7Q9Wdd}MwRJ&wJfJEf;8t^yK&Se z(46iYo1NJGOa)keGxc?*E`UQ_lXGWpP>D{)=_!?)pe-yn(&{Qfdn4o_m5)PIXJmyZyUyyaYX+4M`UoETTlHCbb z0b8*A&Hf$6U8TAH?$ZYy>q=tsPzT5U6dc<*BAK`?UnKpf4n0UCQ5s2ErkerIPR)!H@ z>GqR3>G5;vMfit;cb57iD{%E-Hj>v^YwQrTBv#m>WfC}uv*SOnFh4T**s|tFk6(js zMmwj{HnURDwH-sCkJtq~1^eWO^y5~u6UCK$uZVYu{Wxc`wXz;(J!WFTHa2KlQg}j8cND%Nkrr*fAFLYu7Auy%kJGx zdgZ2rBtv;xt?nr@E3+uSvLEB~iw`HE2Th@KCvYTjW zIyL`~D_ul0KQo%o+~kJxnY{?GFREJA%~uCf-NxET(4zz^U8ndy4S7TiM>ZWwF*{>l zvc)r^Ia`CG4>y=?&Y1roLSYQTvj4}|@sw0_=zaV!$BVOMZY%2$a$Qhv0CATCfE_4n zP*`XYh<5;G?;=)q-dyR#Yt@V2d%S4);7E7o7WT1HS?YfWX&$FJD^>xX1;{51JK(^sLg~B56br$6Cn|* z4}+zwZgYjy;}_`*h+b@GyF&=#@CkD>zgHugE7fXY@Xgz$CXWh7btr`=2mAjfn=J3_bIVSW2u0?G`)_6kD0X^6HU02%i_So5(OV za=7JJn--APdTH%0E4x>!`F+D6Wy;xu_fwDA2~u3)uGNgdnm+<>rFdk+{cz!)tdA|d z&VC^YVGS2Cdxm*)<*y-~T+TT7IT@UM2PQT<`~5-lG!n%=XzMT-3f8cM|!+kQQd-)*hJ6!x-z0$+8VL}1b1TDvdJcWMc;23MJ-;s}UWUmFVC z@he{G)}$c4o$VDIRUAg#TX2QhbP`-?optmXsWen23}KGChCpMUPl z=Zt$^bR1c=ML;{~mHVp1vCQwR#1{$+4l@z8%Am|Cnhlj-YfxucUJ*!X+DbKXotbl% zgT+7aZS1Wb;uKQH7L+V8b-EYu8Oc@*<-*ZKqD_Y$3BfX~f2Wu* zh*93nxT$ta#rVE{gqzG#uimN($ICUb5~u({wb)6{JX~3d>msl}uwgf_t7Elx!W4k5 zk?&mOg+ z5Ig=s zv^NLd?YZ!d)wU^A^H2!%fvQoy%U&qC^Ba|Jfd^GHSD0lH+*pe40}$4#=26-~6V8h4 zB$R;JJR+zE7X}ck+Dt;Qy+ym#u-c)GVT~byLj20F0gtXE+GqW{Klc4-Tdq;r*80!m zC&Ebe4%3mAh{b{uTKGQ2?|Pf>PN<*(c<5tF1l|wCM2~dJr>hbPIhnK+glw*A2-*`} ztKm$-zg)m?;9Z-G%T`fmuHc5kaN$QxkZ_Wzpc zU~vmq|LnR>vE~P6l#7CEbh`n>5#zXUbzjfrleFDhNLGGtD5gM|Oz#<$T zre6pnM+q7DT`enUA2KhW36@jb`+7@0uwP4#G!jx;&bGw{PNwONjw7AycwS@v?T27u6D4J^C<5Ocnk;Dm>U5JP>|n6QjcV5%MOaZXd_ z1}Ag$AD^-~B;TOPTff}iij<}*gY-R01So1Y%Ik8NQ6sIUl9u)biv%Q1>V!wLITYE| z)+YeFj^ebTb1=%hX?F}oTNKbWXMhT;;J)HO)X|4-2WUr(bY0u(^DH!#%VPF$nBpTL z)T~LbD87U9|H$myprGTs_qQA1f2|$Dh!R?=C#_`NQ+gMO;2(dh@$;iQhneX+U{!Ug zSt{UuoICCJUMgKvsgUtERFYEH~N^7nfG`18IxdOBTL2R>F4-9 z)5pr`t8tL#T#QoUNrp3K8MutHFgg-X=W ze|fY`k_cCHv8>1&TTk~C!2b0Q$ z?DprEXQf>aKj21(ZrH|{7;kN*+Xi=K$`h#I7?mv;t1Sfza6&bAaYma!=bWbwiC6Yj zw&F(5snq1=tT$+>`;w3A=&ExHtq6cf3Uljlxe42LwAs=d?K)6sc!R|Ez6FR{z{J$;*plQMw+(rb{#8WWl!UU!LB20FQ1R{r-t=z3S-hlpJO7stR@u%+b2K zh+v(!ENe+aVP?&G$E*;<2^DCtbB8*M$ta#M@~(brh=@~w$hiX&$u z)EE6F)gNyS&3A-40QUi<^SW-%wN`$bOE2)UxzZi< zSyb8h59iUO5arh~w0~36BNCE;KY9ix30{mB)V0i^6@`>$@`xo#wS=ToBV9Gs6cLXR z`@6bQV_5B;>*j66&dnK(A_lW zo~(G~GBYy50d-sVCB5=EIIp?#us;^24_aAkJuydSn~9&K;JKE3*z1F^6w0XHd}r48o_>>MxZx9+NPQPQ2L~=x_thwgI5kL}{FwqFpT*@>&c;-_(eH1C zfwJU?u81Ux4{nF7#@#04`m~W1h)<3w9eX$t9Y$lHC)fVK-5s-*BGg~6(3neo)JH>W3h0{F=)(8wAGjE9mfmf zAwwN{Q5f~8g0>`CufPVdj9s$f^;1*4A^H%qwGMmfgVd*-7i4f2+`}XTw{ZB@fYRzD z)ixhAC_?-IjISX|>RS->l*9@hCb@pDQd=8t^oOTZ5@pt)Ie#K`Ky@CrX%fjPt@9f& zJyG@H(b-pPIy?nSukt!r)${VHvOeV!=;sY<&lX4#Nazy5N|C*ZoeN5KkU@j!o`Hc0iLF| z-|@j{d_6tJ-5t=}T$pYi%#ovk*U?586F>f;Z%}FK&EJ4oKz%6dWKW*1$PUY2Edgk6 zDU*LP+rhYyEX6jGA<7K=fKLsm@>E%uSxWzwl7}oUCdqO*Og7@YS{%065cgm-DlnhV;~>H9~Qro72I$1?|Q*JG=_)qqpMnRrJyfX0G%yX&g-2D3?_t; zYn}6vZ$BB$3XmUg+s_uX<-XQhSMOZ!nF9P&dtacY@R|RoR0Alyj4wMRR(qT;c5mf; zUH7TzZ-4seXp5WA^N;m>(ZTC>`V$GmML+lq5f&+C;qa-V?bWN{n;Y;NQQnSsCcS8v zb+II;P<(k+aKzaKH5-!I{j869a<|TbunAzkP@&hF;qHBz`EG$nHAW}fgJ({{$PHP^ z8+0^TZeu+DJg^v9SNFl7HrF(j(n8^GQKlMozF9E2Aea^W#y^SwY-&;L5~R! z$Ht}hfn))m1H!sZV@-O$huu~meP};|Ev3)qtP+P8>E^N4Yi8|P*igGj?Mo7kcQW}( zrbk@@3g?PlDvu*gVQHJ>s{$FDiOoe8^}*D+Kx1Hlz;DHYUeh~E|HsG>{bL&&mq}f` zaAMWo1$=-62Z06eZ^-g#BS^M=iY@;MvJ;P2NOlZX%K3p@5Dcm|Fx0)cNn`ngCXiKk zyOyCBCRGYCh@cwd!S%hL2MkJ(@7=@V-q#KXDJ)gT9k0GPm|c53!~6nd8clsit=JJjBQhq4HjHlhPOA8lZ~#MWnf8*L zZL&EART3QH3t9J+ttpok4EdNLfVTTh865wg(AV~}b}(M)%N5Ki68v9=6?UmMGr*$k zvw&3RxV7rJ%rLuRe#p)NUyP+cMJ328%N_3$(b@X~bh%2K=2lZR1{2pdu2+tNIwy z`WCPOJn(LyiBg&Zr@J)S+~~09%TkQdtz(T=e>4cIfj?U4^!tqcBL$Q{3(-d2EfD5I zYb70|<&R^qF7pQEkam^-p|gTsW$?9@Q@?=3QalVc4xr3vX60+PA*=XPF(lWrvCSsw zgClb*o}emYWu{!hRf3Y2luP1xghK#})A|7izV30+zPbr8RW$`>1WIxM(TvznXm3c- zYeP{c-h`WTA;%eE77>R(X!o1*Zi38^5*{sN+So5Dsn`!1P9{7LNSDXk%GFm#Fu_n7 zh2fKMDu&x5u58^C%+}ELpD1CU(q&h`l9x)i-Af>rJAt=;b_hXSQ6i(JBXwgA^$2vAKpEGNt;ATGq`het26q) zIViv0lVB!#wwArO#O1HXmSNOjW8hY&UiXqD3Nnzw8F>X#qFLtc2zC!tqBj4}tiVE^ zl+lA8Hqg_9NzT^m)Khnut`pplSu0E!&ji3;5ZqClC9}&zY`yKh4f^UQe#Dm(CPG<`ATDUP|ojoA`EiANTG#6AMH(30$CJ3Io|Hv%@A6c5x&0Un;tZ{&_UhptIcX8{FZ`Ba0jYyI0R!BOuaT) z*0Ww0q#;JcCYn=B_aa~Tr7P1%sR{;PG-8xHDs`U5ORF)&*@yu05ToNaYo{nM;Ys!w z^KAx_&q?U>Cqb(6NU74+^D5_HP$@9)NJTCZ2fJuYS6niPJ#w0%b+e#A3(mb~)EoAU z?mIlea;;BGDv=it9nIgEbk`I74r$PJY8t~ECqRa%H@<@^?SYwqt;*u$AF}CX;8*$8 zxN7gps=RvE0JYYdcJ80)is@xs+d7DHb%>&W!LZ+-Wz%i1y5c9kJL>1@idvxB7Jfb@ zho*p-z^5fmT=Ykmkr?_}`oJhY91&d zpu8XR?8NAEn%TxO6a9-FGD=w(SYNW%>kL;gmcpBzS?%VdkB6!##H+uez1Aj%_Rty{ z9!t@mANuTImDDGV?O;s$Gb+o{DT()qWp8wV$4IIh147tsMoFEuxs%WHo!31pX}7gk z(18LXO>zy`%oKRMF#7c&k*(+fsW6+6E1t3bm|U4WOQtihG$ zBfe+-PKDr*Py@`wyrZ-=r}lW`KE9-%JAAf9>p~uKhzV@51qFQF*Z4fN7f+CgoORMc zP!vuLP3Gkw^DjCNAMh(mk#O(y%@ zrC$8nffdjfZ96GO?uq~piT=>=aYR9MDN~~_`+&G5?yn=&X#3cFL)j>RvQ7)=mju_l zDX4&SIf~iYc)F@A2GDRL6A&4FkA`cQy(}13!k3g0%^NWxR@*g)Y8L0Qo`Iq75H7nw zbQkQF!Vk*zg{XOzVUPN{^R;sz`&;augka$cVs3AjyN=PiTB`!xzssFBGvj0 z>{;wuG0!0U9y(7+-LuRu0+VUL#3t%Od_)1vAHOv()y?4x!VD5!soq(ba0G=Wm`th1 zwUhNa$yy@nR@)C)?xcJQw)~pY*FTwwCD$zcg#JtBsP>LBg}((7^`vffXJ{Z7)!nl4 z?64;!t^y8~Dzu%gL}Jagtol-m?p$5JB2@+pttUQMI;ixQnAx)bCbNQS180V-1bF&- z=|S^$+AQCt@QDP-2!_2zrXEy&^_)C+t3Knj4up!+!Mv%TMyj9~_sDr04=+^X*{D}u z3gAEXjsyA%poK2Fi8GaSBm%n9?n?3Hg!cB@!B*Q3UGx469XS-hG+j;ZL6K~;Jl7|D z75EF}wRG0h4g(Tqi37`xhAAnZ^>!6Ln*0@Sfu~mUA{f8|n{}_bB~Cv%3JmM696B9O z1(Q@Wp`r>SVty3u*R)Ig(8WSbuMV=!lQ-gk1lKvi(au@_r5Q_L59&kXPTepErU&UsjYqU7~p=LJCc>FgrLtnKtin z#SoFAN(i+GrZB;ILS^i3A9VFS;=mFvqEqP9+me!ThFBfjbdasej0?r7hYuU#O+-7a zwXWxp>MmOrOgkyY_YS_RCC-oYg8iMnt0gd_T?>&@tPCUpt5MX$$&EbY1KSw*LyiiJ zAdANUPge0<)`r2DkDR(tgW9sd!bP@}AIE3H+iyl54sJk_n`xscWlQ4>3{y)W)_Zzj z44so!Gg>nj+>&Dor2119Qd1~uGc}h8KOgKJZ!Jun&p(4F3)bizcbvKVv$zrLj6t3%aW_4vJ7@5m{ta} zH^D&wUhw3cuk^7x7yMB3dRZW~xQnJ6*Duq|Di7F-$0|xZ-d(HzgR;;`kR*v#DH|z- zduq3*C3^n_{@I5sp5Hzj?|gU>oTCs=y{qrsp?KE4 zKg_A@=_&UtRZ7h{kUU`NM+@!hvZ2U2hb-FF=?6|8(E#CVtA}xa>M)wtcbnS_R__;| zPj$`r`}!bsK|tL~JBpJ5PR+u{S@oKcm9l30K=SgmM?M4f*K``y`Vo9_i4p;~jB(pH z+i(FH@`pbX9|3*EoC6u|h+>9qyS1EkQjMEA70Y3^K6h`)JY(Juk%jXj7hs*@2i4;z z+~f#1Vt6(HsXM|K`Cc}}&V+CwwKpM>zNn}%*pE08X)Vz1TgfPWc{j?@Wg2|3>bDRw zA>MRY0^sfQ@{SY=;J*98HjB-Hj7DyNZ`CKLth18x9J4M}GJ|@U`V-*Q4?^0)cK$UtG!J@>a^N#J%+M*88+fMeM1$nOJ+q)7CV0)>yWh^dN!($ z!tl}r#UEp|TX~rUrGk@9;@>$4RGE~p%3#c3Slzkr&GxnC6t1r5ZP=L(v^BtH6R9CM6S`re<}^WF7ruYX7SNSEM0lqV|(unv%{nO zWLwwflPaBb$&Kwt%_sVl$;2uMDu5~_n=ZkIP2s9hx?bqJ0IYU%8$qbHwW&KHwofzL zSUw(46%S|#X#KB?N!@KC(sAk!0*^rv%DC6ET}FwJ|A@J|-g*3HX68{0)o_i%LF#jG zLA7Z4K~U!+*kN&Ax5l8%Qu?7H7?39y<7jkaQRrs+N=aEX%v^>fe>@sB>U>>=#Hsl2exSc z-+~KyaIf|5GSDKYLe|Leu!1IKeFPprwl=X&uc~yu)Ff6g7uvc4`k^}W{G08$zSPpfTgNUEa3i}5^IU>0AH+E)RZ+CJa#V*(p~Y(Q$Ck+?41rCVc26qTGwMJ8z$@4k`9Hw!G+R1Qe065gM3)Jd+@N9 zfi*%|f?cGBFvIvm18@KFtU35$p@>s3>l{cJgYl$Nd$Qao==Uj8I%wP5fC&T{ShJtG zlsqr^P2b@y__oC?KymW=ikoABKe~?(a7MNzNR0`D%Md7s%YYJD6(16}Wrj|!$o-%K zVuZxtKFwmy@}fmbN^99x0V?9^`A2UPKIi_%Agpj=UjL9T7vYKiW_`^RxSKF%vXosG zR!a#n-ltt?Op#$HB+FWl_fT8qw#T$~r3$)8W)I%ffX)dVJE}d)#C7D@d#SYbZAG)m z9m(#`8u&ny9uB{j26>A={aK)k=j;R+8=yJYZm%>#^Rc>wB=C`fc~-r$g|~}ZF;MRb zh25L`Md<%@E&~)RpjvFBVk;oZ)GfGOm*+AZ^ik^JfyA<1TZ$71Nw=Yw6R`}%ef(lr zrF<|h%C*Y|c_gyG(MEgeQ$Fe!Tfxejov}27l_}KBcx32Ohpn2!H(1R z2{ACHblrbeQl*G&O)%BISDSJ(#H)#9mhwl=Sque4NqY1p6!Lgm7Qf1gqLN&zW+3a5 zXAj|IGaIfoewh|g-Ef3?EQPh?mnkg;QzVSq2zL=@vzxCk;w$2(mM5!kVZq#BWk}*^ zRwN%rmW{j~u{DK6(=UL4{zdZG+wq*65HD8VyL2Iz6?Fuo3^H(0JyY84g<+UYB=a_ zu{xSm=A9yZQn#RL-%oqwfwZxWhDw9yG}U%|DunB+r6lNw-*dh?WI~({K%t;SOz`9R z>78)M#tYYR+VOM@T{xncgVQXgfLZBKXWFNr7CA0wldL~+AN-EMMET{;73>V-DlKaR zuzhnDVm0LlX91c9KA?|v)! z1pmOAH$b{`Q!|97i&dbpmkg8U?xn2bZRV@r=lOh}bPPV7A8lJs|FoxTzzCCWPS%sU zqPrIF7UM`*fy6C}H&S-)3(nDa@sc&?aR9}&0gLoNnshiygl+W04nKhj3(0&zeF;u0bGZ_8`EXx8(<#dH?~0~Y;>;YD;ggrw%Y zNbKbdqF9yRj-bxByiCoa!{zaKtCKo)&&a8jKo{JP#Aa|ABb<;rq7&lN-S%>&5Ve$n+~})3MH!knjU@0jd6C~`jwQ+T!1q@o5{; zis|;O@xVm(pSDpMg(1dX=_T~G|8$k)iwAOb)ic%}T4KSgp*Q!R&z8g05Xh(ESh#qu zFCl~l3YtvK8+RrEh)m6aj})dUo1IVjurM(;?6Gim)Bv@JX^`ULU#Z2uXYZ2Pj|Mn- zg3$=aBjgD|$)v3@83p8bG8MG{2qj#c{ty?f6k7ETH~7-cQn>yM%x-pj`$N@o2`#rZ zTX4F>l!RWaMNFl5i#H^dT@2Ep*pO(nf_8;bmT- zk;(m)A$D+zrOHFqFjKtSm^|r%FbxX!>UP;H<=D8G@{wjmn5^--V#C^iJDYOpa&PAj z?nrZDYp^G;RJ1}?aflClcDa>4eTr_=l=tyJ_&bWPoQ`j#9|aTVTv7JG zG<&XJZLI)7ZwyB&^saQ>NKYk=WV1t2>yc+@6d3Q1G8Aw{jm*Wmg8sAwO->UEH|p{%FmM+kYhLa1Ae zr$(>gGAPsBMlEif9+xkIo*5Md3=&hzu<|+&?Alc;f5h|>9gRH~lNJNm_$cfwJQ|da(he;PH_^Q|Ttz;jTCQ=ZrxwP1$ zRincOkK7&e zO()AGwyN6waB&Bb;f-HoA>7o;Xcq=`2Kmt_15w$FL;^8eI#7#?%)`Hxv@|OZ9d8kP zX+n}wB~XxT`)Oi>1EK1Mb$PdfdK;&XFqjj&`c^70y9T6XKom=Z^|F2BX(`7V)N@4L zn*!tOmIyD@5~k8Ke*}o{g|T43 z8^B5&D}O|7O`vVVT3iT~@z)W42iWa)mQX{#vPPzn8~Ev2yG~7vOqtne(%-3@ zinqm-tkV4-TKiX<$wDDz$fe=&o(v{WGde_~r{R~?niNbRZWeI5?_VaZ2xsrzLXfe!cF;_Q6V5>+(Mij7zTNc0~-3*3t1LD!eF%sLqdzP1;S+E z4mD!rUY*KMOX%`C2BT^|pQ-8MQlMZ8vIACSvdu&V`V;+_< zP5^{YwX>DOrcKE{y}yS?3*ySCai;w)w&hN>0~`p2!MX;>v-jT_m3;*gbI4eYcA-iH zybW~QOqhvg!^fm@&I@gNb87l%&Pip)CuoN&&YVSzP#X=!B1gDEA9Sd5XK{jnYm-my zBgzI*=aIb*C0Uaer~j33?LyDA2PLmFf}vi0{?QF|B~W*pYY!PKFz6Nes`_kI3*Dm~ zZ}^&ZGzq@m?F-11`XtiJ9;Z=FpF@AskhjR1nnB7Xb02Ow04b$vNk$s70>;fDBKmp` z_;^3b|Mb(Phc$#gf}H$fw0mtEF8AY)HpxPksY7OM!1gPWi2~~teB`2;dv2zX%IupH z0OQmyH>|S;-zbO3>KzJ<6FAvd+nnQYTb4AWpq>oSILfu&idAo5+ik!pT${8v;jFx+ zajs-}sXlcLn`zLri4a znWLtxMJ#uv2zk9&CJO%w*b)1pZts}*k7B0x!~(B4M_I(-_n66y&N7=i^Wp0r#Cx7t zCnYmu+4JW3dIA-Si5HBuz;C1H-z9xgLF!jwW}l($wMvVP;l@3TTG9a=pO$Lw{{)ig`-Wf;`t7q}P=TXoVY+iRB-$Z5Zb@1vOL zCsYMXTABQw$vcyVBB;bvUHw+GvCbFf;W|D46%tOU+ODMH4H6&YD=xH*1Y*HVYx`Us z3)@d|?h<&1@+iJZ0Z%h=eF(l$2NEQ-2T{h*MBf>R6ww#Un(qVrV^cwdhl?(v=waWP z%1Xs%{lNI$dP3A{qX4kZ@FOVLt&4THbv06OVw(_v@_%vfR*^VnQgW_A5n}Q`ATB_2 zQenfC#y7XXdtM1Q(ebLggAFOdlB8ns-25o6XYj)Ulz7NGCC5$1Q38I{1;Jr|EZ^w) zX&HP@BjjLG2d1*v^1HDGh}iL6~-Aii8P`?e` znx9gNn zt;-w8MCO!~Ri>f1X!E`}$rfmrL-L-(ZB*nj2b9*-F}6a~moZIK&mb|WlJtZPGDi!e zppH2BZ@4<(-}^_#kEd&T)F|Xtcx?^41jdV*^W}OluQ}M|0BgCA!bIM#@6hm zg=f-&Sik&CU3t|)_>7aYo=Ul6uqGZ_#gO4U!V<`4m)89EN0{@FM0GRNkYa5RewYM= zc(GbOu&C&kM*5K4MUPAt4+}eQOB5P=C~B5Lw`5xJIf&#g_Sbx0O*HE<=dY^1x5o5Y zlY7WpGLf_pX!FGnlSwmF>7g7(yM8BXE_I=z{M|XwkRPG13aC?T5%Y{m8F(EV&1miM zU%J?g?-sZ4?R|>x=?TBDzG1OQXm5@sXr0by~;mbv@nP<&* zfIeX09J$B|aC?+|ehxiJV%V1ohQ@N^dAf}spXCR@zlfbCYniK57G!A7u%QsMD@V`2 zvl`KiJ(V5W5HAoQ2!c?YY>pG_VoJiv1SPxFmug_FtUn@0V88uYxPpANis_p_GDVov$$^9&0|!(C={brJv;y9(ZjOMg@fppP>07NX4~`6pnWA#ecy zKLEh&l)MTY5g6Wmj#>bJSt?T7tSUrpD2QtBMqbQYdP6)=Ku($7RVEgv0Mc3a;(#f? zg`w8UkNH&Q9L7+rltshO=gAXXc+z*A6Wj1Q5JV66L`dkZOyVu>AIBJ?pp^@l4owl3 zR1CBZhFkOs>a)2EHBy#2n2RvIn$}1$&krAvb5}LJq-QVhru#`O*Mr}*{N#z1vy+(m zno)Rx7U^O@bHKH%K57MZCZlxr5wE>J5AGNwb_uy7K==3qFK}&x{Hic$GY{GYnR2Y4 zu(B4xAVyOu#n(jSrZktBmj)<3`_saPXIRFLK1;9j2Hbw@{C?%~c8^ zPl-G*!{u}@aFU8~hmM|?8Bvx=S5N>(ImHs1o2{Uz(jj(7rDyCz8L+KijLX^0 z#;*?P|FqO;4{zi}xi~9fPUk(1(5jL0YMt&X!D5IHQw}5p@67nLyJ_X1V z+*IN*a9>uQ>WuRM32_R>IFECuCEZ1o!bHwXsIF!}6(3Gtc`CE|o=AV)8U$n;#>jKw zV+@GVK^7Gc8k&`0zs(G;E40xS8zaNy2n&W6t%LvT`ug$THP|KR27>Lav5=J~BI4d2>yn_i z_DS~+!l>v{%5I;XZ_6Vl@xRg-2OuLytBW0+s-$M~8=SuqzcK+%z@XPB=6=WZg49h= z9|zRMCaWXlbwzr9A#o%y?w)D{^Xbdh`eM-dsi;c_nxyLs=-9JH8s$D>@kJ&v`IMSIR-aKFv6dS0$#xn7PaBIu4U zOOvr7s6^x(Uz?Y+pLyo{^*rWKH2}&Tf~fGoIPjy@TN%g%S`!;xkl@w0r*w)m=V{`K zMS9zFPnGrHb8xp8?t4F=J<(95?Bu8vi0HYVR=supta=)-FXb|mC-oS=5x@^9mEY=C z@u+F16}e=()c^yIB+K_ZA(|oV9O>{~ikwMLKU65Td?ra*3gLr@GbW<3S=vxa`g4*N zbCXzuz_=9WLQ*#)z9WL+3ndn0q|n0%?u170E&+=(qp`n7_C^E8AYF~@+2lKooJ;_S zZl}4vJ;B5gZ~ts}m)bSWs^chZgpL~IT~kpU&-o@2UjN4S*biESeAjCBEbur)`;!4? z7~U2})w!TKDNV8`13xP~q$`TF{DG1A|8|L*GB^_RVvW?lx}pF$4YCL-N0tNepI&z- zIb<0Kewa}LP_Umjf((ZcAbbTdePJSzwuk`R%RF&3;&L#z2Z;_DNPi%6_}AS{_mCw` zRHF!nAT^D}8>A;3Lxg@_iy*;q?Vco`C2d6}>YF ziESt{IGzExX`l}3Vy7W84xL>VuwjL5FEj|3v-GRfl9N6Oivi$|;vNWL-5;-B7L-<- zm*H*2sJ25xWn5|?29@EASGc=6qS5)^K+>(u{GIaGI(1xXbaSWQ1k2U zH%@D$DTvB^35Y2+YQeRM!83bUJ$^KCc=@XS$tjpYjxQhtf7GRo`j{G}-DV=JqzGW0 z-?HvZWJ~d`ltc}ox?Z^ASJ z3-AmAfO(B_Fw%=~vEBRLzffvE4sv}eu78zS1`+=>UhNNp^FBntHAZGoccJR~JhDkJ znPc#9kVz4pjA=6pbMEEjm>My;oXJSVQAgkWiIj10V_ zRHcN861IYF(NgMmjUo!pwVXiCq22qm?8#pp z-R-`l-UK)}fv${Eq8mgtXcgG*D$#bq1l)@0G6OZEMBcN8w(C@N*9P3*+P)yuHl|+e zh?+<_LS8=Q1ygTEl&Tg%i&tc*z-)!;gPQ-IB3WpK;G_J?XH?4O5_(erXt{!*OeM$y zP=zkO%Gy@Eh^cQs;I`A`JpAnxXp@nf4qq}^?yI_^j0E77==$~DH;Jt z?RRzFa3B-m_NCf*BcrP}Is~(y-@-xwRB+8ORyEY#P`6lYF%JD3v~2Gv!2W~$A9OI2 z=Qaodp}~p2uKg+jGn3EmLcQCllXbUO*w8=sS>B0UY*zpm_%W-Uu$)33&g z#>$yGg2Jh}FGArF+tNv}>u%5gO;v89g>&T-df(L}QT30m1k-vFu~v8%YPeI0wOlV8cUm zR5`PE(djQy6H;*T9Ku~9MXvVzqGUauEGSF0M{=`cOYJ4#w$Zqw)i?X4P{TQPJrwr8 z+VmpR6?vo{mwp~I{+~9Qd6qJsY-I>rlap@CAy*Z_N7K5zN;i%$E^CpA6bDilgXoT* zy^;r^AYZDqSSg)A+-5{A(GIMuyI=e`4DFqaSW`Hcfs-Q>d^7-uM(VOl+nk$N77A$% zj4d(9iWCU{KTsM7XtV8+QOQ|es3J4wk(8Ccg^f5VuC+jU({*O2ivwK4z4mpSpG-l2 zj^ky$m`J;xQEusp4o|p#*ujp+;LH9z!>NeJmud(-Zbn)lh;x4I{~tb3@t6(O`b(ep z=i;0EQ)bZKPf=xMC=D4m)%`n!qR*`Q^~H)cCMBBg#57>Lg{U9qjgBPHoL|KBU~OCL z7|DZbZ|Hf~5Ik#dt`yt99icy>vM@(MQFLg6iXoWZ2kA+({yKc9@;DCQh~N0R-O zyZeE&sFyM_6aL(!3XIY_im?eYLjR7($v}#xr^S5 za&eugDLWZTmIF|&e0N5Et0Y=K^Pu`fGJ!1nPH@v#4ksVq1w}WiDec-5DXt2Sb-J7( z5_|ZvsSSTpmlSY7$vI`ss<#fQ4-t|VolH*VTyS)=rF6Qe@8PWyD4`xnMC9d*T z&A4dwA5~;fL8+3b-dOCiHuWyLCNC`*Wg6{CDgd{D5j^ub7m}8Aou|9qhfVS4>S(qR zm62#1aOV5>j_j4+>}~la2#; zBu+0a4Z)77L&Chj7MNUVSe+xbOo%`n`gBb6l_x>$>38*W6Qg&O3r!_&(ARJ9|7vxe z;!0Kb=_=MYQk548Nm8f0xsK2-rjE-K&nwqE6`VeLDwkH@WLy)zQnZ@3FGiG;oh|;- zS;^pg#rF3bNH=|q_EF7#U^^v^Oqya%f|OHK`{T)N-8~HETkP1HV|-QQ>5L&65WBWuRr90vKC zrAryY%LW`6<%+W5k z$P$ZHYP(JzE~hW#FByFAEfASnLQ%4K5?YPRpC$HxOM^*z5bE4)k?BeuoV3nqth8z| zM$OPS#b#CgVXDCMK+&j0s=Qp+Rc^L|^=j0PyuXLHro&cz)X4MutBsxdW?va+EjN5H zO+q42R*>#tw^26cCwQzh`)@Te33>)U$r0Eb>89mTA|HhG1r1ast?bOL&lyrW%l*K| zUC&cMuXA7@6^h%N(~`9m*%<1Bq+h4IWU@Hy!8(LjaW>)1zUBW+x7Ui&|7i7ROkOro zQK3j{PZe8ls$3YI_eZD*P)t`~=@SPnZeD{et)ElwPhh|b!(F6ZGSFS-OpQ7_9|aes zEuZ$RplrF@InqLuwV7CBg<#BaWcTxUsqC@0N@$wT>DSmsM5kX=<$6#-6Vbrt+&V#x$-|qCm zLq`}B2&OLPR;C+|Mi{`P%HJYs5 zt-k!xS*-l#QcUWa+MLy{!p^p1$r(MucdEO;( z;lvCbrL^Uz$Yir%syxgZX4u8bv+p9J7fAV<_Ie(ftR6Ky9>xxZXApJFg|XFf32!>P zB`17<-PRe}^Ad)K7_ji=HPAU{dq^da8=^zBdIJT)ADhw&4wjyV`qj|lUqPUp@)uRr zUDiA@M}3d_K)%zg-^Pm0)|-icVBj3dUdX- z_+vG?a_GN1oG`s(@1vE}O6nA$r4PGb6o}>nJY`bUeoCFsMiHKwO#5{W<0$r~VVze@ z7r^K{aR*Qx>Mo`f;epj5*3@6jP`p9Plx`2n3#qV(DQguk7+%)M4q(5Fyi%oC=Gnco zT1G%`05a+&Mz&JsE4%wMbw`zV2X_Ws0Al*dqsg-7MMBS5VEe`a!o(cJKdWvX{S0x6 zNiHR^rJ`L6R=|zty5U5oCKpoB!~d(z8iSW$2Ur7|C_?%2W$a zLCXxKFg+bF&B=2fSo2=)6e3a#d*Xcx){=c}{em!6MbI6sI^cs}(#a}ZC2(WD_u7#$ z$S=|<)Xk4^;)=6T;UP~klSV?UMQ#ZAE|S$`t1SI>DaEmL!&G)kz%neI$SKlexnFu9 zC}rNHvocV~JHN-A3ek@14l~<<|Nhgg-!Sus@1Hy^7DM*?SYdd>@)qCeNH|5zmex?` zl(LkX_;==ZCvIXLQnZ|JpR)t4^_^RID>;8T})CtTA)L9?LLa6=5mqAShYRFlA05#$Cwri)B9Wl36R&H0|GGeaHOoGDMb_ zl>7-ra5|7oWXsBdhtk{~`z=fjWB_lP5*FXVqZdd9LRB+4e`ftaU0+qfJrI>R?xf-4=o?* zPdh8_{u1gn8^rR~{A}X$fE-xl((7kuy5%6`%vtZFi-Tk z@>UO8o7vvYIe(PfWO$k{F}oSRp>$J~ZcBUK1j6;RVkVZPf(liY_PWG<*uXVd+iaRv z#_B=ZPI)Ts?ya$-OkO&qGAy$&kmUV2dlwRB8@vc`tk}Md3@lXA9MGdYlJYA?fm~9D zR{zv_Vz?*_Aw+I0=F3g58;Y|lTmNQUyOi7X|K?cQ_Z$kvG*0pw4q~KWxRuKs8^b8Q zuNUr$44b&)=j90TrgSUjBLi-sr&UA=`H(L&OeA#Hw9 zw3tLgOPrvGQ7QVHwbB>+pKdz5K5sF|Xkcbu$)XO+;i2ou@GydaQC~=ngKUU zg=>jeR64!UZR&naXCh3XDX53GkD-wQCfSdD_KTQOF!C)RJL6i#ndLXQiHHBTuY2OW zVBIxc-|h{9Ux*^~eM-Jz=7WYW2l2TL_sI$k5Y->P*FxmG)<+Z0eifR1efcm!SZ_pq zpxZ~}R7fVDDq)DzYDnG?F!0;n(V-k4YyNZGbV|Jn6_Qb^3b}NRs~Yd_K#IZ%qf`$UY0Oy=wxQ5K6BcnlGVvQ z|J?JLN{&=Yx85}+J3a=?3!~;sapskbSz+0&msSH{;mRm&m)E(WOux(NO7NP!XDnCm{NY;xsG3Qw{QHD`(`YLH)D zOB}Q|`RrOjF(^D~21xVv`R75V`0TT+1$kf$^AHU-^+Z`6rgMp}#%D04tRvNOD--vJ zn&KKt?b)-&MB%(wwb(QRn{i5WB7>K*lgy@8w>AazyZIX`Yq;_*c*o7>B9CJ*NL2U; ztdJG16S!wvp3P}(>sr>u%Y+#Kn8BVG%(rsgc{s8LE@18vOXBO{f}`;v);q7o$TDk9?rf))m$DPJ+QE_@K;LEzMylY zU$=71^1tJ@x`zb=xDO*n_F;>ChK?#n|HdDiu7`rjlF$;g*adV(W4-V8gNOiXcZ26~io!D$t5+WVJ zcA=A|gEhIa7QIt&%+5{JhxbTUh4RWyPArxDE1FoBBO~xj_)L1>wi6`iwC{rpp4*YM zGK#5b@uoR`li5ff4ZG^4*Cev1we#9%=`g1A&+~*8tB5=6T9#yEI7jvVb5~2lgG}k$ zm_!cAzh==Rg-XYumo?tr_=O9Rt!efRe!zvWP025ZwMuf=zF?1458_&6O+dzc4fY;K zeZT^lmXKK+Gf25EF9(#;4td@*GpMP!I=Ys%f6F=DMpE8C%pyk`?@tph0_Zw%Y6b!k z&Yd-8Y#?QhcTKv(&Y_@H$W(p=6_eH0v?OG2Pl;>l}hyyfZw(IhjuwtIIg*7{*p#L;ynz^gE zJuv>;B0ZI;7HW5*9HMleL+IvSNe7g6xxd~!!QS4!NYPx_P*E@A7cb{Ug-Ap;2af>^E^#A&QMe%~eR6#+00e*eQ9#r#x3IKF0rh z$c~M&TN}Qsw=;(-$Q0FSLaA`={3Wi}CAnR3)RNaA`S_=HbYmV?y{s{i%SgN2+Be_W zE|VCi_aQHybeL|rE_(373Tqd|6z(GCpu3-$2MF1E?dz1Af)EZu(tB{kDja&B{bmCX z0tZo^A2tW>Od&xtyQh8Vk$1a1;LOYL;G%K$^wj}**i9n{wgpD5kPQboM1EZvF8D$| z5@Y^)C-@COHeW<`9{{C=b_L2Yf>ME6lXV|HS}?mu{7$vXtB7d%d3!lC3nwL40y zv;&ALEd@Jit_Bsk8#{zPq!=sF#mGaSSYHQhXfw{O$h#R)Pqz-ag`mDA1;;n@nogUR z=MCgIg6oW8SJ(TvvuCc)aTeVe<6aDL>!BTapK3#AIbcZq-tM^E)6n>=U+lb{kkgMpscbgKA2TeZ z&oQJumP`WwEi0$GDhZ^dpF)%r7 zUVH5|z$Nf!Yec0oDF6-W0 zAu4|VQBXHArr>w`GR&YW31V8>bgNP^L?`?T;p2TU>+bdE-S3e#$jH3$rOufe&@w7I zqTxxZSv3fE_yF2MM{wuY-@EMmxkLS|d`l4W!ak&`0K|x$G*fxq9h2A{d74=_2h;4h zp{M5UZT*(h2EqsAwmx+(z1)r>9pw5f&vzrMTh~`-_E%XrjNoN$Ch(~C8zzuhoC??R z7-+zi9rPYK_~^DUZ+~V*@*1N|9|?k1B_QA$Usw65WP_8xbeAfZ^ zVEQx{4dKV`jb=@!p$uh z&pX9@DyWVD+g>EA)BP0nH}Pwd#ul|3G}sO9;F>%^r~0?HD((cIjma>{u0nI~cv^p>iP>2oGzQn|a--Ecne@b=3I zG&2gK=^ry$ODCMNx8-iyw%lJ3v?0bo)7t502gLR&_ss+BdBJnLRVv;m_`3IsmKqgi zI`DQZRMFIyhlUYzi;=7jN0%o$N#M@D^f|Z(B4aJAYaf(VQ?_LW-=%xP559KsH(4ow z_2Sx>dSf7$M-zZ>o9+2I<}z>oCgun0x^`No|2_`1kP8J00p$7Kb%-k8ZSrN>+z{M#$&KoMUxbN;6{?io-sDnvk5!WY$+l-LeE;lHzYDC%-CjMGX%uT( zG^;(WB`@tcaLl>oHch?QWNv8iqV>%h7FVtxW`dkXoi*d)kTYo?csXa|2&(V`DK74C z12pnl($69GWF)i;hYJi4fFJvop8pnq6IS@%25a*x!o_ds=Le_yes}5F)rbwStsG4e z_gA(g*cWvS#3>Dm{wLb>c;+nB9_y#DtfGYM$fOHIt&&g>kDUU_o|W$wO$p(S3i zy98}6s8p_&0`P>VB;sYZ1ZW9KjVC#fkcHpMJ)9JOVg<(L|JRF*R@%}1`r}-8$n#Lo z(AAHj1-FUjDwpArm>T@<&W!*Yu21^By~CQB%1|qaXBuY48nCb?pIz(dUjZUlWVqX! z-N?vzUoQ%W>S@_lX;g%RZR<=t*XD!U^QWuo5qrz}$rnh^tYcLw}d8e#(YI zih}!I~W?zO8tKVN53J}&dFIEH_i!YlBr z5|1FW2KMjLRvkbzBU7fpcL*Yz{;dj?sV~+o>O@Rm2_^px&WN{Tb}&sdZkBYrKhN1u z+4g(HR6q=o*ClVx(;oudCsqA#g~7y0K@d|CVTZ~i{fDnh^KIFIns6MOgOS8eeqHMT zvb>-z^~4@MvEO&@d*=Ly_5q_VMy&KF^k~>QE*x(EW8#1q!b~W2JSY%2u zm56=%@e{!u5ZMWGj^c>YImR%tPd2=G${R>yUVczD^gyEAUG%bb9d7@~*M^m(eOjDy zug&VsYHc!hZAw9BQv>$9BQtRYeG8B+R9jisp)E9754yKRs?P3T42C3Gef;S#Y)>hn z93HnpuSmkOneiZ4X7I*2hm)|F!YO+SxO_cwn^Lw^Zl4&#f&btt0F%Ef=ioZY4(#!$%1{(b`bxUjX?lt8Qocux?*J&{(L=MEI!ms1wn8`O4 zM)Z4tQbNC+k;f&X10SPLZUg?O1flQa7hG7sL|+?dILD)UwlBq+S?ETIOEMm?6M<=o z`Ak8-=Lp4RM`yB*>y%i^QD9i|J!TY38nj3%E9! zqb#?8zi1Ggh0IUcR4#=)duu9{f0R4ja$}1H0cDmYP_27`5p~71j~qDAHvJr)&rJvL zkZFuKEsztpf05{8s< zWLylh_KMfd9JMvvKX+2yeM=x2oe!%wynWP%HT7=o6Q?|rHDK|ugI~z>&D&Ahy%`7} zkds0Evjx4c8e(!{T!k&2@mtb}ndeZo!gc5u#X*fQV+1fg@;C!`O6>uzv^>1GQHpOu zr(#b06Pt=ry|b?Q88bXSwgG1;Mo8ihQ1?xiT8^&t4K)cMt{|k?)hBKuZwlBbj=MfO zTz0VwVbK$S%?S1NJ21;yqr%Szkmjb|7ssb0EAs3KG%JJoN^=AX{OuQZqgqb%zk5pG z>x+f#)HST?4E5{eqN#R*VVcLwE8>!2u`d;;%$KZbcEjA%jh_W!jYOZ5O2r8_UxDsq z7({PCT2Y4?Q@`=8>8`eO{y|AF2xIG@*X&LMojk)osMO7bz{IsRH%3UZW zMX>~uwF8|GW6?Fd>CzW3VMzD45aod`^mZ^C08kJmYv&sUX)!t7-pdfE5I`c!#2sD9y3+W?oa4Ic3&5;FxCl6gpFVi#fWVtAwEDgvj^B{{#$M+(TkeV zjyE}q(dpx9dj^StoXitJ%J7~Ot-i9pJu;%{lrNqEIJhOFZWMUtLHb!P?jeXaMei-R z&c<&9a2auG6_n-ycSQN0(fJIjD@y1+3|4i8PY#rBORL0zQ^j`z@!{I@g~ zykVueWnVN4sp>-kA&FBHap}M33NqKY#J>B1>_waTE-<$#CGqsU*KngJ-hkk}Q3{!# zEF~q^gHO*Xk-0d*m~b68?5A@sbYxP-5?+ zNJpu>Z}|#5N|2@sP3?`q`m~QxE9*TGxCT%*H~IEAj5d#Y@?x1nv7v(}^Fu223h`^< zcSLT({#`dTk+O#U#|SkeuZu0Ku65o=kE|((Rx>WA&f6Ggn-md)F-dveuTK?S<|qM4Cm^evA`QcJl<`F|hcb)fhe_7#JD` zj}KW3FGa=*wYCsWW|7z?1|%+1Nc^fpHqZ%3g>=LzDxAU@cf|i&C_;+jjW6P%-E`$X zH(Z*!$2g~LqJ~l)1j%ixEh3f!T=!BCEe*9riXfp_K9`B=uUE~KA`DtHv&dGf%R|J6 zWJW*((z9{MaBx%L@diwl0Nsh|TNOL-G9?g0;voS`c)6W`T%Bl;sw)2;!ep71?)NwS zBZ*kU7eApG)9U|nR_YmsrM7-}_6s_Gu2;+!ms-38`eo$-Ltq>1L)MhXGjKG$6$XAb zswv9kg^Bg_5aN-ELdwlD2S{xhA_c%4^T9?h9;i<8XtM(0N`fY~0_lWKzSz%$WKIDx z2e3DFy7rl6aI_)YCdSzVLK^n$n@J;W2geZN$ndE9-aS5;qsv-g(ri-E zfIX`e_uq^mwAN^8&fF^UWc|W=)zxMUgCeFtD%eAPyqS{4B&>$LGoZycPmRBz@Dcsy zJAJ!H$3NfDP5~)c70eWGeBJuYISqrl#>p~xwosEoOvE62Y;5@lzhzeq;;3>^5r*;# zE($f$=?}E4g}I5TjCAe8Fro;3PF}csgZ`hjMjg`*V?b>K=$L)OdS_g6yyT(RL$^SX z2`JifeMv5LHUM={!XO>DN}jB@iEPLMX0!J*5opv{un#I|S30m`vuhB(mX8e7gv=6I z-z+{RwNZiEXq`#lK-J%;Uk~%n%rbrTdc*{77M@XlmF-XV7t=)s2uBxI$@dpapB}SOl+CWVEru z1S(ZzCe_`6@z@)GFb?F`ypuUE(KMUW06)vn!>8Q?Wo(9eU|^)UtHZcqOY|De4^au$ zH&A#(;(0enx=d|?-R(yQ8ScOV*ElZKlZzFK{yCM7qE`99O-GgsJURRRFL?}FPV-N3 zaj$apcTz%B8Z46LuMn*1EQ9!VAzu>xySG{1X)?;LQD}Tl|)uWq-qnx>cJp_ zZuj5QHDfy3S?W-#R4MMyECi_LpG>HtGfwE@W%~rFZ$o7dXIOD+Cb0eCWD_yhEAii@H$u*KPuGwE5V;Yi%9QrHH+sRjl2W{fL2zY zq$Q>$2<<&cV0WF}(4{k^71>z<(DtZkRV4|DIJ5du74rTB7wK*J{?wwgpkyT5?b<-W zCLGo!zw!FItIsAMcaBunbXl6-2J8mB@pNstBFBUk~6>p#49gX;i&Pq^=%V;x3e{rjL?Xzd)(Jaz2~ED z*?uWS&R$I!1A(hDeK`84%J3L#(^k4+ajL$y9gkZI{IG^tK~9y~46?tQfZ(=#QJtr? zJ@yl)nkRJ|Lad~NFmP&QF_G+1Nc@A@Ab7+L56f2Jqq`;UdMA<%|US=oEw zh?oNTvuxb_A(7QR#5_u}^1JiWeS_nh)nU$4)LVkzQtM_^k(~5kOGrsOF6wz|=pOYDH_iB@yjGeS`7R%iJ` z5}#-CMNZMahN<6JP17@X*y*!S2 z$#OB;zHIcIM76RRV#s_p2f$^J=m!(~DBtBAx4%WnE&3L1AaRcSyjSUrGj^do21bBM zhwHjC&GYRt1fhxKaUgO>MZ^GBSfAxm%T_H$w*W?p z2d)5Pjyf$dyWgqcMDQW5!URS4W}wbXMf1d_)7FlbAJxX;`#EuzO~#H2LZ-`U?12ox z2!)G%xrG`18=y;B?tb%Mv;+`vyL@2!EHXrjyG~!cyQ4QHJKwZ^^KC%hghj)%8}VZ$ z#cnihc9J>trO-L9+Ug&FBM%zgPv%c!Yl&hNb1En0Ggi|=y3oc5H}YYQb04J2w9NKz zYE2@Y5XnZG&RW@%SDAil(4AlJf zps)*{pT%BMF3J zz}@+wKjrr9evULP&^%XoT8EK+>Z$zP(BXI5JhXopAON1+N%#-4)op2ezF)HXH5s!w zZGyGBRrA@#<%b!L^reXKHwV&?hb*QUPkQHF%?~Xp$$sn6dCV;3bg6ZS;u%(<9OJV+ z4Wa1|2x1-^Dj3tftnGO|9Iu1iNB*o^FS(+;w|41jT^UUEzH47&J}vdw8n#hU@M3xn zo0_GP)6;F8S|?UD9M=*D6cHfKrx;01SNpI2+hRQ_zR6R80BSy^fHw8uJyAx<=!ORJ z6_ckS#h)Ny9Orq(v$Jg)>j^@J&46WiNL%^-<#jb~ddTzLn--F%D$S%$CuC&S)pkX; z9E$d4pKuA*yiA;ms##k;6ki#*i{SHNjTO(qWNe* z2YYM6t|}QA%K{2joKDMr<~Eh4q<5eH?Lsq~Lcj!j%(Vy+o_NL8SvY((3utZ*;Lzk- zUNhJ~YW!JBOm($qH_`=HL>lvAQ)H{RZ7}vKCQ$vg`NKGpJUzB$!$!nuKzS&lnX~tJ z4m@-{$av@V4=h7sNSI^xjzBc9uhN~Zi#)26Z?f7|RK$@K;T$ywX3d0iTzq9m{6oQa z0&eh}a=#`|zWuzojSwakh*VH>a2CQ3Fhi(J;LIBY*v?soV#-QAsc0)Ta$uwpL_oYr z9Q0;JD%#I3S`NbD!vDx~h&)D@7vBErK=pqGtg-Aiama_!1Y0|kt)}NE^!$w){GLytGLHWQ@F7d;q~fWX~N zSI_@|@Q%UYtba}2Q%&9_&|PyfoI?|6Ck%T=49(n}yf}`G!(!P%tJGPT`Lt4e z`!s3@2*N!od{jg;o-~#fnG%mhxrR*D2P`=eL3#-V|4~Q&RsfUp@2R#|OKw9bh=1x3 z^^bC7TROnU)h(v-*S4S!M2Bkmq%{*hmfdT}9nDB}cSegY-G>7>36K1Yr+Y--7fmw` zJ<SWkH-%#?_Q*QM+Pd4=LlJSnh3Q<%}FvHvAb+?f$5S3kx0& zX*4s4dzKEcWlWJ&Eyif-Xw3WSMU>*O6+`Tlj{$H_F2epI0TMKl56bd;ew;-3#qINa zlMbSIcNH@x@}>&`!8*X#f4M5Wi>xA+c6|2IX?PoD*0gW@s{3QxN{tb_DUyQHu+2t0 zO8fvqGwmbpPO-!z#0kN5aXD{yZ%j+kvdvtTwNWrkYz2X?kN*y|izv#hNjJOa7+b&| zfyyQrX2~9{+#Xsot;@qnik$)!OkLGCfU@g7iM*!dEg!paP*#LhRRlxD+%lT z144FeMH9k}_J-l@)zYG@N=h3heN9R3*Vv%KjFiTJUh^5JBPnT?le?3OY8h|59T(y{ z`$k|IT|L9ufhe1p1H+HE+PoUlxjVNQ8m0KQ0@YG7WVkevCO5J_qTv;^o9PInIh+>j zU{>*k=G?n%LWETI*jYhQpD4O%uz{RPj|eatq*rqUU?y!{cj*O*xWDxyb4-atNMQ15 zbR@QycZBMoZ4CY?_q@4ZH%~mHO0kDP^wx4dQ^El!&TE)7e*27-{ScI!>k4$dRgx}@ zZbuDiq&!Xvg;34*KyMBTPD_c(w~BVbLsEQK(y%_0XW!Ee9()6 z-Dc6Y2SK<_>xRYBQE1%6%Nvw`q!O~uI-eP08&b>QGuE+y8aMKeyG&vr>W7GB_MTe_ zmv=)>sQH4Q>-QA6tCrQ<y@dtPqB~<(XH~M3%t$!m^k##F|`qNM9Xo& zn&!9N;77)Rh@qeFiq4O{^}S3VmoWUlJuDji#uXP@iL;)td*BJ4vkbN+Yn@SW=z-*X zT{^H#owoo5Z)&+OsLHG+d&XuX>7IAQFqkGU_E)&j-mkbNEQqZe9UNDxoMVWv0;@3* zi2^1yi3rHB2cV_iSf&kyFm?Gno%03Te#3$PIbfLYha$6DSgS{p4@Q+L8GzB?@hFH5 z#T^%GAD=ZT8*^~SZz1X>Aj(q$3f2aq=P&65*7?vnA}1%sA`7A|qQA}tu^^(@Mp2`w zxk5HctBUyMP5@*0mx+y|*HYSvHSMDcs2Ah=Nz?OLqt5gd@f6z6< zj26$0A-Lo+4n)cuK$}>~htAW*&Kbb}3O*M`bblyp+=L5o*;U#KGa&#$EH_CA8K0y+ ztTa299@VIF&Zonbft={P=4qs@lC+`C;3`hQMIl8Zp7$}50lSH*Dm1X}To*N`SV|EBhSK1gL!fTyA@vLcina;-}Ro{Fu8(f5uuR!DO1Kn?jYuBYuL- zsC3Q%g*09Ci;MKY?OST4S9x;fy+p?$iIOM58_0)LI_381UbD(6q64e^Y=y5|d;Ckg zJ<)7(!TK;z%oaG$6p>~mJpXD>T^RzZj$Qk^3R=<3=-7Gs6AGl>Fb%R7#6}paR8;ec zAxtC0ar6W|`A${5$(Z?R`;dK`c*+9-%Q%yj?;YoV@{(NcNOFtRYsIz6L9jF-YSE7x z(136^)PVj-Md{3-%jCt88__wGyG?m*V{(I;y@b>`_iR%{5Dy3FjMSK5rW`Pl4)j>Q zU5F5v4w(LYM{j%m9FMyKY0Ux@F3-^xk#xM#{alGTVOW2o2zU`*usXtvq z{ld-6dinOeW7DpPA*O;75LW1~zf#owiwads1kI6@kM&}q`DFv4ejH1xHu!P+qt>)m zqyC;c@CF^lBOjfw`(|;`oc!#$3s)R{VxzlZv?jYETk6exM;eZ?A=%o!C^JXC-9x7;*eA4CQ2K zU>>(o#P6TvWPBvYI1g9Q0pHEL4Le@rkvo1ciyJ~iIM?tCE|-%JjNDkE-RjPYI5$3J z`RKq3Th<$4D{2KTgf;_>O&Z%y727SaSvMGdc)O{gL7%W}J*&m0)L@4!sM)Xhu}|{C zh*hO8-h{ScqP7bHbEZ$9{r;)HpwvI08ykl2=`xglxv~j8%|f( zSk@Ow4om<7K>feTU#&cUJ7H@FF@h)j

S~)(kg+%#Le_)j8Q;h-_YcN(Bif^E!u< zZ&)}V#1{7iW?WBmga6En#gAn&36n?Q60eHp%anZWFH!qbG?+3~1h7KQD-QXdHZ^^` zoGYZHW3@^hms| z<9D`dT*Cdduh*VvW`WR?lOij_{#8(?tV}>--y~?@aLoAr)F6u7{_I8eR>>jd0BiO| zVVrBRx%B?JgB%sRr-ygYlZx`&3}NDstPiTMeV}crMD&Qv0SY(j!2l8)8OfM^2}Xm# z^qMD*AO*vm^D!VYe$A4=+P=^2@zC?E7laj`{8VM(HW*gqE0M+ULJlA2s1}9m zg0Ns06sM#Kj^PnX1HC0a_AvBigyy){j4@)nbF1HA7Wau7%Q(Tv8OMXFoh~EbdAe0< zbjV&D9mMBi23^16@k0O5(JKud`u^@epY{THiGKt+*s-B85u)6j*dNymdyBYz zjJettg`+i$?eez$02N=mv%gl!ZZ3E+W>aa z2DfFbwIA>N>-u2W+-MdS2R5$_VGvAI)H)-UFl{RLgZkeo<>2xQY1n2W*{4%d)9IQ) zgSCDauDpD<>M#AJkPD#7WX5ykD>98b*sdB-8Ftlt>o&^HA*-uXb{tn{TCmpz-&-65 z(04LI&qqURwd($1QSB<)Ga#{6K?-|^YlbCBytFPTI4zz={Pfh|P%=?N2N5+tTBY{D zk!H(etk^x#_#~9i;hh!iO3zhWqgfvcs?wXdYPkHH{BmJZj2>5Xux&qiRslJsf`Xkv z>4bHnU~Dx_V~H$2+wsGV1s>_X^#sICo3*iGvoS2ib=;rrAyE~AoWo#XpUE3a$;Nov zwdF@8h}J4sJ34D)Xmk{HX|6ws%)vdhdv-4;j0DUa7UDo3qcl{ zBE5|d6Y%X5pbNWy@_1tG+{3~DsaUG^-5w%!R_&M)4K&V;RJV|4E;xBa*s{>gQpQ3s zP{(}zCor#W$`anwEPtZmkOjgTrbAFE7kUsW_H}cJ{GnZpCxrpfl1t%r%YIqg(d&=> zL20$XAXij$sKVR{di%`NF_svE+>k(&;dP+sZ~d#JE1+fiwgYQw&w5mb&^hUc`2T-P zwf3h{7wo4%z*MQyk`lh#e7K}`8pU7ad`(QgVamV$^yM?iB%L1&7d1E*tB)i6g6qbl z(MV%4KI$R>XJ@R@0jwcBx4KqHEtaV-;0 zT7O@Zo+?_A-)kwk)Hgm2XRqTiv$k2m%9URgrx08j1x{+0JhmtI0YmFt(F<+T6+5VB zBmj#w(GtDjzcE7sb&{x%LK<$xyuStdil!(X(;yiMbt&-A)O5%EaK{wL@%a-+%`6b-;!F$8T7xmeJhT$ps9rPX?{L z-*FT0<~?LlbE0f16aGLIE&O@0DfbJGf3&&&M*8onAV^1zoLum$hL~0^5t2&6dh)1~ z8XtvJMmmM>@ojDSf($BEzV>QLu`5xurvq83Ozio3FlQ3(OBIj}Jv-;~6I3lJx~>qW z$`YH;RSTz0IpZ;O$9owkVtvd&7ONJOX|Wgw6k*_ci^q0UhR~VAWQy`f!Ussep3Usl z=#p=o?o&JF8_Rriqfc(qWn_TNZca&AI`Py$+NC4=!v&EKZnKhJMQ$`2L1j*wbH%VMQ2|&Mu+Y z$*7=@NsgV7tOgx(-f8@8*4t&6TEEOmyC)ax;s_x(20u6`?yHW+yaXeTKZb)<)1{Nt zn@5iTMuz@&Rwv4C?=pns@jG5H#-Ghkau9di2|K*@dO`%^${2fmk5?$zwF%b`k=;Ov zrsx-m?HrF&48^H@WXOTE%Pjla=#`gP)Mi$$-U^l2nK5exnbjl$J9S5}F>m z0B{Z{F;Aw|k#rIG%6fmTsC_I8KxJEW)b`wvYyWevkyJ#9b^)Ir{W_!~8HD!O?uGaM zv$I0luu^Ah2RCwR*h5*o`;hVlb}Tl2-XMCzzqSJ1<>4V0J&RHM{NuML$RRIoLsv3Q zG%TFs(SqS5s}VTd?^WrL_E{jh)2@VIQ?L`6HJL_MSXO>`VKVk^UIt|6N@#&e8FLHk zb#OfFElRt8_PLQ=qXFVppE$p>#M}&s<5xlzxW3w9i_HEu`1C*>wQ*^rSPkAk-U8ex z8nnEw6m=Q^ayitkI5B|um7h@L9FIkOqp*_3&=b19MEDu}j)#ZUjaiilT{kS6>u?Q` z)kbt5ZTm|hQ%;i`xXCN(mH-=E6%zT-wI6HG#4wt_@enW@tPHd>rE|5n!uP2X;@340 zn#yT4WeY`OL;bD#GMf^lz@0eHcx6%OLyYYpcz$ALNa zI`+OrHT((4ArZ!cSrW&82S?SiyI=gfqQn?+YMLO} zR_LsLLCl>2rA2jSgWmoNbD>_bvT5u!%i_m-#3~o1$eYV=vU=n-oQ| z8r=-z8_YZn!|7%Z2(St>{d2bWtsbNf6k_&&^AAtzz<`TVW3Y;^Qee5ceXw(CNBeXS zso|o2K@EG>_w4;40e54*99;1g(^dB=lEs5OL0&0=$>WVSmB4Pi7V!9qyBS&OAS{u#Q10LgjQa)iIi? z2EsRF@!?%m@feK$g^8i_3=ajrc3<}vc&HFcVY~F!K~}li8lN2R*wse_KkMlh@}g)c zc7*BM@t{n5AEdZl9Yk}^vuRC$;$O+m?V7wiGN+d%h6j)+Z^h_fDG=}}TRRJr_SDbr zuV*f7y~R02rQgmBKXG)?zicdi6v_J-bbhQL0$w7!>Xd8aC}4qt@_4Vy`XbwM6wQM# zu=Vq$s)mlezaC3>-^Ja=<{1)@+Dt-M1-$*FNLe=tu9(~VFP0Nz6mAXx0`Y@+!&6!uBi92b` zxJ6BZ!LokYX4aZ2i?4Er7Vm~VJqU)->_Wa5ZR= zXL~*x6gXP1A)~<6aMeqbF?--X7$GMf(?pmvsxAw&3U#2J#7CzJy5zLB4nFt z&*%CI9SU_nwe;$Vaw~98-&_A#@c+Evog64ZvI2fh2g)2`=Y0pnR$CLxD$TqA zYEGP>D)WHtk_bM_<+TiVsba`!TJf||LOCKZ8BVDiIaQOWHGXoFB=ff6nl0WLD$)q!h?9R zcIy=0T$0_<`wwli3<5qa4QSDSWOO4cHxdepL4K4(JNRMN*Us5Hm9yCrE`(ylg+SLy zP-5~%S`(NEh+-+Rp!A>$e^qX1aNBBLe)=$C1(p{r(tt$^B`1XMvQa`$3<0I ziB_kTmpn6feq{31DC9QkLRX2xd5NaEa}!uQ&X85_aU6W{d6(qr2(zgtj8%lAp12*k z0R@r)2}l%?%5UVL#jdS5mzL&D>~|F#?jeEg{gX4+e`LQCDxNj{MAkkpvKZ^CQyMwY zh_WUv#}QnbM|Fy7W6IX;$(?`>cThc0??vdZ?g31PF|EZhy|bkA<#$mACtcVvIX+BY zX05iVCbGe(PmHCSNI`~{druQ)fW~#PB(hl&OgNJf28ZCByl02p~H;-9`yNi9m+Ax{jCPx=U+}EUU^&k$lpp( zxJAo{;TYCK0+&;=TK$2rcQqsSrDCH-n9F(*(KBz+!Nu7=N(}nu{0+Q_f#N-_^7LpO z`F8*twM~>cuSEn%{m$5s{ne|RfKxQbtNdP{MPa3}EhtOWUEo^?nat#)?d54fe5UoX zGoI2c?kHq>5Oh^IkM`>HETS9saYqDMlU%00YhzZ&#^!US13gr^z~WLcgwQ>PpdCwW zf(EryZw3GoTyrbJFE%B|(`;O%)BDYaIEl+*w+GA@pzyA?d6gWX1eZ;4op9qnLUUP^ zt~%*`0(nifZvsjwwQy+%?cvxpSLJGOA5iXFivQKfKA^CcWU|8)#eOXzhMo>o^Q6ON z#Wr_}j@EddhmQALX`D-Zib|Am$+j95FSvX@borYo1WSNV6&0yh zh*A0k&193E{|^)Uz?{t_DYZ`<#kloI?z%FRwOgl2EUk7sqD#6wvZ!&|b9Tb;hvUR4 z(1MSNOHgvZtfWe$K(C(iE`X#a>u@_$gBMN3DD8yxz{iU3l0VTjj@N7wi>l4;i-@_+Q{7?5?6_o8 z(URhgh2K_oTow%sOY9J$yqjIvg|o3djk*e<8R5mp;&Wgn<1hxi z@3SDQhbnlg11k{WI(~u#Ko1^Y%w{BvVMmcpNtvCyf@q_V{?SPe6!+)sC))l0x%r*_ zZWU}T`w{}g2s~@y{?Q(Wh;NZ9mj5jZEEUx+!AzltClY-%+PhwXG`BP+b@Mpvi+KY8Arxh~-uRq|F^n2jhGo$@A7*j@}+t)1$r~R8b7% zJbolQiXs<||KllBha|$I7x}dL_IAsSddL$YP|Y@o!r&^I_{SEss#F_l5 z{gG-72g2sIQ z{q%qdJgOs)k21H?{U*G-8iIAB62Jt3}#8Lc{IfIK`@nP z-iZ9~K~U!7FF(dlu>N|%t!K;FPQf_*L2TRDmmIjw`Oys;lVk!Bz9I-AB@)0o89gTH z(wRq&TAI!~YS7$7Cw9B!k?2v3?5Q+CC+TfmlQU$MHW<&^E0x>D>sjhTN8OvUbA<_jmE^y zR?fg%SpoEQl33ALLtg+ItFL7zc9~(JB4vI!w=Vej7u;K&;bQ7e3allr^3sNLj2u*4dblWcSSm48Ur;b8Q5zCkgj<3Dx=e>>%=zhB{t5Ag> z&u7H@WfFXm90kMZ&>{p8WE>r%I#DzsRi&;SIk`d*k!?qJBRa(*Jx>ts9)gQPMs&vC zu*+&Ly@zjKg2eXs6~DnwVZYG>1Ui79-#9P>!<$PS9P_H<<`a4wX|GHZ|6i$=W5EmA zFQ`*NNr;}AEHqxlwYRgwqwu3?27K4`6p5J>d=MNvYJei}G_U@S>gPHW$Qfj860G;! z^akBWSHgKorR+*$2QCO+F_Lv?U2On~1Wd%MVTk_5lar(HRb@vLejk$4)$ZD&P-&m{ zmh#Nt;DgXD#RX+wvqbc1=X{V?YKx-8D}yt;&)}ou)*)m5xrHYwJN{5u!u#>1SGskE z@Q_*+GVIJ(=dQ4_O^8D$%tc1HV9|_e$mc_zJHEhKkOri|p)&syjGL>~#g?MirJf1= zsBoQcCw&^ueWLTN}A9x(c!P9OC_N;RWpTm*G}WbNSfWSkzw-}9(|?p3S!l)t$` z8&Y|(z z%~gBa?$C>Q>-2X?5U^#EjpeR&NSWoq%`W~ugCE+31|;p zt^T~icZM7!gUkV?vb)rBU6gc%c^^l0H3x&(u^iu{=z|bI3p1WLpkS)yRQ!(~ul#WS zxdSNQ8B9=dH`=B$(eZ0AM;W7XIriq{_JaKry}fPl&!Z4#%C&lE)oTYjWjYC~0Fg}q z!f*F!tCA|9th3-7Z?y*)S{;XLd}avk1*j2$FU6Mh-HI-fdyEmH2^>78D@$;oqlE`5 zcUDsO&eFi(N98q2>7oe&m@3YUmE9qvt=xE#QuPsDn|6Ti(}=T4Ff7WQlI}Z87iYJU z`RbW3csM+0%9 zyyh)D8nucL&$B41Sy1*H3_-Ph;Ob;so9JF4A1Wp~4{I+?;e>FzCxQy)b*X!hcpjgk zaBJT(DSSXyJ|5X)uC5Gg+Tx9W&4pKoV`Ab=oLodeLF&&yPM;DZEc3A1H!XrQdl3YJ z$xW=I4<|Pi;BhgrMghF3(iav+O1vYPKC#2(A)*;H2OOQ$_MCWe;vj&D zBl1c6_C$xzmqs7F@S0Su)k$Y@J+E(X;YjCb-d^?DHpf3$bZ z(}WCBpX3?3rwU(2%1=GCqtt1-;@Rf#$5llzq|suf#&uYC8r!n9&-OCDOJX*)QM>ru z_;*V@acMXP#j%pHX=8PnG@@!kqHXNetDGA_I1k4p>lYtNn`lK1R;cx&w3{yVsI;=; z7nM=}$tzwwbb}PZv(=uAB#6Hm1Jo)DsV~_&kX7Qwql2jFI|jm7F_b@3&l>;cD&cqC zjMc~i!3D4^v98^`!3yH;DMq)6E>`mxv-@Ype z{)oB{jK`4jj*hAAQoYTp$pUdx(xX{Ee8rpv*4b==;e4r!+9Xoa#JVmqD`SOxC+Lg5 zxnV;SQN+7mshq^sBw8qo&Df=YBXOB8ih`KiT;u~_p!3PrMk1r8YTtf-X9iEq-8Yv* zH7t?na8!$wRI$F@=<#Ee9G*|lc!b>(TX$`<9vhoUnUR%SE(9S=% z1E@2d`$q#H`Xr1E{(+V?;8|rf;+P=}-(p^u{XDR!c3XsTX&tnXw7l4Y?fu%!~z=Wl9bTmM7dc z%qpP&)!jo~t8VIQCf`nrdc9lE-O`C(*6ABjCN;Y!!Fb&^DBHmO852ZSV2&A1^Circ zTMM{wRK5fnpIoIC87H5+^X{OFz2s@y7Nfs089Oy(@2J(XkAL1{I3U9!dmpVWG@z3$ zjkq6^_XH3+Ug>ndmLjQk&B9#Jsp-thvUp{fqWSEbl213`u>-t`x#>|G`|jigew~Jc*!QgQUD+M(qI^Cb8%)a4!XgcEfE$8a^5EnL zcL>E$8;HX!)gOQBCBKb+PjIVMK+Mrb-#{vX8rV++ zN<33v7`kHFnn6ij_kj=#D^EusZ$EUQ#b^L8E|8V20K;X>few=}1+Q1VoEhz&v@wdc zZJ90}JM%Jr9A=t{nVOj_aj`grVxyZXMj(>}R8nb^d9L=z?yCeB6e?(2;BA}Zd~n)8 z?n8T)4qg#L{IORgMIFS&S9A9oGLSXNmm`#|MT@cnJagI!alU`jM*-AAn2zrF{x$PY zTSi>FS7@uzQa=xtcNvdO2{m9a%uEd0a}^}*=3k;L84zmH`%dAM^aQbZME^83tVfNdSCSgZ59!)-x{L`N@OII8ISM;=5y-cdy zERWqo-BcNhu`h{~GAq;x5p_ohztmLRXcR{ntC}SLVW{ObS6)P~GJX|00gXcVUxt@; zJ`1&mbZ<%<0@SSg779j7?snb4O%SVkPWV(c&J-Vh!1hrAv~X{Yp=1wqzq)Zb;Yp* z>;mDyfP8r%w5mIo`Yh`Dy+|RXB{K~}-g9pYv9>M?ck@hMBFoJJulV1K*zJrtS-&7^-MkRIp4C(uj6Y+#(g_9;{WVwqru;ItxA!4 zv>99y_lX`pb>$kTlRnGWAM>x z;3))kfr;xu+?=q^BD3p4W7g)btgx0`zs-l{&SM=Nlf~6Mrxuedu88uQ@>pww@)XKH zVDHQXUv`&I@@?HfHF!Oik3!dML{dzh+qYyjp5Hdh4$?Hg2DdB!LZ3&dbd?m^1|3O*>lg&4R^UD@9 zW%vTRk56C>wr8PTs3yR~{DwXxxNt7aHtt6}-GCV>W@JdXoWK?@DxD0Sy1zRxUF|iq2ScV$eWT-ho zHT(2m-$-ksRo%8+?Ym19tQL6MT>eD0+>4?K#m;F@kLNR6b)d|Epo-2ecbMiZ=Ll~Y zyPi?o{q<-ComsaPgL=F-g@}yr8)G+{WCK7N31HX48dS&I8Fk0H*X)}sXD*z-_4Q$2 zu~|~RnOpDXrs!7M@`O1y*h~K7i?d8D|NXw|4y9>M#|JuzZ+2xhWgp(xoC#)-Ek5Lim)b%nNpfF^3SM`B-yCFs2 zI*L{uE=k731n8Z5BqSy6NW%RtAwxIu+~KCBvLdSIk44wu&$SH{^Aqi9LZHF=*43b@ z3FvCGg1Z-bDe7(oKyax->w5oO&8mk)W|&7xHg00x2}m5zDrN|@VS!F#UDHnhJXnkOs(10eG=z&P_Du< zmJxO`L=a3>s~pW{|eN+JxFoR;WVlC!I%~VeebTN$-p^UByugck2<0|GLOX z+t!$UoXX1Jr)40W(yc$)2$r638UxN8l082zgjhbML*p~5aCT@GXJrl=$gT2KdGfyZ;J&n7MqSym-zhsL>icxy6!=Q)^PXwAAe*l8R_*&s`yk6V#^AvfO9BmB>3HY2pQD%)ksLAp{gam!X z{F8se3gtNs5Gy&-VRo|2{qq`{q&P`%XMjlsxUM)l(WYQ+0Ro=R4lm_xBmq&$4)1esu1S>ZDVrz7 zGX&6lUN6UsI>^aJDB!RkyZHd$6%n7oIE?r$NA+nmarJCN-U%UL);pr0Z49@Y_38a- z8A?h-)?~hfcrd)Rs{vSx%=7y9U3ZISDefqG+FfSwQO)o9-SH`%_C0;Y`NgT`T$c)M zpU%{r3(OMpb4Rn@r?SC2tnS;SdftMgQ9NNjR^OLReB-jO^sQOIFU}~QxiY|+*`X3*4??2AX@p(kAh1)q;MuE9gA^&p3 z$IT2*;xL5`u}Q^Z$kg^K@tEI(r8vXCA!o8EHrYlj*j=IX96m_QwXhk2V4RhAf&jAg zG53db&xFmTNabh@p54J}xur&Xbs>`); zY`jGIV??GGzFmWdoSQk`gy7MAtT8d0TB&?2?!C=uz6&#GIiKQUvgo!eV7@5}x*R-x zZHy1acRBvClPf-tI+Jf5;Wi`SgYhhFxfMBz_7zapxWFUB-KmP zmeLk1-}=~b;FnDs$g%mu!-(Up-ZIVah$9RSv)I4f(5e>|>33cKeATH(8>Y;3l#C4z zvGR2X!tuO%jk>Ny8aRp*j>ZPFCYsnjmR%{8&k+Y)A(2*J5~b!+7K3cs4ca+DRfN9c z4yOO@Io3Bo0fCG{L-5FCTCIm3z~0LfXVu8c-xV%!kS;r_1~d z!ZR?u$e-YjY#J;ZBv8GYm;s~QHFSJe1yHeE?G~D@3EHWNf(?l^`!&6n1fYTtRH0H} zJ@;%A8XW5I8dpSQtGtCkQC(w6?%Ul;=80T+KB_39(D5*hFdT;_1vBa!M_iTVjP--{ z6qdvr6hXdL!2C$oboc|k$wXUGF3h6s)lK1qZSci3V_;nR5DO38DpUHb-gZX499roR z1IqzFM70(h;(-bijCAEYsH(D7L@LUMxnMTM5VYIBX_s7%geG@3(AS*_8DnQtB&pE3 zv!5{*m~NPQD*dUBL2i(XbP6321cjRu7+HdmX2hfh@xYv-|K7!@GI$Orj+$QPWCm67 zwV98uxyx^qMFeN3iFu~%OjO?mD=zG>tbAAhu;M*>g73uc`@Z8DetV~~be#ev=mw26 zq_`vCTNMEc8|(Ir!+JR~61oZvv@@}5_{Y^I`kzv)WgEhlgoK#B9jgjrl+TJ&Z~!2E z)MM!>5PB>;q*H9rDd4(|&s-eIho{1xXS}%SKggCfjdOsNoga&~!}(%IflL<5cC>l` zE-@yvS0yVth-rFdpj|TOjYWfXWhyW9U#9<3gxB?(?~FdGJ*WpYWpaM<9U>Hy0~@qr zwg5)0KV(Xy?j#?sIg6fU34YPtH+j`mN0rp}MlWCSz1sGsF$388h?RkRS{_RZm52jP z8mEC3)5syd*4aJoh%eSKbE({Gr!^# zsqfsvbB{ZfBT95R;cL0=e}42wI8CLTl2HAAFXXAc^rib4AI)4LD}pnUhaty_YNU*< z0P*MsdQH93lML=Z&;?LYcNn!<hD1|*FB$HSwE+yA>F$|$3Jf?Fp0wx zhz7NQ(YsG#Ve}m?)ox}uL9Asf>H;7z2Tl3$r5+U=< zv^)Re(zkj6X_4^f_YT+>d2Ko}X}9KqaZ;(YAMDqdf)W%?fbm(${0C0@@<=8@{rH2H zQu?xrExwJ28n`A3y*iLG`~}jD2O#gHlX{TvAroFuHpP}EG!5;B9ZMA!A4;}=7kK}m z2E)G~&78&8n`16!!ul|@dH;G`&kJoBDR@M%YzW5iW@HsKl7&8KpA#8VJGS zAtT+(YZh=&&5XeN0^Sc4Msz8c+;GftkJdz0oUol*}83PoxU5j0CJmY zzQ$hoJ+2hwPS}&^0SbP6YHkJ1EJ+`e+CF?CZ21_H7BYKCf5b(@75{d%Xe)f|9R_uQ zksB6Y)U^AX;s-nE7!J!5a;9@MsfeEQup?RgK!6&5)$Z`qm~ZwwpKfuIs-RFZHcOY` z?oVk%r-5~95Oo6+9CY`xwISnTHGwOv}W?;ga9xv=hzAB{|fGwM@d?OX?zi1$f!bvy2^`GH_|X?4EAw zmp8|FaZa}$CuWTKX~afFam$Y{^aK+lU9v}C_55Qh@PWQFm0n&*=D464RImk44lN!Y zVR6nyd5!u1r=_caTIb(;)kGRp(KpK5>%srESt$t$M8xC24r<<3dVqSF&rvNO-)PiHg)KDKRtX&ga;99p(zL|E$ z(CBJSVhb>{*Jw2=wsSI~@|iHNF_$OY6QS}i=MH{Ffx!L&NzvLVhQ*SH5fIkqo!VM; z9_y23wKsY5?DA=(A~$|yE!04d;K>TqdEenD01qNz1HEeZ&H%*yBZp<;YO733b^6$^ zc<%VtO(Ijoy_&+&og?-%G`WP92~EgsQyDe2^LZRoecf_Z=nK^rlPcjl2}ru7aVtII z;YX=ScX|Nw)!3(x1+WsYm(Njr!Z8yH*rEYk2#uFW|CM4p#WVczUi56zOo8W0$&5hUB1w#yCY|OdJL?o&XtZ2*kYe<@j0sd@pF;1 zvyCCA5uTMRMK8WTxjk>0F>&O?95!3L9`l8lz%ydKF62srj1wqPInBvq)z3?*v_(WL zwl7JVleBKbME@UhUR_gNHlL~JtK{t7nYj+AF4bxIE|?UozO}=phi?(nsaMBZzo7C! z;mBZ{dV<@Zt(cj_4$l-j?h5=)tc}!t)6E7l9CXia%6t%Tj>hXn(sjH|qld#?-pzAi zSqrHxdS-YcGQ?|qI@8+9$WF$5Gm!`)AZ@}xnrBjc0wXe7y;&76bafR}2qSCSVy(BK zpQEF5O-JYbJjh*SpeM&Srk8glCD2ZlVF=R zGZ(6rKMQhQtR!u!6Sas-mVv!Q*`DGsF3Y8)W-m~ou*hcF=ZZ8|T! z|1HpW;;koNvS@!@Y={Lq^CO&0W0L*0%)G<*?>-v&LIo#9yBP~D0+}x{(FJc_>4BuZ z4`(lat2|>j<^YJG7ZFz7JYEj}B{MIvy-(tF4H(_G1X`0QZo9I6lt7X(KED(q2%www zlq>#(&w<1per6&8ppZ>ZWzb3{gX{iTC|Z^#j^85X3!T!g38@Azj@GUcar6*(KRV@< z2eGNpy{1rX3$6EDxVSEYk&M~R1mG~U(o4q=%c~B){~!a(Te&PFLUj7uu5S zqw@=dOlflsCY%@a-DVv6c*j1=BrfvRROwA2SP~t{-d=}TWnX{UMDESKpJC+gnK^@} z%!ED#8}`vVo$l$lXw$tYc!V z4U_zSNYIcRlVEf+?h9m3-*S@Pd4^@YY9z_u9eiLyBz@p|*yxYeuutqZp-xwwTfMJS zxZ(tL$tdUaNh5Z`p06{&4ooYW%3zC2vNd5^$+>V2W^WOMHMf#VJl~h5+rXQMhf!1cMS@`(_1&#I? z=PP+bcnw|jHdpr_Z8>=tCxT`9EVvyGBfsqm40`&Xpyy!M_EDO4zmpgqh%MA3_F<@q zXr!m=i6*)=-)j;V{b6bo49#C$o+(zxB}bvYg?y6$qvsth;cmx~RXn$f0`V3wuBDfz zI@G3iq2SKuj7b-6(!hqh8s2BI_n)FMOT^Z=!3e^qQRSvlS!?NoJ_m`}j{d3nv}{<9 z)bTR0r#GPJuT$skT5IB&kUd8=C2UTTl-+`c@ofkj<~T6Va?kD*n;OGsriFJj1MKZ*dukU%RXByLO%B8mzM5Vw?B~7*wa- z^3X*#oA%m-9U762fgjcK!7USwxh`f$H#AI6*{0Ovf;h>>I;rRaW^cy`r;ip}=Xt0x zDl)^ga4>tu+DI!B78T_alf_n*Ayhtx7U@hLxsXXXS{Sqy4QSv_ zr=ky}aHJlCNv5+<|J?2g7U=+c?GZ6ZroR?U2dB{UPcZwr>fy3KbT7Y4%iKuzZ#;FG zjf+ne07o*UxcKE6m&rn&6u&3Ziyj*S=903T6i7>P*xGzthX{0Z1#`TNLC1Sx{?{_Tx=iLt722qKFno%QLZ9KfC z`tZfgnn{EyEUbOUksl&cQ9vCHV~U43KQ23BHOH3a;UNjCx^aN!_9lKR%83gEcCRkt z%mU#Tp7LDgsRknBg4-F+RgbEjC1>p771YBOj$p}p^(ru|LmIK3?K5=^3h7Qj8k$$pyC?YTOX5vUyG-!CSG+O)R9Uc|-gzr%_8HktSF0a= z;&0TpLhztE4wD{KA?hf_xy~te?fo_logh{gM68Dz+AWf_a~Yt`3#1P%Zx{vXMJND4 zgdN!+mjG~Z&6jDPt4##t*2E}uX>;y(B{ipwtg2RUjQolr%-L!e95#b2Q%<@If>tLCR6gpau z-S>7j7L=xZj4yAQv``!ISo1Mzyryd-5^KE$o13wTQOb1q3=Ottx-Nv+aD<*2EL0=J z7F_-Dgvr<#Rh>JZ)Jn|AqO&87-N?#lv$~euC@G$-&FI%_N3{CH6_&u*#5?JdMR1S& zlWP*e&uIbu7-h@{IpZd(bV2ikaerV7xx>@=HFxWcXYXHgA{6 z6(f7D82DmG8dJYT09?Tuu%9MGF19*!x_X`icNY1zify5@54CONkVmxrkplgpAj}cA z9Xy@2uFfix!$WI3koipHF`Y`+cy?!y8P_8*?#Lj^V0$?uL)f@~X9AsX2vNm4Duj*w zK>*k-!e;pp^kVD6s4jm|Elf#h*6Q>E!H1lif>L3LI(UMRY0`x~Ze-{5!@xGPaNJ2R z){ft`NI*K#7|u4=NnDK(l$L->vdsndql`O)ZI7l7Wnc*RAS9b&1g^3*5p+^vx=jk0 zKP18zmbp*a4e1$JlV3JZ0MtOb6cP78{IxKvmV@oYyUON6+b#n42uq)bH*BOFNM)21 zdo3|f!csLnAi8xB|0`r6EAL93^5XZDUHTAgQ)L*`Ix*$)A1Q&$X0gxHVQH2pGt z#ESGV-V2Di2`IFP)3ci1<#>VKbxWbXG+;0W5s~jtSjYLP83;GgudM*$Ws9OBRx;}j zA~}pIou4y!+-|*m%65(|(oi&%;^~Rtvc-7|UMFFH&sX=NI2B){#&4SQX5R3v5Z$-( z6ShD`3~56^_B{ycCEIU1 z63}hDT-P$W+-ji609aF)+mef7Soe*7YV>B|Vg3;Pp zF@_3oIUwb~Xp4>>wUNZ!4O6HKRx7g2CHow!N*HcNTa^ORn_^M4h+FOxXCG*)zigN% z{_@7$=`U&FGV|=VF7H>_`H((;xq~Bj3_Iy?A$Seko^{OjA*`!M?_#1Xp0hmGrgLb- zQHvIci0smFTy>307D<)WR%VM!N6W|*=px=loo%B@MkXK>Tb3?KX0mqB?@o!O|?iKJ&A+L*82T=5;?|XDWMA*sA6@nd%YONAGn9*Vo^-<44^z} z5%aMyqHCmuV738Hha3Z9B~$^26-A%~D%SLi(&+P|p6#nrc3a%QsZ$vMmeS56`ewVm+&2SZme!1zl{E7SK8$aZ@?*Sz4K?ND$_YLrl(krsDtg4Z=cm; zQHHnw3BrA>H+`apb%}B6>Hz;g0KnSzrAS5wJHv}8EP>JUzGEGxF5KN zF^&>y@Rr_m3x079@EYx7)+o61L8Ln}l%*qEH;8&OtdX!bXe|W_L`>^(LIcoYgac7n z7|EI5%}90>YvMiYc<@aEgtvW>(^tnyqd%9phlu)Gs3chuHX5K6$n-?G`6S%Ib96FN zWA(q288_w&YXKO>o?1j@Qe)pqtW=DMW_d%q+6e<4^7uZ!VN7JNqCVd<*a&j?A@+}E zPs)KObHsJ9!@_e*2Q=E@PfbGHh;$p_z4ul3xEu>{(3|aCBl8R_;D+n?nIE0m*l$Z~ z-tQD!e`wKe6eA`V!|34Q{laC<+{f7g^VgQ`F*kO5JfJy1{%rg>IWRd}fFT5Fl>(g$ zdfFd|@m?WLfHUc-g6%cMPJ}R*C(T8#RZ*OQK9;iWbuPXRE?HAjfMNk>hu6lpL@haV zfC&)1lnf4hTzxHFIj;RpWiFTP*T%EcM${l1E`5H5!7aJsT6#8SK$CK1H#%Rb$VYZo za9r;H?P)p!u68jEk&9jZvRK7s#I<0ht}Swh+X^c{cmr|IFJ0AppP=m;NdE%zu?kQvK~im0K!y zC5Sb@S}=ivGs2p;9CHfSbVrUg&VGnJ%O1ar2)N?9voDt!QV>!jXH&e98IfV|mMFiMFc)pL3;1;H^x)yOV5%jP zeU&XKEdxA|{(B5}XlP>*eQvWAB3ohAviznSwj@@S`D^8@`En9A++1l66Ph>)n955> zUJH5QP#zxu+nq1NigVA|b!`STW$0Jkj*^k0n{ai6J+c-iQ5(B*1~g3~@C#vH6D)M| z`iIfCMP{-X68YYkCP9NRaJ(Ob?D??Mznfif{k09Zk`s2U6m*vlpD9ke!MRLnC>HeZ z_yY2=!NJtIamtiQ@uuiTa5aA!b8~=}w`VqmFEA#T{K4IIu1+ zsHtjxCBgvr?J=C#>4uR3YF|wIkj7{uX*ZgULE3JY?7v213rI7s|1i3y8O@jFsv+3tl-OE^TksxJAJuqmz9~@W8kY`%IG9Y zFyM;7^MI9(+#B0r0UhqUcOC3 zvl((fqG%P#OfLc`C^|3{*E?|A1!^d8aTe9)5QJK`1+9#g^3>w-hT!Y!G{nzIMgBbc zeF~Td4b(CnoD*pbj+-ZdV_7{MS1Ha61b=}}_Ry0sfps85q(mtua z+bX3KrgE>MP7~-l%s@f60Wo#PU>Zr_V4D2qMY+lBfHIKBlmrKX2GRb+s^HC4=)5ML zY}tKyG6=da*PRMh?Qp7;5gpZZ%KbtbA~Fg$*Hj}|1PR!&hq`rvBcpd(guVz`A{9M^ zsf?z~Z(1o93@YKCKS1fKbsb(PI32l#HAzKm7g}`JNa|cji+S@+QdNYZp?|rpl6JGg zXK}M|Jo!Scx8sXr)SAxIgJZQ+satQJ_M%*JgNIV0gIwd zG@v|Ke+j2qHdK_WEE&BwRmmeKWm7rFYCQH{qsr$`lzh#&->JfV-;8^PW7Wa7YnK_K zSz%np^AT;2IJJJFp3Ic?o!(hG{Z=rsEfm#95J(Cz%5K`oeyq+c)&%&lLSOUIfrZt50>wiq~?*Jg)pk_Y~m z>6r)pO|Im7iRmm6aSQtqRZ9Uf%BhrEHTs3?;#0u#KLf^l0iP37STRleApW3X zp4{7P_?(BT3N}E?rbzB!c{J}ju!J|mHte)58{np#NT}|eOuwLXIOR#`TX2;i&4e1A z>}lr#ud$bwY}m}Lg7J6BK{slc6Cyu7;N50##@g%=p)cm7px8Kag9e!n0wxlb+_PWj zb{W`WsdPw-9(TT|m8;Q)HhLct{TnrH%U<1}^|?VkZJ|U9C{^jhbOfD?=N#7{{fOo*`_7;ab`pmqioc%eahG+#v`>AT6-Jy z0)(Jpz2;Pn?Olx+Y_pwCxv6 zHgJ+tW!i5;P0E@M1cKcf6+O=OhDfsCQ?X4PPB6CJs4BXLn$8d{lGLh#3~B2Dyx77x zz7LNzP~mXF+S$L#4yAQb1k`X(VHG(i6yU%Sc)y# z_Kej;n+cyv;3V>#6Vaw)U097KX9}}P0T1+xzxyZNWz4FWh3(7@x651_FB!zkHBCm| z`pG5mcPNN$!7o18#X7+D<1E97N!HSvCNz23|J22eqZe=ZwI#!0?B%6xofj~&fWak9 z(Gu(7%Nm~9g5thUbU#Jx&xK^@@Qk%7E0V5!bRQ8cBgO`67|hKS-HRmDRP1@;YgqNL9%g>}(X(`(nB=wPD>sS>|Pr)PllE0=*D= z?MM7eIsl`E(4E%E9ZDQX1VbbpJ$vqc^uiPy;J0NNmvA5sNK9Bo%RmUzx?q+w(b+mzOnw)}#I7XuPMH77j_t-t9mALr|HR6r?fWAN0pdX5YS& z8g*f*gI@SilbtHaF(xi=?Loe@GAVcIR_kTfy%Vo-+hq?fFG`97qlc|?jCUp6M8?`5 z?T>}l-Ep6Wfe+;!ZoQ_#Z-Fe3c0ezaU%>4kuz-TKlUun_JVR6U#OP5}XSWO76O z2OM3t+>3G{fqlzR{8`l6o~xc^b)DM6=46);&iYnbL1)52jJr63V|AeM6an%U0$d2Y z)CTmB+7r!(u!#^v^@OM->h?CAeL0@v%NO4U&ZRh69BJHe@6SCu@FYV0($FBOx3E2J zTG1&Epwk)u$xf&_?t~mJDAF}P(ifczg8OygCAmXfM4EHrLv=1C@;UnXtXkKb(P;lr89D?b|C!8qZ z96f^&7^u5Sjdy!;m;w*F+ZJUdBmzC_OY->0A^P>W}*iv>ctS5j!Djt;S-o@;jf+e<* zK=ySQ1}K!r%;`$`s8iVegIB^Y$#j({iGR~}b|~)n{@!l157`~8Uy?q`)r4Tb7<7$F zug2#W!m>$8D~a?R$Z+Snz~G94#QC68AN=45Vo?gC`zTyHgq&P5A zV2RCpj09laez9wtmg+PCJ}MBMwLz*Qu`QM&mNb+tFX$XF%MT^ZfJ6<*wN}t~|71-qf%r?K{pAEz1Md|s!|J0oZolB}Z3BHh zEYL2>zA45*B(e!D%ecVsoh05D7@Vi^Ohvy6vuV9IL1s(9WXRzZ4(bq< zOL5You1j{CFG+f_cEsYft~v&YM$z`R@xb0(M+|eNaA3Y_y}(tTpwzWSa4;>;TlWwg z60%F@FDP-n-(MC*fk2fVuRv(>s^X!GpQ0sKr{Q^yb7$$ZC1Bz>HWUplkRUGY3gQu= znn?!34?!5uS zw$kc&iLNLCLn6}=%r9_3Y_X#u@bw~omw+Lsp3}4BGYW|S$(G;o>*>N)Td(MzLKNaX z$bgYjiv@J_Qf=Vi(tgx_fNKU}d@&EsLnnp`Ls?2h0gU%j^)j+Y1g2*2sE;aZ_68Dw z-Vo6!w=-J!+n=OE%8_x^#o4)-G*wYE)(%#H-{_^wLdxw6**QXN!n2iB$Ifr32QRAn z9*XDPHH3RKW~)SxH{(1J;ITHgxvC!8D{e%@@E*q^qu^_yH^LVM;4Je!Xc7cg4ug=Q z7~pSQW;i8z9AWe-(Pme2f6N$~UpNCA-S=e*I=tWQj6NH&9%r|Ef-io^>0yY>t~`2& z+9gj%)!Oej`4EO+w$XwdghNneW(&C)J9Gmu0LxSo!gg0TNQqn>uojJy8bepsB5+Fk zppNy)a~@=i--}qJVMv`Pw!z>@O!AL?@CV>n&rkxP1Sb=YfMTYhM)o81=yC94_f{_ zY;-HIHcH#g2}!{2%7FYyE@<=Sa@~YemMZ;)HDWH70kTukzsKNAEBvG3q0Qg?;Z+rI z%9hxwz_fU8*qxO*Aov&M}%qJ87(Vn@kCJ{7=} z%oVlWd@qfgVf)r59D|jAgD@4BG=q9YH3>P&2cWLNV}_bo68VfDM)EhOq^0qx{f(Yn zC7Pv!smBYRvdqT$qKtMc*mhugR+i`Rw705Y5fRH zHawRYyL+x-msnu(x!nh@GMzD*h-P7es4Cu-?aN0T6kTbC5$&d4AT`V+R9}LqOx*-O zopoO!M)3#eLco&hHsRrq`MeGlM^6+9rA?eE`9YZo_@)_o_xDKX0()i6y0Q!TjAD>CJHn+K756NS*tR5~X+~r|jfVsEm zaagqiic>i7^H&`;GzXTe37(v=z$U|#)^e(OD>p8^t6AO#z_yn@ll~oz_G^RIjzaa2 z%?j^AU$tYqeMNi`8an-Du&@66(ySI zQ(pDWcW%)6-p7+dLF94S+~f12o)52k&hl$`@T#EQ+#H+#-d0}e5#;xB$iB>piW%8& zE0V5q1n%1yq8xzF)*wQLzhU38E}$TSmyO9cI4L|d? z{_%rf^yjs){-cR;>kH^u&Z>*=h^Efa80x)Sr`(m#Vj_XFENiQ$M{|-&TTC>8u+KhR z9d^S@v|0?`l)L@FM~nLi5dDF7Lf{w1rg$frGT4@JHUt$%MkI$}#Ha|f73PP?Y+Sdt zJP#9ix$PV+GXa;37a`>G{Pzm0;_r8CzLDx@CEo4j{1M~)@!A%hIMM@T0Yf_&&S3{U zC93(UY)-VdyW^!KJ@UU07u#mVi>kMT(SWPB!wrwzH21DF3(ZEYy?q%Z9rXcyhp4NE z@Ba#F=?V+B`I~&Wg7Czm=Yndl@ z3w@b^tvJ9Ym$|t2?)@o=Jr_c-@nU#V;+oVsWHXHbR!z7ud^&%dD5Fo)}-;g^RNJt-wmDO34R$eJGz*B zKssp7<$}854|npX#7pN=-wPV(G1r*MDDZX@XTzcuX%RE1mH0QntddwgY<0N!Ezijo z!8}1>7V)Y=fK8PQ+7FNT0!zTOt5=1D2}vY(-G6z#kd(wfs822#g7(k%CpqPS4!gBq zqRy}l*Cb_@HNm?VQ21Y6!Jhx5*y<{+ZM9 zWsZ-HWr;-ySui74izzg{o2S+CxwdIZsa1w9`oSD1q2uQhaGh0gAferxiGYfwwzq-M4!D%epN94_u&#DH-g!eu?lL ze-Fnk*Sy@R2Ci)grORbg()d#7-JAS%r1r7OYD=|9i{sjC_|#QTf1cB%khg>N9CtNa zNPQ=w!FN4A0BxC%&*8}QZ3H~+Ar#avcaWTQ0hvy>g0GNpC@l;F^1J1+EF<@hB$=W5q-Xu zK7c5KDN!eM?QCtfr!O=@N7lJVzpz+#Pi8Ag111P1k1xe--! zki_eQ+r-Dcu6jrQIuq$T_`lZ&VJIc}V$vatg!=+*X{Lslh)%9Myn@ z?Wy&wiaZzgYiMu>6RwD>RnV7XiX}gt*3v2j#U=zaU&^eWS8)gO;vpSgxj=%5QCRko zPK!~5!-xX9k1L@m&kR^vd^z0fr}vmIJF`>G2IOYjnWB@s{KkB|s^77aYvB*GPoLNA zG9e3Ps+f4%)1gcs4N8RQwVdy2D&F&7U~m5&3PEa{QYFaD5S|h(ofwb?>N1UpXO;c} zr0A)C;U%cZNm&vyBM8C2zv^XlIGuRTaUKI3^HnBew22l2tTm#+QGjb>=5{AlO9Zs! zMGa9rpy3bDm0@R^#}x>8TwZg^U%^?=-1O{t-b#GxvvpWbI_X^*Y-Ey$ala>zb~~)U z5B)~*38H`@_=jZzh`%3CW#NX~!))njSHFI|Z8y`SqmLjQkaGvxg}+bL_iuL^f+_+K zo67rHP2t%hj^`RPBOJQa`vuW%X-k^qg`**Rq2h?VXN#NUsm=g3QW>X79#8y~E)zy@ zUq3w0C8Y$-T*STo$b7@a4viChD<6srj1e%0Z!qWVI?31<)KDR9KzQg$OG+Hftuc4e$O7 zl#VmGT9KpS)_2t32j?2S675=l!$awR^X0TF_21J!c$?Xp)Nt>KKdKXbfwT4kOncd? zI9u$+)`17SUfLu)u6JR?7wRDNe4t&nLNa@>4#fY&50JLE-(Ba9)5+$DDoN#UuTvT0 zdl8&Dl(dPJNbVRDaW!nVtqn|nmv4MqFy4Akpt&5uYDAgQcw<-_`36*&H=c?lo-8}9 z75-HB`4tF>*;{A(m-!~}b>G-V&_)R^3b6*l0SH?65XHGEK#>^bRdhgx8Pi1QDANY@ z`-tFVXM@+a%h>EYiM;4ng4?Q&`C&RiSvb_8IcFOPU_LE>_7HH&>{|xXfyTAZ(BZk7 zW&?PInC3E(>7^nS2DtR%q(oiMZK5qNHH$<=<^2dNCs&77ZxTEW7~LsKX8aixn*p%_ zyQShW-HjRrCl`WwPGoaTnY>&EK<}Rbr63zOctJ6II;d8r0V0bRTJeQTATu zpP}Y~$kE+dz16PgV@H1G&O8%j!?j829PLTQS4(ElV`y^MUvC`<68tJ+h6)2YurZGi zDxG6Wewvq!8a=t%UQ+J0I)(Vn`c2?K zC**UdZzjq(6uJ;XX@O$+S>%#GnPp^vkT@$Qr)y{x9|&}aMvk_uKFK=Rh+rCzNFJR- z9aV721#ERs)Pt~6q~P!ia^-I-A2nTotjCc1_f~6(#*|^SaXSWlD2!oz1b4o%PBE zMHqw=c3r`OA;^McfH4-orE7fB=@c$z7Umu%O~tL<+}Fo$A8_C>_enc#>|`UNmUwX! zk!)vh^6>Mbp2tZAEAX;K2PuK0Hayg$R`CwK?7mWDKCkN~E+pv&Mz9hO+WE35JPnoR`@2T~6(Nq}%#huoLGHo22D6I_ z3eI+N20Zn$0ZzC7JENewl zk9lmmS!NVPe{cdPkl;;uXbVwVR8aqa&MUbUzl#nuNFxb`7*P7*DTkh8`AO26p)^8) zOLj}zrM;!|?|DhbyN=z(^gynu`a43-N5EH;6pAHd6JXj&;b7W(JJqsVsQju&XMaD( zIBe@mIbYrt_bYU<+9*ZET`^lF-+O3B@mSsxSkIedO0PnmqzXSiab#1kvr>f5KI!s1 zg1y^`*3;%UYtbKQ1qU1Zljb4&VG%q1Ocs(yV<7tW#7y%7bzol`-N%leND!yv7tx_K z-UBr<;DY0<33Vh@+4#uyV8R@6OU|J1YZ>eR7K`zwLSWn|{TDF~HB_9?B!zTA1h0`8 z#@HhyS_G0kJGr6X(?pf>ekSHWAQq6|_qG8pg8bH_-^uEdK&Z|S7K<;vq+tw?bfv%$ zJAChH>#ja(Iivie`^+^=!K3w-?wHiOwvhwhKP266vXfzXE=`3PDQ|Yd5z;MaO{81% z7d7wMcjnuB;C~%?lZZKAH}<2~E|-sXab{T6UPj4SPCTx=?eyks!JRu%EP7BplC@&TG&8bDnKX^_ zTAKKuM4rS8;rNpgJ%b`Jj6TcAd(6p0vkh}=ArlrI1UO*>;@vN^87CQmGzyF;&mDIfn z=sbWz%$r`z0$>NB196_KlwG48Ef)cbiCY&9vY?k`f|~JPO5m!5O6JL%@+l+}36r^M z9~RoCWMUiK*#gn#!l*W6&R?50s-a6(%SB9D$vH9Cl+onNQ@|ybb%_MXwLOZ4=IuNp zTMI4-Tx}^4ltcz`vnEM$x7dK?(~=Nh;P@uLXnahxmK+PfeX`6u1JNLE-yfxm=4@wt zlx7t)SY~o62Ua(K+_4;ZR2XO49;)fKDUl^S~NRY%7txOW}RJaHS!2m`YX5ZY$cDh_Xs9Aj6kq3{aJcnf(PjU>a#t2NE9Ptdzf!0(O%s(38?GJW&Dg_ zk`lE@2(w7}`rC5Q@gkURX8kH^-5#1P`b?DFVXw2N{=YX+sl?$$5Yowt&TRz^_MR%odpv5>4uS20nZMsG z&7@@kiFrJ*EOzWMWY^fWP;AL{hwzl>&y#}Bm>0c;lAgs(%D4@b!i`zp&;Z-`Jryct zwl4YyTv=sSEg31%hTu!}L8(=M<3+;r`JlPBQt-I7hdmiY-~cJta7<+#>Hf(QFYPWJ+zI);Dn0imfYC}jm#RA-5OqIWLG~25IPd< z{EHp+ycM7a5X%|W7HLr)>6nwy>oPWwa5()GQ>#7pBX!QUEe-ivS(->ynb++U4JbM? z>DIZO3ojmR)qiTqJVVd%5+;D_dMs$~(U4c!ZSL|=b3OS0LDfhBSkY2Tb>B#GMPZ@B zek?D^?eM;J5i(c3r;PrcYK=SLFT;cu&W*fG>_A$ZIYqcII=tks>tgcGY60LeA0{6| zAb09G{DWDLOL%+gsqcO%??B55>HZRZd~-To11g_COlFtg3x-A7Tv zHhj2->bi7Uo$5p;_#?dQr!0!?lz@PQvuWrefDa7XRK=SV2b0q>ZEQ(Six)F5%N=O7 zv^KWuamTq3ncS)k`g4sb^ul1X4d~7fly?CD((|X6Gry%$PcCF}&9zBqva%(7*gKX7 z;;5>2>UBmHXr|>N&95Jz6?Rut#t!_8MM&Yl%&CJbZAv)_!^HZuSD5IO;zP;^rANbx z#6_T0FaS2Pl&%lav^+EOn@T%s@eJvcjpw8ZogC9N&t!M*!?-OLxB_R^;dziJM`#?T^UbP;i|dfzEJ7SAk{o$u=p@A zc?@@m^!=i90GH}>%6B!i&aUbL>F_BoKWV4s8X+nX)G@=Sk)B;1Rw~b-T!8zl=L^Q2hK6 zm8$zo+>h#K6#t~-x#G@4nbf2;vMPj>1pA)mI#DN*?rm$LQf`8CuF|;4o(c^_My(5*LD) zs#}!Tj-9;3NR#EmO8-bZGWdM*DxZ&C#V4C7G%#|o#Ip>yy8ILy@bp`y_LNLsJXIO zGUrzvF=|hAy;czm^i=sWI#PCoLjNMbwdC^#k1l2;0QO|##Rp)eZ^M!s(QzT}z#WZ(%&uDqn)-b&@F z?2l)8n_Zw#N+NhUC-*J}LJxRZDYQ1Za`Gxoqo3IxHs@uOhX&< z6qjuyi!zruf*4egFR9(H^6%gTDnh6Ln%9B1g)q^e~IBu>_wOSEtF~Wey8@cnF^k;9!C^55S0D+0=I*0MfIIiT3P$ERXkUVJ8DV zMa07Cvrbm06MaG(WdYW5(wBHh+w&BP7Y2(nCES;Qj3l1$WPgb!^Y&^U**rzo*9+e@ zsz^oSi^7QUmb-O~a)@U7q(sV%G8#A^qa#rq;Z&wHI+qb1O~r~r<<~#`=K(?#y*gX0 z?X!t94l(lWq0selL~8`c2Tw7wWw)Wb|NhT5{MX>(Qyd;acssy4FUn+5t~y?qCT1u=#WQZOZRbBJRn)&qxr8U za`ab)NSSnAw7W-hbV0Ih@8`2egW|5@jh_iXMm5;ZIg*7R3;cVz3yM+hR})+~P*tAO z=@>~96JVV3R8z|tNm+=@aXsF|-FE>?My9m<_7iu#@QQ!JU8>R4VBZpv_A>xn4Gotl zQi?8Zz0yu9@r7#aLGAGj)uFciTkbm_EQei8B#>Sg$$2oqxR2 ztIL&i&^9Zx{KlG*YnCngQV-CU$MEoC@@$fZC{pKJoEQ)!2C>M;-e=NZpO_`5Z|qi0 zCcaDoC`ZL=9A*9J`@l95PVKvhvnihLs?lqO&G`Vm8U?7HS z6{gGVHF14NbN;}bXpIdhL!@`823y7zi)LC87QDL_6m>MkA2>K3BWgYW z;hhZ*xdtMAZ;Hi^i2?7z$4G`lrZ^u~ZkM(KlbYujn7E;vmnSG-3LYV|nhiWhnY{T@ z72fE@&1QC7@)Z*H!bAHXpL!aYwQutY14*zrh2n)uder|m5seq?iSBcXB1W3Hx1Cw1 z9thNQu`7xcecR4od6;DFQI%%1rYFG)wWJMO@rp$TpC;x8m=igg`DrkZ>D}alslvmn ziQA;}^J!N0&mSa;?{qRi&;hNqsWCj67df`1-rS=~sGjs(rFX#_nFAfWBmE_*n5nt* znoVG%xppCK+h`|7muk+0$1-}++PEX0H%llO>7HJ}Vw2TibXddx_@P&WK#_!Lxb9WL z2oi4sAU=|sjOeprg|Jv^BJAH0a2R_o-ySCDtZGVG)e(Ep1HHd8TGY!_vTuF!kf{55 zTZN!!D3#E;p|XZ~j2C`*A#{ZmeKKFiPZl#iW6 zX3n$K%}~ROD!^zCgLCIk5U-NgT1{WQR)6TmewPGECMLmM)I5Mf5P*O#?wYLo3B!}S zbTIyzuM{E;H}dv*xR(EI;kgQykb3lukBN!RPvo5+5iEHwh@UInwoAS#z0hArvAK*nTRQB<(ii#c`}@utO%4hfz0)XSYOR;1XIFdl%F|n zyyG2s6fRxogxjBS4Ob6caV++$0tl{M1kwcb?t6s5k&Kw^Q}QNdDw6`~nm^}AJvc{I zZHKnlM6b&AZ4C0)cnQ*3_XNx|+>F}i9~ZdVT){#0-MLfcR0QsRZRN z+^+v)#VOp%hIyiHW*3Mw#9^lW77e21zm8jpkSf!oElN_>>LOq|?>dILuSZZpkk?so zPUzI5?snXhAr~D>6grVZ%5)3WI4$uPY7ObDu!{RMe%DJ zQuar3YDx{Ia^eRfS^8&~R@EEa2k!jU0IgEL5)@Q^SjaaTpo?G|s+<9{ejKpYF;|M# zaapbHv1_f8z#8xo_y~NGAq($l3HLEOL?W_78+KvI;32)U$E8!^hEen^%JE)ug;HLR zHt>L)wX-j2PIg2Qw~D(%kPsV3HrLjhpakB;U){)0$e$Ec&5$?2$Az+NO)a9<1dp|v z<8XFffWj;gr_+-TqYv(LPz|*^Uufa+C<2<&4fDQjRkSWMp^cSptk^;_O1*!&Nh->x z^?|F6Gz*_@BC_Mtrk}x;d}CQ_=2urSMWl2nplr5LUb4oA;9IGT(J3XVp|FZ*g#Kqx z^(Mv0g*3WVVOcQ?q7+(%cOhbU_XgW?Zwm;hYN#0U;-l(Dtm5cK2U;C1Kroe>sZOt9 z$t+z#&kA~8W{aD@<9~g~*R5;iK3(yZ@Gp~s8^HMV=W6G%>nV_2EF94TAHKoP%_mC; zl9qCV+3q_Aw`eP--eRU9`+v8!QHXNeULX0ATZ&r>=1{Fwd&d%!jP-CZ@J)7hu9-P;0zTc<%HAFi}>%2bmWg2vQJ5Hsn{5o z8-L%8?;Gw?79aPq;zTxs!WNiS=hM#1P)7jq< zx0N=Ij^|oyax|-<8KEgvGo^m;S4`IvMsPB!?dvM&n`10;UexccD!<$3JLw(nRy52$ zAj+FYq_r)qv{crD=3+1xyq#u%!Hn5k8cv-`+ZN6ynu$m~Pf0$Zo0o|C3$WfN<|^GfnZdu1qm?gluazIc#BNf$pwCH(M%3uU zBl%1p{!iF8^elZS%zRcgbJzcZxp&AAMm}b9Sbs5FD97RhYUWE$_tLCuyL7Ck=~RUh zXLNCbIXOBKfkVjd(&$I8O8>RJg0r-P3>m)uzOR-TPew@gwOFm8&HUE~%zTx}QA z{JfT`UA(W}n&QfFv>XpHsA4nw0Bx6Csq)QN9V$$wFt%%}$u{zgKK7&DCX}bofk0&E zynKX31ksC3`rern+ubPyBC!}7RjQRS2epcGsWvN>~n|gM(E#E3_#*UB(zuSc69o zdO8J#*CsH}6(VNE%8@6IM>eGJE(IZ2>eowF`U9Ov1*OzguTGpDs*dAL&tWORuLBLp zm|m#rGKT++9D+|}H>F!CoGf*KZGPlbxa=!aY?UL%EAMMMI4 zudKc;UhFqdI$msTxZw{gIsnbppM67Lp6mva_pnqSK3ndT7Qt;EKLW*5v*_;{$a6;* zrHgEFrf#r7mNpsO-k`tQHwzbK+Oy9zDEk(;99pC-m19Kloz}j|S!W6~_Hy5S+~n1k z761Mn9ZuPZFBr>-?y53E_+T5pEy;g4k_1B6iFESz-lA7X4Oo`j1;Wc`Y_vio!i|2C zteQR7O)BLdD6YOQ_Umd=TMKmaT@isG2bTB^aCxwS&0b5E?Ew()YMzWktzl?lL>)+- zNt2FEBrK@3?R*PJ3rwOfOMb1z-v1QU6UW5)Y8#!HKk9(N$*^+!OqO3^9S-JEd=&mH za<7!bK6JT1mJ1pM%KazH3Dc)95)oN}olc5s%nfsR#r?(Dq4og{MiDQ&N{hqv_o4$8 z0cVKYEM&MibxBhEL+!^h#+=g>`LA{=h12^ZSe{`WBb?2FVoK2&`J)TxMFt1`6F0^d zVxfi=i;*nB1)@^mk{!!JRH$f-vlen*r6PV4f=vvm^2GK(Djs8t`JzkRToI)-8(-w1PlPoGO5pqN+-j zLisd$O(4^S-kc2Jy~T#%Ybv=VYRbtUYgc%CLa1qKyf?L62ve4sY-I0fP?EIQd5rX3 z`Rd&FZl{7-6*Y$X6K1s_kn>j$u?C#2mwl zC~Ox(=qlljH`Pcq$KCzG;8((4w6%-a`?f(4FVl@I?U^iofBmHoug^mw8RVD?|7`Lt zqFireH?1(BwpGdm9}Pgpg1r~X>1@bY=_>PVwfug0I#((Jh7$q%fyKaLCp3Dds-&K zEavWQI&hedpN3vlK_*0eZWveg=g)2;NkhGojZ^>}gnl?E>!mV89^LGBcQo_W zF(BqIABXqBgc6T|!7v=FjKkQIb)!AT1R>fQaIV|9^jX{03y#@RV9zPV0tFu4a$nL+ zrx5Re9p=ro12GoKKd!93K=Xh*%dN38u>PCJzHq-BP?#`X0Jx*SfBdkXGNj$ zr;=|;oO5-;l&vH%+(==TYoV6^awF=8-5(|98SxEU6sgMy@7kZje(CgXF!51F$fgzZ zX_g<(+f*n=p_JkgZm!1JWcW&9Yz{$Oq?In$KDO=8MV6F$_#MEhF{(?#(qpIFZ)v8d z)UvusoGQCx87)Tbymft~{~v0^FL&i5f)aiIJFG@E|BKN73^VeNPpgK|m=1zIkdxd< z=2|i2o@rqfOEy(#3m<&1HxKQ=CcjZArx2Wul1l1Tsx}l`smrEq$jD&DqGl%;7597K zD&FYplCqpQ9{amyyZwpIe169$k;_HpFA%%7D9bjSVeIgM@t&W4Q@4 zb2cFweqDD&K$YeVlQL&q#YS$zi+I_gA(m*Zh7fY6CY(_OZ8Bmk$ftO+qN=xLRu@n1A3A60%*_ju z`CiIwsD>#PxZW&Wc7)5^;~6)N3J2(kgrE-6cZ6ca+`=WWRx>n|X#xRD4Ah(Uc6)`i zHjS$V!$n^wOgl608Wy|F^jv=yI6z$BFPgzCexUH0 zzUY>f6j^1-aI}8(s!qIyX!H#vNq-VI1xX_nRk1K7Fmw)5^JJyj-D)*TJmv5A(H9D8 z<(Z6RtI2Wa^bBR|Wm1GX{;rY1*$trn6MkUD|J5=K!1rCn@Cz99uj?> z!)6#O>xu@7@TDpZgh*t49f>$!Y)iuRm}KUtb4k){_Y>dz z>|;q=0hgPZz**TCM<_FN)hpOyd`?WFG@}$h$*4jytM;L(zXxFc0fVx|6GkjqF{u(Z z5|O#TJMC(Om`@KD)?{(Ij1=i^oim!joi%L8VB~$bp~D`9_-9>3Ll}M=wpNV={9&eu zxp&AfJfgiqhPgNoic5n~#DR{8U%fpfYakAoAKKendEEjkB8Wzxxz;QONWZA74nSZ( zegYMXug(7pu5JEqi1p(d<&sE%fHN#b9tk96#&t<1_Ey#sK$4bGD|>1@D%|@4-7jm= z8{OJqcgjtJca~(69X0YdE%#;X9V}DpSxz?XC}@yOC?}njyZuVS5AZvS8HQTgF>~j* z?k^AU8ZD83SBnLMY$;3P!M=8c{R~oxV5BZM>j}OJ{&|UkaaVmY$6|=@wthbkJ5okD z9H;CpDwr-y+XLG=AW2V+yWpom4v#Mne*phK0KoHI-TWrNy+AQQYi1uuDxPPW52D)B81-F~%OiOa_ikPO5p~yu=S1IcFy)2Fy-O1c1t%ukJ|u0l=dr5q+eZSB7NVR_cd}(#n=%*Xl+M6}x~}vKGE?L5=3Q zx?IW=Nik-`k-j3gqRz%vM7&A2w|iKlc5rf2j#pKQl}gx^+NQ2tMFuhQv>8~i(A^)6)A`ddl6H|V;h=yTU+FK6#U zsW#U9>Z76(2V6`!8^FeP_w?#MbpCIg5MWKe3+wyo zxRbdNs$vsTFuYuPBZ27Lz@m6vDf9SBP?Ql^Tc^Jn!q$gL=j1N9aYM_%_Q!29H&88H zj#npFVImz-UFtj7J#Y>?mB1-$P$RlfyJtyVv6s=sE!lp>;VO2&)2- zbL`zAWMK`Y&$E0cnw;KDU-%isIh7Nz&09_D3^kNj>EH!f4(p9Ly5^LoipR0q;xdp4Z?{)Ux3r&YP4^fMdP-=ZdsQ)! zXd*ur7})m9$BBC_aj+f6hs_$Jlc_I|YVHeGo5Q`?WEAoO@ZvBe|}1#c!$DSPmB6Lc6xOh(xVgh7!Y z)gePAP-;lCt9cR=6UmY$s)tFI5c;UODbOj0)9p`>Y)s1&UD+J_2L!l|QX7*(^y;`& zq^w4b*HeW;CQ>q}Guh0rNo+CyBf7^extK)EsWgL9*yf6+4i=E`82*kfw;I>qSyoHaIj8$ipYi19O699Wd)Qp%B z+$aJXk;(sPGBX8#qqsEsO?=@URQbF+go@Au>9pG#)^Xt#kI~c&dbvw=VP95&hQPpZ zOYeQ1W}`Xlj7xp#$k9J*-^7AE%gxWaOdb`Bf{57|t8)-%j69F@qKdCmY~trhJUFuN zYQ^Cngf?!Lqlvd*Y^J-Eu37z2XqmZtF-YDUtjX?dU$ z9z|?BSJ{VX8LyB4^fD$U9R+}HqHQj!t8FwO0ym@%mr%FE2MZc>OOxq^Or)@q;5wJW zmUzhU7S0$Yx>k_d*oi0((0ibP8F%BZH|X%LG-vD`n#kqrVApH~p94ClWzQBJ?%(** z-%VihW=4Cm9ECSqq;vjfk<%C765Mtv0|1h$;AZwy_8-p1Jl|cV+|ZsL-?5*J@LteT zE%}Q4O7`MhK{4oi3VXxU4`eXrieCi9!1iH})<*n|r7V!1vGx2c7l6f|7Lt6*M8OZ`ODp0xp+Yo2*|T<+#qq7V-~W<-k*$D}M(fOOc`hXwIN{hr!`02(m#mC!Wvc87g-X_>MM2_+* zZMQ62sZUK?Sfdd3FFk;)XwOt@!>&xSriLNZ_7qF@-a=*#ak6qQ*k%hajqha{uY4`29tAfg~R3;Mm>pQ2yB_CRbLi#{z;pV9_HV7j{k1^7CFg$6ot z;Hr055ggE{ z9OIslua36@(2UruqriW%-e)SGb)4+uYu(ngdj6GbYO60VOt|(M`h^6g50q`>KRoNiy^6SbYtll zIWm6-K&QW;sQAtbl4^F0i^sVJ4pDJ*GikmI$8!eg!g3qNvN#YBH<*-<&Ub>SK#2&;$sq;&h9Z z>_>Z=t)o4W&(3uUp#E|GjI$(5D3Ivf%x>pPNxh?J>&Xw*O1N3oi1NlD0$=THz*xKE z@MTPifOGIa+(9&4s?zxBX~0#slU%XN>@o}SslfTMrV#xd&h>6B;%~VoE?E@J(dNuv z?>bOD)6vM_BsKs?mXlVO`jFDTll9kH=*DhG@WV=;gn|efi5UkIY2I(jN`Y~u`-dNG z+V$7m8YO{-RICP9cHp}jf@{va8t1A;tS&`CQA{zw5~ro$5m~XJX5L2QNx_AR?~NMG z6V9kdAksF}@?cm5R*P=1D$i-E7TwF7Yh2oEz_)2%4o0UDvVUZnz#Mn`1Ic5 zxN>=`sK|`R$-%hbr$7cVlzi4M2Ee-7tZ6=Ar*(MXMVkt0!FI#ce~rt(d7yW!hb!}Z z|E_}n9Fyb+)aK)!SOlJz%`jJII;osG3EQUDT*H(R(^TKWCFd6PQ!1|)l=;bDic>&A zzT#`eGcm6c|ICwC*kWQz4}q^Ke3O2aeeu@Ovd<%_BrPmVl>F3D9LufnGz1N{AW3~Q z>iyWI`;x~WsI5y?8HLJz(Bmc|q;Ow@)jz!-@BPkw#2x-yRAK{oL_13~1e-=>(ZP0*)E&o&e>!PlGmXpw0qt^;dYIIAN_f==pAZ?Aq` zpfX4)dZdhoPbfz)&s3&pd+j^z#d5UJ0UIS@p5x-(mCVPTDhu;xdiu@a;yFv{2i8*; z?SWtDvC|8H?Ls>*rLSt*eP{<7=S+LPK&yb_xv%OD-t`JW+WVsZjY?FiL^~DH0$E`; zwfuIB z=C_k{h>IM#tW`Y1Y3N8i;vLA3x1F(K525mayM)@o4=@?n+y0+z0T!*RLRujFWdXGh^Jfp1)}$>O&I8Ju7{b*;7J!> zMyUP0)MXQlE!r&Z!!PKL{_Bu-yC={G+t#o|?r|#xML;7UyY2-U5?10a$ulwe6Zq+z z3q-GdRN)!$Bsx=(#-%t!@Z^B>KzHY-pO||QyC{^@R1c!SgI13NpiOh7qBp*MtR^>b z_i>&LNBDP?f&XSMSN_bzRwbLD4u;v*=_nNvOxaq5(1#cOAbs{!BiA_CzbcC3BKxW{ zIQ9AO1v5$xZ5}UN-%=zg^zRRRJ1X8P<&!WH66{u7DaL!1q$hAJ7QCQSoVM!4!$=BKmn(ftOKLZ=qi=-iArv4KRM<=%x2Hx?o>>t48xb;_ zy7iD(r{hU5`lFh_(J+}j#Q2*6AGk~ErGg@rX_ut7sJZmVEz|9)ofhPv5@6r+FAYJ| ze~a*sO?e@oKZ|%htNCjX5*W>sP=JMJogP5XSgSt-u}WRw!`~L9Hxhrok}QU=Kd-q+ zDP->*wE+o=R&#m<#oWsgzZx-llY41b|7{p<#=4-5tabF0xR2JkxI zyR}h44=5<(4^)dV*E_!LII1eGK@8sfIieUY`gtQSP{Ys+I^k_kb=uHOB0jJwxGx81 zwQVASCFsq^PHmb_LRG&is9cD3b((LaO-wxtTs0(E+i^5Cdb{%#GNeieFNkd{kOZw& z{c!CX{XhNiL&PHh$#4ih-5`U8iBxIR~>^Y+cu_ip%V_SCV1gN*W{~Nf_4&ga)UABh2HHU8a^CQGf zm7G_F(=GeU6Hl1Bbh4;lE<;}+G#0;I?W^g7WzKKD3$JPNXr2w>19g&?FAqe`lR?IQ zneS3v;D^e2MwGr%pa0*@37XN3wzkd-Eq0Ci=z@ecKj7N<=bHo>f*AR<2CE|F~J3;}#a)T6A zTFB!_nIxsMjYyd&=kf|o8&`ar;fw%RAj)C!50gU<{WlpJQ<-!Iu`tOYQ!-gBL-sjx zolp?KBJ4&`UnO1D)?+CFWBt>RYlG2|lc+|!p!9CM3!V=e!}hDFv!N^`mVsqDqHlu@ z8WPc61%a6ZkKFEgO>7iuuU7)bolysXM(Kji$dv_r$_;h(?{0#3Q+@gg@xBCY{Nntn z-<_yee>ogS;Y!G4JJwTatJN*8PV43_dE}BN%KvJ_Mut+!U70Kf{=5X0O|SN`zr;HP zM*aMDbz+=HqLU25gq2J1iu85kSP5~PyiY1Hnw7ZGCD`lDd2 zrZd`-e=DqrqanmN#Li>d!$Sq$oki!ha^2mVEY*T>0TdU^;2xYm#I_y(EDbpx;RyiK zNaAxoW;h@HG&@4xJN~i@i52U)R+WLHiUh$mT37R*V)xDLP}7~&cEyc`3^8?4p!KB! zr2okCrid>BJx1`F1Q@Q`CIF~`Xkjo%1;Y=v&h=Z&OF)V(#ok-FAnFvgEG4Z*qEX#q<_hK@5Vl;$~|cV+C~Gs zwRVKwz%LbeRn_#u4Mr-)te{Iv<2qLNG1P ziW3g7D_=UvGk4p0j9#eo6yi=bV>Ls#vN?E0x-&hH`aOJEpksIiK9Nr z^9>YS0%Ab0Z%sQ(W}P%FlfpD;B?)zKS6N(%!bkZ&g0`aAl>(ykJ`I9k1hzYAm=KCG zo2auFH^LR}wK82;j;h#zUJ+9xHfX&Te__41)%&j(J3n?Lc7g~KLas>3I?%&6piYwz z{0C#rurk`e3L=bm%ZRYd8>Cy2+DpG!Wyg}Y=w(aWwH#sZ-bCnC!Q5o}=!@|=rF>4U z!`PDt)2h+~Lor#Gukb!@9!EeI;g1+ZEI83Qh?O#bn_~x~Qb;!{8#sg7xl016=dZE& zc9XxT9yr+g?>Vx490670r2gb@mY)x{aEY*kVs}AC0}d~+Y$3UKk;kRPvJ9zA=eJ^R zf^0;5(2D6c!Un1&H+>(F6UsLwxJt-WXD~Im1P|xENJBGUx|BxqGv`%cFh4+7FyiO{ z;03#|>q>vAoo|zZ?3S^H>6kd1!3t$tKOG}m^!C}tm7i;g%+=cXz92}E@^Gk6H#FxH zSpvcuw`M=mz@BwMh{cxD^RgIlEdP+(C^62sm9kYQO$MvnSX&vQ-NhW*!CrtI47Qs%u6TI<)@x~6cFqH{!g#bcGDG^;XA+>Sx*!-vYa zAZ(WD4(&3bIv%VPYtF`)XP-L2jN>ws9m#1_Zy1yiUBu)@glipmDoWj*3vsVb{3AFi0jc-WEf4Sil)_k!7pam8uc(#{fH0`ust=G}hKu{8jV zV|DDDE84_m6`wtu`Y?2c2BI_~;1PhHED>29dj=1;3y2xyEZaZmOTE*T2=nnyMgH~b zKSH$(^&2e=xpDCZEW;49L?c+BjRdroL=mhtu2c|}@eCt4XSK^mmgFJEC2f?}y%ILZ zk`_jA@@s{B3Tn&p;bKrDs=gpD;#UIXPA6<#U8w@Sn_d9hcp_-)@qn}QI?Pu5l$x4v< z2$mUTE+?sX zg?A`_xUaz%*GMq^M3BlQYY%CMT&kw{Y_1KIEi@kqE~7P~xw(yyd#GHxA$snauD*batB-Wr-DKzvrbbK-#;%Ide}f zs5Ys~|_WlP~5OI%Aa{SqG{{fg@hd5Np2Yl+RqD%Ng; zjE;{(L>hOUOMlGMGG-X>M?<(t7YmjZUOmvN8{RrN=VY6kNRA^)FE!zs^y)we`h)`h zU{6+qlkv;t!ocg$C1_-+U4#k1J3L06o z*p3^mccn6;rAa)m#_s2R9+}2!Bwl7`HsEF?TPa#UpfVtH9F6PzX8>+P|B!#Lc@6tT z^W;32SQkeo44$})zqv9CwHw7(2MGf1Ol)?t<&y%Eg~#A_j6;)OWLltneZHJIT$@3f z*Ip5|hNiI2U#D1dxtwj6^;T1m#FCxAY*g!tIzI|E$;Bs+0@5(RM&H8mVX7?|Vr8_W zs{Da{RlHeJkV6M1 zYh>RWU;hW@+t2tb{hQmiD>t_~G}P+rj0x|jnn<9iyT@wWc5?N%%+#qsFJLP_+M&ol zS!GLEh&scOq(#E`Wl$;-!l)u|j<+Kzf}@C-nM0?ao6;NCY!e=W$@V#9z2tQ3;~|LB zIC=4i$vld?alq_4IDXUCF+Gi9X1T$+CZ_IgZ@9`=b3Dm`|mzJ}2*W zTxY~tz{38XmbM98MIO$b{pcR4&ju*@t5|)9Yr>|0_8>4K&x?&EQLU$=8pYn+MpiSr zIrSSALZCq<+3lU(aFeXKq$XsA7A!+ef@4ySU$J~2oMqsPjYTPkKsK<$-|&>$QCN0 zwWt*x2?}&m(1;*US_{-@r%(Jt&mgvi#qZamWGY-kNKxo$M4SXSGD^-J4pZFeg$Z&& zl?4bhTRikh>)}wjDGQI^$KM{6lEyU0kL&FdqWzld$%zJb1Y?)X=})4NLJfu{hLJ}F zu9n?Vf&dtrd5YUv{I^V8oUS9J&R`e7QBzQxTV1U*Hpf{ENzj=ql0nLrO&K7`^1ljte^o}z#yV&w63|RN;3twaqU!R0{kM5%zJR93)vNw7R1oM ztcB0-Jnzn98EMGRkXl>SKw6wJT5gAJkFg@MmQJRuwt~<1a~DW4ggTMpO|h^ik{#bW z@RB4CK62ogjg{}`L4=uKBFQCXCOPS}dD#cU>T2VEyP9M5^bVpEIwYWP$wt_%(=O*e zu%j&eLM;mJGW?K%+GHY2J@RSjw(UdhG*GzL!&aVCm}cIrCD0lqq|bSUS47$4dqHuU za2f5bz=KPt=hf5PAKQw{&jFN5ix6!{4#(hsnwr#x`I+wjtiSnqM}n_rG^Sn55(0EZ z=A-)x3GaTV6iLId3FG#C0z1+XgR%AOfeq1?dTpZpg#n1yDL(}mEbk&0VVK}`-5=z; zd(5=2_F|XZDD494qa4#u57&;rnsHDum4)txBCMTP)hHsf^p94)&i-MFVj;<%#G* zgt1DhKB`9qz2YW|)&muvNT2Z*sH0g_OF)@IB>;E^8RHWPq+e!h_E2`voQt|Ws%Ryl zt?Ph#o^69E{$`S9)>+%{O06~WXl-5)3ccv z2e`;vmcwG_YlPY#p*z%`s7qe0*+2rn6Ra(USktdAt4fDT zIRzyiflA#{=rg_(^OPQJv&~F}>U)1E#tI7n_AYq^2k(?uP#S5tbw&Oos~!@VgxH-K zz!j?M`4RMG5v8XV{mvi(B>6Qi?9LhsNZk;~qo_}u1k44m!4VYWI0E@c)olkAQ4PLQ zXY#c>wV^?+Zo-seKKj6??92Yz_~G@2Att#IQB3DW z-Oj)y_mv5eazJ(LDahBjdTB6kvNtQl#0<+w zRP%z#C(Xtpq+O)=rQWl`UtSV{@mP^w=;jl)(7&0K*&iD@nT#6Y^IRzHn|fNov-7bf z>Wu&61E3+JGamlJfp-j_gzT0JpcI6Q>WZql%HNVDSsYb`zzc*2+9v$P*=SfhW{C)z z*goUwlb2%^;FS>N;-i&|iN6OkSB7OIbm?L8;smXh-t16Y{?D!2! zFPu!C1Tt60kToQPGYC&xS>0t6x=V_mlzzX2aRO2*7=X{qWlg28R&JX3e4p4`ATMml zt(}|*;%W@~f)!hK{Hj#ui}ftP~|qG6WXN-~=o(r0=BK?L4$ z(~ZdGPb&`ma_BHWJBZEMA7Kfc%FRe6O)m^#2hDC(`jl`^c_@8?F$@_++3eyM(biuF zCKuNYoSx5a>crQiorRo~*-ZEzhs?0$%CPzk+m4yaDE~0* z{r&iX$iVm_CkF4)d3bTXWQb+{f+5yeA{a2AHC^aO2#HS3$tofZa6Y@}u3Nll;F9K! z8Rr!VYezpRxr0;I&4Vy-&xutIRe<+~|2D8L6}fBL)-E0}aM8(HM4ZhJ1>3WZc2^QS z3NYXLVu^~xv%Fe0)=+h#C*cBw;lormZnHZ+Tp`Inw_k&q1!5B4`6ZWWI|RakGB|45 zz0{%BIhRdU(fR7EShomUh}a#B`M1Z?uN7BzR@5GLgBg>^ZdLHtZTZX`rfh~P85^Ay z%fef-YKE*|RN8{30H-6on1bz(ky7eQu^C@P#a~(c#;_!SZeSDgBTQux!QREVk*KhS z=)0h&RZ{iLr|SG^+`oFOBzcw^)3NxrI(5fu)(h2C#TMW%K?EaL9&f1#4nDCA>T&5B zWypgbD)rs_ns$t2WLQXMl?L6?gY~-50E2ItWfDg91onE4;W<_Nj3RE=YCbZj)$ihwtu^o{NlQQw zZGqAdPqY&u&)x9V_Vu>r40}r1D@P8|lF4v|rb}c;4muh8P|D}KE;d9g`9}PHU~pJ$ z{LnWvz*i$xAkJo_*D&Wlkspm84ZwR9H>UmCwHI?mQ(i5toVm z7lq7H5373)fn$6Vq(l*M2^12;y|td-;2q4X1NP*yVOV9O{-}x6Ykn&2fjqj#s-ln< zga()VX`cTvl+HJKQCvPT@?FVyB4H6e9WJCzUmpQ3?j-Mcws*_n4Hyi+`k3+xcH`Wf zI_tSIKfAmoTd&7|qx7EOjHtX=hTYC1wCHY9iQ+EK+wU$mtjn{4^%k>hCf#mE6*npt zcwPZc8cpo&^rYY;gC(Lo-80Uk$9*SdQcyM<3>@%Ov&px|2a(5aU50O$m2eO4qED(- z5y2j?2p%Coda-2-2GkRy>(NQFv;Zal$(x+mZB#s)X2e3GeQBcBszJc}2+B!C+UIWY z9g)icz~d6}D)lQj^*p#+7~Z<}63j^V9)`#U0=8p?yZ){|62Khb0fXA|;b-h&3~}18 zHtV}ZvyuQLN9?yw9ele0_PJR!KIoFBmNG^E4$ROcoN%p1ak>Zw_Z9c;D!S{^KGPv|+exy~0d=hMGbp#l(Zd!?j)*7p8 zIiq8~N{&k7E{voQ>^VcTv*J8JDc?VsGH1S?|ByX3Iu34u5?+Q$s zxI@E?W><>2>3_3*a9Blhk|j8z@o%gsI{GsCeA>r?29`FGM${Iw zKf^~47PB-wJm2ouFgSOJ>V za%TI6Eb2c~b{SSTwDHiOk3WiyV)f8?KV)B4F2C{Woa3}uzfc<0q#--2MZsxB5<1O? z-CPfvy>u8=v<>Cim%NdthVw~1*Y?yCku@ff-0r`9^4TJZG^MdVj#Si+`sQ@%Ke#Ag zrK|-G^Mm?3Gu@Q;XSxP-g(*_h9xeI2G=e0@xL{@Ee(oeX$!JaV26T|YNMaD;nzbM zUk$wNC>vAh6J5&Kg8HjSdoK14Z(dwFjIJNz%vL>jtCGW&Y73d?&nJiiB+-K|=|~v~ z&x?^2S1{iA$siq`&8^&y2NN^}xjng;P={oOa*dez80S~x6{XW$-+K_r5na$bn0mJF zRUlGQRrcr1s}3u;#|mXzK^YsXtKC?{9Llxo_?hj|fCD6lG>k58NC(wd7O)nPz>adn zL7wI*Yn%HRYx*DDxp#=+bT%79|1!GLf1KLRxqB(Nr^NA0J=lSrM)hE+J%LEn16vL- zV}1-Sg~vZr2V?37H11J)ggI4aSx1zfSy6M>;Y7ko#lplsT57QF-g~*5BRDkvGpEo` z#*L}(&mE~eATD4*S_rsbeP}G*{xgne^rh0~=a(#5mT>9B~ zfF%6fLT;qnKBb6{DTH{DqG5a!hbk?8LXg$%hx+!B&r`#g23Hr@vC2%}1DYHS5r1of z6y6Q?O1?UY?1NCIEZ>|(Q9SW?JhhPnbCl^AH%o7j`yarznAu*sNej(jt87Dk9(J_W`=t4hw&TiSP5)#g z^LCGte__m5%6|2?yoWHmI#kb7G&PE&efciuPTr6dVL;E8c%%t6OKBYYKq4hvD3qeA zxA+3{Em@QRe{o$4kh4kXhy7+|)FdUhWWhPbJSP>r@;tWC8HO9m>f=fTfrA+>-Bm5-EZo z7gPfpYLu6uAikE{lj`D(U4#efR6P{GD0XvN-W9K1nCALEVp~(V^V|gQez1#Tr;Rav zd`WLr$(zQ-y&l{g+#qsMR%Yb{NU)YVnX1GZ|X6t%CPNQ{;G$FK z900dhx)?@`{9=?xCLu0DC*t$17#Ze)yDKhEj+r&eyft`5ncCN>v4^{fd9`q?ZF2vf zxIbsOs^9mK1-@Ae7H~-wS*?GFWhhP(QRMw##zNd|Ia=JCpHMSa8Uy>9r#<}{G~LX! zE4{4&syh4_Ev6`rztyM2B~@*|ZxK3Ym&*mJlg9dg7ogO*HppeHd0JlrF89jZzD^lg zXJQT*4@hGw<_`te5nDY<&JBYLXsTDhBja&4*#WnR-emf-t%LCXdCVh$gO&1lxxD)h-65u;G57geO2QoUOj3E!$;Bfd_`S+Em6x;%Y3NI;Gl2NdE{ z7-=eO-G9dIT+?O{+~u(71_PeXm)pXj1%P;3n7jZB)NzG3qAuaJet|g^DwSccoyv@a zjB4V;f+fcH;#n!rx#rH72KT=;1y-@Y_*wIC%K;a~=tZyLk}oUDkC*yFST4rG4*F~{ zI`GtQtg8I`Vx;r-svM4vhifUBYt8F=nxne)Z9?qGx@Vjazm@x!$qVg`7pzX$`y9() zUOh5jS@-DC_DIXx!4>T)C!x{r|A2XIZto6r@`|vo?7VfhP2NfcCp8I)fx_*kX7be} zDTtIuA6F@br7ob{Be!{HAg3hb0(6r0L@uw6{Uya4ef3MbKOx!FC$JsZlU&@WI z-4;DG{h#rOkM2PAL}i}IL<6vQ;}R5azdvSL0?gA4`n?sE82rmG8OVbh#u`hFb_~vV z(i`16?g$?tVqT8WKU-mG4x=y!%l=z)H=x4=R9_kVQ>@|OhFP!q_)eGOa14e4$nFfP z(GE~;CiWHxeMdrZ#7rjO6egWGJQF#;g8YC>ZC`H5#&MkauDy1AE4#x-N}}I#jIHX@ zW93Ifj?|@qgvet;V|q+xAahESb)`4>%pWb;N&`k8TGPE8ZbC1~>yI30$Z4#&{HHqv z?~oBIAxD{l>5&wyyt;u= z?bqT3{xC%n-Ahmxp)k1k3E;MY1$slb0d7$=Oi$t^GuXu#yMMMrnrZ0ZpC>|-LH85n zB63Kwan~q7VWe5K;v@R$8!tyQnJ+=tSiH}r>_f)1w_XIp!{1MBYWiv>oO?BHM_ zhlS}PA&<82r}PJ<4!;Fq))7IAO+GV=WoUx+3?2r>QUW|q0ey>4O>ULed5wutKA?7` z$ma$mqw8YVWMzU+^ES!#%AC667naqwR^}bmn$bR02HUj>6?+{|?aWkLki3?Ums+=y zsC{qS1{5Mj6&J4Bf@DciEQ7EP+C>=iK`sh=Q8y#>4U46=Q5wd?o7WC2w z9O=O{XI8RaaQ37QW7D1o*@c^q4@`ZzxL{G$_QZpCrA?hBtqqq`CMk>)c9IFw-V(3`y~w^9(D8S$(vVc z#K=rTBGGV(710;9>mYbXBz z)60D?zmEg$-N-4g0fy4I$6Zj!5_mFPE3t4m?WbFV9~DjHQh6DRdH8q>h0N-)i`-XExK5k zA%lAIv6)Fq{R**K!6R>>l-c5sYJ1$~lO4*-_OBZz8x%7z3Ulaoa?Uief&lrQL*f6? zo(t}W>M~Gof5Q;z$m%S0#*(-N@}SXFWd4ojg4l|vzUsQB-WxGq^ZOE;e};(Z#0Imx zwlV{Rj+gF4btN#`PA_%mU~Z{eJiHQuxfG*vVHl%TIr)tSh@4035rSs4&w- zx>R zj+OWA3AU@rc+dHuPrX2E;ipy^aVTe;2=7^dluxJs^wTt@7i6FWgS_kAuP`{1o<639 zE;Jn+g_~MVT1h|a>%@v2S2>A0KE#)(K^%CCZ8`rlfA;4C+t}IP0T5lY#9srwy{T{> z0X?0?8eFx?)Wtm|ZSZ7Q4`&*xW1h$V51EbD(BYaFFdV{Z=INuSf>+FWeZD3w3Dr03 zj-IuItjT~bZ$rIx5Z8o>a~(EKmCn_E&cKRW20vVyv>C$E?Z+gene86a_^AaTl-9p4 zUo-u1aDVoj%BN@tkI=;*pdqJg%4A92vMD}2G`|4H#?}(b;LTe#m=6FJfnMSXoAoI! zNdu;C)!rSOQUDL_=?<%e_ubE5+K?t34`1&LM&0%LnYH9@3Ef3yG;E@j4_*DGcIm{r z`)1C@Y+g1l=|2D+J~|zbN0U5guSCfsAG-fxxZ^#5MKM3lBnFTg;;1p>OUdOI=m?uZ zPF+edP_6h0g0Q~t@Bb50*Vd?nX7O(ih>v+~i&sV|2zT(8Kxdwquts}D{S7_?Cer^5 zUCMEqAp4wI2991R!+*PuU=KU>>pGq!ZvL3#ozdJ6s|E2WhoU!Hs3op;#RoFG$*6_d zJ^^C%wn$yvYzV;EH%C|@%2u3lCDhi#eXrPhG7<)!Ua1##oXP7_=ZNfPl@_QJj=L1o z$6ID{2jn;II}^yfuWu@ z%2Bvr!-qiDzLb?p7 z^uh5169$$GjeGgp$6!5TNFy6aDgK>T(w9*5Fk@55gpy{0jv1!e{p%oAx2as1t*}Ej z2T4CQ>)+&KCOL%4GGoWeNjf5pS<;J~9~D?&Ly&DL+Qzo&Y*uo-3RE}DH%vrthq~}Z zQYSYVir1B`JSa{ipoPBtXyDHP3m3}B;KkH<(}}SFX@17yUOGdI0otk&zX5RWrE{Ks zvYKyQNCl0UBajm?xQZNZQVdClZGF# z#=>q9vur9mU+@Y7+GaSGH?UqX)z|5ccpDy|@aM-(eU2C?-R(D5)1i+j3#kR9m)efB zlZ|Kz9jCJggp)XsR-ZB5Pa6CEd*(1Byh=!)Sso}QN|qOt zhr>(fRFadxE|{P3Dfqc>liA`6N)2GdsJu&MGNrtAUcB8F1Uro`#$lyReq>%M$ZFy$ z{QnEFXhNHO{_t&D98&=sVZ8KUBpG~ezbv-0p!UVR`jm`T*@#fSewxP;tzgenN7&zq zP`G}7o7q7v$Ioa;V2)Tor(gQ-C0jkJvZ@<`H3BCf zomlanm|9wz1n0m(x!7xpD4?>)+$ zeGxG!r|z(F!o?*)xA(lH3qHD4%Wgu7)Rm&FTytEQLZDui1l30c4$1{{03(=@GYW-X zYD6T#&f|xIGsnHB9>cBkV_{}BYn!tr&r0``PkAF)`2Wb4#J({!93?=>c=1O)G&Sc= z1Glh>)V@QU3Rpl?9zpkPzCJh`Yd)@aGVdotrCf+xA9xCVG_W(3P2!jq_Tp>X zJv{^qy0Ix}_?r>7_|u{qK)WrlXl3;#X;m^tC(>@xpvU7&-fU~$f_7*1B_=wfHpq?4 zqWuF%T)6Zs{C>1|W&;>Q5_biB|cD}g>$d!b3qK+E&B6MLyq?+BtSv`YI zUqkeHa2K$Jp5}wOM_13QV&<^k7GzS0_=Qht90FNQ>%!X(|5y8!r)N;eoY$hKAq0bi zV9`;5C*lXgL#65P2XuM@I@`f77rIF6RWPaErs*Cu(cMt8{gIwDh2bn*$D;(5w1{Q} zl`iY9%60C|g*KKMf`g7y&osh0G#j5EBpf$Pnb1+aJbB6Q3NwFUH#dk?JW|B%jPgcX zu3p*PkU&@~O3q)%)1CPAbh0zuYRaj4P(ad8F0oVGY@LljL2r=5trJWR?CJkw(~MoaQhYw3=i+ZzI||%V2f#gQkry zEPP>G4hv_JeN#kM9^-OBcXO1z`5S*lKgM>x6O~TKEJV4=mMkF{ZWj;m*9#_Qk_q1V zb0mF!0(%K9+c8ku(dnA#Y%lD90v)rNL~tc`)r5Y8OpF*y(-|e}ypR`jz+LxdTJ%2D zp79U;u7^6P1v-2BxR#BN+?0MlOFNLFxtRcIP^McxW=H-**?CmU9feEDcR9ariMIlr~v;z0Kg*Tm+sLZaR?v3=ab5# zZkcS0ZjkM7mu9GF-{AiaTDWDWK|MYE^5ng}D3U@`hCu&eummdSW;NweAeI|IUVkU# z;22!KApp=WN?2&VUVt@zCiM$q$D_s2pHbL!LjsS@uba`caQ@y!&bCI)!8za_o+kB+ z|JU(WPkivNsl$y%8jy#dMxaQlPgOE;r~Fvld+k0*eTxLD%Fm*g+c!HJd@zvRS)_>x zG{x*j!}wV-UGl7Ij-H6ue3B^Ka-Qm}4=$PNEkU(ET$6`lKL8HGmc2&qqFOsxs639I zDM|^*R0s=C7S8+(SNRmJ@?M^%1+z-S<;OTg z+e6r1%f_`Nk@wG&`3dLNqU^l@!>IGhG*JK189LMImGHd#dvUj@VV*_A-ahHb+0H+! z+q3Dp`}zUkwCU%+!($U~7<6Oynn#gg)Ec+?FknQ1jO%15T$9NJeU;8*886o?Qf{&5 zx%1N0706;?c@bYWHCF+`)@ca`Yu)<96|PQaV3WC>1;%Dtdi!sO5MK2^!%bqbm4`hv zkbNtP$b?`eV5ZA0Va}@BmjsRyQDq9Oj5*f z9Z<$lu^D^XOsl`=wb1>%c%$8G%;5Y|6dAjx4AQ!^D30;YH!&f8|D9-$@nvS~`*@!U1jOs$ENuc7=Su?7B59DJTL@2e* zf!L8aiK2w0ZZYc*#MJP1Z}q-0p8!7n_W&4>1atJSSEu4t297Xa`r{Fdoa~Ix{Wn=fgaxLv)Odw%CSS}K zEU!gX7P<_{c`{Me0ZE1)QGAGA2^3((l0o5&5y!6~d~_r9@6ag*{W);pS=n2+ord|S zA*nwpSK)cWUKn(^@kvJ95?m*1Hn{iZf^u!&b{k*ZCg88XzL&ZkUz-W_y%0F}^iWI& zQKA9J)7PsDGK&~Idx`|3&J#Szy0ELnGB~wfi9`h8RcvdDTFI<4fM0s7Q|Fy^lsr6P zCUL-P*v!OrP{T3k(#4ife_gA1z6 zA+n)C^Mjpgj3oelg(wt!iL~n^ytIB_cqY zTk*+@c&`k4pgi_@s%XUpN@HfuY;jCi`TTqAYUxptKn5)$-$blYj?=UqdT3?}h7v9dyH3Tj^NjcOj@PZHY(c#}K zo26#aDIdmp5E5WIa4~^R2%8>YDmXW5hab$mHAIH71~Wur!q3ZGxcT1k<9vtmCMSpz z&*c|^yos?ugw0EEaw#*2DT#P7hCbD`oobyNm^skbuh+|(r%OO~q|!(4bl&r!-b^N3CB zEnSwbd22_gSF}kS5hCEYF|Ezvi?4%^TOh;5X?HA|ii-Zrbs#3I;dB0~_3b~cDLEhw z1BXj<3wcc($?9}#CyKQJyc4l;@@Oy$mO?YYct_A1$EoRHCPL#aGiyY21vWN=w_jJjYg)B#hLEruT}CVP?W- zedb5lrnWLv)`tpmDG7ztj?-@`B|!bA1@l?5M--J#Xq|wKrzo8!>ymhEgC^zz0&Wq` zDqCE$s;!gug0EiPa9@$F?PfmGr4cT2V|%#&D>N!b!hO)|)*dTkwk>Jceio^mA=^8F z1cl8a(A504l;b4-XTp8?XSQDblP!6Xl_p-UJwj>#ABdSN=%dj9+o$RBMq6Y(r3TfC zA`2J~HobGmg8ce}rEKAuY9+VEu@lK7{ZZ)8K*1`2>I3U#vxY{yH~;6+A}`pMRmXerQ&`Rv8^t02`T zq{YVdh!_o^g=UY>>q~vPVE~RQFnt+um65bH^r%~5&$?WQyAjKCOXIYQP9c(cn1KM9 z(l)4f^1`WwO$Tm*hR?v8F?0l{Jf-GOkY?tN*z|>*|M8X2VBsy*+U_Q(j(0&cX47$! zv7sFGcXBM6^%cbRrm~arUY`e<=ad1Em>?oju0P~qJ}RKI)BeIj1-8^e&Ha=XL>-N0 zY&u!20q~Y``g_a$YwrH6*+Z81A9227LqKL6$W{*pKe{wqcKa=o&sy3<@3@wJyNrIt zkBtc6n5h9@mwLgQys|{{&nI1+n#1p2jZW=#GD0PT&&aFAskpqiVNC##5v$mMWzeJc zKk;*c=5AAq?ln>twV`k2@pxeE`ymlu|I?ScuD5!v@M)b-GvqIz*O-=3a3Y3&46?Hp zGt9RvV#=EuNok}a)9>Aq=o-3)-j4V#-tY1DmAT4o!Ql~foU6rUFTHO$W0u9S@e4}; z!J@iegraqb?v7c@XzO#SlP{2MXE78gqMFu}XhdJ560mSn)W58i`} zv{nX?<*MC7jm~+cqgieW|Bco>n2ns%xrn0l2p0Hn?)wd$L;pUKcikh5jBap*8@pR~ z+@`DS!VQ?oyEc&v)it3)hWuyWJfx%tQcH0(6hwU5$~1KV`uYwv%>C@SwRengqZ0rUirtI~`GwHogLIA{kae%f)P`*H|MSJo!Iqq zKzm`H@&-_F%Gar748cYxb?WdHpGs=Yz`5^~b@i=pUnPKxIHbRBQ_|N{cMzk*en0eH z*rjxE*jmS6_ov#FITrf|;7?e{0N>pR|DLunN6achP^Lmilt=hadL42~(lfk^BE>lk z?#wOk*XksdeQCrB5{hBys4GZ~%dnRyN0fU)`7);IZm|HojA_{&45VY?q~RaR((d=M z^*4=+jx!G%r;7aY1*~oqn-+x$kWwJoSK4w0!Dup9?k+wu{d41+6^G{Xc}VF(iQvl( z0?@{v=XaehL(tCW!@8|ofE+iv@6<0ktNq~$1I7L(SCUc}&h)~hd5A7QL?=>Tvd<20 zCa`!Am4bG8V|3hmR^nY-8?AQ-`Vm}m>9~xPF_tkY7K*{^!!4!RQru2)uC`KW{EaN77z%LT_(ai9dXYNr|W>^8HLT;=?Jq=7dim#`Zm7$eo zp-+jzcw)M^gOgu=Fw+ZefHGIV1{JAJQ{#Tmu@&#!AE9qY^Wd8PO6}y4uQ2vFfqb|O z$Waxf2d-3%EsV?YBO@de$W8BpNW`pw??}N;=Zlp46?3%&k~_3MQDr_wL>6`SL=94g zX7TUI6zRFB=JupTP0RUbrPH1Ye;KV*BJJGJDol{|(|p69ILOf}A4*s2XLPCrwj9#! zkkRj(|Hzel94h#wgFvlT$L0#xB+YnewGXsIPSETdBq4*vwcH2LuIFb+bo2uRwmym2 z>}zlDsc)<`$NH+wP}9bFO*wUk`A@-zL+{b@h3}shBX~*-+LpOn)#U(bJM$tCJtaN# zxbpLMRR>6B!S!;x&o~x3gi7P)-RXR9&2ZJ3j%2Y)KTgV_XDI?$V2qArW?j zLy#G%eN%xz%okgLr#m@V}TiJOFZEo4ALg8OR@~e{T1`DaKZd z-KfbNPj!3BNX>eZZ>ZF4?wJYz1xBx;UbulpSxdS8up>vFt5!3*H(mW6@azLP?Lp)uL2sBR zjvhm;yoKt&z##GZ@%t3toA%}`4f%zyi=ie1daV8RJ2uW-TIw#HP0WD!EZ8wM!ObkU zOsvk|g0jZ`XHEaiUBIzz2}~%F1Aq#a{TPoinaJB#!hRLy2>Iyo7;`FF1*7sG34~gM zW=-85gU~&*Or9W}Ov7jy-0|yY zVUcwNq>f?TQa?)zd#{|PZwPheus<-W;P=rGcbCii$6ZjzwRt-3xa)T`_EpgF$154H z5ABPG)6{{@%B4taP(OXnhon2twx1{HDwUPc56RGLc8rZ41@}S93AC|YPuz0ciEJj5 z7DS7)Ez?ZOt$u8QC!6L%d%j9LQMbG6pwOvwc{${*h?f{i{R#L0gc&cDf7w`Ds?D-G zQ-7yQQsFSEF{{5uCw(eFhR5k(Cz&y+Nn9mF(dEzO zJD$4Njn%vh04!ks!?Ptv=U-t@{#bk63!`@yQ4b2qfQCdXkv*7^*I${WUu^SOe+oaz z$gA?wR1Z$C#6`u#lAbd@7EvW@6B<0mDt0y&00q~LVBK<9(Qi{@_+9s=O%k&8Kv(1E z;X5E{{mUC4V-<4`XVz;mQ4?Q=LA69loT`0P*{&7bTKauL{rLr!BCW3BgU(TH6W@|gHe4eS79Ey^ zy+T2`w?BHgl0@PN&7>My3De%-CY_0P=5y!J1u59WMMI5OK)70~G&rkImH#l4p#B8^ z_-lRmDM`-`vEUOIuIw3n*5uZ z>w9>AXoGwN;95Q^NExp&!W<&k4iipJbv`>4XDTXjyeQkET|kW&C*vrZ9ZmNZa2Z8< zjW6+N`&BDk)7eUO_pe`(*W2L{qW+)^59996pH#yfBiHCBLSEAMwvEj zOyCHOAWB{HbJhO(B+5@RmT{g+u)KP^c`&3dENSNZf$?l57KeyYSIgoW;U@tsp=t1* z=fF>fj-)PNR1~<{QLOy5-29m~=VO2wEYQo-enpuvxE!A@@vAtc+A+ z$+TeIbGO%9PRdCPF^Eq`;ef+e41q|{MlqC$0k-KKE`gFE+Q|j^1XaQFp$PY@V#(SK zl42PBTkwbGVZYnR>v*N!3iGcG-pJ*=#m*=Tw?_;URf3jaJ|Msi71`3S8{ei5VK?j9 zA}Y9w{FM>R1!Q*cHp@ex&uyoBF|EyT0CkPP&=Q2C`SqkH1G@XDFT#k_40-k$4I&+p zb_N7BaHT8lv_Eo14P>0-cK0h?rrgG@pQZMg(LHJN9@_-@5bVvh+WGBkl{8;15MDLJ zf+~|Uh?-rqU6a;x8Ag(eFM!5O;k`s=&Z5iWiQl~UFuGYd6N{7LB%&cLQQr;7!76n$ zbU{qzV%$wCzo#VFpp;T*9OGghQqVHEc{z^~>uaoq1mqPMc%aVm`55^93|PWVCVwun z&^3&u&bIRhJCS~Bg(1u4DazqfTHu7EQ!BKlc#y|fFxbCgH_Ah6#^p5_&kW9uu}i7l zp6nDWRREeqFcAM1Y1O0~T*kNH9|e!Y*94O1mx0rOI9E@DE=VvPG)fLG5l;@_RHW^a zZhZ9Cv{Pdre)s}Tva=f%P`*j1p`dO3lmiFtPX4)N_lmbAH8Rx4jPb zM2-}^II*b&Fhy}=<}u^Jz^>sa{g{iQ7$C5ttuYUr!xV1j9@kbSL47bm2jX^tjlJy; zW9ht1DfTP6d54kfdbCr+*zXMb2#N<9&WZ?hgq;)fC$gY?;gjpeqA&&T#Kvb~ZV%ay z)Me~cv7rYrU2y3KnE=MY!%b|SZlPCk5y#Nf zyBVqMn2pkB?YoOIFY2#mI)H{sbeR=9guYWbee;4| z8BG%$69G5=ctoRHtFfr=0Njh+PEKy>+nZEm$_Qw7I-ry_78TwX3gikRxDRYTb_-H6ns$9m_O#elp=(K z8fOO@>;$jA<>s}Z^_wSgh^d^yKufk96y@S-vVHHHU9%UGkF^X8M-fU8X8E@Atfye3 z8|xKv0s?X{tYn@d?q=!OxUeSiX9QHGEhW3D!S>(re-=v*bxO#UXpLv>1C(S%QboG@ z>}iK$EhYw($5p}y1k~c|jZL_ze^$tTP5`v!mh+xEoq2jrsdeuEZ!WJ zWXihxLDY5ECPvHt&@#n=wKugm#}8v4~Lt3YDI}rv(1nZ1x`d2DZ-5kGjh8Zt+LjJ9!Q& zWFpKsJ-ucM-E9>dlIQdIy(;A%IcN+`i_o6GUr7Vt<&7*wdj!3g98^_qKB3Xa;`@H_ zupIf~7-%b|(%F9eC#*D;yoosx_1 zOBItD{zOMCVl1(Die>}M%J{HnGAhAIbFQrjm@9MK`Y6dmWuQMfnJ#J!&k0Z9c=IO{M&NJ14jWW-0oYSS-M{f?Xfz= zL2GuP^E7lxXfTy0c<1D`HM%i`;?`V#U- z*w#QW47&R(gekL^QMyR(HkNs+G1w!UTrsw7e`f`lupt4RgjyTkAt-5W*Or29BK|sm z&y$OVaXg(p$5SS+9#%E3s<^U9% ztp|Iin0t8Q$@x$SS1El5$~%q?AvOReg~C&!I=hC4@F419;*3O*NlB2(hFn3u z(4J{ovv9=H(On=(hm5D=MGZ66u&bRR_t1b)iy6^7fPwwGQ~CAs<@l)t7|w z@%AucXj#11$gJFBw(2j$-#Zom(c#ntOb!zi6ywMpo}~eZwP2o5CsQ`JpG})q{9Gs4 z@4==AfDOXO#_%0pi-4JHv;-`JAriE@oVf6S+|U-0)(*tE&_}=!A)2Sz2z2@xZ~Vu7 zf~pXV<+?Ot1R-GTXT4v9_AyISsCH?9&}BP$U-`=h1K#}lR510Swl{bs4Cqw?w^JuJ zT!#X^QRz>4Ix3!G?W_vG*8IeVX8|U}={D>L@;Ubq2Mb`<6LyF3o@zHKj((F z4JF>!F8^KJ`W`+iD5R$PkPV7HNy>rf;pj6|lxDywhdx^=6%S-{eU!YI?p#_EF!~E^ zoK6`Zu-buwg+EZ}p4iysAtjb<`o(B?kPVuO@`)!ax+W`L*<5)$Xpd&;{pk<#mCZSq#g4f?zL^51oE7zPd zz9kW1NuE!yB-_vUdyZZqMb90Fw6`!&-Rc*9ZW$)-m<`b-9={DkV#`x^Yr~hSmuC~5 z&LB0G0JWMCacae}8neAOMK1fzIaP4e3)QA#xOJwRF#pQGv)n_hoYey@{fV$msEa&2 z^SS$@AYL?}O+$hpeWo-clo}x#L%^7abxszORriV(8)nYi?j2{ zg#6&%@B6fpZ#O$)h>UPJOvYhVs??)E5cH&Pjj3ck3iH&V5rk|U*Su`F`28RD@W?f; zOr$2&vZIIjA0{~8F=ihuvdlZL?l!$;hm~Yy%!PDmkeQH{VG+E6KpHQjSp+i6L#e?H z+TV?Df|vUco3|g3_3b#%*{|ExmS1OXW#UBhC0_i09XzCinwa~vTmijgm*(^>S#1b&^XJ+O(8qeA(h;tzPVNATbFSMBK>X zY@8y;Ux%xq&yUWE@sKv0SLx8SuElh0oxMR9`F>+17^iqni1T>ohW9_Q?&M zNWMUfjBt=&Z};~VsXBS?2SOS!bEgmeSBaW}`)G73+*=yBz2ET0D)0rYM3;u4(7wjC zYjra(^=Go}$y;tB3mz-Z%4FS5!4uaHQ`y;b8vdmi-u*gd3Rlck4#(Nah@V5zt;0Hj z$YQ1ftD=gPAFgP8@Vv6`{pXDHrUl~MjzkO|jItEpgQ96~ii3g9-J(~y%kTXi?erUr zH=r2*sg@bRBSNA)O7xJ|FN(R?h=}AvNHHq&%3(u-1oZr*U|T_tTH(9k^hGhxF=+){ zz7}k8)tC`vw!It^O{@I>YxZz|2vmMmti8lO*!q$*htJBFJ>pFtTIJyDxLITSkg$~cCbO!;{ncxgSgwrXDteJ7mL{Gu$_R!aS2!`Pl9xoH(vfek~3E#vT#&euopH#q? z@=Kr(^OW^X9T6KXiXg{*yPTbrCm1>>l=Ygb<4jifh)XXLtqJO5)S8F#MIdcmg~O&U zFNj;mj4_uHu;r^+XQ%EPXS{ixLT@!MC8-vS+Z_?7AWUO zDRT~v?|WH0!eoWgGsyVLCJfBo=Gvm-_WE6%C3PdMLkte_#ff?pNmp!(P=1_Wy}H2_ zM*7K?fft~YDW#IIxL+uY2dkPgmE4-L<8l$={6JSM+1vh0HAK&}=n5>zn3Ovy+A7KP zD>cPq<9dnf_{q^?9hY42Vn-Ll!?JrGw{o9)XtV^DYW`P?2kc+$Y#yLb_Do%KMn`yL zP~KZJ$ew-@M!snEe}7iF6T)OeXc~E7>A*QbL;RQRNA$E#t&XQ|LW9NhPxgydQ)Bn{ z_XiJWt(l|+KlN7%`x%h_bA##5<0K=9t)G41NRV4HM9UL993TTpmT@Oh zd7>(`Ce`PKWaigW_~T0xu2F)-gRq}bB1iuE#9B6LKFt!{r^XKxW24%%>H^yH9vPF0 zeB$HF@}5&}2pc%vl*>mQ&__>>=8kfwhQnRv)PgLklmd_keEpt=eF=|;nBfx!ybtJG zNLggeLSD-K4d?)xGd!l@b3C7nkcLuC3kNZptHnFtLZkYPdv?XkEiBu9`tzbRMN|g~ zY(5qQT7!&2!Z)6{NhSz$1*|-eG^}`VMWHu+mfSEm?;{~@Ck|O=xRM;ig4hb2a5_x> z9LvvGXr1?+4EE~z`{}?by*pl9l+eNT2sHICGh>X5QCV_og?P4lry&w^3ix$U%wy|c zmVs%g3Zw!?V%8oa?`_)wlbqvStJ%EnAj9i3JMe-N*nVSqwLF(G#c_{^`|ywX9rsAX2fxV+wP`x?IX!i zYZQ@@cg<^!!|XW$;;eF>+qp1U@-2hwr5K;WiD4dKU(eIY`k;P)Qet{K2ur#I=K$7sdweN*$)p6cm1L_O*7f1<|JhoimqG||~F z=O00+l@mjmeg=v~vnOY>WO~u&#EdR7yir1!-+~xge*E}VmU2mKWqzS<`q}-v)q0$A z#Ri-zF&X?&Z@Wg_Odr;I8Cw19{|dG6 zm0pBW(QJo798zuTU4EJ1!X2NjAv-Q~%^*tH)=A=217ZOqYsk7>eT-aw`T|Lo?2C1tq~)pt@$92&lI;FC5re z%z>_-Ls;z=5V^#3;lwkF1W~ZwD}n=@bLl5BY@~?GfL-lii^Kp3Zt!cst4X?Um1WbG zn$!{Po5W0j^$4uO1VHAoFr~s57Xx*E{o^%)ix*w@#2M>Dxi@(>;&TCm+MwXvfq0uG zGcAp9%#nAi>l8{3QpSO1<+eLAJK3d6gss)dOPZB35d2KbxaAnFrd%h4|0MLtOE933 zTGul%e7)qwATZJ(iD1xpx%#>q!rD(XUeeCM=i|E@_yp6>NgnQSu6Iy*;nVAAexpdJ zk+)b9O<3`dZaV;nfe?Dj=g}EJ<#@5V7m>$n!-VRZLDNE*v2oX~6?Is)WxYCU=OZ4)yy3c?5~ihBJWK_qk!8-C)Kz zkQBpY%^#W7|Kjj;5HxrR4-4Oy;&~ovT%|+mNV7zfrkGt8?t1=yk~@pjqUK*J1?i08 zSk0Yj@JA$sjHh0!viOe|p814il%W1JOccz*)3%LrXZ>FU>Y)pLIkm$9Yi{yYCn?SL zRmuOST5HS!3k?yxsNZ32;cFa42+*}NGRo2RDfKa;`_)zVF)~Gx9T3$GgnzZtuw6?s z24fCqRt4j>cO^(xwerK%?msN%@NmBY#Gvh6DJyecXjdnzL&0lSyFvC=v#w!OhdNDf ze=0?0=E*wG5}Fwqfss1&msGHrkmgy>k+heD3DT?s<-La%T&>n=plYA0pipbtzol_* zzlF($Y7$r^bN)PP|GSq%GN|M(zXcx$OKAYDdP6&J7kVWPj1AOpOvUyhK<$4dG{TtK zcXGLO*e9MwP*)HCNB6WhavJ&K_8tuMXjy^9{sKG`%~x&WDCVeCU!i-NRnJms{1j)q-Gblqp3)L2 zNdI{c36X}5Bz;`q&MdO(naYcgTNMdjR~J}}R!7#N=t6baEmYsWe)z3a(8sW76>7x` zUDvjXnD2mpk`1$aF9`h-+F#012hBqne?`vh$^iww{n}g?fmC@3RovWu7z()? zNSpH%E6~ooN-JKhbNx6snVwt9(58@zhuzs|hjghT>4(Ari;am#fu)IhbK}s_28mAo z@dE_L76O4xz58-0NpC(ilfAIH3YArNmFNc73`u$H^}?z0Kqn8MG|RR(15}pche^jt z6#`2np}=1{yk1NkZi!s^c72$cBwcYdY|KvtSdCgufN`so@%>D`k`jEirSC)_HjlR{ z-EHblAmI86+H!z3wxB!bpf}jm?PgkK2te3Yyyh6JJT;hzfbBaUTx%7j1dn@fOSr1a zQYX8jh{EEY3eU2yXc-q0fi&W9n5wW;!=M2& zFE$-}tY6TtZJ!T#K^v6Fl3nRjntl5+7j#W$xyba+j-s){BaWB(o>k{T_ql>!%T z{jXXf&8>%8)@MmpezaN%1mV*Z*@Z|bpU&8Y62H(7%JL1^w`w{}*L;U?GHpc#cza8{ zdWG9X1N^`tzO`4j#X1ZY@F3)S80??; zeNF88HL^Yp1X3Q#wBq9gCx}3fXqD$JkO*;M=9ZTa1f%Zf1;f~|GS2*02JY@w~xxL~0#U>Jp>}(uq9nc|1p6Qpr zY>RR{B)MOL(7j7mzpDwFVF*51Z_AnCT`+TPi#A3v`9ajZCc=5VyJkcwkF6%I^~_mT z0hR6M^Cqb{R#5kfdambl$G)*4#UC12gvITc@N@Jf+oY zTDz+xK#a}f5o>H7&xpWNLOc3Il@?hk3{x!|(h}m?|e1)UU4)u$s}DrLu=WC=P6l^HtR zZ^|^~)lx=moi6V5=!;SK0<|LAZol)+Ugv}o7x1Y_DDZ%SwQG%-A7Mp2f9l>qUS8?i zXfwCwcV|G=9{qN9hAT+@}7{lF-lhBwnT3=l#ZIN(s>DEk zS~!_smp}SL5`q1>|0%49ivtxY||BC2ZvJ zxYodH6OJ1oojLpUsZ+Y>g=2Ik?YidHvo2-Lp|LRRJeX#n^;Sjm>7Y*mFIP=q_I9oY z>kx>}3f&$CGVHUjEosPDEa|LCXHVT&)ybnR&WH+RfKcx|^;99`*2H{7LQ zMBJ|vfdM9sxbTlFXsr^{IiR%CRjVG7pzB=tuhm5;ZY zh!#5@Qk<#)qCycfCn!$AZW$l_)EJ=LpQ25e_2r0{|HK1bxJ1NjL%&h(NB2_a%3)Ql z)kH!wXZt#6Bdw< zjj{DY9sa*Wmz9Gm^Q$lH_}kOBFbMWNB?tK3Nh>m(9SEc>4GK?4tEAshM@p3eY#klZ zG9(-d-KEWcP1+fw?Vf~m_4;rUeJLjvpF~JY#IywqayZc>AAF(E^5mM;J zte_<<-g^Z5n`kxeY4~rW8>U9}y_qM>2Fu~Cc-pBNmQ7Rg+&eRh^n?_%)8(DxkyurK z;PS$9mKv&&1wC-~!ks2S9ax(7q~>ry(r@zepqYz-tS^vb=K@*0edR81%?#%-&*k(p z{g(Er?l|!+)KV7NR4m!I%z*|u9>((}Cq~eMzdy{BJKQMeox9bj_oSsv1G;Mg&z@<^KsZ>)sQ&L zS(#_2E(pQkI_}gQ^74wt)R?BWn<-1K>a=3p`Xab+xuQPiy(nIw)s}sjJv`4i0n!$p z(GI8@;N6_TXEo-p9qr zZHFAYp@qP5R0F3ZVCBBwr<6yqj~gSqmrU%>2pzyFmT_wc_`p|xf>Ku{o$-GTS>B6K z(~1xW7|GcY7bxGnxGlVaC&hs56EqFNQ7KOMOPZO_=Ck;TCAN#3gxPu_Jh+`#jsx~l z+3_mh+Hz!P&{vI^M&ny&W4~-voPe;x70*AJ%5=WjxtZszj6n7%maJ*6D@2c4eHrwU za(;<`n1X+5JeoPr;6RQsXB-O@;~yNOd*>zKh>b`G0h^%~&nTQYGy#GQc}FIh$sqPb ztQ8T{xd?dm!D@u2J9Vwv6qTY3oTk-SPG;}z4{Ca^4rjROAmpHxp+!hfCKjAPSUOoB zraMuPL)B1*$Ro`|Q!Q<6q^&$)<9J8JKMvu6hrffCK&|6Pj^sF9f^iq(OCc!c;YoOs zeAY#swx+}9;xEUwJ<~dHsRFAO+=$2?w5=3D#M59EWG@DS7kF0lQ=*C(WmL0>FzCG8 zqN+SO{NpKP9!DpjRP_I7CjPe=#gcu_C>Mvk@)b zkMOi{2j$w-MFWpk>1mkNr320z2OS+D@gk^WwAVnZZi`X2L9%gEeh`|?1v|jel{W!O zcXAW@S-iaF8C2`(&=K9c*m~Msqk{-@G1ZWE?1!Q^(1=jIFNSRz7b#Y5K7XVW7}6VY z>C{A9+zhNeBgtx-qNEWMQQn<`c)!}(QW!veEiYk%jnqIe3lLv--~m+m9sUR_B*gz4M&h&TL5Zb~b2jzbzTv0N#7(~6@TwpO?f4izZLAN4v zO<^Tq!#c3Dw#3DdMVP{7I$g}0b2cJrF6c{INj44GEl*@C{+4;DhUa=ZFb1Xd4km(s z`6U8Y*YoVf@&G1_Cc4GVikbWS6|4k1>OA*nLzlyaXjXgu0M0r7H;cdGYn^?a$p^(Q zv#ZF#2D=nA69YM3tVOco9jo%l(6fNbNTLcWD7RcFV+E(SP2}pWBdK; zx=9XeP46~~_2SiVW}4xKtj9~&%-H4%33j!&=E6I$4OOmO@2>qw8wqL1CV}{`HIDf4 zxu^P#XcJwg9hQ6_4J^?O=z9W6sOl8W|DE%g#h8}4XG*Rq!eY3^Hf3nCdE(ahVhBrV)g1k=rPQc_@N|nc@r|C}Tj7rFE?BK$pBkzOD;z7Oy0X z3wSK>15TH2ieC%hMf3Y?I)y2F0;|`dl#^$JMhospu&(luO}OReJESIZD|eXI1^Qf@ z-nxMvFV%@hfB`m3Nsk=qV+DX`$T(OvB*qRVD+=|Ey~nIJI7K0RO0w(7r7D zo(Y%{+^gSEs8zrIQxFmMgH^MP%Wo<-N*poSPAAbovOe#h2nsCR;yKhM>7H<)Epe{0 zhJlD?IpbZw^At;evt|MPUJhH!{;y&@F!4{WMm4Jb!GirFu=q|g1~Sm~F_7G#2H_`w z4EW`u08>s?I%1(@;A$(1##n{6x%YsT#}}tHxT4PBLNa&kV*G`eB%S;7=<$IQtVXtFemA_(*Kg( z8Dti}0?BkifKJ01#wX18P_#kE165Ghi%EH)aWi10D*B{_Ks%u(=S5Rue36!C(-?&h zX6QyO@0J0Kwb`%eSdd^G05Z-#;j{@^s~dyUD0T!&PsBDLiA&WeM!IlW`p}XIll+F6 zX)jnhxQ364hs_`ie|OreWi3p`by<(qe5i$7A_^ea64WQ5>cG*0@YQ1IuxDWO7mVOI zlp8O}H;x8bHO6-?XhN5-KSsU_&%MhMz~ymjVIi$ijnq$uSB@ z0nj4oif8d%Bh!9(Suz@^d;o*>3Q+I3=#SyQc*kbg(=SwQrcfvykWSmq7-hRcDv#Hf z2vgnH@^$fKI7iLe(J(y62^Jc*eY{_|+&%qBf2bNPRo4cizk5gyZlMV)Xd9owF;|!k zsBHoK`+EV_4xhpa$~Kr-<1bx>^Rd23lsFg2r@(11PoLCSP)qgYZ>5+?mPvj?AX@1B z+*QlCvu2v;VvpZ(dJd!mm6U)NHD{{hH7OXyL zd6~4OGYHv>Y{9H*-F9@q2a30i)A$OQMUhQ|q5sD(6Ju46Ydwz+?#Dg~NBLPy7bXiD zcEQC5yLc*1Ou2E)rypcGN5owi)19KHG_{7-T4)p?1Nx< zugQRca=KrS*Y)eP4r8hl{L&uj-@a3KU)iwBStmFm$uZZ>MZHN#$Gq*Q^TlVphcATJ z$d`Y{G*^0T9f6yag4W`McnDY;}_I-;7)ygJb*~ha_vIZ?*Pp5@j zB-|P<#tWS6jck6ArVWDu>X0g~mXiHn>7aHP%eZVB6_|-ktFYTqyRvS`-hFbSW_e%& zf~7wok(NP0RN&9BC0N6QKr}I$bkteGI8g2eJTa%idg|U%_oS#hg({on!sqwS0e9-h zOZgyVRP8Wo80Dp^&(SEM3E#6TiCijQk)@YRDWx276Ty!iy*uZ1k``9u&4Eg50p)(v zIa>Ex9y$r)iMZ!lke=;vTaS(Fi4SqP45YamWpx#tm2(02&lFNIaXs-O!B3ue(hxeZ zwTI{f>6(oxp56J2jjzYjJ0dLGm=8 zjGKbKs&w(<8*d9i=RepRnsd2u=rELO-;{BM+7aa&P484HP0}`6h~J-?2aR$x&ME4} z@zKLtMU)-p*3wPfOYYuwO&+n!-2@YMb;QCE#vUTF%@U$797}I;EUcgCY1PDrQGrJt zm*^X`15X9jx}}D&69?gM#^#(A;ON796V^T$ZMk$=EEv1A@f`)^4zpT0(93^(vPPUn zWlfUr5fk;VJPTTDs1{6g+cVj$u)NImB$rw5)?JD1CFo)U+L;xi9y*4->v`q1AMouU0@qKbyZnp{7D4+q9S3tK>~z#NYS6^!IR*c#fz5(KPh%Z_c`jwV={J>rx9C zE*uP_R~!~yS$#~Uq~+ZZmzxb$UlLZKn-&)W&XT;Gp)S&cuSK}+!!(b(bb>y5v_Zz< zlpGM#y-j-UZ@fTExHHyY)OG^%mN6k`k#M6nA@V7@^$fCzgylkO_uyY6FJSnr3n`Qj z^bsy`!0S|V@4R6NhcM%BD0+Jz4LRjmP$tYQ`b|7DX2pZ~vk%l2rB^)Xq=}h_(rtO;aREo^#L}`vsa`1D)vi_N{;o0DZpZ{9lE~5#?BeF{+FA0-z9vh zaLsX$dT=lze2h0;k%eU44za7O;X)P32?xhmNQUMR2O_n&zE3EHsexE2SYtF?)f)0yJytyTOH^ zQ!Apz_RR^xNfO&(uQ-nH`9mX}n@Jcj!00Rg8~GVm0xtqRl|ynhsD!{f?E|>Iunk)m zI+1ww*3xy?o5i5YZ8mHKZ5TEc%xjg)e@bnW1U;#zmx?D?J!$ny&r>h~@Njiv+@O`Wg zC+4PQD_=nr_Q3!T(L%~?KQ!r5^?8ZdHmB@v6;!bJ%t4QEATi%3=31NJ=?6_I#2A8-Q3PAiW z#*Zbc-^KyDrv;OXPKj*#IbrY3ZWi1Zqb*qzZs zMT%i7skjBN^J;Jr@+U$9^}|?Q07&o#K+yPaxsJ%~k^b*q<%oQ+F{fL;=_383@~+o8 z=pio+Ty&W`<93X{%o{N!rP9`hrM}Wc1D+F3o(sJpW{7o~$bP7&6G1sb7H)7kmbL}` zM7))(MkPbm)L3HBZz;g~6afmDJ_-zjF z5s@sM&M)9lSGN>qWJ*OD7cnE65w5FLZhGBg2c|Z|POuTQu_gM|%|=`u=v@km68ak6 zLnD%57po+$ia^\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/728/bebacfc7\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 11:00:05 30.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment="Download custom Certificates By Routers Identity " \ + dont-require-permissions=no name=mod/AM-Certs-By-Ident owner=\ + mod/AM-Certs-By-Ident policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Certs-By-Ident\r\ + \n# Script comment: Download custom Certificates By Routers Identity \r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n#:local ScriptName [ :jobname ];\r\ + \n#\r\ + \n# CloudFlare\r\ + \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\ + ootCA.crt.pem;\r\ + \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\ + \"\";\r\ + \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\ + G2TLSRSASHA2562020CA1-1.crt.pem;\r\ + \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\ + .pem passphrase=\"\";\r\ + \n# Quad9\r\ + \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\ + lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\ + \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\ + .pem passphrase=\"\";\r\ + \n:global tmpAddCerts true; \r\ + \n\r\ + \n:global GlobalScriptsUrl;\r\ + \n:local UrlSuffix [/system/identity/get name];\r\ + \n:local UrlDir \"certs/\";\r\ + \n:local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\");\r\ + \n\r\ + \n:log error \$CertUrl;\r\ + \n\r\ + \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\ + me=\"DigiCert Global Root CA\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\ + n-name=\"DigiCert Assured ID Root CA\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\ + n-name=\"DigiCert Assured ID Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\ + n-name=\"DigiCert Assured ID Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\ + ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\ + ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\ + me=\"DigiCert Global Root G2\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\ + me=\"DigiCert Global Root G3\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\ + mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\ + on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\ + \n\r\ + \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\ + ame=\"DigiCert Trusted Root G4\" ];\r\ + \n\r\ + \n:set CertName \"GTS-Root-R4.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\ + t R4\" ];\r\ + \n\r\ + \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \ + where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\ + \n\r\ + \n:set CertName \"ISRG-Root-X1.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\ + oot X1\" ];\r\ + \n\r\ + \n:set CertName \"Root-YE.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\ + ;\r\ + \n\r\ + \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\ + \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\ + \n\r\ + \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\ + \n/tool/fetch mode=https url=(\$CertUrl . \$CertName);\r\ + \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\ + here common-name=\"USERTrust RSA Certification Authority\" ];\r\ + \n\r\ + \n:global tmpAddCerts (a);\r\ + \n\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-RX.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#internet\r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"ISRG-Root-X2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n\r\ + \n\r\ + \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes;\r\ + \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ + \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 1\";\r\ + \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ + \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 2\"\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ + \n#/ip/dns set servers=\"\";" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n:global GlobalScriptsUrl;\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n" +add dont-require-permissions=no name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + :put \"Download image, and save him to usb1/tmp\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-arm.tar\" dst-\ + path=usb1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 \\\ + \n action=dst-nat to-addresses=10.9.9.2 to-ports=55055 in-interface=eth\ + er1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 \\\ + \n action=dst-nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether\ + 1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=usb1/tmp/awg2-webui.tar interface=veth-awg hostname=\ + awg2-webui \\\ + \nroot-dir=usb1/awg2-webui envlist=awgui-env start-on-boot=yes logging=yes\ + \_shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add comment=awg-VDSina dont-require-permissions=no name=awg-VDSina-uninstall \ + owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n\ + \n :local prevDNS \"\"\ + \n\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n\ + \n :local storageDisk \"disk1\"\ + \n\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n\ + \n :local prevTmpdir \"\"\ + \n\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n\ + \n }\ + \n\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n\ + \n :delay 7s\ + \n\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n\ + \n :if (\$prevDNS != \"\") do={\ + \n\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n\ + \n }\ + \n\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n\ + \n }\ + \n\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n\ + \n }\ + \n\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/container config +set layer-dir=/usb1/docker memory-high=200.0MiB memory-max=2048.0KiB \ + registry-url=https://registry-1.docker.io tmpdir=/usb1/pull username=\ + amsternl +/disk settings +set auto-media-interface=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip neighbor discovery-settings +set discover-interface-list=Internet +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no +/interface detect-internet +set detect-interface-list=static internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether2 list=LAN +add interface=ether3 list=LAN +add interface=ether4 list=LAN +add interface=ether5 list=LAN +add interface=wlan2 list=LAN +add interface=wlan1 list=LAN +add interface=ether1 list=Internet +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.19.75.210 endpoint-port=\ + 51820 interface=wg-awg-VDSina name=peer4 persistent-keepalive=10s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.86/24 interface=ether1 network=10.30.30.0 +add address=172.19.75.209/30 interface=veth-awg-VDSina network=172.19.75.208 +add address=10.9.0.2 interface=wg-awg-VDSina network=10.9.0.2 +/ip dns +set allow-remote-requests=yes servers=109.107.177.79 +/ip firewall nat +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +add action=masquerade chain=srcnat src-address=172.19.75.208/30 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot walled-garden +add server=*1 +add server=*1 +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=ping disabled=no distance=2 dst-address=0.0.0.0/0 gateway=\ + ether1 routing-table=main scope=30 target-scope=10 +add comment=awg-VDSina-dns distance=1 dst-address=109.107.177.79/32 gateway=\ + wg-awg-VDSina +/ip service +set ftp disabled=yes +set telnet disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=109.107.177.79 interface=*A type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 nd +set [ find default=yes ] advertise-dns=yes +/system clock +set time-zone-name=Europe/Amsterdam +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroGig +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=10.30.30.81 +add address=10.30.30.10 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=Generator name=awg-VDSina on-event="# ============================\ + ================================\r\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\r\ + \n# 2026-07-01 00:03:43\r\ + \n# ============================================================\r\ + \n\r\ + \n# 0. Check prerequisites\r\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\r\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\r\ + \n :error \"Usage: /system/device-mode/update container=yes\"\r\ + \n}\r\ + \n\r\ + \n# Auto-detect storage\r\ + \n:global awgDisk \"disk1\"\r\ + \n{\r\ + \n :local usbFree 0\r\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\r\ + \n :if (\$usbFree > 0) do={\r\ + \n :set awgDisk \"usb1\"\r\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \r\ + \n } else={\r\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\r\ + \n :put \"USB found but not mounted. Format as ext4\?\"\r\ + \n :put \"Press 'y' to confirm:\"\r\ + \n :local key [/terminal/inkey timeout=30]\r\ + \n :if (\$key = 121 || \$key = 89) do={\r\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\r\ + \n :delay 3s\r\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\r\ + \n :if (\$usbFree > 0) do={\r\ + \n :set awgDisk \"usb1\"\r\ + \n } else={ :put \"Format failed, using disk1\" }\r\ + \n } else={ :put \"Using disk1\" }\r\ + \n } else={ :put \"No USB, using disk1\" }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# 1. Uninstall script\r\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \r\ + \n :put \"Uninstallimg AmneziaWG...\"\r\ + \n :log info \"Uninstallimg AmneziaWG...\"\r\ + \n :local prevDNS \"\"\r\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\r\ + \n :local storageDisk \"disk1\"\r\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\r\ + \n :local prevTmpdir \"\"\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\r\ + \n }\r\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\r\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\r\ + \n /container/stop [find where interface=veth-awg-VDSina]\r\ + \n :delay 7s\r\ + \n /container/remove [find where interface=veth-awg-VDSina]\r\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\r\ + \n :if (\$prevDNS != \"\") do={\r\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\r\ + \n :put (\"DNS restored to: \$prevDNS\")\r\ + \n }\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n /container/config set tmpdir=\$prevTmpdir\r\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\r\ + \n }\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\r\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \r\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\r\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\r\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \r\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\r\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\r\ + \n :if (\$storageDisk != \"disk1\") do={\r\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\r\ + \n }\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\r\ + \n}\r\ + \n\r\ + \n# 2. Network infrastructure\r\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\r\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\r\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\r\ + \n\r\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \r\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"QCMsDU98Gm+nhn\ + kYRcAN/dyczDYHOLsX3PfBRFjWBF4=\" listen-port=14710 disabled=yes\r\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"b39T9K2/LR8vNtY\ + AZw+sLRze6yGlS3EaZhAa7wiFB20=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\r\ + \n/ip/address/add address=10.9.0.2/32 interface=wg-awg-VDSina\r\ + \n\r\ + \n# 4. Container environment variables\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\r\ + \n\r\ + \n# 5. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\r\ + \n# NOTE: replaces existing DNS configuration\r\ + \n/ip/dns/set servers=109.107.177.79\r\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\r\ + \n\r\ + \n# 6. Download, create and start container\r\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \r\ + \n:if (\$awgDisk != \"disk1\") do={\r\ + \n :local tmpPath (\$awgDisk . \"/pull\")\r\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\r\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\r\ + \n}\r\ + \n{\r\ + \n :local arch [/system/resource/get architecture-name]\r\ + \n :local ver [/system/resource/get version]\r\ + \n :local dotPos [:find \$ver \".\"]\r\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\r\ + \n :local endPos [:find \$rest \".\"]\r\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\r\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\r\ + \n :local suffix \"\"\r\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\r\ + \n :local file \"\"\r\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\r\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\r\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\r\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \r\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\r\ + \n :local filePath \$file\r\ + \n :if (\$awgDisk != \"disk1\") do={\r\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\r\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\r\ + \n }\r\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\r\ + \n :local freeStorage 0\r\ + \n :if (\$awgDisk = \"disk1\") do={\r\ + \n :set freeStorage [/system/resource/get free-hdd-space]\r\ + \n } else={\r\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\r\ + \n }\r\ + \n :if (\$freeStorage < 262144) do={\r\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\r\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\r\ + \n :error \"Insufficient disk space\"\r\ + \n }\r\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\r\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \r\ + \n } else={\r\ + \n :put (\"File already exists: \" . \$filePath)\r\ + \n }\r\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\r\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\r\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\r\ + \n /file/remove \$filePath\r\ + \n :local freeMem [/system/resource/get free-memory]\r\ + \n :if (\$freeMem < 16777216) do={\r\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\r\ + \n }\r\ + \n /container/start [find where interface=veth-awg-VDSina]\r\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\r\ + \n :put \"Waiting for container to start...\"\r\ + \n :delay 5s\r\ + \n /interface/wireguard/enable wg-awg-VDSina\r\ + \n :put \"WireGuard interface enabled\"\r\ + \n :put \"Installation complete!\"\r\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\r\ + \n /ping 109.107.177.79 count=10 interval=1\r\ + \n :put \"\"\r\ + \n :put \"======= NEXT STEPS =======\"\r\ + \n :put \"\"\r\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\r\ + \n :put \"\"\r\ + \n :put \" Route a single host:\"\r\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Route a subnet:\"\r\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Remove a route:\"\r\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\r\ + \n :put \"\"\r\ + \n :put \" Show all tunnel routes:\"\r\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\r\ + \n :put \"\"\r\ + \n :put \" Uninstall:\"\r\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\r\ + \n :put \"=========================\"\r\ + \n}\r\ + \n\r\ + \n# 7. Verification\r\ + \n# /container/print\r\ + \n# /interface/wireguard/print\r\ + \n# /interface/wireguard/peers/print\r\ + \n" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-07-01 start-time=02:03:59 +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com diff --git a/MikroGig/history/20260703/20260703050235-Diff-Config.rsc b/MikroGig/history/20260703/20260703050235-Diff-Config.rsc new file mode 100644 index 0000000..802d944 --- /dev/null +++ b/MikroGig/history/20260703/20260703050235-Diff-Config.rsc @@ -0,0 +1,14 @@ +11,12c11,13 +< set [ find default-name=wlan2 ] country=belarus mode=ap-bridge name=wlan1 \ +< ssid=vados wps-mode=disabled +--- +> # channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +> set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ +> name=wlan1 ssid=vados wps-mode=disabled +14,15c15,17 +< set [ find default-name=wlan1 ] country=belarus mode=ap-bridge name=wlan2 \ +< ssid=vados5g wps-mode=disabled +--- +> # channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +> set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ +> name=wlan2 ssid=vados5g wps-mode=disabled diff --git a/MikroMaster/20260703/20260703044003-Config.rsc b/MikroMaster/20260703/20260703044003-Config.rsc new file mode 100644 index 0000000..7af5b9e --- /dev/null +++ b/MikroMaster/20260703/20260703044003-Config.rsc @@ -0,0 +1,3701 @@ +# 2026-07-03 04:40:07 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \ + wireless-protocol=802.11 +# managed by CAPsMAN +set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \ + wireless-protocol=802.11 +/interface wireguard +add listen-port=33033 mtu=1360 name=NUC +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ + verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=static internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +add allowed-address=10.10.0.1/24 client-address=10.10.0.2/32 \ + client-allowed-address=0.0.0.0/0 client-dns=8.8.8.8 client-endpoint=\ + 10.30.30.81 client-keepalive=10s client-listen-port=22022 \ + endpoint-address=10.30.30.10 endpoint-port=22022 interface=NUC name=\ + MicroNuc persistent-keepalive=10s public-key=\ + "oieVxNCDa4G5LU2QVH+s4AXwapSmdiDvVVhBS/FPdTA=" responder=yes +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +add address=10.10.0.1/30 interface=NUC network=10.10.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:1 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,8.8.8.8 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 src-address-list=\ + !NoWG +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc deleted file mode 100644 index 9da7771..0000000 --- a/MikroMaster/tmp/Diff-Config.rsc +++ /dev/null @@ -1,3618 +0,0 @@ -35,36c35,37 -< #error exporting "/queue/interface" (timeout) -< #error exporting "/interface/wireless/security-profiles" (timeout) ---- -> /interface wireless security-profiles -> set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ -> dynamic-keys supplicant-identity=MikroTik -69d69 -< #error exporting "/ip/ipsec/policy/group" (timeout) -91,92c91,92 -< #error exporting "/ppp/profile" (timeout) -< #error exporting "/routing/bgp/instance" (timeout) ---- -> /ppp profile -> set *FFFFFFFE use-upnp=no -93a94,3695 -> set default disabled=no output.network=bgp-networks -> /routing table -> add disabled=no fib name=To-VPN -> /system logging action -> add email-start-tls=yes email-to=vados@vados.ru name=email target=email -> /system script -> add dont-require-permissions=no name=fetchCustom owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -> global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ -> \n\r\ -> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ -> 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ -> \n\r\ -> \n#:local Script AM-setup\ -> \n;\r\ -> \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ -> heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ -> sc\") output=user as-value ]->\"data\");\r\ -> \n\ -> \n#/usb1/mikro_bak_rsa.pub\ -> \n\ -> \n\r\ -> \n#\ -> \n\r\ -> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ -> 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ -> \n\r\ -> \n#\r\ -> \n\ -> \n#root.mnuc.backuper\ -> \n\ -> \n\r\ -> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ -> .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ -> \n\ -> \n#:local Script AM-GlobalConfig;\ -> \n\r\ -> \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ -> heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ -> sc\") output=user as-value ]->\"data\");\r\ -> \n\ -> \n#/usb1/mikro_bak_rsa.pub\ -> \n#:local FetchFile AM-DOHCert.rsc\ -> \n\ -> \n\r\ -> \n\r\ -> \n#\ -> \n:global MkDir;\ -> \n\r\ -> \n\ -> \n#:local FetchFile Binary.backup\ -> \n:local localDir \"\";\ -> \n\ -> \n\r\ -> \n#\$MkDir \$localDir;\r\ -> \n\ -> \n#\ -> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ -> \$localDir . \$FetchFile);\r\ -> \n" -> add comment="Global Config Script" dont-require-permissions=no name=\ -> AM-GlobalConfig owner=AM-GlobalConfig policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> !rsc by Vados\r\ -> \n# RouterOS script: AM-GlobalConfig\r\ -> \n# Script comment: Global Config Script\r\ -> \n# Copyright (c) 2007-2026 Vados \r\ -> \n#\r\ -> \n#\r\ -> \n# Warning: Dont touch this line!\r\ -> \n:global Identity [/system/identity/get name];\r\ -> \n:global GlobalConfReady false;\r\ -> \n#\r\ -> \n#\r\ -> \n# Global Url For Amster scripts to fetch\r\ -> \n# most be defined in AM-Init-Script or AM-setup scripts\r\ -> \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ -> \n:global ScriptsUrlSuffix (a);\r\ -> \n:global CheckSumsVerify true;\r\ -> \n\r\ -> \n:global ScriptUpdatesCRLF true;\r\ -> \n:global CommentsInScripts true;\r\ -> \n\r\ -> \n# Debug output:\r\ -> \n:global PrintDebug true; #false;\r\ -> \n\r\ -> \n# Debug output for specific script:\r\ -> \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ -> \n\r\ -> \n# Debug logs\r\ -> \n# Other actions (disk, email, remote or support) can be used as well.\r\ -> \n# I do not recommend using echo - use debug output instead (https://rsc.\ -> eworm.de/main/DEBUG.html#debug-output).\r\ -> \n#/system/logging/add topics=script,debug action=memory;\r\ -> \n\r\ -> \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ -> \n:global Domain \"WORKGROUP\";\r\ -> \n\r\ -> \n:global EmailGeneralTo \"vados@vados.ru\";\r\ -> \n#:global EmailGeneralCc \"\";\r\ -> \n\r\ -> \n# \$ScriptInstallUpdate mod/notification-telegram\r\ -> \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ -> \";\r\ -> \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ -> \n# Use this to send notifications to a specific topic in group.\r\ -> \n#:global TelegramThreadId \"30\";\r\ -> \n# Using telegram-chat you have to define trusted chat ids (not group ids\ -> !)\r\ -> \n# or user names. Groups allow to chat with devices simultaneously.\r\ -> \n:global TelegramChatIdsTrusted {\r\ -> \n \"454403445\"\r\ -> \n \"-1003631309063\"\r\ -> \n \"-5124482807\"\r\ -> \n \"1087968824\";\r\ -> \n};\r\ -> \n# \"-5294757340\";\r\ -> \n\r\ -> \n:global TelegramChatGroups \"(all)\";\r\ -> \n#:global TelegramChatGroups \"(all|home|office)\";\r\ -> \n\r\ -> \n:global NotificationFunctions {\r\ -> \n \"email\"\r\ -> \n \"telegram\";\r\ -> \n};\r\ -> \n# Toggle this to disable symbols in notifications.\r\ -> \n:global NotificationsWithSymbols true;\r\ -> \n:global TerminalColorOutput true;\r\ -> \n\r\ -> \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ -> \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ -> \n\r\ -> \n## Update channel. Possible values: stable, long-term, testing, developm\ -> ent\r\ -> \n:global updateChannel \"stable\";\r\ -> \n\r\ -> \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ -> \");\r\ -> \n:global CertRenewTime 2w;\r\ -> \n:global CertRenewPass (a); #{\r\ -> \n# \"\";\r\ -> \n# \"v3ry-s3cr3t\";\r\ -> \n# \"4n0th3r-s3cr3t\";\r\ -> \n#};\r\ -> \n:global CertWarnTime 1w;\r\ -> \n:global CertIssuedExportPass (a); # {\r\ -> \n# \"\";\r\ -> \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ -> \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ -> \n#};\r\ -> \n\r\ -> \n# Script BackupAndUpdate mode, possible values: backup,\r\ -> \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ -> n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ -> \n# osupdate - Update if available and creates backups before/after update\ -> \_(ignores `forceBackup`)\r\ -> \n# Set `forceBackup` to true to always create backups, even\ -> \_without updates\r\ -> \n# osnotify - Set `forceBackup` to always create backups on every run\r\ -> \n:global DevInfoIncludeIP true;\r\ -> \n:global BackupAndUpdateMode \"osnotify\"\r\ -> \n\r\ -> \n:global forceBackup true;\r\ -> \n:global BackupPassword \"Peskar55\";\r\ -> \n\r\ -> \n# SFTP Backup Variables\r\ -> \n:global BackupRandomDelay 0;\r\ -> \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ -> \n:global BackupUploadUser \$Identity;\r\ -> \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ -> \n\r\ -> \n:global BackupSendBinary true;\r\ -> \n:global BackupSendExport true;\r\ -> \n:global BackupSendGlobalConfig true;\r\ -> \n:global BackupSendScripts true;\r\ -> \n\r\ -> \n# Remove local file after uploading if no errors\r\ -> \n:global BackupRmLocal true;\r\ -> \n\r\ -> \n# Local Backups Root Directory \r\ -> \n:global BackupLocalRoot \"tmpfs\";\r\ -> \n\r\ -> \n# Encrypt Backup\r\ -> \n:global BackupEncrypt true;\r\ -> \n\r\ -> \n# Sensitive information in Backups\r\ -> \n:global BackupSens true;\r\ -> \n\r\ -> \n# User Export\r\ -> \n:global BackupUser true;\r\ -> \n\r\ -> \n# License Export (not for CHR, will silently skip)\r\ -> \n:global BackupLicense false;\r\ -> \n\r\ -> \n# SSH Keys\r\ -> \n:global BackupSshKeys true;\r\ -> \n\r\ -> \n# Certificate Export\r\ -> \n:global BackupCerts true;\r\ -> \n\r\ -> \n# Certificate Password\r\ -> \n:global BackupCertsPasswd \"\";\r\ -> \n\r\ -> \n# User-Manager Export\r\ -> \n:global BackupUserMan false;\r\ -> \n\r\ -> \n# The Dude Export\r\ -> \n:global BackupDude false;\r\ -> \n\r\ -> \n# User Files to export, comma-separated string or array of strings\r\ -> \n# User Files are not removed on backup\r\ -> \n# Any directory paths will be removed (/ -> _) on remote file\r\ -> \n# Nonpresent files are silently skipped\r\ -> \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ -> \n\r\ -> \n# load functions and any custom scripts\r\ -> \n# [ /system/script/find where name=\"global-config-ov\ -> erlay\" ], \\\r\ -> \n# [ /system/script/find where name~\"^global-config-o\ -> verlay\\\\.d/.\" ]\r\ -> \n#\r\ -> \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ -> ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ -> \r\ -> \n# :onerror Err {\r\ -> \n# /system/script/run \$Script;\r\ -> \n# } do={\r\ -> \n# :log error (\"Loading configuration from configs and functions\"\ -> \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ -> \n# }\r\ -> \n#}\r\ -> \n#:log info \"\\ndevMode = \$devMode\";\r\ -> \n#:log info \"\\ndevRunning = \$devRunning\";\r\ -> \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ -> GlobalRUN\\r\?\\n\" ] do={\r\ -> \n :onerror Err {\r\ -> \n /system/script/run \$Script;\r\ -> \n } do={\r\ -> \n :log error (\"Run script \" . [ /system/script/get \$Script name \ -> ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n# signal we are ready\r\ -> \n:set GlobalConfReady true;\r\ -> \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ -> \n" -> add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ -> owner=AM-GlobalFunc policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> !rsc by Vados\r\ -> \n# RouterOS script: AM-GglobalFunc\r\ -> \n# Script comment: Global functions\r\ -> \n# Copyright (c) 2005-2026 Vados \r\ -> \n#\r\ -> \n#\r\ -> \n# requires RouterOS, version=7.19\r\ -> \n# requires device-mode, fetch, scheduler\r\ -> \n:local ExitOK false;\r\ -> \n:local ScriptName [ :jobname ];\r\ -> \n#:global checkRunJob \$SriptName;\r\ -> \n#:global fixCRLF;\r\ -> \n#:if (\$fixCRLF != false) do={\r\ -> \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ -> ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ -> }\r\ -> \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ -> et \$fixScript source ] ] \$fixScript};};\r\ -> \n#}\r\ -> \n:global GlobalFuncReady false;\r\ -> \n\r\ -> \n# Git commit id & info, expected configuration version\r\ -> \n:global CommitId \"main/727/203f86a6\";\r\ -> \n:global CommitTAG \"unknown\";\r\ -> \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ -> r: root, in 13:30:05 29.06.2026.\";\r\ -> \n\r\ -> \n# The variables are received right here.\r\ -> \n:global GlobalConfVersion 140;\r\ -> \n\r\ -> \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ -> \n\r\ -> \n:global Identity [/system/identity/get name];\r\ -> \n:global IdentityShort [:pick \$Identity 0 18];\r\ -> \n\r\ -> \n:global devBoardName [/system/resource/get board-name];\r\ -> \n:global devMode [/system/device-mode/get mode];\r\ -> \n:global devCurArch [/system/resource/get architecture-name];\r\ -> \n:global devCurVersion [/system/resource/get version];\r\ -> \n\r\ -> \n# Variables defined in AM-GlobalConfig.rsc\r\ -> \n:global TerminalColorOutput;\r\ -> \n:global CommentsInScripts;\r\ -> \n:global DetectIpAddrDefault;\r\ -> \n:global DetectIpAddrFallback;\r\ -> \n:global updateChannel;\r\ -> \n:global Domain;\r\ -> \n:global EmailGeneralTo;\r\ -> \n:global BackupAndUpdateMode;\r\ -> \n\r\ -> \n# Single functions, without nested functions.\r\ -> \n:global MiniDateTimeStamp;\r\ -> \n:global MicroDateTimeStamp;\r\ -> \n\r\ -> \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ -> \n:global LogPrint;\r\ -> \n\r\ -> \n# DeviceInfo and Updates\r\ -> \n:global IsCheckUpdates;\r\ -> \n:global WaitCheckUpdates;\r\ -> \n:global GetPubIp;\r\ -> \n\r\ -> \n:global GetArrDeviceInfo;\r\ -> \n:global WaitArrDeviceInfo;\r\ -> \n\r\ -> \n:global devModel;\r\ -> \n:global devRunningMode;\r\ -> \n\r\ -> \n:global devRbRevision;\r\ -> \n:global devRbSerialNumber;\r\ -> \n:global devRbVerAvail;\r\ -> \n\r\ -> \n:global runningChannelVersion;\r\ -> \n:global runningChannel;\r\ -> \n:global runningVersion;\r\ -> \n\r\ -> \n:global devBuildTime;\r\ -> \n:global ROsVerAvail;\r\ -> \n:global PkgUpdStatus;\r\ -> \n:global currentUpdateChannel;\r\ -> \n\r\ -> \n:global ScriptInstallUpdate;\r\ -> \n\r\ -> \n:global DeviceInfo;\r\ -> \n\r\ -> \n:global OldMode;\r\ -> \n\r\ -> \n:global ParseKeyValueStore;\r\ -> \n:global RandomDelay;\r\ -> \n:global GetRandomNumber;\r\ -> \n:global EscapeForRegEx;\r\ -> \n:global CharacterMultiply;\r\ -> \n:global CharacterReplace;\r\ -> \n:global CleanFilePath;\r\ -> \n:global CleanName;\r\ -> \n\r\ -> \n:global CommitBrief;\r\ -> \n\r\ -> \n:global EitherOr;\r\ -> \n:global FormatLine;\r\ -> \n:global GetRandom20CharAlNum;\r\ -> \n:global GetRandom20CharHex;\r\ -> \n:global GetRandomNumber;\r\ -> \n:global Grep;\r\ -> \n:global IfThenElse;\r\ -> \n:global MAX;\r\ -> \n:global MIN;\r\ -> \n:global HumanReadableNum;\r\ -> \n\r\ -> \n:global IsFullyConnected;\r\ -> \n:global IsDNSResolving;\r\ -> \n:global IsTimeSync;\r\ -> \n:global IsTimeSyncCached;\r\ -> \n:global IsTimeSyncResetNtp;\r\ -> \n\r\ -> \n:global MkDir;\r\ -> \n:global RmDir;\r\ -> \n:global RmFile;\r\ -> \n:global FileGet;\r\ -> \n:global Unix2Dos;\r\ -> \n:global UrlEncode;\r\ -> \n:global WaitForFile;\r\ -> \n:global ScriptLock;\r\ -> \n:global SendTelegram;\r\ -> \n:global NotificationFunctions;\r\ -> \n:global SendNotification;\r\ -> \n:global SendNotification2;\r\ -> \n:global SymbolForNotification;\r\ -> \n:global SymbolByUnicodeName;\r\ -> \n:global ValidateSyntax;\r\ -> \n:global CheckSumsVerify;\r\ -> \n:global GlobalConfChanges;\r\ -> \n:global GlobalConfMigration;\r\ -> \n:global VersionToNum;\r\ -> \n:global RequiredRouterOS;\r\ -> \n:global ExitError;\r\ -> \n:global ExitOnError;\r\ -> \n\r\ -> \n:global FetchHugeFiles;\r\ -> \n:global FetchUserAgentStr;\r\ -> \n:global FileExists;\r\ -> \n:global CertificateAvailable;\r\ -> \n:global CertificateDownload;\r\ -> \n:global CertificateNameByCN;\r\ -> \n:global CharacterMultiply;\r\ -> \n\r\ -> \n:global InspectVar;\r\ -> \n:global InspectVarRet;\r\ -> \n:global ParseCustom;\r\ -> \n\r\ -> \n:set IsCheckUpdates do={\r\ -> \n :local isInfo [:tobool \$1];\r\ -> \n :global updateChannel;\r\ -> \n :global PkgUpdStatus;\r\ -> \n :global currentUpdateChannel;\r\ -> \n :global ROsVerAvail;\r\ -> \n :global arrDeviceInfo;\r\ -> \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ -> \n :local CurrentChannel [ /system/package/update/get channel ];\r\ -> \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ -> el) do={\r\ -> \n :retry command={/system/package/update set channel=\$updateChannel} \ -> \_delay=300ms max=5 on-error={};\r\ -> \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ -> \n }\r\ -> \n :local Update [ /system/package/update/get ];\r\ -> \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ -> \n :set currentUpdateChannel \$Channel;\r\ -> \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ -> \n :local StatusPkg \"undefined\";\r\ -> \n :log info (\$0 . \" Checking for updates...\");\r\ -> \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ -> dates without-paging as-value]->\"status\")} \\\r\ -> \n delay=300ms max=5 on-error={};\r\ -> \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ -> \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ -> s true; } else={ :set PkgUpdStatus false; }\r\ -> \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ -> ] ];\r\ -> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ -> \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ -> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ -> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ -> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ -> \n }\r\ -> \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ -> kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ -> \n :return true;\r\ -> \n } else={\r\ -> \n :return \$PkgUpdStatus;\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set WaitCheckUpdates do={\r\ -> \n :global IsCheckUpdates;\r\ -> \n :global PkgUpdStatus;\r\ -> \n :global currentUpdateChannel;\r\ -> \n :global ROsVerAvail;\r\ -> \n :global arrDeviceInfo;\r\ -> \n :local Status \"\";\r\ -> \n :local Update;\r\ -> \n :local WaitCount 0;\r\ -> \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ -> \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ -> \") && \$WaitCount < 60) do={\r\ -> \n :delay 1s;\r\ -> \n :set WaitCount (\$WaitCount + 1);\r\ -> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ -> \n }\r\ -> \n :set Update [ /system/package/update/get ];\r\ -> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ -> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ -> \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ -> \n :set PkgUpdStatus true;\r\ -> \n } else={\r\ -> \n :set PkgUpdStatus false;\r\ -> \n }\r\ -> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ -> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ -> \n }\r\ -> \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ -> \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ -> do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set WaitArrDeviceInfo do={\r\ -> \n :global GetArrDeviceInfo;\r\ -> \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ -> \n :delay 1s;\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set GetArrDeviceInfo do={\r\ -> \n :global LogPrint;\r\ -> \n :global arrDeviceInfo;\r\ -> \n :global devBoardName;\r\ -> \n :global devModel;\r\ -> \n :global devRunning;\r\ -> \n :global devCurArch;\r\ -> \n :global devRbRevision;\r\ -> \n :global devRbSerialNumber;\r\ -> \n :global devBuildTime;\r\ -> \n :global runningChannelVersion;\r\ -> \n :global runningChannel;\r\ -> \n :global runningVersion;\r\ -> \n :global currentUpdateChannel;\r\ -> \n :global ROsVerAvail;\r\ -> \n\r\ -> \n :local DeviceInfo;\r\ -> \n :local Resource [/system/resource/get];\r\ -> \n :local Update [ /system/package/update/get ];\r\ -> \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ -> \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ -> \n :local RouterBoard;\r\ -> \n :local IsRouterBoard false;\r\ -> \n :local RunningMode \"\";\r\ -> \n\r\ -> \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ -> \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ -> \n :set runningChannelVersion \$VersionString;\r\ -> \n :set runningVersion \$VersionString;\r\ -> \n :set runningChannel \"\";\r\ -> \n\r\ -> \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ -> {\r\ -> \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ -> \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ -> len \$VersionString ] ];\r\ -> \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ -> \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ -> \r\ -> \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ -> \n }\r\ -> \n }\r\ -> \n\r\ -> \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ -> \_3] != \"x86\") do={\r\ -> \n :do {\r\ -> \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ -> \n# :set RouterBoard [ /system/routerboard/get ];\r\ -> \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ -> \n :set IsRouterBoard true;\r\ -> \n }\r\ -> \n } on-error={}\r\ -> \n }\r\ -> \n\r\ -> \n :do {\r\ -> \n :set RunningMode [ /system/device-mode/get mode ];\r\ -> \n } on-error={\r\ -> \n :do {\r\ -> \n :set RunningMode [ /system/device-mode/get running ];\r\ -> \n } on-error={\r\ -> \n :set RunningMode \"\";\r\ -> \n }\r\ -> \n }\r\ -> \n :set devRunning \$RunningMode;\r\ -> \n\r\ -> \n :if (\$IsRouterBoard = true) do={\r\ -> \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ -> \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ -> \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ -> ];\r\ -> \n } else={\r\ -> \n :set devModel \$devBoardName;\r\ -> \n :set devRbRevision \"\";\r\ -> \n :set devRbSerialNumber \"\";\r\ -> \n }\r\ -> \n\r\ -> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ -> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ -> \n\r\ -> \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ -> \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ -> \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ -> \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ -> \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ -> \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ -> \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ -> \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ -> ion;\r\ -> \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ -> \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ -> \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ -> \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ -> current-firmware\") ];\r\ -> \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ -> upgrade-firmware\") ];\r\ -> \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ -> \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ -> alled-version\") ];\r\ -> \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ -> \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ -> ) ];\r\ -> \n\r\ -> \n :set arrDeviceInfo \$DeviceInfo;\r\ -> \n :return \$DeviceInfo;\r\ -> \n}\r\ -> \n\r\ -> \n:set DeviceInfo do={\r\ -> \n :global GetArrDeviceInfo;\r\ -> \n :global GlobalConfVersion;\r\ -> \n :global Identity;\r\ -> \n :global IfThenElse;\r\ -> \n :global FormatLine;\r\ -> \n :global CommitBrief;\r\ -> \n\r\ -> \n :local License [/system/license/get];\r\ -> \n :local Snmp [ /snmp/get ];\r\ -> \n :local Info [ \$GetArrDeviceInfo ];\r\ -> \n\r\ -> \n :if ([ :typeof \$Info ] != \"array\") do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :return ( \\\r\ -> \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ -> \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ -> \_. \\\r\ -> \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ -> \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ -> \_\\\r\ -> \n \"Hardware:\\n\" . \\\r\ -> \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ -> \\\r\ -> \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ -> n\" . \\\r\ -> \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ -> \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ -> \\n\") ] . \\\r\ -> \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ -> \")) ] . \"\\n\") ] . \\\r\ -> \n \"RouterOS:\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ -> \")) ] . \"\\n\") ] . \\\r\ -> \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ -> \\n\" . \\\r\ -> \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ -> \_\"\\n\" . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ -> \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ -> \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ -> \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ -> \"\\n\") ] . \\\r\ -> \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ -> \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ -> \_\\\r\ -> \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ -> \_\"\\n\") ] . \\\r\ -> \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ -> \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ -> ) \\\r\ -> \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ -> \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ -> \n \"RouterOS-Scripts:\\n\" . \\\r\ -> \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ -> \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ -> \n}\r\ -> \n\r\ -> \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ -> tionFunctions ({})}\r\ -> \n\r\ -> \n:set GetRandom20CharAlNum do={\r\ -> \n :global EitherOr;\r\ -> \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ -> FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ -> \n}\r\ -> \n\r\ -> \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ -> \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ -> \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ -> \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ -> \n\r\ -> \n:global checkRunJob;\r\ -> \n:set checkRunJob do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :global ScriptLock; \r\ -> \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ -> \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ -> :set Job [ /system/script/job/get \$Job ];\r\ -> \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ -> stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ -> \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ -> lse; \r\ -> \n}\r\ -> \n\r\ -> \n:set InspectVar do={\r\ -> \n :global InspectVarRet;\r\ -> \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ -> \n}\r\ -> \n\r\ -> \n:set CommitBrief do={\r\ -> \n :global CommitId;\r\ -> \n :global CommitInfo;\r\ -> \n :if (\$CommitId = \"unknown\") do={\r\ -> \n :return \"unknown\";\r\ -> \n }\r\ -> \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ -> \n}\r\ -> \n\r\ -> \n:set InspectVarRet do={\r\ -> \n :local Input \$1;\r\ -> \n :local Level (0 + [ :tonum \$2 ]);\r\ -> \n :global CharacterReplace;\r\ -> \n :global IfThenElse;\r\ -> \n :global InspectVarRet;\r\ -> \n :local IndentReturn do={\r\ -> \n :local Prefix [ :tostr \$1 ];\r\ -> \n :local Value [ :tostr \$2 ];\r\ -> \n :local Level [ :tonum \$3 ];\r\ -> \n :global CharacterMultiply;\r\ -> \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ -> fix . \"-> \" . \$Value);\r\ -> \n }\r\ -> \n :local TypeOf [ :typeof \$Input ];\r\ -> \n :local Len [ :len \$Input ];\r\ -> \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ -> \n :if (\$TypeOf = \"array\") do={\r\ -> \n :foreach Key,Value in=\$Input do={\r\ -> \n :set \$Return (\$Return . \"\\n\" . \\\r\ -> \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ -> \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ -> \n }\r\ -> \n } else={\r\ -> \n :if (\$TypeOf = \"str\") do={\r\ -> \n :set \$Return (\$Return . \"\\n\" . \\\r\ -> \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ -> \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ -> \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ -> \n }\r\ -> \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ -> \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ -> \n }\r\ -> \n }\r\ -> \n :if (\$TypeOf != \"nothing\") do={\r\ -> \n :set \$Return (\$Return . \"\\n\" . \\\r\ -> \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ -> \_\\\r\ -> \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ -> \n }\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set GetPubIp do={\r\ -> \n :global DetectIpAddrDefault;\r\ -> \n :global DetectIpAddrFallback;\r\ -> \n\r\ -> \n :local PubIpAddr false;\r\ -> \n :local Url \$DetectIpAddrDefault;\r\ -> \n :local JobName [ :jobname ];\r\ -> \n\r\ -> \n :do {\r\ -> \n :log debug (\$0 . \" Trying to detect public IP using default serv\ -> ice: \" . \$Url . \"...\");\r\ -> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ -> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ -> )} \\\r\ -> \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ -> detect public IP using default service: \" . \$Url . \".\")}\r\ -> \n } on-error={\r\ -> \n :log error (\$0 . \" Failed to detect public IP using default serv\ -> ice: \" . \$Url . \".\");\r\ -> \n :set Url \$DetectIpAddrFallBack;\r\ -> \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ -> vice: \" . \$Url . \"...\");\r\ -> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ -> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ -> )} \\\r\ -> \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ -> \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ -> \n };\r\ -> \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ -> \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ -> {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ -> \n :return \$PubIpAddr;\r\ -> \n}\r\ -> \n\r\ -> \n:set FormatLine do={\r\ -> \n :local Key [ :tostr \$1 ];\r\ -> \n :local Value [ :tostr \$2 ];\r\ -> \n :local Indent [ :tonum \$3 ];\r\ -> \n :local Spaces;\r\ -> \n :local Return \"\";\r\ -> \n :global CharacterMultiply;\r\ -> \n :global EitherOr;\r\ -> \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ -> \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ -> \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ -> \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ -> n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ -> \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ -> \$Return ]) ] . \$Value)}\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set ParseCustom do={\r\ -> \n :local Str [ :tostr \$1 ];\r\ -> \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ -> \n :local End [ :tostr \$3 ];\r\ -> \n :local Num [ :tonum \$4 ];\r\ -> \n :local Return;\r\ -> \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ -> \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ -> \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ -> lse={\r\ -> \n :set End [:find \$rest \$End];\r\ -> \n :set Return [:pick \$rest 0 \$End];\r\ -> \n }\r\ -> \n:return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set LogPrint do={\r\ -> \n :local Severity [ :tostr \$1 ];\r\ -> \n :local Name [ :tostr \$2 ];\r\ -> \n :local Message [ :tostr \$3 ];\r\ -> \n :global PrintDebug;\r\ -> \n :global PrintDebugOverride;\r\ -> \n :global EitherOr;\r\ -> \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ -> ];\r\ -> \n :local PrintSeverity do={\r\ -> \n :global TerminalColorOutput;\r\ -> \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ -> \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ -> \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ -> \n}\r\ -> \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ -> \r\ -> \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ -> \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ -> \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ -> \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ -> \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ -> \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ -> erity \$Severity ] . \": \" . \$Message)}\r\ -> \n}\r\ -> \n\r\ -> \n:set CertificateAvailable do={\r\ -> \n :local CommonName [ :tostr \$1 ];\r\ -> \n :local UseFor [ :tostr \$2 ];\r\ -> \n\r\ -> \n :global CertificateDownload;\r\ -> \n :global ParseKeyValueStore;\r\ -> \n\r\ -> \n :if ([ :len \$UseFor ] = 0) do={\r\ -> \n :log warning (\$0 . \"The intended use is undefined!\");\r\ -> \n :set UseFor \"undefined\";\r\ -> \n }\r\ -> \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ -> \n [ /certificate/settings/get crl-download ] = true && \\\r\ -> \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ -> \n :log warning (\$0 . \"This system has low free flash space but \" . \ -> \\\r\ -> \n \"is configured to download certificate CRLs to system!\");\r\ -> \n }\r\ -> \n :if ([ :len \$CommonName ] = 0) do={\r\ -> \n :log warning (\$0 . \"No CommonName given!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local CertSettings [ /certificate/settings/get ];\r\ -> \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ -> \r\ -> \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ -> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ -> \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ -> \_] ] > 0) do={\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ -> ) do={\r\ -> \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ -> \"' not available.\");\r\ -> \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ -> ) do={\r\ -> \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ -> \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ -> e ] ];\r\ -> \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ -> ertVal->\"skid\")) do={\r\ -> \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ -> \_= 0) do={\r\ -> \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ -> >\"CN\");\r\ -> \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ -> is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ -> \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ -> \") ] ];\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set CertificateDownload do={\r\ -> \n :local CommonName [ :tostr \$1 ];\r\ -> \n :global ScriptUpdatesBaseUrl;\r\ -> \n :global ScriptUpdatesUrlSuffix;\r\ -> \n :global CertificateNameByCN;\r\ -> \n :global CleanName;\r\ -> \n :global FetchUserAgentStr;\r\ -> \n :global RmFile;\r\ -> \n :global WaitForFile;\r\ -> \n\r\ -> \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ -> \r\ -> \n \"CommonName '\" . \$CommonName . \"'.\");\r\ -> \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ -> \n :do {\r\ -> \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ -> -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ -> \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ -> sUrlSuffix) \\\r\ -> \n dst-path=\$FileName as-value;\r\ -> \n \$WaitForFile \$FileName;\r\ -> \n } on-error={\r\ -> \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ -> e '\" . \$CommonName . \\\r\ -> \n \"' from repository! Trying fallback to mkcert.org...\");\r\ -> \n :do {\r\ -> \n :local CertSettings [ /certificate/settings/get ];\r\ -> \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ -> \_] ] = 0 && \\\r\ -> \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ -> || \\\r\ -> \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ -> \\\r\ -> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ -> \r\ -> \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ -> \_Root X1\" ] ] > 0)) do={\r\ -> \n :log error (\$0 . \" Required certificate is not available.\");\ -> \r\ -> \n :return false;\r\ -> \n }\r\ -> \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ -> er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ -> \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ -> n ({ \$CommonName }) ] \\\r\ -> \n dst-path=\$FileName as-value;\r\ -> \n \$WaitForFile \$FileName;\r\ -> \n :if ([ /file/get \$FileName size ] = 0) do={\r\ -> \n \$RmFile \$FileName;\r\ -> \n :error false;\r\ -> \n }\r\ -> \n } on-error={\r\ -> \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ -> e '\" . \$CommonName . \"'!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ -> \n :delay 1s;\r\ -> \n \$RmFile \$FileName;\r\ -> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ -> ) do={\r\ -> \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ -> +\\\$\") ];\r\ -> \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ -> e . \"' still unavailable!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ -> \"_[0-9]+\\\$\") ] do={\r\ -> \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set CertificateNameByCN do={\r\ -> \n :local Match [ :tostr \$1 ];\r\ -> \n :global CleanName;\r\ -> \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ -> rint=\$Match or name=\$Match) ]->0);\r\ -> \n :if ([ :len \$Cert ] = 0) do={\r\ -> \n :log warning (\$0 .\" No matching certificate found.\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ -> \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set CharacterMultiply do={\r\ -> \n :local Str [ :tostr \$1 ];\r\ -> \n :local Num [ :tonum \$2 ];\r\ -> \n :if (\$Num = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set FileExists do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :local Type [ :tostr \$2 ];\r\ -> \n :global FileGet;\r\ -> \n :local FileVal [ \$FileGet \$FileName ];\r\ -> \n :if (\$FileVal = false) do={ :return false; }\r\ -> \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ -> \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ -> \_true; }\r\ -> \n :return false;\r\ -> \n}\r\ -> \n\r\ -> \n:set Grep do={\r\ -> \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ -> \n :local Pattern [ :tostr \$2 ];\r\ -> \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ -> }\r\ -> \n :do {\r\ -> \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ -> \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ -> \$Line}\r\ -> \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ -> Input ] ];\r\ -> \n } while=([ :len \$Input ] > 0);\r\ -> \n :return [];\r\ -> \n}\r\ -> \n\r\ -> \n:set HumanReadableNum do={\r\ -> \n :local Input [ :tonum \$1 ];\r\ -> \n :local Base [ :tonum \$2 ];\r\ -> \n :global EitherOr;\r\ -> \n :global IfThenElse;\r\ -> \n :local Prefix \"kMGTPE\";\r\ -> \n :local Pow 1;\r\ -> \n :set Base [ \$EitherOr \$Base 1024 ];\r\ -> \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ -> \n :if (\$Input < \$Base) do={:return \$Input}\r\ -> \n :for I from=0 to=[ :len \$Prefix ] do={\r\ -> \n :set Pow (\$Pow * \$Base);\r\ -> \n :if (\$Input / \$Base < \$Pow) do={\r\ -> \n :set Prefix [ :pick \$Prefix \$I ];\r\ -> \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ -> \n :local Tmp2 (\$Tmp1 / 100);\r\ -> \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ -> \n :return (\$Tmp2 . \".\" . \\\r\ -> \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ -> 2 ] + 1) ] . \\\r\ -> \n \$Prefix . \$Bin);\r\ -> \n }\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set CleanFilePath do={\r\ -> \n :local Path [ :tostr \$1 ];\r\ -> \n :global CharacterReplace;\r\ -> \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ -> \"//\" \"/\" ]; }\r\ -> \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ -> n \$Path ] ]; }\r\ -> \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ -> :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ -> \n :return \$Path;\r\ -> \n}\r\ -> \n\r\ -> \n:set CleanName do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :local Return \"\";\r\ -> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -> \n :local Char [ :pick \$Input \$I ];\r\ -> \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ -> stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ -> \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ -> \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ -> ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ -> \n };\r\ -> \n :set Return (\$Return . \$Char)};\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set RandomDelay do={\r\ -> \n :local Time [ :tonum \$1 ];\r\ -> \n :local Unit [ :tostr \$2 ];\r\ -> \n :global EitherOr;\r\ -> \n :global GetRandomNumber;\r\ -> \n :global MAX;\r\ -> \n :if (\$Time = 0) do={:return false}\r\ -> \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ -> [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ -> \n}\r\ -> \n\r\ -> \n:set EscapeForRegEx do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ -> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -> \n :local Char [ :pick \$Input \$I ];\r\ -> \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ -> \n :set Return (\$Return . \$Char);\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set ExitError do={\r\ -> \n :local ExitOK [ :tostr \$1 ];\r\ -> \n :local Name [ :tostr \$2 ];\r\ -> \n :local Error [ :tostr \$3 ];\r\ -> \n :global IfThenElse;\r\ -> \n :if (\$ExitOK = \"false\") do={\r\ -> \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ -> \\\r\ -> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ -> ror\" . \\\r\ -> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ -> \$Error) \".\" ]);\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set ExitOnError do={\r\ -> \n :local Name [ :tostr \$1 ];\r\ -> \n :local Error [ :tostr \$2 ];\r\ -> \n :global IfThenElse;\r\ -> \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ -> \\\$\") \\\r\ -> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ -> r\" . \\\r\ -> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ -> rror) \".\" ]);\r\ -> \n}\r\ -> \n\r\ -> \n:set MiniDateTimeStamp do={\r\ -> \n :local mikro [ :tobool \$1 ];\r\ -> \n /system/clock;\r\ -> \n :local vdate [get date];\r\ -> \n :local vtime [get time];\r\ -> \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ -> \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ -> \n :local M [:tonum \$MM];\r\ -> \n :if (\$vdate ~ \".../../....\") do={\r\ -> \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ -> \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ -> PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ -> \n :if (\$M>12) do={:set M (\$M - 12)}\r\ -> \n :set MM [:pick (100 + \$M) 1 3];\r\ -> \n }\r\ -> \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ -> \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ -> \n :local HH [:pick \$vtime 0 2];\r\ -> \n :local mm [:pick \$vtime 3 5];\r\ -> \n :local ss [:pick \$vtime 6 8];\r\ -> \n :local Return;\r\ -> \n :if (\$mikro = true) do={\r\ -> \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ -> \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ -> \n } else={\r\ -> \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ -> \r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set WaitForFile do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :local WaitTime [ :totime \$2 ];\r\ -> \n :global CleanFilePath;\r\ -> \n :global EitherOr;\r\ -> \n :global MAX;\r\ -> \n :set FileName [ \$CleanFilePath \$FileName ];\r\ -> \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ -> \n :do {\r\ -> \n :retry {\r\ -> \n /file/get \$FileName;\r\ -> \n :return true;\r\ -> \n } delay=\$Delay max=10;\r\ -> \n } on-error={ }\r\ -> \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ -> \n :do {\r\ -> \n /file/get \$FileName;\r\ -> \n :return true;\r\ -> \n } on-error={ }\r\ -> \n :delay \$Delay;\r\ -> \n :set Delay (\$Delay * 3 / 2);\r\ -> \n }\r\ -> \n :return false;\r\ -> \n}\r\ -> \n\r\ -> \n:set FileGet do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :global WaitForFile;\r\ -> \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local FileVal false;\r\ -> \n :do {\r\ -> \n :set FileVal [ /file/get \$FileName ];\r\ -> \n } on-error={ }\r\ -> \n :return \$FileVal;\r\ -> \n}\r\ -> \n\r\ -> \n:set RmDir do={\r\ -> \n :local DirName [ :tostr \$1 ];\r\ -> \n :global FileGet;\r\ -> \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ -> \n :local DirVal [ \$FileGet \$DirName ];\r\ -> \n :if (\$DirVal = false) do={\r\ -> \n :log debug (\$0 . \" ... which does not exist.\");\r\ -> \n :return true;\r\ -> \n };\r\ -> \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ -> \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ -> ory.\");\r\ -> \n :return false;\r\ -> \n };\r\ -> \n :onerror Err {\r\ -> \n /file/remove \$DirName;\r\ -> \n } do={\r\ -> \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ -> : \" . \$Err);\r\ -> \n :return false;\r\ -> \n };\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set RmFile do={\r\ -> \n :local FileName [ :tostr \$1 ];\r\ -> \n :global FileGet;\r\ -> \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ -> \n :local FileVal [ \$FileGet \$FileName ];\r\ -> \n :if (\$FileVal = false) do={\r\ -> \n :log debug (\$0 . \" ... which does not exist.\");\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ -> sk\") do={\r\ -> \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ -> \r\ -> \n :return false;\r\ -> \n }\r\ -> \n :onerror Err {\r\ -> \n /file/remove \$FileName;\r\ -> \n } do={\r\ -> \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ -> \_. \$Err); :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set MkDir do={\r\ -> \n :local Path [ :tostr \$1 ];\r\ -> \n :global CleanFilePath;\r\ -> \n :global FileGet;\r\ -> \n :global RmDir;\r\ -> \n :global WaitForFile;\r\ -> \n\r\ -> \n :local MkTmpfs do={\r\ -> \n :global WaitForFile;\r\ -> \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ -> \n :if ([ :len \$TmpFs ] = 1) do={\r\ -> \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ -> \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ -> \n /disk/enable \$TmpFs;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ -> \n \$RmDir \"tmpfs\";\r\ -> \n :onerror Err {\r\ -> \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ -> /get total-memory ] / 3);\r\ -> \n \$WaitForFile \"tmpfs\";\r\ -> \n } do={\r\ -> \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ -> Err);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :set Path [ \$CleanFilePath \$Path ];\r\ -> \n :if (\$Path = \"\") do={\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ -> \n :local PathVal [ \$FileGet \$Path ];\r\ -> \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ -> \n :log debug (\$0 . \" ... which already exists.\");\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ -> \n :if ([ \$MkTmpfs ] = false) do={\r\ -> \n :return false;\r\ -> \n }\r\ -> \n }\r\ -> \n :onerror Err {\r\ -> \n /file/add type=\"directory\" name=\$Path;\r\ -> \n \$WaitForFile \$Path;\r\ -> \n } do={\r\ -> \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ -> \" . \$Err);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ -> \n :return \$2;\r\ -> \n}\r\ -> \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ -> \n :return \$2;\r\ -> \n}\r\ -> \n\r\ -> \n:set CharacterMultiply do={\r\ -> \n :local Str [ :tostr \$1 ];\r\ -> \n :local Num [ :tonum \$2 ];\r\ -> \n :if (\$Num = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set CharacterReplace do={\r\ -> \n :local String [ :tostr \$1 ];\r\ -> \n :local ReplaceFrom [ :tostr \$2 ];\r\ -> \n :local ReplaceWith [ :tostr \$3 ];\r\ -> \n :local Return \"\";\r\ -> \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ -> \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ -> \r\ -> \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ -> \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ -> \r\ -> \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ -> \_\$String ] ];\r\ -> \n }\r\ -> \n :return (\$Return . \$String);\r\ -> \n}\r\ -> \n\r\ -> \n:set IfThenElse do={\r\ -> \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ -> \$2};\r\ -> \n :return \$3;\r\ -> \n}\r\ -> \n\r\ -> \n:set EitherOr do={\r\ -> \n :global IfThenElse;\r\ -> \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ -> \$1 \$2 ]}\r\ -> \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ -> \_\$1 \$2 ]}\r\ -> \n# this works for boolean values, literal ones with parentheses\r\ -> \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ -> \n}\r\ -> \n\r\ -> \n:set ParseKeyValueStore do={\r\ -> \n :local Source \$1;\r\ -> \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ -> \n :do {\r\ -> \n :return [ :deserialize from=json \$Source ];\r\ -> \n } on-error={ }\r\ -> \n } \r\ -> \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ -> }\r\ -> \n :local Result ({});\r\ -> \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ -> \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ -> \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ -> \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ -> \_:len \$KeyValue ] ];\r\ -> \n :if (\$Value=\"true\") do={:set Value true}\r\ -> \n :if (\$Value=\"false\") do={:set Value false}\r\ -> \n :set (\$Result->\$Key) \$Value;\r\ -> \n } else={:set (\$Result->\$KeyValue) true}\r\ -> \n }\r\ -> \n :return \$Result;\r\ -> \n}\r\ -> \n:set RequiredRouterOS do={\r\ -> \n :local Caller [ :tostr \$1 ];\r\ -> \n :local Required [ :tostr \$2 ];\r\ -> \n :local Warn [ :tostr \$3 ];\r\ -> \n :global IfThenElse;\r\ -> \n :global VersionToNum;\r\ -> \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ -> \\\$\")) do={\r\ -> \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ -> e/update/get installed-version ] ]) do={\r\ -> \n :if (\$Warn = \"true\") do={\r\ -> \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ -> 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ -> \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ -> es RouterOS \" . \$Required . \". Please update!\");\r\ -> \n }\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set ValidateSyntax do={\r\ -> \n :local Code [ :tostr \$1 ];\r\ -> \n :global LogPrint;\r\ -> \n :onerror Err {\r\ -> \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ -> \n } do={\r\ -> \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set VersionToNum do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :local Multi 0x1000000;\r\ -> \n :local Return 0;\r\ -> \n :global CharacterReplace;\r\ -> \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ -> \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ -> \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ -> \r\ -> \n }\r\ -> \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ -> \n :local Num [ :tonum \$Value ];\r\ -> \n :if (\$Multi = 0x100) do={\r\ -> \n :if ([ :typeof \$Num ] = \"num\") do={\r\ -> \n :set Return (\$Return + 0xff00);\r\ -> \n :set Multi (\$Multi / 0x100);\r\ -> \n } else={\r\ -> \n :if (\$Value = \"zero\") do={ }\r\ -> \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ -> }\r\ -> \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ -> \r\ -> \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ -> lue * \$Multi)); }\r\ -> \n :set Multi (\$Multi / 0x100);\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set ScriptLock do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local WaitMax [ :totime \$2 ];\r\ -> \n :global GetRandom20CharAlNum;\r\ -> \n :global IfThenElse;\r\ -> \n :global ScriptLockOrder;\r\ -> \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ -> \n :set ScriptLockOrder ({});\r\ -> \n }\r\ -> \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ -> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -> \n }\r\ -> \n :local JobCount do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ -> \r\ -> \n }\r\ -> \n :local TicketCount do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :local Count 0;\r\ -> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ -> + 1)}\r\ -> \n }\r\ -> \n :return \$Count;\r\ -> \n }\r\ -> \n :local IsFirstTicket do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local Check [ :tostr \$2 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :if (\$Ticket = \$Check) do={:return true}\r\ -> \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ -> o={:return false}\r\ -> \n }\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :local AddTicket do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local Add [ :tostr \$2 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :while (true) do={\r\ -> \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ -> \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ -> \n :delay 10ms;\r\ -> \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ -> e}\r\ -> \n }\r\ -> \n }\r\ -> \n :local RemoveTicket do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :local Remove [ :tostr \$2 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ -> \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ -> \n :delay 10ms;\r\ -> \n }\r\ -> \n }\r\ -> \n }\r\ -> \n :local CleanupTickets do={\r\ -> \n :local Script [ :tostr \$1 ];\r\ -> \n :global ScriptLockOrder;\r\ -> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ -> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ -> \n }\r\ -> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -> \n }\r\ -> \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ -> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ -> \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ -> ist!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if ([ \$JobCount \$Script ] = 0) do={\r\ -> \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ -> );\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ -> \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ -> t . \"', resetting!\");\r\ -> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ -> \n /system/script/job/remove [ find where script=\$Script ];\r\ -> \n }\r\ -> \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ -> \n \$AddTicket \$Script \$MyTicket;\r\ -> \n :local WaitInterval (\$WaitMax / 20);\r\ -> \n :local WaitTime \$WaitMax;\r\ -> \n :while (\$WaitTime > 0 && \\\r\ -> \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ -> \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ -> \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ -> \n :delay \$WaitInterval;\r\ -> \n }\r\ -> \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ -> \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ -> \n \$RemoveTicket \$Script \$MyTicket;\r\ -> \n \$CleanupTickets \$Script;\r\ -> \n :return true;\r\ -> \n }\r\ -> \n \$RemoveTicket \$Script \$MyTicket;\r\ -> \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ -> once\" . \\\r\ -> \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ -> \_lock\" \"\" ] . \"...\");\r\ -> \n :return false;\r\ -> \n}\r\ -> \n\r\ -> \n:set SendNotification do={ :onerror Err {\r\ -> \n :global SendNotification2;\r\ -> \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ -> \_silent=\$4 });\r\ -> \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ -> \n}\r\ -> \n\r\ -> \n:set SendNotification2 do={\r\ -> \n :local Notification \$1;\r\ -> \n :global NotificationFunctions;\r\ -> \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ -> \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ -> ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:set SymbolByUnicodeName do={\r\ -> \n :local Name [ :tostr \$1 ];\r\ -> \n :global EitherOr;\r\ -> \n :global SymbolsExtra;\r\ -> \n :local Symbols ({\r\ -> \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ -> \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ -> \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ -> \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ -> \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ -> \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ -> \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ -> \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ -> \n \"cloud\"=\"\\E2\\98\\81\";\r\ -> \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ -> \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ -> \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ -> \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ -> \n \"gear\"=\"\\E2\\9A\\99\";\r\ -> \n \"heart\"=\"\\E2\\99\\A5\";\r\ -> \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ -> \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ -> \n \"information\"=\"\\E2\\84\\B9\";\r\ -> \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ -> \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ -> \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ -> \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ -> \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ -> \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ -> \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ -> \n \"scissors\"=\"\\E2\\9C\\82\";\r\ -> \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ -> \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ -> \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ -> \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ -> \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ -> \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ -> \n \"star\"=\"\\E2\\AD\\90\";\r\ -> \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ -> \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ -> \n }, \$SymbolsExtra);\r\ -> \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ -> \n :local Special {\r\ -> \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ -> \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ -> \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ -> \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ -> \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ -> \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ -> '!\");\r\ -> \n :return \"\";\r\ -> \n }\r\ -> \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ -> me) ] . \"\\EF\\B8\\8F\");\r\ -> \n}\r\ -> \n\r\ -> \n:set SymbolForNotification do={\r\ -> \n :global NotificationsWithSymbols;\r\ -> \n :global SymbolByUnicodeName;\r\ -> \n :global IfThenElse;\r\ -> \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ -> \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ -> \n :local Return \"\";\r\ -> \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ -> mbolByUnicodeName \$Symbol ])}\r\ -> \n :return (\$Return . \" \");\r\ -> \n}\r\ -> \n\r\ -> \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ -> \n:set UrlEncode do={\r\ -> \n :local Input [ :tostr \$1 ];\r\ -> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ -> \n :local Return \"\";\r\ -> \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ -> \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ -> %24\"; \"%25\"; \"%26\"; \"%27\";\r\ -> \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ -> \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ -> \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ -> \"%7C\"; \"%7D\"; \"%7E\" };\r\ -> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ -> \n :local Char [ :pick \$Input \$I ];\r\ -> \n :local Replace [ :find \$Chars \$Char ];\r\ -> \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ -> ce)}\r\ -> \n :set Return (\$Return . \$Char);\r\ -> \n }\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set IsDNSResolving do={\r\ -> \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set IsFullyConnected do={\r\ -> \n :global IsDNSResolving;\r\ -> \n :global IsTimeSync;\r\ -> \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ -> \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set IsTimeSync do={\r\ -> \n :global IsTimeSyncCached;\r\ -> \n :global IsTimeSyncResetNtp;\r\ -> \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ -> \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ -> \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ -> \n :set IsTimeSyncCached true;\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :local Uptime [ /system/resource/get uptime ];\r\ -> \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ -> \n :set IsTimeSyncResetNtp \$Uptime;\r\ -> \n }\r\ -> \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ -> \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ -> ;\r\ -> \n :set IsTimeSyncResetNtp \$Uptime;\r\ -> \n /system/ntp/client/set enabled=no;\r\ -> \n :delay 20ms;\r\ -> \n /system/ntp/client/set enabled=yes;\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ -> \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ -> \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ -> ee license and x86.\";\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ -> \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ -> \n :set IsTimeSyncCached true;\r\ -> \n :return true;\r\ -> \n }\r\ -> \n :return false;\r\ -> \n }\r\ -> \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ -> \r\ -> \n :return true;\r\ -> \n}\r\ -> \n\r\ -> \n:set FetchHugeFiles do={\r\ -> \n :local ScriptName [ :tostr \$1 ];\r\ -> \n :local Url [ :tostr \$2 ];\r\ -> \n :local CheckCert [ :tostr \$3 ];\r\ -> \n\r\ -> \n :global CleanName;\r\ -> \n :global FetchUserAgentStr;\r\ -> \n :global GetRandom20CharAlNum;\r\ -> \n :global IfThenElse;\r\ -> \n :global LogPrint;\r\ -> \n :global MkDir;\r\ -> \n :global RmDir;\r\ -> \n :global RmFile;\r\ -> \n :global WaitForFile;\r\ -> \n\r\ -> \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ -> ithout-crl\" ];\r\ -> \n\r\ -> \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ -> \n :if ([ \$MkDir \$DirName ] = false) do={\r\ -> \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ -> \$GetRandom20CharAlNum ]);\r\ -> \n :onerror Err {\r\ -> \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ -> \\\r\ -> \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ -> lue;\r\ -> \n } do={\r\ -> \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ -> \n \$RmFile \$FileName;\r\ -> \n }\r\ -> \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ -> \_. \$Err);\r\ -> \n \$RmDir \$DirName;\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ -> \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ -> \_not show up.\");\r\ -> \n :return false;\r\ -> \n }\r\ -> \n\r\ -> \n :local FileSize [ /file/get \$FileName size ];\r\ -> \n :local Return \"\";\r\ -> \n :local VarSize 0;\r\ -> \n :while (\$VarSize != \$FileSize) do={\r\ -> \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ -> 768 file=\$FileName as-value ]->\"data\"));\r\ -> \n :set FileSize [ /file/get \$FileName size ];\r\ -> \n :set VarSize [ :len \$Return ];\r\ -> \n :if (\$VarSize > \$FileSize) do={\r\ -> \n :delay 100ms;\r\ -> \n }\r\ -> \n }\r\ -> \n \$RmDir \$DirName;\r\ -> \n :return \$Return;\r\ -> \n}\r\ -> \n\r\ -> \n:set FetchUserAgentStr do={\r\ -> \n :local Caller [ :tostr \$1 ];\r\ -> \n :global GlobalScriptsUrl;\r\ -> \n :global CommitBrief;\r\ -> \n :global IfThenElse;\r\ -> \n :local Resource [ /system/resource/get ];\r\ -> \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ -> \_\$Resource->\"architecture-name\" . \\\r\ -> \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ -> CommitBrief ] . \")\");\r\ -> \n}\r\ -> \n\r\ -> \n:set ScriptInstallUpdate do={ :onerror Err {\r\ -> \n :local Scripts [ :toarray \$1 ];\r\ -> \n :local NewComment [ :tostr \$2 ];\r\ -> \n :global InitSetup;\r\ -> \n\r\ -> \n :global CommitId;\r\ -> \n :global ScriptUpdatesCRLF;\r\ -> \n :global GlobalConfVersion;\r\ -> \n :global Identity;\r\ -> \n :global CertificateAvailable;\r\ -> \n :global CheckSumsVerify;\r\ -> \n :global GlobalScriptsUrl;\r\ -> \n :global SumsDirAndFileName;\r\ -> \n :global GlobalScriptsUrlSuffix;\r\ -> \n :global EitherOr;\r\ -> \n :global FetchUserAgentStr;\r\ -> \n :global Grep;\r\ -> \n :global IfThenElse;\r\ -> \n :global LogPrint;\r\ -> \n :global ParseKeyValueStore;\r\ -> \n :global RequiredRouterOS;\r\ -> \n :global SendNotification2;\r\ -> \n :global SymbolForNotification;\r\ -> \n :global ValidateSyntax;\r\ -> \n :global CommentsInScripts;\r\ -> \n\r\ -> \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ -> hout.\");\r\ -> \n }\r\ -> \n\r\ -> \n :foreach Script in=\$Scripts do={\r\ -> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ -> \r\ -> \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ -> \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ -> Vados\\n\" comment=\$NewComment;\r\ -> \n }\r\ -> \n }\r\ -> \n\r\ -> \n :local CommitIdBefore \$CommitId;\r\ -> \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ -> \n :local ReloadGlobal false;\r\ -> \n :local DeviceMode [ /system/device-mode/get ];\r\ -> \n\r\ -> \n :if (\$CheckSumsVerify = true) do={\r\ -> \n :local CheckSums ({});\r\ -> \n :do {\r\ -> \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ -> iptsUrlSuffix);\r\ -> \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ -> \r\ -> \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ -> ficate=yes-without-crl \\\r\ -> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ -> =user as-value ]->\"data\") ];\r\ -> \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ -> \n }\r\ -> \n\r\ -> \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ -> s\" ] do={\r\ -> \n :local ScriptVal [ /system/script/get \$Script ];\r\ -> \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ -> ];\r\ -> \n :local SourceNew;\r\ -> \n\r\ -> \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ -> \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ -> \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ -> \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ -> \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ -> iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ -> \"'!\");\r\ -> \n }\r\ -> \n }\r\ -> \n :do {\r\ -> \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ -> \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ -> e\" . \"', as requested.\");\r\ -> \n :error true;\r\ -> \n }\r\ -> \n :if (\$CheckSumsVerify = true) do={\r\ -> \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ -> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ -> ptInfo->\"url-suffix\") ] = 0 && \\\r\ -> \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ -> rce\") ] ] = \$CheckSum) do={\r\ -> \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ -> >\"name\" . \"' matches, ignoring.\");\r\ -> \n :error true;\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ -> \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ -> fetch\" ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ -> ng without.\");\r\ -> \n }\r\ -> \n }\r\ -> \n :onerror Err {\r\ -> \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ -> lScriptsUrl ];\r\ -> \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ -> lobalScriptsUrlSuffix ];\r\ -> \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ -> Suffix);\r\ -> \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ -> name\") . \"' from url: \" . \$Url);\r\ -> \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ -> \r\ -> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ -> ut=user as-value ];\r\ -> \n :if (\$Result->\"status\" = \"finished\") do={\r\ -> \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ -> \n } \r\ -> \n } do={\r\ -> \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ -> al->\"name\" . \"': \" . \$Err);\r\ -> \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ -> \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ -> \?\");\r\ -> \n /system/script/remove \$Script;\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if (\$CheckSumsVerify = true) do={\r\ -> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ -> riptInfo->\"url-suffix\") ] = 0 && \\\r\ -> \n [ :len \$CheckSum ] = 0) do={\r\ -> \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ -> pdates with 'ignore=true' in comment.\");\r\ -> \n }\r\ -> \n }\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ :len \$SourceNew ] = 0) do={\r\ -> \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ -> >\"name\") . \"'.\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ -> \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ -> lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ -> \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ -> \$ScriptVal->\"source\")) do={\r\ -> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ -> . \"' source did not change. End of lines set to CRLF.\");\r\ -> \n if (\$ScriptUpdatesCRLF = false) do={\r\ -> \n :put [ :tolf \$SourceNew ];\r\ -> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ -> ) . \"' source update end of lines to LF.\");\r\ -> \n }\r\ -> \n :error false;\r\ -> \n }\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ -> \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ -> l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ -> );\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :if (\$CommentsInScripts = true) do={\r\ -> \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ -> \_\") ];\r\ -> \n :if ([ :len \$CommentLine ] = 0) do={\r\ -> \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ -> iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ -> noring!\");\r\ -> \n :error false;\r\ -> \n } else={\r\ -> \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ -> ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ -> ] + 2) [ :len \$CommentLine] ]) do={\r\ -> \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ -> \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ -> ;\r\ -> \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ -> ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ -> \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ -> omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ -> ded!\");\r\ -> \n } else={\r\ -> \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ -> al->\"name\") . \"' did not change.\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n } \r\ -> \n }\r\ -> \n\r\ -> \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ -> \"\\23 requires RouterOS, \") ] ]->version);\r\ -> \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ -> \_false ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ -> \") . \"' requires RouterOS \" . \\\r\ -> \n \$RequiredROS . \", which is not met by your installation. I\ -> gnoring!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ -> \\23 requires device-mode, \") ] ];\r\ -> \n :local MissingDM ({});\r\ -> \n :foreach Feature,Value in=\$RequiredDM do={\r\ -> \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ -> ceMode->\$Feature) = false) do={\r\ -> \n :set MissingDM (\$MissingDM, \$Feature);\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([ :len \$MissingDM ] > 0) do={\r\ -> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ -> \") . \"' requires disabled \" . \\\r\ -> \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ -> gnoring!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ -> ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n \r\ -> \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ -> ript comment: \" . (\$ScriptVal->\"comment\"));\r\ -> \n\r\ -> \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ -> Val->\"comment\") \\\r\ -> \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ -> F \$SourceNew ] \$Script;\r\ -> \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ -> \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ -> \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ -> o={\r\ -> \n :set ReloadGlobal true;\r\ -> \n }\r\ -> \n } on-error={ }\r\ -> \n }\r\ -> \n :if (\$ReloadGlobal = true) do={\r\ -> \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ -> \");\r\ -> \n :onerror Err {\r\ -> \n :global InitSetup (a);\r\ -> \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ -> \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ -> ctions failed! \" . \$Err)}\r\ -> \n }\r\ -> \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ -> \n \$LogPrint warning \$0 (\"The configuration version decreased from \ -> \" . \\\r\ -> \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ -> \n \". Installed an older version\?\");\r\ -> \n }\r\ -> \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ -> \n :global GlobalConfChanges;\r\ -> \n :global GlobalConfMigration;\r\ -> \n :local ChangeLogCode;\r\ -> \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ -> \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ -> \n :onerror Err {\r\ -> \n [ :parse \$ChangeLogCode ];\r\ -> \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ -> . \$Err)}\r\ -> \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ -> dation!\")}\r\ -> \n }\r\ -> \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ -> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ -> \_do={\r\ -> \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ -> \n :do {\r\ -> \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ -> \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ -> \_\" is not available.\");\r\ -> \n :error false;\r\ -> \n }\r\ -> \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ -> \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ -> \_. \" failed syntax validation!\");\r\ -> \n :error false}\r\ -> \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ -> . \": \" . \$Migration);\r\ -> \n :onerror Err {\r\ -> \n [ :parse \$Migration ];\r\ -> \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ -> \_\$I . \" failed to run: \" . \$Err)}\r\ -> \n } on-error={ }\r\ -> \n }\r\ -> \n }\r\ -> \n :local NotificationMessage (\"The configuration version on \" . \$Id\ -> entity . \" increased \" . \\\r\ -> \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ -> d modification. \" . \\\r\ -> \n \"Please review and update global-config-overlay, then re-run glo\ -> bal-config.\");\r\ -> \n \$LogPrint info \$0 (\$NotificationMessage);\r\ -> \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ -> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ -> \");\r\ -> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ -> \_do={\r\ -> \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ -> \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ -> \r\ -> \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ -> \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ -> \n }\r\ -> \n } else={\r\ -> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ -> \_changes are not available.\");\r\ -> \n\r\ -> \n }\r\ -> \n\r\ -> \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ -> } else={ :global GlobalConfChanges (a); }\r\ -> \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ -> on; } else={ :global GlobalConfMigration (a); }\r\ -> \n }\r\ -> \n} do={\r\ -> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ -> \n} }\r\ -> \n\r\ -> \n# load modules\r\ -> \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ -> ns\\\\.d|mod)/.\" ] do={\r\ -> \n :local ScriptVal [ /system/script/get \$Script ];\r\ -> \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ -> \n :onerror Err {\r\ -> \n /system/script/run \$Script;\r\ -> \n } do={\r\ -> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ -> ailed to run: \" . \$Err);\r\ -> \n }\r\ -> \n } else={\r\ -> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ -> led syntax validation, skipping.\");\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n# Add and fix global scheduler\r\ -> \n:put \"Add or/and fix Global scheduler...\";\r\ -> \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ -> ; }\";\r\ -> \n:local Comment \"Every Day Set Global Environment Variables\";\r\ -> \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ -> = 0) do={\r\ -> \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ -> ent=\$OnEvent start-time=startup;\r\ -> \n}\r\ -> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ -> \_do={\r\ -> \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ -> \n}\r\ -> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ -> ) do={\r\ -> \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ -> \n}\r\ -> \n# Add Update Script scheduler\r\ -> \n:put \"Add or/and fix Update Script scheduler\";\r\ -> \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ -> \r\ -> \n:set Comment \"Every Day Check For Update Scripts\";\r\ -> \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ -> \" ] ] = 0) do={\r\ -> \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ -> start-time=startup interval=1d on-event=\$OnEvent;\r\ -> \n}\r\ -> \n\r\ -> \n:onerror Err {\r\ -> \n :global GlobalConfReady;\r\ -> \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ -> \_not ready.\"); }; } delay=100ms max=5;\r\ -> \n\r\ -> \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ -> \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ -> \") ] . \\\r\ -> \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ -> \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ -> \n # signal we are ready\r\ -> \n:set GlobalFuncReady true;\r\ -> \n:set ExitOK true;\r\ -> \n\r\ -> \n:log info (\$0 . \"Global configs ready!\");\r\ -> \n} do={\r\ -> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ -> \n}\r\ -> \n" -> add comment=\ -> "Lookup IP addresses for RKN list and add them to firewall address-list" \ -> dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> source="#!rsc by Vados\r\ -> \n# RouterOS script: AM-RKN-dnsLookup\r\ -> \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ -> all address-list\r\ -> \n# Copyright (c) 2007-2026 Vados \r\ -> \n#\r\ -> \n#\r\ -> \n# requires RouterOS, version=7.19\r\ -> \n# requires device-mode, fetch\r\ -> \n#\r\ -> \n# Script description: This script is intended to be run periodically, e.\ -> g. once a day, to update the IP addresses in the firewall address-list bas\ -> ed on the RKN list.\r\ -> \n# It resolves the domain names in the RKN list and a\ -> dds the corresponding IP addresses to the specified firewall address-list.\ -> \r\ -> \n# The script also handles CNAME records by following\ -> \_them until it finds A records.\r\ -> \n# Usage:\r\ -> \n# /system/script { run AM-RKN-dnsLookup; }\r\ -> \n:local ScriptName [ :jobname ];\r\ -> \n\r\ -> \n:global dnsLookupReady false;\r\ -> \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ -> \_true; }\r\ -> \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ -> \n:set dnsLookupReady false;\r\ -> \n\r\ -> \n:local arrRKN {\r\ -> \n \"telegra.ph\"\r\ -> \n \"grani.ru\"\r\ -> \n \"xhamster.com\"\r\ -> \n \"lostfilm.tv\"\r\ -> \n \"rutracker.org\"\r\ -> \n \"lurkmore.to\"\r\ -> \n \"dou.ua\"\r\ -> \n \"youporn.com\"\r\ -> \n \"pornolab.net\"\r\ -> \n \"crimerussia.com\"\r\ -> \n \"telegram.org\"\r\ -> \n \"api.telegram.org\"\r\ -> \n \"facebook.com\"\r\ -> \n \"instagram.com\"\r\ -> \n \"x.com\"\r\ -> \n \"twitter.com\"\r\ -> \n \"youtube.com\"\r\ -> \n \"googleapis.com\"\r\ -> \n \"youtu.be\"\r\ -> \n \"googlevideo.com\"\r\ -> \n \"gstatic.com\"\r\ -> \n \"googleusercontent.com\"\r\ -> \n \"nhacmp3youtube.com\"\r\ -> \n \"telegram.me\"\r\ -> \n \"t.me\";}\r\ -> \n\r\ -> \n:local ListRKN \"RKN-dnsLookup\";\r\ -> \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ -> \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ -> ={\r\ -> \n /ip firewall address-list remove \$aListItem;\r\ -> \n}\r\ -> \n:foreach aItem in=\$arrRKN do={\r\ -> \n# :do {\r\ -> \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ -> ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ -> \n# } on-error={\r\ -> \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ -> \n# }\r\ -> \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ -> do={\r\ -> \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ -> \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ -> \r\ -> \n :do {\r\ -> \n /ip firewall address-list add list=\$ListRKN address=\$newA\ -> ddress comment=\$aItem;\r\ -> \n :log warning \"Successfully adding ip to list A record: \ -> \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ -> \n } on-error={\r\ -> \n :log error \"error when adding ip to list A record: \$dn\ -> sRecord, address: \$newAddress domain: \$aItem\";\r\ -> \n }\r\ -> \n }\r\ -> \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ -> \n :local cname;\r\ -> \n :local nextCname;\r\ -> \n :local cnameAddress;\r\ -> \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ -> pe=\"CNAME\")];\r\ -> \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ -> cache all get \$cname data] && type=\"CNAME\")];\r\ -> \n :while (\$nextCname != \"\") do={\r\ -> \n :set cname \$nextCname;\r\ -> \n :set nextCname [/ip dns cache all find where (name=[/ip \ -> dns cache all get \$cname data] && type=\"CNAME\")];\r\ -> \n }\r\ -> \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ -> \_dns cache all get \$cname data] && type=\"A\")] do={\r\ -> \n :do {\r\ -> \n :set cnameAddress [/ip dns cache all get \$aRecord d\ -> ata];\r\ -> \n /ip firewall address-list add list=\$ListRKN address\ -> =\$cnameAddress comment=\$aItem;\r\ -> \n :log warning \"Succesfully adding ip to list CNAME r\ -> ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ -> \$aItem.\";\r\ -> \n# /ip firewall raw add action=add-dst-to-address-list\ -> \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ -> g comment=\$aItem content=\$aItem;\r\ -> \n } on-error={\r\ -> \n :log error \"error when adding ip to list CNAME reco\ -> rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ -> tem.\";\r\ -> \n }\r\ -> \n }\r\ -> \n }\r\ -> \n }\r\ -> \n}\r\ -> \n\r\ -> \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ -> ={\r\ -> \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ -> ptName . \" is NOT SET! Fix It Now!\");\r\ -> \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ -> run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ -> olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ -> \_start-time=startup;\r\ -> \n }\r\ -> \n:set dnsLookupReady true;\r\ -> \ndelay 2s; \r\ -> \n:global dnsLookupReady (a);\r\ -> \n" -> add dont-require-permissions=no name="renameLists " owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -> local oldName \"Test\";\ -> \n:local newName \"Test-IP\";\ -> \n/ip firewall address-list\ -> \n:foreach i in=[find list=\$oldName] do={\ -> \nset \$i list=\$newName;\ -> \n}\ -> \n" -> add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ -> #############Script Settings##################\ -> \n\ -> \n:local \"IF-TUN\" \"6to4-tun\"\ -> \n:local \"IF-LOC\" \"Bridge-LAN\"\ -> \n:local \"POOL-6TO4\" \"poolV6-local\"\ -> \n:local \"force-update\" false\ -> \n############ use then static ip #######################\ -> \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ -> address]\ -> \n#:local \"interface\" \"ext\"\ -> \n:local bound 0\ -> \n\ -> \n###############################################\ -> \n\ -> \n:local 6to4prefix do={\ -> \n :global dec2hex\ -> \n :local ipv4 \$1\ -> \n :local ipv6 \"2002:\"\ -> \n :for i from=0 to=2 step=1 do={ \ -> \n :if ( \$i = 2) do={\ -> \n :set ipv6 (\$ipv6.\":\")\ -> \n }\ -> \n :local fp [:find \$ipv4 \".\"]\ -> \n :if ( \$fp > 0 ) do={\ -> \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ -> \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ -> \n }\ -> \n }\ -> \n :return (\$ipv6.[\$dec2hex \$ipv4])\ -> \n}\ -> \n:local \"str_replace\" do={\ -> \n :local \"str-pos\" [:find \$1 \$2]\ -> \n :local \"str-len\" [:len \$2]\ -> \n :local str \"\"\ -> \n :local rest \$1\ -> \n :while (\$\"str-pos\" >= 0) do={\ -> \n :local t [:pick \$rest 0 \$\"str-pos\"]\ -> \n :if ( \$4 > 0 ) do={\ -> \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ -> \n :set str (\$str.\$5)\ -> \n }\ -> \n }\ -> \n :set str (\$str.\$t.\$3)\ -> \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ -> st]]\ -> \n :set \"str-pos\" [:find \$rest \$2]\ -> \n }\ -> \n :return (\$str.\$rest)\ -> \n}\ -> \n\ -> \n:if (\$bound=1) do={\ -> \n :local t [:find \$\"lease-address\" \"/\"]\ -> \n\ -> \n :if ( \$t >= 0 ) do={\ -> \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ -> \n }\ -> \n\ -> \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ -> ) do={\ -> \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ -> \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ -> \n :set \"force-update\" true\ -> \n }\ -> \n\ -> \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ -> cal-address];\ -> \n\ -> \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ -> true) do={\ -> \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ -> ease-address\"\ -> \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ -> \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ -> \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ -> \"::/0\"]\ -> \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ -> \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ -> \_0) do={ \ -> \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ -> \".\":1::/64\") prefix-length=64\ -> \n } else={\ -> \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ -> prefix=(\$\"pool-prefix\".\":1::/64\")\ -> \n }\ -> \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ -> \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ -> ace=\$\"IF-TUN\" advertise=no\ -> \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ -> =\$\"IF-LOC\" advertise=yes\ -> \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ -> \"IF-TUN\")\ -> \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ -> s]\ -> \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ -> \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ -> \_= 0) do={\ -> \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ -> [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ -> \n } else={\ -> \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ -> where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ -> \n }\ -> \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ -> -LOC\"] = 0) do={\ -> \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ -> on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ -> \n }\ -> \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ -> 0) do={\ -> \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ -> onfiguration=yes\ -> \n }\ -> \n }\ -> \n}" -> add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ -> global MAC2EUI64 do={\ -> \n :local EUI64 \"\"\ -> \n :local MAC \$1\ -> \n :local HEX2DEC \"0123456789ABCDEF\"\ -> \n :for i from=0 to=5 step=1 do={\ -> \n :if ( \$i = 0 ) do={\ -> \n :set EUI64 [:pick \$MAC 0]\ -> \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ -> \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ -> \n }\ -> \n :if ( \$i = 1 || \$i = 3) do={\ -> \n :set EUI64 (\$EUI64.\":\")\ -> \n }\ -> \n :if ( \$i = 2 ) do={\ -> \n :set EUI64 (\$EUI64.\"FF:FE\")\ -> \n }\ -> \n :if ( [:find \$MAC \":\"] = 2 ) do={\ -> \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ -> \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ -> \n }\ -> \n }\ -> \n :return (\$EUI64)\ -> \n}\ -> \n\ -> \n:global dec2hex do={\ -> \n :local hex \"\"\ -> \n :local dec [:tonum \$1]\ -> \n :for i from=0 to=4 step=4 do={\ -> \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ -> c>>\$i)&0xf)+1)].\$hex)\ -> \n }\ -> \n :return ([:tostr \$hex])\ -> \n}" -> /user group -> add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ -> t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" -> /ip smb -> set enabled=no interfaces=lo -> /interface bridge port -> add bridge=Bridge-LAN interface=ether5 -> add bridge=Bridge-LAN interface=ether2 -> add bridge=Bridge-LAN interface=ether4 trusted=yes -> add bridge=Bridge-LAN interface=ether3 -> add bridge=Bridge-LAN interface=wlan2 -> add bridge=Bridge-LAN interface=wlan1 -> /interface bridge settings -> set use-ip-firewall=yes -> /ip firewall connection tracking -> set udp-timeout=10s -> /ip neighbor discovery-settings -> set discover-interface-list=LAN lldp-med=no lldp-poe-power=no -> /ip settings -> set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ -> 8192 -> /ipv6 settings -> set disable-ipv6=yes disable-link-local-address=yes forward=no \ -> max-neighbor-entries=8192 multipath-hash-policy=l4 -> /interface detect-internet -> set detect-interface-list=static internet-interface-list=Internet \ -> lan-interface-list=LAN request-interval=1m wan-interface-list=WAN -> /interface l2tp-server server -> set authentication=mschap2 use-ipsec=yes -> /interface list member -> add interface=ether4 list=WAN -> add interface="ether1 - Unet" list=Internet -> add interface=WG list=WAN -> add interface=Bridge-LAN list=LAN -> /interface wireguard peers -> add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ -> 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ -> persistent-keepalive=10s public-key=\ -> "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" -> /interface wireless cap -> # -> set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ -> caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ -> CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ -> wlan2,wlan1 lock-to-caps-man=yes -> /ip address -> add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 -> add address=10.8.0.2/24 interface=WG network=10.8.0.0 -> /ip cloud -> set update-time=no -> /ip dhcp-client -> add add-default-route=special-classless default-route-distance=2 \ -> default-route-tables=main:1 dhcp-options=clientid,clientid_duid \ -> interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no -> /ip dhcp-server config -> set accounting=no -> /ip dhcp-server lease -> add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ -> 48:8F:5A:8E:EE:A8 server=masterDHCP -> add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ -> F0:DE:F1:91:0D:1E server=masterDHCP -> add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ -> 00:80:77:EC:43:86 server=masterDHCP -> add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ -> dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP -> add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ -> 04:7C:16:36:F5:37 server=masterDHCP -> add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ -> 10:2D:41:2C:20:C2 server=masterDHCP -> add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ -> 10:08:C1:81:59:5F server=masterDHCP -> add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ -> 10:38:1F:D2:5F:13 server=masterDHCP -> add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ -> 10:B1:DF:E9:D0:D5 server=masterDHCP -> add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ -> FE:02:52:BE:3F:16 server=masterDHCP -> add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ -> D4:6D:6D:FD:E5:49 server=masterDHCP -> add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ -> CC:42:10:12:46:94 server=masterDHCP -> add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ -> 50:CC:F8:85:96:0A server=masterDHCP -> add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ -> E4:18:6B:58:34:AB server=masterDHCP -> add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ -> 00:27:15:41:97:A9 server=masterDHCP -> add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ -> mac-address=C4:82:E1:03:49:10 server=masterDHCP -> add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ -> 10:38:1F:82:81:F2 server=masterDHCP -> add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ -> dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP -> add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ -> dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP -> add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ -> server=masterDHCP -> add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ -> MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP -> add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ -> mac-address=F0:75:5D:1E:5F:71 server=masterDHCP -> add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ -> dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP -> add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ -> ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ -> dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ -> use-src-mac=yes -> /ip dhcp-server network -> add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ -> domain-search-list dhcp-option-set=domain-search-set dns-server=\ -> 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ -> 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 -> /ip dns -> set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ -> doh-max-server-connections=20 servers=10.30.30.33,8.8.8.8 \ -> verify-doh-cert=yes -> /ip dns static -> add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ -> type=A -> add address=109.107.177.79 name=vds.vados.ru type=A -> add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ -> regexp=*.vados.ru type=NS -> add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ -> "\".*\\\\.vados\\\\.ru\"" type=FWD -> add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ -> 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ -> FWD -> add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ -> ns.vados.ru.local type=A -> add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ -> vados.ru ns=ns.vados.ru.local type=NS -> add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A -> add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ -> dns.google type=A -> add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A -> add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A -> add address=10.30.30.33 name=ros.vados.ru type=A -> add address=10.30.30.95 name=vados-nuc type=A -> add address=10.30.30.33 name=amster-nuc type=A -> add address=10.30.30.33 name=amster type=A -> add address=10.30.30.33 name=amster-reg type=A -> add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A -> add address=10.30.30.33 name=mgr.vados.ru type=A -> add address=10.30.30.33 name=prt.vados.ru type=A -> add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ -> mikrots.vados.ru type=A -> add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A -> add address=10.30.30.30 name=MILLER-LEN type=A -> add address=10.30.30.30 name=miller type=A -> add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ -> security.cloudflare-dns.com type=A -> add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ -> security.cloudflare-dns.com type=A -> add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ -> dns.quad9.net type=A -> add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ -> dns.quad9.net type=A -> add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ -> type=A -> add address=10.30.30.81 comment=LocalNet name=MikroVados type=A -> add address=10.30.30.10 name=MikroNUC type=A -> add address=10.30.30.86 disabled=yes name=MikroYellow type=A -> add address=10.30.30.85 disabled=yes name=MikroMic type=A -> add address=10.30.30.95 name=VADOS-NUC type=A -> add address=10.30.30.98 name=VADOS-LEN type=A -> add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ -> A -> add address=10.30.30.20 disabled=yes name=garage type=A -> /ip firewall address-list -> add address=91.215.120.206 list=TRUSTED -> add address=185.71.70.78 disabled=yes list=TRUSTED -> add address=176.53.203.171 disabled=yes list=TRUSTED -> add address=176.53.203.170 disabled=yes list=TRUSTED -> add address=176.53.202.194 disabled=yes list=TRUSTED -> add address=8.8.4.0/24 list=YouTube -> add address=8.8.8.0/24 list=YouTube -> add address=8.34.208.0/20 list=YouTube -> add address=8.35.192.0/20 list=YouTube -> add address=23.236.48.0/20 list=YouTube -> add address=23.251.128.0/19 list=YouTube -> add address=34.0.0.0/15 list=YouTube -> add address=34.2.0.0/16 list=YouTube -> add address=34.3.0.0/23 list=YouTube -> add address=34.3.3.0/24 list=YouTube -> add address=34.3.4.0/24 list=YouTube -> add address=34.3.8.0/21 list=YouTube -> add address=34.3.16.0/20 list=YouTube -> add address=34.3.32.0/19 list=YouTube -> add address=34.3.64.0/18 list=YouTube -> add address=34.4.0.0/14 list=YouTube -> add address=34.8.0.0/13 list=YouTube -> add address=34.16.0.0/12 list=YouTube -> add address=34.32.0.0/11 list=YouTube -> add address=34.64.0.0/10 list=YouTube -> add address=34.128.0.0/10 list=YouTube -> add address=35.184.0.0/13 list=YouTube -> add address=35.192.0.0/14 list=YouTube -> add address=35.196.0.0/15 list=YouTube -> add address=35.198.0.0/16 list=YouTube -> add address=35.199.0.0/17 list=YouTube -> add address=35.199.128.0/18 list=YouTube -> add address=35.200.0.0/13 list=YouTube -> add address=35.208.0.0/12 list=YouTube -> add address=35.224.0.0/12 list=YouTube -> add address=35.240.0.0/13 list=YouTube -> add address=57.140.192.0/18 list=YouTube -> add address=64.15.112.0/20 list=YouTube -> add address=64.233.160.0/19 list=YouTube -> add address=66.22.228.0/23 list=YouTube -> add address=66.102.0.0/20 list=YouTube -> add address=66.249.64.0/19 list=YouTube -> add address=70.32.128.0/19 list=YouTube -> add address=72.14.192.0/18 list=YouTube -> add address=74.125.0.0/16 list=YouTube -> add address=104.154.0.0/15 list=YouTube -> add address=104.196.0.0/14 list=YouTube -> add address=104.237.160.0/19 list=YouTube -> add address=107.167.160.0/19 list=YouTube -> add address=107.178.192.0/18 list=YouTube -> add address=108.59.80.0/20 list=YouTube -> add address=108.170.192.0/18 list=YouTube -> add address=108.177.0.0/17 list=YouTube -> add address=130.211.0.0/16 list=YouTube -> add address=136.22.160.0/20 list=YouTube -> add address=136.22.176.0/21 list=YouTube -> add address=136.22.184.0/23 list=YouTube -> add address=136.22.186.0/24 list=YouTube -> add address=142.250.0.0/15 list=YouTube -> add address=146.148.0.0/17 list=YouTube -> add address=152.65.208.0/22 list=YouTube -> add address=152.65.214.0/23 list=YouTube -> add address=152.65.218.0/23 list=YouTube -> add address=152.65.222.0/23 list=YouTube -> add address=152.65.224.0/19 list=YouTube -> add address=162.120.128.0/17 list=YouTube -> add address=162.216.148.0/22 list=YouTube -> add address=162.222.176.0/21 list=YouTube -> add address=172.110.32.0/21 list=YouTube -> add address=172.217.0.0/16 list=YouTube -> add address=172.253.0.0/16 list=YouTube -> add address=173.194.0.0/16 list=YouTube -> add address=173.255.112.0/20 list=YouTube -> add address=192.158.28.0/22 list=YouTube -> add address=192.178.0.0/15 list=YouTube -> add address=193.186.4.0/24 list=YouTube -> add address=199.36.154.0/23 list=YouTube -> add address=199.36.156.0/24 list=YouTube -> add address=199.192.112.0/22 list=YouTube -> add address=199.223.232.0/21 list=YouTube -> add address=207.223.160.0/20 list=YouTube -> add address=208.65.152.0/22 list=YouTube -> add address=208.68.108.0/22 list=YouTube -> add address=208.81.188.0/22 list=YouTube -> add address=208.117.224.0/19 list=YouTube -> add address=209.85.128.0/17 list=YouTube -> add address=216.58.192.0/19 list=YouTube -> add address=216.73.80.0/20 list=YouTube -> add address=216.239.32.0/19 list=YouTube -> add address=2ip.ru list=Test-IP -> add address=wg.vados.ru comment=VDSIna list=TRUSTED -> add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED -> add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina -> add address=love.ru comment=love.ru list=NoVdsina -> add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina -> add address=pochta.ru comment=pochta.ru list=NoVdsina -> add address=vdsina.com list=NoVdsina -> add address=vdsina.ru list=NoVdsina -> add address=youla.ru list=NoVdsina -> add address=kupiprodai.ru list=NoVdsina -> add address=myip.ru list=Test-IP -> add address=geoip.co list=NoVdsina -> add address=comp-lenta.ru list=NoVdsina -> add address=128.85.102.70 comment=update.microsoft.com list=\ -> windowsupdateslist -> add address=wu-b-net.trafficmanager.net. comment=\ -> ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist -> add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ -> ctldl.windowsupdate.com list=windowsupdateslist -> add address=redir.update.msft.com.trafficmanager.net. comment=\ -> update.microsoft.com list=windowsupdateslist -> add address=geo.prod.do.dsp.trafficmanager.net. comment=\ -> geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=e12437.d.akamaiedge.net. comment=\ -> kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ -> displaycatalog.mp.microsoft.com list=windowsupdateslist -> add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ -> comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ -> windowsupdateslist -> add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ -> list=windowsupdateslist -> add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ -> sls.update.microsoft.com list=windowsupdateslist -> add address=fe3.delivery.mp.microsoft.com. comment=\ -> fe3cr.delivery.mp.microsoft.com list=windowsupdateslist -> add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ -> fe3.delivery.mp.microsoft.com list=windowsupdateslist -> add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ -> fe2cr.update.microsoft.com list=windowsupdateslist -> add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ -> download.windowsupdate.com list=windowsupdateslist -> add address=wu-f-net.trafficmanager.net. comment=\ -> download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist -> add address=tsfe.trafficmanager.net. comment=\ -> tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist -> add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ -> comment=9.au.download.windowsupdate.com list=windowsupdateslist -> add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ -> au.download.windowsupdate.com list=windowsupdateslist -> add address=a767.dspw65.akamai.net. comment=\ -> download.windowsupdate.com.edgesuite.net list=windowsupdateslist -> add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ -> comment=licensing.mp.microsoft.com list=windowsupdateslist -> add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ -> consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ -> windowsupdateslist -> add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=cdp-f-nlu-net.trafficmanager.net. comment=\ -> star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=cdp-f-tlu-net.trafficmanager.net. comment=\ -> star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=storeedgefd.xbetservices.akadns.net. comment=\ -> storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist -> add address=\ -> storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ -> comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ -> windowsupdateslist -> add address=e16646.dscg.akamaiedge.net. comment=\ -> storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ -> windowsupdateslist -> add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=bg.microsoft.map.fastly.net. comment=\ -> 3.au.download.windowsupdate.com list=windowsupdateslist -> add list=windowsupdateslist -> add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ -> windowsupdateslist -> add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ -> star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=a2033.dscd.akamai.net. comment=\ -> star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -> windowsupdateslist -> add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ -> dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=dcat-f-nlu-net.trafficmanager.net. comment=\ -> dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=dcat-b-tlu-net.trafficmanager.net. comment=\ -> 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=a122.dscg3.akamai.net. comment=\ -> tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist -> add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=e10370.d.akamaiedge.net. comment=\ -> geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=a1683.dscd.akamai.net. comment=\ -> dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist -> add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ -> comment=collections.mp.microsoft.com list=windowsupdateslist -> add address=a1847.dscd.akamai.net. comment=\ -> wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -> windowsupdateslist -> add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=au.download.windowsupdate.com.edgesuite.net. comment=\ -> 2.au.download.windowsupdate.com list=windowsupdateslist -> add address=a767.dscg3.akamai.net. comment=\ -> au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist -> add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ -> 4.au.download.windowsupdate.com list=windowsupdateslist -> add address=cl-glcb907925.gcdn.co. comment=\ -> 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ -> comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist -> add address=ts-frontend.trafficmanager.net. comment=\ -> tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ -> list=windowsupdateslist -> add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ -> windowsupdateslist -> add address=e12671.dscd.akamaiedge.net. comment=\ -> download.microsoft.com.edgekey.net list=windowsupdateslist -> add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=e12358.d.akamaiedge.net. comment=\ -> kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ -> tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=dcat-f-tlu-net.trafficmanager.net. comment=\ -> tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=a1856.dspw65.akamai.net. comment=\ -> tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist -> add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ -> consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ -> windowsupdateslist -> add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina -> add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ -> list=windowsupdateslist -> add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ -> purchase.mp.microsoft.com list=windowsupdateslist -> add address=e110219.a.akamaiedge.net. comment=\ -> purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.141 list=windowsupdateslist -> add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=storesdk.xbetservices.akadns.net. comment=\ -> storesdk.dsx.mp.microsoft.com list=windowsupdateslist -> add address=e16646.g.akamaiedge.net. comment=\ -> storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist -> add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ -> software-download.microsoft.com list=windowsupdateslist -> add address=download.prss.microsoft.com.akamaized.net. comment=\ -> software-download.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ -> windowsupdateslist -> add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina -> add address=87.250.250.50 comment=YandexDisk list=NoVdsina -> add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ -> displaycatalog.mp.microsoft.com list=windowsupdateslist -> add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ -> purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist -> add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ -> purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist -> add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ -> cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist -> add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=a1996.dscd.akamai.net. comment=\ -> wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ -> windowsupdateslist -> add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ -> tas02.sls.update.microsoft.com list=windowsupdateslist -> add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ -> windowsupdateslist -> add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ -> comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist -> add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ -> star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ -> windowsupdateslist -> add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ -> paymentinstruments.mp.microsoft.com list=windowsupdateslist -> add address=10.30.30.33 comment=amster disabled=yes list=NoWG -> add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG -> add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG -> add address=wg.vados.ru comment=VDSina-vpn list=VDSina -> add address=80.85.244.9 list=TRUSTED -> add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ -> disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist -> add address=185.71.70.78 disabled=yes list=TRUSTED -> add address=176.53.203.171 disabled=yes list=TRUSTED -> add address=176.53.203.170 disabled=yes list=TRUSTED -> add address=176.53.202.194 disabled=yes list=TRUSTED -> add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina -> add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS -> add address=dns.google comment=Google-dns list=Trusted-DNS -> add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ -> Trusted-DNS -> add address=time.google.com comment=Google-time list=Trusted-NTP -> add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ -> Trusted-NTP -> add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP -> add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ -> Trusted-NTP -> add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ -> Trusted-NTP -> add address=cp.vdsina.com comment=VDSina-vpn list=VDSina -> add address=vdsina.ru comment=VDSina-vpn list=VDSina -> add address=ns.vados.ru comment=VDSina-vpn list=VDSina -> add address=vdsina.com comment=VDSina-vpn list=VDSina -> add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina -> add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina -> add address=10.30.30.0/24 comment="Local Network" list=Local-Net -> add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net -> add address=146.120.64.208/29 comment="External Net" list=Unet -> add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina -> add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina -> add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina -> add address=10.30.30.30 comment=miller disabled=yes list=NoWG -> add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ -> Direct-DNS -> add address=109.107.177.79 list=VPN-Server -> add address=10.30.30.10 list=AWG-Proxy -> /ip firewall filter -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=12h chain=input comment="block honeypot DNS" \ -> connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ -> udp src-address-list=!Trusted-DNS -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ -> in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input comment=\ -> "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ -> in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ -> connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ -> udp -> add action=add-src-to-address-list address-list="Honeypot Hacker" \ -> address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ -> connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ -> udp -> add action=fasttrack-connection chain=forward comment=\ -> "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ -> connection-state=established,related,new disabled=yes -> add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ -> "ether1 - Unet" protocol=tcp -> add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ -> "ether1 - Unet" protocol=udp -> add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ -> dst-port=53 protocol=tcp src-address=10.30.30.0/24 -> add action=accept chain=input comment="udp Accept input DNS queries" \ -> dst-port=53 protocol=udp src-address=10.30.30.0/24 -> add action=accept chain=output comment="accept WireGuard" disabled=yes \ -> dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ -> src-port=13231 -> add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ -> dst-port=29185 out-interface="ether1 - Unet" protocol=udp -> add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ -> connection-state=established,related,new disabled=yes routing-mark=\ -> !To-VPN -> add action=accept chain=output disabled=yes protocol=tcp src-port=443 -> add action=accept chain=output disabled=yes src-address=127.0.0.1 -> add action=accept chain=forward comment="defconf: accept in ipsec policy" \ -> disabled=yes ipsec-policy=in,ipsec -> add action=accept chain=forward comment="defconf: accept out ipsec policy" \ -> disabled=yes ipsec-policy=out,ipsec -> add action=accept chain=forward comment=\ -> "defconf: accept established,related, untracked" connection-state=\ -> established,related,untracked -> add action=drop chain=forward comment="defconf: drop invalid" \ -> connection-state=invalid in-interface="ether1 - Unet" src-address=\ -> !10.30.30.0/24 -> add action=drop chain=forward comment=\ -> "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ -> connection-state=new in-interface="ether1 - Unet" src-address-list=\ -> !VDSina -> add action=drop chain=forward comment=\ -> "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ -> facebook -> add action=drop chain=forward comment=\ -> "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ -> dst-address-list=YouTube -> add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ -> src-address-list=VDSina -> add action=accept chain=input connection-state=established disabled=yes -> add action=accept chain=input connection-state=related disabled=yes -> /ip firewall mangle -> add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ -> new-routing-mark=main src-address-list=NoWG -> add action=mark-routing chain=prerouting comment=\ -> "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ -> new-routing-mark=main src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=\ -> "Mark Routing main for VDSina" dst-address-list=VPN-Server \ -> new-routing-mark=main src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=\ -> "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ -> new-routing-mark=main src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=\ -> "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ -> Unet new-routing-mark=main passthrough=no -> add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ -> dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ -> To-VPN src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ -> dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ -> new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 -> add action=mark-routing chain=prerouting comment="AWG for All sites" \ -> disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ -> new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ -> src-address-list=!NoWG -> add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ -> dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ -> To-VPN routing-mark=!main src-address=10.30.30.0/24 src-address-list=\ -> !NoWG -> add action=mark-connection chain=prerouting comment=\ -> "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ -> VPN_No_FastTrack routing-mark=To-VPN -> add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ -> out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ -> 1381-65535 -> add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ -> 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 -> /ip firewall nat -> add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ -> yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ -> !NoWG to-addresses=10.30.30.33 to-ports=53 -> add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ -> yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ -> !NoWG to-addresses=10.30.30.33 to-ports=53 -> add action=dst-nat chain=dstnat comment=\ -> "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ -> in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ -> to-addresses=10.30.30.33 to-ports=53 -> add action=dst-nat chain=dstnat comment=\ -> "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ -> udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 -> add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ -> "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ -> 10.30.30.33 to-ports=44333 -> add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ -> "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 -> add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ -> fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ -> to-addresses=10.30.30.33 to-ports=443 -> add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ -> dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ -> 10.30.30.33 to-ports=80 -> add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ -> dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ -> 10.30.30.33 to-ports=2904 -> add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ -> 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ -> to-ports=5000 -> add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ -> 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ -> to-ports=2377 -> add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ -> "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ -> to-ports=81 -> add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ -> "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ -> 10.30.30.33 to-ports=22 -> add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ -> dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ -> 10.30.30.33 to-ports=2377 -> add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ -> "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ -> 10.30.30.33 to-ports=22 -> add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ -> out-interface=WG routing-mark=To-VPN src-address-list=!NoWG -> add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ -> dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ -> time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 -> add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ -> Bridge-LAN protocol=tcp src-address-list=KIDS time=\ -> 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 -> /ip firewall raw -> add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ -> in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" -> add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ -> in-interface-list=WAN src-address-list=Trusted-DNS -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ -> content=linux.duke.edu disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> googleapis.com disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> googlevideo.com disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ -> disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> googleusercontent.com disabled=yes -> add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ -> none-dynamic chain=prerouting comment="YouTube raw" content=\ -> nhacmp3youtube.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ -> content=rutube.ru disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ -> content=me.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "icloud.com raw" content=icloud.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ -> disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> "api.db-ip.com raw" content=api.db-ip.com disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=\ -> esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes -> add action=add-dst-to-address-list address-list=NoVdsina \ -> address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ -> content=gosuslugi.ru disabled=yes -> /ip firewall service-port -> set ftp disabled=yes -> set tftp disabled=yes -> set irc disabled=no -> set sip disabled=yes -> set pptp disabled=yes -> set rtsp disabled=no -> /ip ipsec settings -> set accounting=no -> /ip ipsec policy -> set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 -> /ip ipsec profile -> set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 -> /ip proxy -> set cache-administrator="" max-cache-size=none port=80,443 src-address=\ -> 0.0.0.0 -> /ip route -> add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ -> WG routing-table=To-VPN scope=30 target-scope=10 -> /ip service -> set ftp disabled=yes -> set telnet disabled=yes -> set reverse-proxy disabled=yes -> set ssh address=10.30.30.0/24 port=2222 -> set winbox address=10.30.30.0/24 -> set api address=10.30.30.0/24 -> set api-ssl address=10.30.30.0/24 disabled=yes -> set www-ssl certificate=Root-YE port=18443 -> set www address=10.30.30.0/24 disabled=yes port=18880 -> /ip service webserver -> set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ -> no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ -> webfig-secure=no -> /ip ssh -> set forwarding-enabled=both publickey-authentication-options=verify-required -> /ip upnp -> set enabled=yes -> /ip upnp interfaces -> add interface=Bridge-LAN type=internal -> add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external -> add forced-ip=109.107.177.79 interface=*E type=external -> add interface=lo type=internal -> add interface=wlan2 type=internal -> add interface=wlan1 type=internal -> /ipv6 dhcp-client -> add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ -> info use-interface-duid=yes validate-server-duid=no -> /ipv6 dhcp-server option sets -> add name=domain-search-set options=domain-search-list -> add name="=\"Client ID\"" options=HostName -> /ipv6 firewall address-list -> add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 -> add address=::1/128 comment="defconf: lo" list=bad_ipv6 -> add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 -> add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 -> add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 -> add address=100::/64 comment="defconf: discard only " list=bad_ipv6 -> add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 -> add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 -> add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 -> /ipv6 firewall filter -> add action=accept chain=input comment=\ -> "defconf: accept established,related,untracked" connection-state=\ -> established,related,untracked -> add action=drop chain=input comment="defconf: drop invalid" connection-state=\ -> invalid -> add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ -> icmpv6 -> add action=accept chain=input comment="defconf: accept UDP traceroute" \ -> dst-port=33434-33534 protocol=udp -> add action=accept chain=input comment=\ -> "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ -> udp src-address=fe80::/10 -> add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ -> protocol=udp -> add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ -> ipsec-ah -> add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ -> ipsec-esp -> add action=accept chain=input comment=\ -> "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec -> add action=drop chain=input comment=\ -> "defconf: drop everything else not coming from LAN" in-interface-list=\ -> !LAN -> add action=accept chain=forward comment=\ -> "defconf: accept established,related,untracked" connection-state=\ -> established,related,untracked -> add action=drop chain=forward comment="defconf: drop invalid" \ -> connection-state=invalid -> add action=drop chain=forward comment=\ -> "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 -> add action=drop chain=forward comment=\ -> "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 -> add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ -> hop-limit=equal:1 protocol=icmpv6 -> add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ -> icmpv6 -> add action=accept chain=forward comment="defconf: accept HIP" protocol=139 -> add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ -> 500,4500 protocol=udp -> add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ -> ipsec-ah -> add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ -> ipsec-esp -> add action=accept chain=forward comment=\ -> "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec -> add action=drop chain=forward comment=\ -> "defconf: drop everything else not coming from LAN" in-interface-list=\ -> !LAN -> /ipv6 nd -> set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ -> managed-address-configuration=yes other-configuration=yes pref64=::/64 -> /ipv6 nd prefix -> add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none -> /ipv6 nd prefix default -> set dhcp6-pd-preferred=yes -> /ipv6 nd proxy -> add disabled=yes interface=lo -> /ipv6 nd settings -> set router-advertisement-route-distance=100 -> /routing settings -> set single-process=no -> /system clock -> set time-zone-name=Europe/Moscow -> /system clock manual -> set time-zone=+03:00 -> /system identity -> set name=MikroMaster -> /system logging -> add action=email disabled=yes regex="* added|changed|removed *" topics=\ -> system,info -> /system ntp client -> set enabled=yes -> /system ntp server -> set enabled=yes manycast=yes multicast=yes use-local-clock=yes -> /system ntp client servers -> add address=0.ru.pool.ntp.org -> add address=1.ru.pool.ntp.org -> add address=2.ru.pool.ntp.org -> add address=3.ru.pool.ntp.org -> add address=time.google.com disabled=yes -> /system package update -> set check-certificate=yes-without-crl ip-version=ipv4 -> /system scheduler -> add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ -> on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> start-time=startup -> add comment="Every Day Check For Update Scripts" interval=1d name=\ -> AM-ScriptInstallUpdate on-event=\ -> ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ -> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> start-time=startup -> add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ -> AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ -> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ -> start-time=startup -> /system watchdog -> set watchdog-timer=no -> /tool e-mail -> set certificate-verification=no from=MikroVados port=587 \ -> server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com -> /tool mac-server -> set allowed-interface-list=LAN -> /tool mac-server mac-winbox -> set allowed-interface-list=LAN -> /tool netwatch -> add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ -> -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ -> e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ -> interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ -> https-get up-script="" -> add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ -> flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ -> oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ -> name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ -> up-script="" -> add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ -> 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ -> "Google-DNS IPv4" test-script="" type=dns up-script="" -> add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ -> rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ -> -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ -> http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ -> "" test-script="" type=dns up-script="" -> add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ -> dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ -> interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ -> test-script="" timeout=800ms type=dns up-script="" -> add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ -> ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ -> down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ -> "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" -> add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ -> down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ -> ns1.unet.ws test-script="" type=simple up-script="" -> add check-certificate=yes comment=\ -> "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ -> disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ -> vds.vados.ru port=443 test-script="" type=https-get up-script="" -> /user aaa -> set accounting=no -- 2.52.0