From 0ea7c78f766db7c4ee95780b7f0375758312a94b Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 2 Mar 2026 23:00:09 +0300 Subject: [PATCH] Backup for MikroMaster sucessfully creatd at Mar 02 23:00:09. --- .../20260302/20260302230003-Binary.backup | Bin 0 -> 289700 bytes .../20260302/20260302230003-Config.rsc | 3971 +++++++++++++++++ .../20260302/20260302230003-Diff-Config.rsc | 4 + 3 files changed, 3975 insertions(+) create mode 100644 MikroMaster/20260302/20260302230003-Binary.backup create mode 100644 MikroMaster/20260302/20260302230003-Config.rsc create mode 100644 MikroMaster/history/20260302/20260302230003-Diff-Config.rsc diff --git a/MikroMaster/20260302/20260302230003-Binary.backup b/MikroMaster/20260302/20260302230003-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..a99edee23a24ac945bd0b3d6236b8ef2c3ba61f1 GIT binary patch literal 289700 zcmeFa2Uru`voL;AfFyt*ARxXX%`UK;o`?kz5D`Sch6PhL5GlbVG`lE@6$@BVv7^|q zcd=maT~Sc1*cBTV_&>8r5WDYp{oQ;2-{(F&yC=(@-I+Nvb7tnu?qsZ9RIoILj*JmP z%7g@!D%K1kL_r9(K)MZ%El?2K6rl_%VmUg_WH~w>p`a=z#S9@PVxlT%#6rlKE{~Qa z&=5lE1dSI$2%6^lo6u{ujcT>wv4(3*YPG$|b`YC|swnU%nt81s^x8j+YX2~<{lf$> zk;O^kl?sWBkSU@Jm^IM@1;-{Rh;5FlC{%=y393RYRE0>~C;POAT|Y6G2pxrs?v8uNUe%f#V4rLTEl~JeJ42LD2Po*C>QYm$>V7V zG36u-K(;8gDlq}m4-i*>HvpZdZv)K@Pk|16{rNKpA+8=(Izkj97&#J8Dng9-DkJF0 zm`b7QhLZxrsU{?H-uL=Yq0du&AIsW(jFQz#Edi(jQeQlX2A!&^P2fR#rXioANQ{l; z>pGBJQUjS0bhs`f`H10?Q>%}$R3eK>On^br5bC%n^#DDV?)qbG_66!h>CXcf8rsl1 zQhy#e&tKnWAcW%dZ6-n}Ro^b4BIJ&O*v1IuAz%|gPe(&|2Gfqj3s5rF60z}w7G&l- z7X!hW^=dArDYOYu`YS2OisU53U^zO%O@WgPTnUdOe>32*EQFXgrU)^O>l&aSN2M@8 zM=!Vmz(Pw-PPRl<SW9R_aTEligqRcpAqK+)AqD)1f}IL> z39uUoss(3rxFC#)8bWPQXS4NB0D&E)Z-Y9UrfX|o-KXVt ziyi$roe%N*NOS-=mlfR|XeJ)j=H|&+t?MkD0`g*%B$2B$)4m5lE#d$G@l{L`0Mr~I zMqyJX%J$+WnK;gJ+>5?v=m>bkmD0RPCoZ&&vWxapAASnQYCx~ z05Ri~F=|z$R1yOmZjg)Ll?u2nmXJqk)yk+SLS54jCJET!$V5SGE3k|#U>1?cv_!1C zhR|x2@loXUu)%!{M>Cxfz^IE5)wC8&vfno}VD3_@G;u090e6O}FGv3bIOd=rwh=;k zM#vTgu}u&n4I6|Isk*?xG0Zs#nUmVGy1Lrr%WK)BX0EQTHa1+#P~f_A3f$OmtzK7x z#lkrIPACUvH=-ca+@6$EQW6@Gl1g$~U8YwZgpf2!rixd1MiKFZT0&Y^unp8>0LOv4 zIg!*hVA8Bf1~dl^1hlh6h+>5hvVi-WBgA-L4dkdIr)Tm9IqBLVlr6e#v4ZJ>k&SR5Yrq+*l@8%os^(fDGb-I)I$%)l_-ck7a>X# zLTEBVXbM7<2>@Xx?4}~bw2p>W7VKu}_2z7lfo>EX^mE`pYB=+Xh6clwKN`-Afn7T6 z#=&kPU^EsXXLCiYL=)|)2WuyZA6 zhU)4%2r*NDWhmCLvw^D(OvBW1j1`cou8v;F8Tii`7|~hBO1973za;-hd-@47VR@<&tyI!rfbFH>ht#+eYZQyxV znJO_}OQ$ahcp?g zoJk*4nV=zLo}fr;-KUlQK5%TMzYk~|(wHDA1FkPANoHzdP$Hqxx~t-2Q-Kh=8!F{Q zyjH1A{ar#>*Yr#v2z6wFT9u&E=u{)18m0#bj$t)ygh(SBCV5hEkcI}>*(prW!Yn;| z0njW8LQFH5Q>mb->Ft3ds+0^g;h9@yIB*b5=l z5e2agRvYO?k>k(+fC3i*lnTlHdOKb>T1@oWxvp~lp4Sbc`UM=3q{9r*fmK;w4-Fja z>q!SBq1GnAXH+y2WxPTKzhU#Kb@chnP$c+N0DmM9T?pWlmL}=HfvzLvmz-Z}Yl+XJ z3_2q6Ya^kx{%LS*t(yQz6kq}bf-&JaBN_T}1xFA@lk^LnVZPFH#5evX0JIZ2}M7%aqm7rCs;x%pvp;y(_)opcmK(DK- ztA+aZo9gOnw!WQ*5Ni9G!VKsGeAfolh832gP`EYo=@Q@@93I)RdqBtLFaYMdM=9lz z0IaZ9Z+J>g@48qDhS&5C^7bJ+GYp;CwfX@>25xsYb!*nCYgl-&caX2HN3=?#jhDm` zz%wMO8bX~!s691_(s)7(!~vdJuEz*CxURmvl{^o@DU?AW0|w?~i{?ygI`95 zm{}yt(NRh_{38EHGxX^OvjFG|m`W`Xg1H9405J8gI7|o(l2IWjRXaBDg+MS2!_Ms4 zH8jvav}^Z}y5#WIM5dTjxOHu0V+o0du%YOlTcO7fBwt#7xhbv_*2S1?o&LfxqdebQeON&Wn+K~z)&&#+qU(Nu)M zs)TJS6`?!&zSC>)5T6`Mtvx2~_2?`5L_&i6)0x#si zZXWDN^)nP&LlAPd#>HHrSf~*5Bw`^UCJ3=aD2KkCG9#uu&3pMrQI7dJ%JsiNc@Qd+ z{SxIK;OO!M*zcljg^LxKSWbu)xLAaXk%*DlQnV5}A8#uXZ=qO*i-owDCld1%IrO^Auv7qeEKQ=v<`rpB-!2&yfcE zi>2Sskq5i{8|3@uNB>gb8KHzcPU-HA{|kv15MrTJj1yv+R4f&W zWl|FB6CEtA{IdS6G2Z{@Sc3=h4c3maw!fUuj5Xvm{<}C^;bI;pmdV5lp;*Whi}+#* ziE_w^cj+@(e-`D?pQ8+p);B0O8sGMp(r(l>C^&%qyBJ&JVuCBig<`%`%oB<^T(Lwq z%6IHzdU5lO{-}Zr{5i_tPkw{)jTdcx$=mjlc)41ol)DS%1RKK$g@j>p#(7}Nhy-GZPQX#qdfu~E-qC9}${#b#gT7<8GO0D@8#vS75Mo&i<}caZC^lJ{ z@Y{M#XO|yLyG0AI{Ig0d;O7Gk0fKMv8yNa)tA#<@EWt$bzhG}1)0-_qHkfM)y@@Jp zls4*ReLZ{sS4NiMOvxQxJFpN5$iq@QGOR zSVD;9axothb3|eu_a||OZ>}X(o$hvjgfPsn2qUc_%uGFDm^Flf*pQwuQXovEo-l1| z6Grt5!jMbu?y*EXNth#jlCGTCt0#<1DCSAU0=`%-1pO{m{Dd&yTuTy0cf0$4)Y2L7 zb2)(^**9`xQMm1wdcas260M3SepgELmy>9Ap7x|pBhjB%d7ZyTl}WGBcMt&l2G6N& z|FFAC4^oErAaQh3uRPD?m;Q0J?)W{mZd8LN#5TW1lL@Q8UxXA%PyWlOBKqBd)M@nR ziTxZS2fg|O=rLTr5@C6b2nRmZ>9#sGA`IbLy$H)egl#A~-BwXsgx#oL>oziOTAN`@ zg47ib3qfv;m8A9dBT?1=n;cSIr*GB|$YlgrY=IDTzCM-=$9xpT)-7DyB1Ex6h+O|| zpvzt&7p|RjxeSm#Layb(IytQLFkmfDmu?FS*04gL&)>1u2csZ-OtFX4_2GJ0^@fZK zCTgg^0G7UKF664WZf%O?=-92EE;x*wS#c7LmQZ)>1ioZq*k~EZL0xfKgdZgg! zh=SOVrUmI)mKKOyUu3kRkgF$5GBKmpIucL?l20z{Zve;3WX=ra7Q=cCto77GD35|n zP!QV|FmR}qnhUGMbr6DedRXOW(t!J?r?fv0D~42kMDCpuW;?M{Dw$9;5FtjN!rjzZ z$V;*6N(R~)F}jnqXkGWSKr|o~nL5UVC37Y$iZQCHfzDOBtW6rZOhss;2{rEI?$kY= z&^iJENlAHZT|6^wfOSo@9adUmlyaFWUaMBcddi6;rHs&{O)lffVpWMXYjS<{|AAv) z6a@AH@F+#ATUKDgngWxOp&!dt`ePb^xd)uuKUH^s%ZacZrN#wS;7J*dSE|Hh^c0z74n<+Q7z! zYk-||_1A2o!g(@Xo5YfZ5aa*=2xRg$2n(#dKcMNP6_0wMXqUs;8G#e zM3>tE%kc16vMaf4YYE1dE`=vn6;-orY#c|#snn@s{u5A;8OfC2fr2hqYGVE)FpxQr zWI_TE@n@8v6S8R4e`GYs%tzYq(7{+u#HqAI?w6wh%8p`=s(_bC?ftL#p(f#nUJnQW zoIy9h0y#!ha~6=L4ry<;C-)xe#2>JW5fLX*#sUw^2zA_4Js*Rd!3OdmucvFbK?q#~ zc|i!>f|L?{vKy@Pj({{feI8f2UQs+k2+h@B{|q4{(I*8xM+kicg`rbZLpaUJ!c@nmF0r@y1K%ih{(@8GC`IwB$mb2wJnJ=b{kJ3gHq?+}JC$x~k zV}=mqAcAV77$d}3U)fA)f)Ha}?n32cgc#2s*=~SI1SA+{RIfyYn7xM}#4tjrurcUh zm<^~cp_PshBbQVS`XoFG%n!C*2(8A6(7}rf_*}M#&*R}12w{2j(Vxt-Vqcl%O+2H- zt9s^SlvcT(k&SW*w3I(PW=wI|vrj@fu`aw~P5qYTU2Ph+7p0Z=IAxZ3c{<7|IPAE0 z%?aW~tMuD`mJ}aX=WFgyr=;~;cdtXD;?ncI9u=-d=WeRz7fP?sIXv=`Pig;mGHdA! z%QM_MALHbHW;xZ}3y(I4p4EBjHXnb!+P%lcbLw{PXGhH~@4uq{({D*2A8&TAa-Oqmz~Q`WLTsAFgyNe6)1gx#mWp zd$1ioGfJ*?`%rwdZD?O{_%6KF{LA7;OHv%hH;;LLcCu!}zNd@N7@7H-3qPrvxpa9O z@FL>ftLHmKj1Qg40^6;^H0KU!ZMr*79<fyF&_Lv>)MvF8} z6ezoNtk%$U`( z9oDMtRfmME0X<9jsmrG~=)2hJob#%>3#^t0SBEJh*7vr_?LRPQ( zl8@HI>D`9A-Y~N>b)=lXwaekqjqrZYx(&TD>rh=**6w;0)>*k2^J;mYghQWX*rl%6 zfl>4w8(y7Gi%n@(NFRQAXJ_$^H7Ip#+(whPBVLbaQ+SaX?PIsH&ZEvflS@Q`1rIL` zRjykdHGbMl)y4A%_fq>`G0#@CrM>W5=hN3?Uv*jU&3)Gni*`sJIq{?M#PB{-Y)y|m z>F0L~KNvazH7jOc?=y^M?yPDwCOT7@FeI_!jw z`zJdTG>l(V9uZxdem2CXPJYGpo|S9wH{XO`{YNza%{7r{AAcYE{cCqhchxUSaqysr zj*A^McI3ja{b|~Nc(xJ8XL@-A`mnYNd~@UL&GgPremyGSX*)@-@5=-BEyuPC8|T_? zWHa-GYqqa6*DgjmULA*zG0qQdQ_q43o5#d6S<9%W4|H`)(xxpOdVf*HzAl6P{t4UO z^xBhkZ%1r=d2#K%Wknm)&o2|Nw`h~ied+bIONcn%O=feu_l1zas`2x4F1yMukKePa zLGXd$gWqJDnwFMaE5sejtlIfaAR3)D?s&H0CHLpj3mNel5$1Il%KW5r2TwHJ*of7~ z!ESe6-s*#uu2y*?`3L4KIUZPgciXA5j5Te~7IbPky?$`ya~m^p-0p=L8>|ms8~E5J z+Ue{F&BEd(aVebPrNd{WNMCi(7Mt8>ZMq^aZn!A_$r06od@(I}&dmY*k`RYbqlgy% zlLii4J~6VuzG1kn>FCr}ahXlFZuX7rbotqYi58NK}w_4f=HQi{OQ>D z%(5Xj_n&Vo>o(-@U8%$MEpJ?>wDQ`v&!;G#!&_9*VxgHT>%)Wtf^b^G-F~66oo;MR z?H-2PVm9!DWo`b2635Lj7M!P9(?W4J=4fZm=HWP7h~aE5hDF$!v-udC&Bt&yhbM}_ zTH?*Irn>8YspGLUic4*vC`O2uMzKIx8ihqoqfpTK*@|VQFR!|GUFe>>jOMmu@qyX9 z<_?*Y{pL_9LwV)nm5D2sN1w_mIyC9rUHXD)TfHlNb_>o=41UtTv|1YL)||+BC0f{G z&cnU~H{A)1-Dx&rU8`{wPgY*OxsXX8l(GU18nSbS1I6~fv9rrq&ljZ&%Hro!J~F6N z+BWV!HJg6tM#q;?M>XfO$EB4PyY#u-wof;k$bMyS-B(mE+`~CP$I0sSjq3Az@W9wp zPw&)EzAjc6KhUOa9+=fn{c=lE-sIVI<}z^Y2M zxHE-9Z;Ca>Tn)c5>R3B{Qn(stdni3(VK((psiQoxmT=d)bT`Z;?bpm;4HrAn%`g_m zFgA`FWk#V=Fi$wyh~5lqg1P0o5F_Y8pUTO1?y$P$vZfR-!zD3o9W%Qm)LtFZ6KSOnLJ!U+Eer)LU z(HjO`p5t?VigD(X*B!2|I=`rHJNx8}dpA)sIxc)$Z~V|Pi#kU3*>~f^(fF5hd!O`Y zDUH(CAGbMR)9b$exkB=}oiIPDGupd%vSWoe?TgJ?rh^?H^H2O$U^Lr4GqVpLpjMWiK5yRO{fg4EkzU&h+6OK4nzoB!vnFJD!#?!%al7bU!jb|yyiQ5) zQEIz

;@RD@&ts7EjL5Z&s@uZuq1bd3T+Y^Q`W~phz}j@(JoF$&|Al%CpR0Oy4_w zjb%m4-9}qg=U$BNomhT~PJ1JLxW9$xyy6pa&VqeW=kYllr^{>`?cf( zb7t(z+;uGzW$#vPT0N>^P%q)K8~Y;X+bb{L%bMEmW6Nh#r)AIbKleK0+?*ck2h@u$ zZ@wRmI9qhRN4&4>?YzEoyn0nrp2mS=w)>~gOEvS|CllhT&gLN42`?vPaYI%t3Uth&%gTfum1e0{>=RA760{$|9ZuLz2g60 zc*T3BHWr;RIhU;^Q(*q>#u&LLpxy6iP6mRE8^r5(Qr% z zxIjek2mMYM^qT3HF;*AUwM_uL0vb4sOqEyaN`KMQlcgB$S-27I0WG_7KAR0u{7#aUFf1N+Hb`UOjx;T+Mw(0 z-|;rv;TAK;nGtS6h!@o+pz>DH#p z-DdI3?)a)@F8$Q6+)efewf8EexNc7oymlbi+M-ZgatfNOnHrb5 z*d+JNtn=4=C8Kz4Y$^{HMh?7gI@4kO!rLt#?rw2u_ThPh@>^>yyoxsr*b@;LY+qj7 zLeqD=gji7Z#B2HSVAY)kmB?>nb^V|gvW-&|hwRf64u=q`*4n$BMq4m?^>cTf-+xKf zgJQJk+^gI5gI+!z{HE!GyC-wp7rz{lW4Gp+wLo-s(~(x*m&O*BKX!iCyTOR<;-L%s zQsztP`}XWfQ)T0Fk=d(no6l1 z;rO0dei7kF-PHTukS%xbP&6YM8Alv?y(ym;kFgE+r%>okFgMJ_@EfC!wbe%*Qt&SW z9N&#uK=`X+Bf1mji2al6kZWJNckPhHS6od?qf$_2;u+@Yfk~YR_Vkj?9gn0Zy{b26 z5_NCVqm3`hD&xoG^_X^Rdf?kz4^c{|%*5%p@AwUAFrcN=y4+JXcYVzV-V7bPwBnkL z&B~RLFXH?vLqqJ^m)~(5cCTKqs+AKzK6|}Dc2iMyAh~rT%D5(3Pug2v-#X{?7)y_Jv(Op!B54#OP;32y9Q;y zoPJ?;^MQRIQTKIt{_b_K+-XSOZTw(iG}C|LmF+3H$AUZWQM$DV6b$J`ixIaAow)JB zxi!6lXFNR~sWQg{I_)^vZlTptr#5xRn51ud_fqJ(dJt-Vf5c=zZrZ@$(>LqLB6ld~ z`ZFzEsscN0ot7AWe1_v4+ecxihm`Px_P!~2bgy$c$7`~3@$5Z$BbMYxZV7)7G;`(Z ziuDo48w}>paGQ6kSLn!vJXU}Az1n%wCU!Z~@aCo!BTgQWPK-XB{Az^hheN$z(-eWr zL*|`%w(KKy(|{maprmV&lgY$R>+#oHa?T!IlWc!|!(od(H~knTHv>zyZ`*R%b`M|K zZfta*c9iw_kfMQusjG`REvqxEpXAQTvx?lr!$$odjNdG)@47Q&)6~cN69sJ(mp2&Q zxEXQ|E<7(jp7XFU^KInXZnl1w>!`+03%B&VV7_|NmCLymPEHAq{eb`J|<>MVP@K6|1L z>e{BGGD_(~sI^W3@iJ@FwR;=*%#K_crIZnBEqqDG0ZjXvtNdeCQc0}N%J=d9!pb+~ zO~6MM$#hY$_R+pDU$FK^7WCHEw(@U*m7niQTKP=Lw|NuH_G7h z?Rvej&ayT$JP-(j*T?K&fzj03@@w+oPMD)^?a{8L$CpF`OCRIoIIc7F!P4j8wSNA0 zfbc87pse++y6Td=rRSIQTotl7(=>VN(Z$Q2TAiBNhr)C^L7A~47~2~5*5{xS^_*We z+2zJK_a!jH7 z_KSzBUhQkt>-e^~oWa`rvzzDF-F!PCchSi%8FOY#nwC(OZ}HEb87r%07w?!1IKO1? z{65SV7pL3~do@M&zTJxAO^Q;f;?mi8@5wLSH$P17yl{T6vX;FI+q*t-ZD zli4>%cFGexdwwZ(fNja@2X#)yukL6k^bELm%eQTd?fkIQ;t=Dv9uE%o42YFD+h3%w zN%3kW9vQRZ(Yksz*UL-&hi=~F#xTMjyYDvL z>$^8(`^t((vnf_v-xrI;)VZ&Hmg(V0{fMA}I{-XWSG?_hTyZ+CCDx1ggRrz6kTm;XaM ziOGO(f>FRi8nL!&L~RSH94sVTiOxcb`_@AGPG+gy4<27*9hrf3#K6)h&vn)j!=hzU zV%-fxm)4$@AWzGs#;h^>(M`du5nvdO>FgRD%o-tv<3fysb1^~0Z{6cpYHaPKqdO#> zMMK~A-q&g@_eGOWjJ4-`O-p>35#5*&BbZC)-v&PV#Wu z?oy_5!Sw*)?t$k5PHbQ_d@`1Q3WZha^8nY1)& z^So`%)5jd#*Z0hopyH{i=A61{y0UpP_9?W%+OdmItzFvmgl|QRRYcm<-kR2jQ)vOm zmO1X5uF}~h9kBM_+96-M;c7ZH)A86{nmtU>)()Q= zSc$!RYwT_J!e+gzAe#EE9fsJ0xe(8JHyJOlX*=65Hc^_;u?`E%j<=Vu*@M;^` zirk0*-+;i)w-i`pMwg>Aa$em`xZP(JEpbRj$K&B8`}_HitINa(yA;PPNeN0hm*R(BDFwyn%e9q=z3L%%vCloR+fnyT6P#_e^ zrF@*v=knwj&g05uLY!dp35>^Pb2%~zCgt-v5(&W}cmxL{=kxC=D45UTrE_OXOu?24 z_yQh|OW6XMgiFrVKbYCdE&uiOTeBGH4zEG}aQb~%d-^s1t?Ad&$2-Iw7y5M+aQVJG zA&aBo87o{s^RN)Z4b;E`A?nH4Eu^zo9dJ;^bTk;FKzcI)`eMld2b>& zc%8|y^Nd)WQBTOAjUOT^I#IX!{$#mwgY&5ti-Tv1_Z};0lzwuw-+|6$!}qUkd;YO! z*ESQ*?P8d45xPXf6h3cXX4cu%{YbcDez(|5^thR~CQ?^zy?QJmwDsJEs{DP;uNbHA ziI(4PMJb)QfAyj?`JOxuX8dX0J^|tSsFB66o`d(uUuv!&OFNNv>RCu|-+px)P72Ll zJ9}Hml*C|F*2MS28XsLg%VUZ6Ki1|mWks#cxU(0VN;%8iDqD7cJ^S)Brg^$mM0r@^ zz=&?63)Wq$;xq_E2`Sb&J~SMQ3FTFSdVl#8S2JO`g-1 zj1KYR9&gLes$RUkY+Tls$t@4K4Z5B`U}(t*731R~n+K*W^`h2WA0`sJT zBHhlvGtAV!B6^rZWJ2)N``v`&bBk}!G`cpqSYQ%&)um_mjm>t`6ZTB4x3%l49+Ix> zjn_)M4nDo{?plY`oS?+qX)J8>sCjsok&7i8cc|->o=WPQ*>`m3tM9sPv2YnCKCW0` z(iTfum)L#7N@cglt{%cZ-Yy^BcAh`&m3nTQ-ZzTmEakl>ImbMcwoSNvD2nS6-D1Yk zS$8Chn;&0RcJF}KgT0#krO#X58Ls_MG#uSLk?rCLqp?q{QAA9f!r{Lm;UvuXGQ+x!p1J_LpFZC0?| z-R2zMdae7kM%n$@_Z)krdE^G(b-eI?^wV>;E8I>lzqG7Q(4btp>$;X4+c3Y{O6}aJOlbuc`3kMt>?dA1JTG=^m%z7y+#%P*k|G}=dUbn_f$=JPc z`HE)N2}2Lei1}1eyr#I@>}U5G)=yH~TYv1mr^%(F`Oap2TX-)X652-^-*!!UQ0FV* zpW@OaCmU8Y$qgRSF)(|h7w)#LjC*JEv#_;w+OB#wWKUAJd1&a|GYxv2i|AvgY&T`; z>&f9ew(Ut@JLiQcZOw%pf&0z=;gk&wy}zz?%7%+A4z4bKD6!koyibpHnul#nd|ujE zNz(a;Og5noU66K0(eO>n^M^aM2&iz`ms7HI+=b*3-8QuKI5WU#_JuIN!MFRpVWp40 zwyS>oz^3tCOpcnbT0v_#ljXN$xW3-Ev@O3)=!`yKBs3H{1`{4L}DR}Ml0Ls*q&_KoWN zrDyQc*=W@WR*}DEg5rU5!t{gl*FQCWXFNP%!oxYTd;7iZBkvbvUAQyBz6CAuGNqC6 z2j2O$&9(9i#-75G6Ps5S%>HOYH0jp-W}my<{)K@f*rN&4Ze7~deY|zV5qd_8o(U=3 z2bnkfy_8y&NcYSu{M4&zf45n*2gfEBUXN-$bRe2qdL!JQ|J3t{>00k2*2^~t7G(3? z%O_UcUq%VcluuuFW{K-Lqt-VHW*^jI6igEzIVRkyo0aA zl;zglln}OQ*wM4w6Z|$7S`|;udNp+RynQ3rc8XEAJlN4KVa=P!R<7AkQ#<82dS2Pw z;f1ePPlhsK=TlijA}OVidPWlzqicP8|XEmAM+S-!5-8k+&K?atGlt3O2dk7Q25C7KSt z6T3~{^02{C_QJyvmZs;sdcLm8dKh_Sh`2$}6QhuRGrMIT9}{R>y8I%&$g;D^+-9Sb zXY`#q*e1)U>-mEBKI@xp?%)${=Cq(s0e=zW;OsG%Tk)6+msC#GjP0?Z;Nk*S(Dj*5 zvYijgPxZPrtF6~R@-}SEomNu{#!8R9klq@jEgt_oreL^j`lgSm>z#5(9PHCz?+#It zQE7j+prM^f0&8}=b)wGOf95It6`8*xQ!A!#c=6@`b&=5}ZvVA?|JuHPZQsAP@Ben& zmrUyrNJI*ZCt%B^0=|^b$9YmY#+GoUTms|ZQbJA$rF??NB?zI6;7K@gxm?7S;BpDZ z=5aV&8JCQ0e9z`0*DAheYmxB|0l`zq6kNVc$`kQ%9vk8v-`K-*^-0-(D0Rc1{6I!c zg7)`QHwH=vkcrwBxTf~P#3P7|_|*BA3EG~9>(6!y?-J$|8s_b!BajnN$jQeW|D|7a;;p5$ z>++p4)sv~AJ&NL*4jF9KW5SD9m6z_{%G{lu|8jtLy@X;b^u8%;b5CKPVH>*57?fRS zpm$auUW4~T-tR2hkudsY+`!L_-Iqp(dqMX`fN6OV%jcyN9 zUq%~ED~K;nz8q-v+da>%fG|W#Yb|6-MbJJzOKWZynXcj$vKxg-8ohF zW{Z(?p8F)6ZkH5uwo5?1TmSv$X`lS^@?&S5kcM_hoc?a^`~Lkmte4zv)M)z%=IjS; z-j5#PuUw?_i_$1*SQ=&cFOs&k=_3mjhf4(|r*}6OtfDpC^W>!67yePOOSqGL_PyKj z_blGO-){B9*e+A_rN8z4e8}4G#3vbYx+xU;Kr9+_GyKLVW9{`h-YS_U;ftgztbNT@ z)UjOsRWb?WWNE&*@GG%`yeNM*NDc=jmP)})jE&%Bc}lIf<_+)9Q)^nZuLP6yB&WVeINofQa@J7or^5G5 zhJ@v>IZ1rlkz<@Q;c|q}xFdvooTU=S6z2>M#=hl~3yisK| z|A@778?*Dk)*&-YTCE!wlf-#~x`%G)z2MIFGZm%xEvjz3JGk9aJ&H+>JUwfH2Rm`f z>AAhm^~8q@D5Ewg;+i`YD420)` z;gcpUnHPHhP{w1y&=wz_caIRNEw3Q!(_J*hs|38f=A)E3NxMqyhfKY2?DVrJ+9!I1 zvu#23!*-?D(_TM%)qA?Dxm%0u#$Aprns)EP*45**8(+jNnNwVOarc<^3r%K|$<`J) zlq4kI2L~lDau#n(nWr^Zcvn{x8sUpVtg!LX6E*h!iqDPa#*xL_8@+CK1YH z0wG@@6-jtPft1G<2t)#oh$j%?0xqAUkO^^)9Fy|dJc)?3tG_o_lXms@=4f3GkW2v< zJfAJ)@iDf7E09QqJd7=4b7V3F#wTBf{1=wjk1~KH#(y-a+Mn~oWTBd*>cXJ+-M}($ z&-(x=L%L5zJ_ED-uFH2bs%h{gx<$G#(J_uw$$F@|kCiqwn4a!ByWAZt2zP(ZS83Hg zR4k3!4ojmH>5Xus?mc$B?7x)9JFwK^V!p2$V;M7AjO}!)4V^~&&s*ReSX;n37~~tV zA+6ewe8kiL{OnvwLik@cQ%^kM^T;9<=k0YrW?DQk&lV zl=(EDrXNk?D;C9U_Bj=G-L;zb&yupXzmpB5f0>c|_R_}UPD?8n6C#qX6B99{P!^U!nHr{AI9z%V3|U91bp#^Z8t% zLWpBroFkM8I6?(SL`b+CHimOJ91(}$NN}M{hOyZqKA{i^WNe8{L@4+I4ldWFseDgz zYSL7kFdmP`<4a`z(2s6{ zdH(ab&yVMruY6R0PI#9vUmu^aPTm|L_h+G>VXzvViltGj4WS>GaQlXFpWZ9VE>&!p-Wk>_G6B&9yhB}y@BU<#y)AV z)J8LGZs9bayoxC&C{MOtQTCKs{9~Ohd1{@vsU;OhHw$N*y)&U+>+p_#szkXehV2n= zt}Nay-{>YH?~zo)kK&NZ9OqBCWZit?`rgLJo-wtOMWAf|z z;YUAY6j!W$DIPz~Yw*2%V~3d2tKA>;XS#LVA)Pz?(vrO4H^UR1j8=zi&5=38V%M)V zs$X!~vE=%FOJI zn_PExiSvE_X61%#Y}2PM-6u8e+|y=g+WeE6>E~@b8=FlEIh*Oo++(-sp7XI!qwiYo z8oi8lFsj)bjg3tkzoY}>Y{oltgVtI2nk^4lv}0#ZQ2}Rk^Yq_-E2wrH;Cpehuh@%R zp&1a>EK60Vlk5?G<6)Hj#qqd^PX2=7u(`xlgBK$J>lB5nQeL2%OamwCWIvTd)Mt*Ke#Y+ zt?|KZYdg;djTa`qESNH9k;=Njdr(zIiz8hvow{GHu<^Znv*W9WQsgKy>B(Y zdZNqrz^hE(r6o(Z&Fyug!LZPUQ+oSkj9R*&$wk$g8|H@u!=BKlH@KS|ne^0a^1*&R z`YgVxh~LN)++}b1S(M_hyng#K@?UxVE3f~P^7`2nl1Vu-nN%v^V;r2|5g5)9Dui-5 zM{$_NQtAm{QWJc$&SNqM>tFMdx=)(ZM?I1&X;@FfBq zmxv^oRLU0exl$aL!-pLS-jCla_J`uPzyDrwV)XIL7JK{t zdZ7TNZ;dA3Eq3WKrDmbvEf_Kx|L7J927LKu(~pBVCgj3EZ{Hf*yqg=((C`U7F;mEWVOi4wE8LQd1<+~M+Ui9W`BgYz8$+-jSjiBq|2y>mR}cMXjY{BLg+eBg^Q0KY<_S1BhVf+*36~?m z*|>zwmJ11y0K*hqg;XR{2zhJ;#+C>$p+v%y^Z0x|>0Ew~r9W#_2^VAYr4lxw;L8Lu zHYVp{Tmiu&_&f<;#1UekQ4LA~yhKu8=s&)|L_utX5Yq%|4Qe#e?h2JUS)!IJ<7*00 zK7|rz2$9F9^dPn=LK(XEybU!B>H2D3P(YK$gw<3in@okud{ijqMPng^6~Jvw;1Oz# z1d1P0phh5tg3h!$TVB>t(e3WYM-N+HW0u;d8a4AuY>yTDqn})6|Gr7og z=ZzS5To~tdsl<2l098pu`{B3eK@~K?p}{dpOInmYm#hgZ*g1B@l-b73HZ8W;yEkxA zh1PCS+r>Mcq-V~eP-fY8@9fga{<&?^)Vzd6r`8TFt9MQ?q3465>WC{2#%Y1OvZ%+S z0@$rjc~r<1p>6uw&Pyt3t6Aw&X4*Y-#6>KAOV&=e4_mg+Xoaty(q{e0Ct0&6Zc6H? zv9o8H#+5l~TC`i5G&~HKPL}g{PrV&iZ%;^CjQWjF!Qq~s z2f9DrJzbH@-6kKCwIuxRlkQ8KO}%ntSz=*)Bq8Z!b9CO-Vsq)ZgWIYO+@CbX*}P;rGqi61V?{fL6gA9^YMP(da`lWk z_HVrdt_5g(ZcN~oC#Yw-Zk^!fzAUC)kB2)$6uky|MA~92viH z%NGBY+Oa!*c)@&eWkUzs4zH%07rCiFCHwg1`=Hh>R@<$s_rmw;Sl_d<=F}zq&pG_V zVjt^2)N#_M)e|;WJ-9FFH+SwHv11QrLd%g>gRG-m{^@K|l)k6qgeR_dx80rBlrk*0 zYwuCY?Z?itE~oFazLQ0Ld((B@zVtK04?Z#L12D8;pKP^mT+??Qqof@N!o`)4-=a7Tl)CK>W!Ewxkqf74RL~nW1*^S)|YL#l@q=r(e zJ#~7JJoZFEY$H+;LJdYzwSgK%LLFBd{X^ksL)LPvV!(MLR7EDUSRjOw zm1-iE&}b6WDuptZFu?mt-xZEfG}@Mgx4OEz8Wb;37^?o7qbf>cU2#|_u&R5Xp8*At zNqr7DF`*hO6OqMLq3k_b5E;r3Lp@Cz)NmwA%2Mt1UoC6^*BA;T*Q)kQb%TFE?NOR5 z6v}mhoips9#4m#+O1LtnE}W?YJ9F3p@!-RR&Il?gvqTt|hm(uN^e=w`B~9dnLXsG( zC2P7uMNCb6TtZC&;0=0$z;Oc#V%sB>M2FOHJ)qgqyovw*<3#YMxVhUNeqk+ zrH-NUFxUi!s>EO!7}}l4wyuD+392HWN{8E$<+P!!F#`&*Qr&)Z4Hd2-3&)a>Cu6C+a>K?5%_c=QgF*@~g{+G`R96HVxQ(pK4E2Xe zaRB~*2mn3=9<=%1eW6sVRIQXp5eX`_wx$&FGCgQOm^^(O2xDl2dNH&?r1e!{(Q+z6 z%XAf(VK^u-@K9D3s>wn@b9iO8~i^BCl%nN{S;1P63*c6KL3+&(hL*IPeC;y#~qvoK#LTgL5WIPjE2yHm;{&Wi^}-OfCqfBZ{1gP&0&( zf(oUks~J_*Cdd+1Gbz2Ph{=ecA|~ojMNDlZ6){Fr5t2|5lO~1#5mdyaM!^NqRKyqw zRggh~KxD|e-+eBpoFdg8R552cI(8cf9h6kWbY$stbD^nTN6YnB5c=N=5I{2c6b*MX z)BSsD5DsWGZ%(o9e_qYkPlSfIe4z!PR=5Z3SG$zagwAdFy>04^{Ieuw`_iTNx7Ad;k6K>doh?NBvt z>@}-S{0hD|C5ZhGs?Mb%QV_@EpC&~#=4WWgy^EI|F1P@?? zV{;wI$P`tP5^+cQ;WXIQChElacx8MP7}s>T3*e9#uaw1l#;N3qI-dz9BA5?ggJUBU z#HNz208Bf;oTSAHK++W2gwMB-#VUz-aPof3V}nT#-a_=0Ng|aRO(Id_pBM~4I0Eq@ zc18ib$;-7wTtciwTjSn+_iC^e$*VOoA|diKV6c6+1NZ@YXbj`}-Rpn{V%ge+uXrGX zyfgVC9?C#L?CW|SIFAszh!Bi6$qTED5IPQ{tm6sNg$1^to&vZ|BgAwB#-N;opTHC7 z3hatucSFZH)g|zw6n0l(o;nNW_-AiWgmL*C9>!&hfWT^1A~1=kLK&;oaqRCn(?9`3 zPqm&aey3mUCnm%yHQL{H-+|Wggw|6cm#Z}fFUm_#RB#XsZ7`X3u31xDc#L8bTjv2z{g>^ofR06%C;{H}mGrn@8YS)yrJX7!VaqSSP?MQG$vTqau&o z0;5r=zdZG0rtxV~FlP;_W_R!pZ_R&H&1zSrn;R6r1v>7{{4v$NZ0R zTsWSpj0RHYaI^huXnA7oMptqeUz<4mWe-t=!zX))wsAPLZDrT}spop49}XgVa1hZ$gNS}Ki0H?I2<9qN zIOFs|hPks~FJTh=OFoD{#|?Zarx%DYwkR(VDK8T#uMlCF!Ei#qCBkS!7{HzeVFMi$AAMUPI3wu!Vxk)r zq8E#azM~M`q!8V#K#Jgh>7nl`MB5c6CUmQ!bNX!x(H#oWoeI%i3envP(LD;$y$aEN z3Muz1MBh`0ZdZsNP>6o05Iv|6J){u*NFn;MLi7WL=vT!=4=Y5EC`3O~h#pmlo=`}6 zOd)!qnCREV1pQ1{l6guYdRifR$4j)sOZ2XnXfqML=OtQRK)#_wo?0-{3|#7PsmG-O zayXMnEo=ld3zx%)d_yM_9ZsZfIs$JUi8D-ADs&W)TFVBkxkT!yc|^>YI3Hq-NhmmN z0Z=T2eprm3HsP`am!-HIP2~GtA*Pi*YVk5A=tM1evK*HcxUA&2SL2U0xEzO7ssf@f zf@XkQ;)GjR%2xY-F+;N~WTL)Fv;cv`~j>HE9*eEQ)fUFbWE?KZTKT!axY4*H##rO4#e=F{6Ie zPhybyca0UnB?nRIp8%T?!rOQvc;*n?nC7uuGx$V4MD&>p$3^cD5;O zJ=m>Q+f>khyJC+jhCRylUmu&)PUK*RLjS=Ah5j>io|8Rl48>gHV3M*qac=6buT{#- zPkV{OG-iM#jv1x{Ws{2LXh!w7(XBZunW1dZI{}OLEwN)m$#66v+N8GTsBDQAtzC>+ zC^VmE?P9?!-Davf+3pMyT}HTG&#s%<^=fv#gs9@eG%H;ssrI<6a z`68D~rN88o&l!~*=ZmmU&G{niQp_2xwyE8G5w@ymn`W3ND#AQbg&ORqNum$F277UY z=V5@vF~|8KEY142aB(+N#Jn)0ATm2Nquv{no)J}VA(T25UF8C%&uGG-W&OwTb_iy#h|-g%?(&P?h|ltEE6k2Q@* z-F%c)*yrDfgo6=_?YrpE?4!o)7V}_SS{L)|#K>@DS{Cw5aWd8p`pano6=f?;&xB=Y=giSW8KQ_J zk1#y9h$4dL7Ue=z5LQ(X+K5#Ygg4qnDjLBLsSq3AVeP^k_Qn8g3WDuco7X`L>$0_3y&^VTHv+qKQ*q}NA#!% zmxW}-QH`<@?V^XAoDM_KT!v5scPtGkI$3+?%|xS#oS4{)c*Sk{0> z#))9xvT!t+3bZEzomIhDC)ikBV%)J|<@Ce5JfZ`^7*KV`!MI<-dv-18XLjA= z!)np`bp}In(1sh$IEkzS>%E_2BVbns)=Y-LZW>&R?YY&rH*qU8eDUh;a4Mx)O-~G` z#v=^2YN|Wj*$%$W%CO(v$FR~ajNQbrK6{2$zd#JDTeTZpap~uIZuL1HR#kg0E%~Bx z>7bN8?7HIB`}d8gdtyW_vFFu6dmXPHAM0A()v8&{RAvJ3M=${fZH#rLx>_|?EPMAp zmfaI9JIJ18OTR!Y%Zz}*?Xg&UL<_{jNmuN8+dg*P6YN@Q&#q-(G#(|K-;lZ|hSVYU zoI3Q2#;HSeTXlUnq{UpB0Q+25dxT$y+VktMFB-oNYEPyDsc_I0uRgGEY~2%M>o9v> z9sWh*)lvG`+LhE2!B{k@v2{*Cw%}b~TWc^> z71i`TP*@E%e`*=4VHJo;U38AsxpyDO4p>0#ID3vAzc+ELh10-==?L&rgOxGnW*uLR zmw&v^Dlqqh?M54Rygj$>zn61sSuoZauZ(EXRG=!+mEOD{-OkFpMpnH?KgYXla@-NN ztG0pCkNX+-x98mndlTGL+J;mj zkgRIgQt?2$mW*p!dYuByoaqG%Ps9D78^8N_dN&Ww2ix;>(HEAd2S>uut_@Y8u60_K z7ScUyU}ejF3kMHl2gCNTb4L*gp&$zy4&KySQ(pn`pR(%WjT`BmHWccl$MBU zDHH&O4Rl3P$Y2M;;drWncjQQ(Xzx;f%p`Kf-OdYxTX%4{fQWW*7zy~w`APIh!1orv zk9yt3VI<(Yo5M)J_c(`j8yVs!aVB{n>d2gIL7D(g%qbmdPtUc3s07Z zBXn~)&JV|TT8}eAmQQGcpD08><;nG672$|YBnd=Om`#!`~&HU_t+_# zyL5miMlw(On9N;0Av2w3?>LB{CD)$CWKZIi6fRx3tjEQ2Zl-ivCQHV5CXug5Avz0h zpG~A5l_{+mJ0sIM6MUiNEEFS`C(G5x?Dbk=*(jw?oz1;0XE5|hdWO-ml8=_N{efUm zi>LfrG8Jfzgp(awXj($UN!_7oUC~qmY5zh{M}^^Nyeq{FxYj`Eq;PzF!|i7D9!{$F z=6q7Uk5XEqGaL;>V1h${kW&xBfWW_!GjXOU238L{NFMCswL9rOT{_fklv%S75*UV~ z>jRN+=#G9XD#j-i7e&2-7nL2Y&W=Q#Z5Fj4dr?Q5Mdh8aWPbCC^$k1vt*m;EN$&@c9Zq+DdY*Z))0pbqeECN3vklbFte70*=sq$TFW&HR`|hKEMcTpt{B$&t}>Bc z+esc`|J@w5Wz_aYg%s#Lv0qVZjBzEb!e;#o&8in=uX?q$>I<6YuUOwuIX@ECqA7no zp|yoK_(Pbe2U6i!v;)ZbEoeBN)PnxGO?MA`X?-Ydtyx+%duhknmv-T* z6_58@ad85-!3k!=s-`Yf%<`6GFK-`36o^Fpsg6L(-x){+JG3Nk?szN`4sLw5-|FzI z;&dGz8pJgYluZdMy>TKLl+K{+wWu*$ohcn{y_VRR>Ig^M{aPfc`J=IvKN#!8-))Il zr+?YpmZ$rzCg=&P?lesm)M${|AElXUQrs3xbO#cl+)aZ!2eck(8=%yzM46jP*joWl z^;=<)J{t{>)YY&AAO?(m%FJ>Oc2myDGULQyZl#j`?r^HZ-x>({lZl`orWW!pn|4?K zRRbBoQT*?5i8iY-*sR8o{-{PMnPSyohiw|>WB*kHqy0~KPoP&|m%+kUn1zoqbhcTu zA!f~nx~W;Y*+Gf6U|r*^YF)xRV)4pIxHFtOyk<8jt)Z+6X2FNKDR>6svj1%Mj4E~* zN_(+c+Tm_W+s7JcTC(Duev?*Mh67~y3`b?t_V9?jD!b(9h4=JZWi$562oyDK`iyi_ z)QrZ@y#rs~ktlE4_!;GcP^k#k^{?HpZ{J-Ab-t8Rz zxVN|WRt|sC+uM5!hd=G@?KOOn@HrYdqeVnpx$}36LTcgV3i;kFB+`g{SI;K;Kp~a> zqmWwrA)t>G^1jq?UZ55Npy;`FD>(>gHZtj`xsSTd9yb zrwTZyFb_9a8s6=EOXx)j3kIO+hIWS& zT0~1GjS}9RXB!rvgx&!t;fUnMXs{y@i^jUlLf(*PAqxkp8HaSlQptGC?C0(73#bSp z;)7_SjD-Wxki+A_Q!BgTkys#PboQ<8i|G-IiBV&qia8R+48^*mVnJ_lUr=$#@nJ|q zL5l~VJx9c%k&Trdfkdb~kkBgG_zW8W>tZ<$jXn&wC}+_Clym>iu1G4Zm#?y)1|+ub ziUM1P^OF7;&dc~35Ur@0`w331QZ z@Bc#~N+0JGV~Gz-e^@>=&d8^WE0*IT1@x`Poi(^v77Oi;-^le)O}0e1 z(@Q?c57w^qbwYDqKu1#b_KG1OYZ+i)@>s_zg)E)4EaDmwKr2UaTRl zwyI+|nqaH$Rt-6jBAMZot$Z@R?VTdYMA4AT{6&%<*@NmqbxP z6e?2D{fdZQz_HExvB}Vm$}2>K2%$Zt9dj{K`BafD@)|~}H6qlQE@G-^Jrf?&Lvgz3 zG*!f6GFD)Xh*3UuRGJG&ML^>~Xvhp_h~;xSQ?BBe-jAD(Fa1o-8x0{$pP>tBGBb0y zm(8Kau4p-_C3e!HKr*!&QK8I`g-Kg{?24AkKqLZVcjU1PRxODJ{B5y>e{LkAPc$>B z(Gzz~X4#SKIk^(ctu=B^&)YK3U4LQ*t$23HS#M9mOb2ehZx~LRCE5l_NLQsZdfdkPee&)?F1dN7}lL#Nuj zYL!10^{-tFF*D-0uCwvsMYQ&*Lx%~XkLom`6()6%u(>ApTaX!j*5GYo{ zv|Y4%le=w){jnzbnQ*;kFjSr7b$3lJB|~)}eLN%VcdqAil6r13s|o_^Y_u}_wC^s( z0bPPLR4AJxnBEtQyg_2k#HGwqWh&N4Wtywrv<3+dF?XQrd)VW#L@L=t#KHmR@IVQ~ zFdV^Q#4s2zVi*hFph^Z~E?0 zy=*}j8@mhE&TXkVBA4G5n7=Jz;VQK`{kqWd>lr!y8k<>FR&JekT~5C)w*0z&Q4aM+ z%m~{s&&UtbyRxP-81KU7ah6{|?_KQa54R(r1s}}Ijqg8GbM4q7tf&{T>!Kp#2nl?X zGO38DqKK3sMWhTZBITwcqMM6|<`$7Mzli9EMWoV$xIBsrf;K5x#G+Z0F8{dm+=z$LHh|*`sHOSfDT-rXTRg8*sl7<%8b1gx^PUfEzfBXr8kdXNZhoDM$rXy8kO1zhOi@a(?$OqkD5X9YJY2dM2lKEDOcxd+lrp)U z5y51QQhHQRK%f||XSk)UkxGb8LX?#lu>?03bFB2E3u_N9!m>OD{T82;w&CCNl9~=q zQqsXmL#bC!W#S@22?C?a^Xjyx8My*zDlSDl%+=>O;uxXKFb-f480%Y5poUU4)_xHNY^>MzmkTVz z8f`wAymJ#p<^r=wV?X%82D2PMvJTBXz;{YIz}Fc5GK=PLQ#9KG$rQ`Xvx~xbgM%>I zF(m{Pj0qtHa}IQ@J(x95D>fIwcZ^@M`lIu)V#NU<7nNxExB5#6RePUSK1s@R6GEPi zt3R#SbRw=@6+%HdNzZFP&Qci zqrsXXQX-!NkoUNNs!G48$P#IWnKohB*ywI@$;?x`DJ2YE`$RDidp+SDA}RW&4R#k; zXfB^L2T600WjkKDp$S`U#O5J&H5VMrYb&ABDo}9D4eimk! zV#4MeBb{=YVdgBK1HGHOzcprtXo-=#K{oqyQmJ~F&1$!08>=FE9^#yQuEva#DM==v zY|fCDQk!LsT1c)Q;fn|heQ_l1a@{Adx(jokypl?Jrdk+j?+F_9d6Uj>uM`5D*fGK?G*ta4xtyj=b?EhUpV*ho0+0VK$m(4A^OEjN)h$Fvm0}Ghg$bIZojLbuFt`_=D_xyd?6PL}I}}#2-j#0e@6a z!H|~rD{YmdA&yyz*)Sku%y&A|a>!*?UY74gaY%)5)%7RM_8M7Wdl?vIr;7 z=BtYOS0)GC$&(fuJ1imKN?6hM#eKZ8HfWA7C*#Aul^Hb|q%3K#d z?EJI7O+*SZzT+Di-|>x%@A%Gh8FGTX81Ife)4NfnrbBviR;gyNKvAqK74O=GrI05~ zUAa#zZ%|AFcbCs%u!f&w^7(le%Zc`4IbkM`O_sne~IcBvS*T_dqryfqM9 z=bwVCnDghZNH))HnVMG+-g%}Fr+v6gXMXijd}o|YAVnQ%>~s`^19mmbZGZ0t z@!JdG=PIl1nI!DfvWu$ADVC0T!zC{en_T22NwPiM=L|+InF_QyJQ&fD9XdE29r zLK>Mm(pt{2GIvSPGM%U}P(B&uT7~Sgv%3+roP9BwHa_mEt%+H48WM$RV!4^4mYtChjYW}TR?KRPpt?SX zEhNojzmW|N?0|E1O88+L$Sz-k^o5fPsYjh+r8#9$IFiy5{$si#8m6WC`skv0{y->{ z(2`02vL&ll`)B*7N?AHD>wo#D3@54#l>Ac$`FFFr=~n*D6IBLS(K4U$K%};tVk`H% zD_wlQ>e_yaNtZ;QN&T+PGe!BYw3Wrpav}Hq~jn!3f@sj@b09Gh@)KVjbOnG)XcSA zTB7vT$IpmQ$2z^tXQxPiYCTc96uV>syK40s7VkhzEvMN_)j_*es&+9WxM)?FHWg?P&6Vbs$%2Xod5F(|LCyT5jqFF>Vn}`l0-$V(`fkMLTbBR*1R`H`7ativA#L=oi5?IiO3!%Gw;^8LP$C`RP_>p?_uBK0UR#e^i^*5i9$VJYp| zcL8v`d^S>wv!567?_&P#3^3I`A&Y5XfW`tP>`@wJr3to zAw{=}%zo;GXK>jMbBg_md}GHF9e}s}gbbAGanIq!=W&O~<3}?+OQg>EIqrB^DrQ#O za{e3SZ-SRlrDKTDtL(E+H1yxc51*?L(LAD|w+;UnK+L>MJj(=li2yeV z@D!qMvNq45s7?-2eD>e8;GXDQ#y`TYev zNk2YlzE1wmMx=S?@M%cl&f(LMlAV|B3?h1&!}m-;`I~DyNKr6PRTNUx3J)p1*bxO( zN{Z?|j1-lMNGUJujs&7L)ufaUt81Ly*fzU9FuS38cA#c9n13S|KkkF|@NN7Dw*W>O ze0*cD!Z!vid}GkUH&Wo^8+?Rs1RvrXNy6}rjJNnk)?0iZz`v359)BZo7{1F?y52)Y z6zm9uqt*Porc}jj03XzQknKAq(mNA;bc;g8)LhFJ;XW!h5a2Uf#gg(EAJL9tQr;~l zE%lN5&9VH2@jg;Z_VbaN+#kO?0GG@0qi^7H1uj?O(ufDMefkj% zhv7$ae585~$L%9 zgd2d${}?m-lh`0GI#Z@*yrC;qqTxKJ}6B z?i*s%gFkSJisC`LdvPgH_1-K}A({;|43CH7$p~CVs-)JA0W?k})jOX3q=0IQnl3%z zXMLy`g%VKi;tse@ycS>iKuA{;g^8M646=D3!|T9Uqm`H9jgY zt!r#tR6n<&dTveiqWf_7#bPR_M}1~0>wkJpdKjS#YOCrN|6Ul*JlTe`TD#$_rrK^e ztEt9t*0paq%W*gxqS6Hl8~g^Vbb*%*_Zaf=e|HUaB^c@yX{a0c0d5cmxYQmS;1pK_ zoNwO%hXGFgpE(K zwK8^QRgJ&Wzb2}shLTe5t@hWm;jX4}c3Wun%(~eP+U)wq*)?@+xa)J*N6OS6HP@CF z;2b5xfPpCk$%Xw0WA=S7Dfk1%^}oHOe1yYG{)@~1aQPUQPrRfS7vn@-A1+lWx2XA! zC?efj7>&nc3rH;-Q$VURu0U7(n9b3CxDD0VQ$Z}Vv}Xd|{=iGBhpC;hpQfV6jbs|( zKR?}e?y3*aW+li=sW-vFLfaKMw;ez4i#J-GZKKuOHd_7XvC&4cMq}+as!C|3LN~26 zgSXNQ+g56@ZKa0KV=IkLx6){^mUr307O}O8+_Y95Z!O*Ku!`JF+t!--d2FpQ>DC&< zTB~Kvd{F|6-LzIcZ!LY&X>F}W+tzCQJhs-@bZd=0M36uqTB#Ic{PeRFHXSE(fG?Ss z2#4CW%4Ks~Q04cGgi2oStLq?A!Z;0%y9Z*#d|7O{5~DTdhHw$U9q?5m=Fo+^0|1;_ zI28})Ns1LIKSLR80tsrMD$xCocE&A-%#^60R01(w{Uru$ah;I zJ8;H_4*3K(e?#QM(RaT?d;K1FUW2RekNEwkL{mpM*B;#4Q$A#UJX)1Z1riZ0nXF25 z{Sz(tXQJ|vv#RUrYwBjy�eOUDq(9zPhe<*2_fYzPOfL7f96Czk)>TtSMec8X^lK zG>>l;N2~}9w7{W(RMrm*V@p<`h3?DJLM*WzI;BqwkwXiirC1BSO60qz{^z%gEj7WW zrAnG>{k=WxRkL-lylU4HsPzb=*8W<5b9h}MwrWLdr@)Ad&;ZLkkXxAxJ&_oyeN=NT zq!0EFTtduC!mORN@nhIM%&gJ5lySWd-Xjp(2x5!uh^<`=VrLtJ0!T6ojL|J5ddo{b zgh#*WrSfT~bsdvjerRaf^ivuF-GO;)Pnh1)9&I}2(AN1aYfd?4ZEK)uQ9N|ox|V2n z-QoYl4;C(OIKC-R+r6s0@z7YJ=Fo6*(em2V{N$3QYffogH@79ARfkTEbT-EpEjj!F zp}eP|yo+_4)heZh>$Ow|6VbDqYv1z12R4M7YY*z}QOBZ(?ifa%cf8EfG_A+nTW^P# zrh1xd-`2n0^pe2ewMSHq-v!U6><;biFL$Vt z(H-jfe7Zvk?$C@517Th|u0I?GHI0iF%&cozSl?JP%XAp%I@;@*5X*588+cc!%KQ?mSIhIg1R2l z#`p7>HrE`}irKuQzTI|I8xISuI}!}GwI9fxkXQ}J2T!o#j}KPV4H%)>3#hraU^6L& zn@RDUOlq+*lvIzGLDZub4j)QtTsfJ1{uV4H_mumBZS9q{?H#8T3^is#ODs5iCJrBP z6!pO|2srB7J5H+%1cAn=m=#f>iKrNeik%QeMMPL5*V`h|7164Bdz`@A0PXQ*4x>Fz z=CF8Z`V@ue1Zu7wz5)x&gI8d&1}o*I>~G8)N>-5S9khbr5A0D3hu}|yvlk6pLFF_Q zm$DU9UVyfu6{ZD^$r63pf*CGj8_Y$l`Ap2kGUj65f>z`wTad#qZG&8IQUf`2D%j$W zTJc+>r3w*g5RRp$x5vY=>49h<5^G0L0-6&|h7Z0+vZebTHbE~Wog#i3(o#_^RhiUM zsc^JCiJ#&FE;hao1c#9xnWFG-BL>CG{|2h=a6-eJJ{b+SwP^_h6%uIUqbJg40R*g7 z5Ly9NDM0K{F)nPi7e^Dr=cA4+A}aUR*0m${A`)w_1UDrSk%gdz=^QJ3{|1b@XA zYa#z33?U*`BEe89))nlij0f5^#shBH2PFm9xn(!>V|OH&)G$oqM`#&D+~I@oI&g=d zu!_{9dOUto6|bLEedJ4O!LCF&wXwiYSWov*2(S&Ms(N_>^{V#M+K{ugKD|2E2$+aBU%U{VR)poCLRqk@Z?)dNLJAg@Y>;o$864DtbA@VYICQL;kQJ@L-5E z?&Iu51LvUv-I+uz{0$!jn;{eqAHTu9OV4wqWQLvMmIR}q5e969LNSD{5r9xRzA}uu@&Qpk-CF9d2v$pM*A2P244B%d5xEU9fyrWy_lR%mi_T ztQE*gOk@+R$d)Z^VaT8o^qsa2jIjpD2ARlIxz;|$7|r1zL%7xr!efE3)Ii9FMH%NH zhVytW5{Y#)v`gKfEeG1M23qw%v(iO@PNZgKn2vXYX#y~fGcipvF%9VqMgg_k&zDV#Ije)f_P)repc|I9(AUPc$SQKKf~^<3PxgGp|(gM!L(XcFxH6{ z88sib7wNZS9bDPDAWXyvH=2ZJ_528cNtf+S*M2+uqfqM)M@ zF@_kyu9H}z+VhG1K^GFyMMQKl5q*t_E@AU@Qef?4rn(MWhlnUeL|vH2@)-gmV9-0* z&RCnCaYrr7k+mv=|Is_;MdZB*tW6WUcp=5N-HnH#l#8gn>r%t|d9Ol*v&!m;Qsv}*%e z*sgIgI)KNucr4ff8O8@Ujc=8jYjLZT`2^~xuh$aEa4d=mFL>X06_a@bhR?x(G4Tcp zj3P>3z}VioKG9}~moYSnQ(pMVF-&<0Q5PlL2MMncRA({uAfbsa1cpBo9`b_DKsah0 z-`RGnME&$ctP5Vw>0Pbu@#)+Ng&M8qmB;sLJ~RUR2#6TuOd0Q=R$kiL9jZ8p*dT330cWj2w03Q#f;Xy>3 zjRlBO0Uk`W+3=wZ5#YNN>~+RCDKxdX zxpq=-k6O~_w*^kWEtGzXMG&*G)5I0(@u3eFAs<;xyJ!9r5uGg6=f6M@iri~SJfe1`8JHP;Sdwvpj8A4G&B=oM^)gi9Iv z3yzoLJi58Vyr}ws%Ur33`uF*YnSKy04`y^=bcv?o#`t7#ExysDrA*V7FhyHHq!h71 zfo<4SR3c>vH@TQmgZ<0vuqhbU1gt46iKy6g$qXo-a~q_R;m(t+Yaxc07T^2n;}Ez2 zdkf*2Z3`zly8{UgTQ&t5ZDVParYEs#0nBd19PeQ>Z#bT6sEh`ff#v3RXmtDzD=_WI zod|vavgzDb0TOHn#pfujfGEwiJH0Srjc_(U#Ja>s9{8&f-==f2uK=U3d=IY2BEG%i zBQN<7T#GFaLkh6@p%9mMy`*k@&&v}{mHyjHzL6I{sl4wc-{u`L`Vaq=IB*NT$$uf7 zFW5SFUaIT3m9wI&>t}9gS*VNcFAZPqYvXwG!?JJ(uI~_D}89rdAvo?<_3&KWCMmh zVZh+=qxkzx3huL|OQy`3u?J;d06Vq_gG>qQU4>}sSUom*SansRt12FgMXI8ycvURX zZi}JN0Yi-|3`GtYYF%L{cEB*his7hqJHYpS0RJc>)?tFMUz+9n@ASQn3 zo9QuToEpq;XdPH*EN=pj@aGH1tkGG5gHlYp^yR#!STfZT=+qYRlA&XK7*xCQ&WP#_ z)iWlqU4G2bi;r2pX2s;{4b|1GuV7UT55-{QRVKASBG^%htP9vS-?w}i$uVsgH6w&| zGUpJe7$ZRgI1Q^l_<+-lED-OCv37=J%~Zsrgb- zCp$N8N*_FB<}2cI$kaaX4L08^J$%x9cA%Ai$%09kICR8P$#^U^y*m(zXrapXKq90u z(F0pw&sj%Q@b|L&&9y%rgy@+|N{POiKEi^Y=2<0>Q`}!lR9;Fnsg$UqR5yL0-KUlk zol{D5ZYj}ur9|hKl45r@S`b6YV}lH5&69&jr6+JP6g#Wcy>ndvDh-YzAVYs(0U95C zk7vEygZ;3imVo1o`5>lqu-AA>O*Vur7(q1Mn~o2w7T_8I#)R02A)6tvvaz{>@Ag#fP<;9~@Ml>o06;57n#tN^bS;Nt}NcmX~^fKL?Q zFA4CM1^E92_#^>t6X13M?hxRx0G}ej>jXF=z?}jd72ucv#|8LQ0Zs^TQh-we+$F&4 z1-M&)Hwf@X0X|KDzaqe=3-B2N{8a(oB*2>m_)GylOMuT7;By4{Tme2$fX^4;3k3K= z0lr9pFBagh3GgKX{B;4o)Jrs%Nj}kK!Z@%+fG-!|ZwT-e0(_+ae^Y?365y)^c&h+^ zOMtHx;B5kYodADZfUg(e8wB`90sf8v-z2~{3-EUZc)I}KBEYu_@NEKoy8z!Iz;_Dp zT>^Z!0N*3P_X_ZR0(`#!e@}qFFTf87@DBv|hXVYd06!$aKN8>{3-C___@@H=umC?I zz&{hc zUkUJw0{m+Meo25|7T{L|_*DV^jR5~vfPW{zzZc*?2=HqH{6_(PU4Z{2z<(CtzX&uIUD3hKI%K^P{CpEq{9hE3-|YbCmmWi`<=8+b@)4k ze1PoZdCY?}kL)x4F%R+wvd_H7Jf_QGsqoH~k9m-XkbN$F-D9@f6|bl9T>Gaqo?rdd zgDvsw^WtAU^bHRG`mY|kl*2Fm)kEiT_>RAM*g_&ccmB;|h7;cPHxFII-?{s5>EDii z!$Vv7{V{KN=zb25eZ#}D@8L7<4G&wS#Ao~)X=+yy2lM+1o@D-tf>j zIXv+V4_olW$Nz?hZshk{-c6VDxOYADEq=e_Umi?P*ypkTq~B3L^w2hbzvM#?eV@Zy zKJw759KQS`58cG!Z+zroGah`d_{d|f*O#hZw&03Snd+qn8ALQ#_0o0@hX#4gHq-`r z;k;s>n+AE!(9Y=4^gI6<>7}3WcRn2Hr8_zN(MYe^CI^mAzkl#(ui5^SM|9(qF_nLfL)9$4$ygXw%(s;Io)9`iSG|uP3X&$?LUHYBjku=;W zz(E22S7-X22cuqE#pym2^^y_N{-dau0{s3@qFy?Q!yiS{znu_E!-op+0~! z1o+`o)AwH&;Oi3U`wt6nc`|)}r2wBVz&{b-@1@f3zbL@RcBSv1Bf!@Q@FN2J{{(p4 z`t)xX2=GP${zQN`bf@1xU}GA7P=Hr`C4K+#)6;PM8EJU&rZgN8;5Rp?@0XsLh8Lcd zhEEpYr~qFtz=O|Dzdv4pPZZ!S0<4~&e*cII)9`-;c=;vi`=c&R!+#gxZ(NqX@4Gw= z|6G7S6yTe`nSSTGtJ3f%0{n+-)Ax_to`(N)YZ`v{*))8?FVpa8FQnl&UQEMdUrxir z-blmu|2+-I-cG~!{yPnie?JYsEx_-8kiOsiVH!UFBT19 z#_BYD^CZ>ON0k?<=9pG>p-SK3@8WGB1_8WYg21@js&sV^_`Nqj74v2gbA~;56LH0JFiB}DM&iipO%UF{Ol$KRF^!5J(e`gn6+L|DSJO4}rb1)!L{ z22ZkpNS)-Wr6+l0Ebu`KSbUQ_i0N?AWs|&$R4+KNB}87=h`bUac)w*tUbiKZ*&42M z8Ieo2p5z@Ol?Z-!8Ieo2p5&bbT(5mt6YL=``Di|8@AL|7J*5Iy1+(GxNvtSL!|9(RlANf{9qq$EU7 zx<&MqEFxIVk`O)R8qvd&tYIlkMr1ScTg)S-uPdIDtA=$n3DMJTOY}z>5f zOD(d$E-GA1La)}T~AR;>JMVE*! z7=5=Sw1`3w5nV9aWv^W@`UessgfPg6?s3=H7mR*TLWKAS8PN~jB6>(dgy0Do(L?SK zef?v(u@QM8BKrFOTsHRQSIFIuuniH>oEDmDEOvu#phGdWFjpy(Y^V!gC}6-YKWwg5Z&jpYCn5O_KhG6OGNauhg|wbo;vVb5+5OkOGNb4f!DaJ+EWK! zDs|VwpVnBN|jhHL+|g6A>3}HL*-qNC+mCQR(w+7pN+aI#e0~5Q{3Jsyu3n+fvQ@ zy*z10D65ES-tRASi)!JK@^FGkSP|92BX#q}MFkh$E{_8Uq?J(Jt`8_KP%Z6VF0~cn za79#0yO+7GV0%GOLWMA15mkG^$!<}dd7fNBL;;Ja&OA@I1zc2c+fEr3f`~;_+ql=w z1*$tgky#Wm$RescKXJ{X_s@AuYAb{=i>U6OqYuC?O7-9zd5(ezXc5(eb6$1Z?Ei1b z7^zeUpcYa6zab;tqT06e=_AFV5AoL`Dm-^N$UHdbcM>XuZ;Pn#+$E|r&zo2(mI~3| zK-Iuk@$uXxs(CAaevXI=!Q&z-Ja>ue!Q+1`l?t)vA}Tz0iE3imJgKb^x-O!^bC;-A z51D(TSV2U-i>UD2C8`DUUf*9tg}`|c6`s39wQc98QUwurFQUS8m#9|VHRyG*R0!J_ zQQ^5uRNHo{bs{Q6{fnsZ+%>9CB<+k%12U>l+-m1-J0FwU3VRM@RFAoBtBGZcr3zxp zf`|&wT~=_`Wzk2(w!)4F5fz@hM73?_C&NTk*f1fY!gH6XRu7pM5K&>jg@_8zU84HU zEk)%bDs0yfQQ^5uR1?cqNzIPk9wI6{cZq7-&VNbFfXyNzDm-_I>df;dNaGdunuw_I z+$E|9kN=&73R_h~RCw+Z)wZ3VAO*M?GlHEiA}Tz0jp`Yxt*}u>M)i!_wwkx{=TC^G z!af@j6`s2+)%|lGlb8Y9bVO8m?h@6!l|L^QONCuNA}Tz0iR#rUlctKOut`Wnh376& zZQJ>*)a=+}B%;D|*Qov`p~4m=8P(t1qxwWbg&j^Zs!!aanpoCUFSZpnNQtQM++_t% zj|`QR7xq_)sPNn+s%<-eAyp9DvqV&Q?h@6Pst!6?tRQxGiKy`0C8}*ZKa@&^&0!)c zJa>)iO$inDmdU8zbdTyS2^F@c$*A6Pi)!r$&r2EyJKIE5cJw2JZf_T*vikI~DNsaZ`1D<% zvaX)dMJ+@ojOz6qP)QZUPF4#l_Z9s3K#@hU5mrX^@qw;;@Kecv z#6DUX)u-+a$WJT8Qehje1yzOXQtc=cQDGOajA}=jdsK}gDr^F_plWoF>TVGg_7Gc8 z-R%<9tjpq;h^VjySww~BE>UgU`SBbP6?QO-sPNo9s?8!QY=E|)+Uy$DjzSR?_D{>G zb`-is^{K=R*nTae`qVu$d@7X+ySFW<+?Q$xk|>*_C^mn~sCIZUgU`H5FVr5{S1_KV`VOH>ofRu_nY(DE{kswONC?)A}Tz0U8;|z zwnDB55!JSxAKSH+UAX#H+UjqMr9!F+5fz@JRK=^i!zttZ8K*68$WLJ)z_N8&yfs;s z>JE3dBavbsR5;nhx_JsoOT{uF&4qyy3)pzBBT8>oEIM|(F81pfk!)8ipja^E*#M@=!~!wj?*h$vYs`Z!8B4!Qj%B+i1g42 z8P8$|JV<^5JdZE`GV5I5##mRxwt}?G0S)q|0L|g6bu?w`y5iw@A{GkRb^uG+nyJx| zcLlhrTXkH;of~apLYyjvY%RbrJjg56uEoOfs$dNAB)83che{#Q3(&mMrK2g_VDyvg zaRT{afZ~Iqb-L`}td7=LY@LD0XWU>rTAeC|^fExzR;;7)wY3IAIJ|{bNC zNNGvra78so>VH>thJ%S%GS-$tV|>FxN5qe;IR<`=w)=N?Rkk8Ye^n|GXln}xI|I=` zyOuy}R5=i?3Z^2VNR?D7(5?z;k??vgu~9D4r4B_x@*WiFhbg@or{{*+sgz?fpgPZ? zILIF)7H4Wg3xyL^Mnfm{HqNoRZ2ReJ4y8cmB9!8159p0j(XPd+FbY(KVpXAJJV*L| z>(4vmatGl6CUF!2ZfkYy(v7x$NDz}yJH5S4mL8NIi z2!dIsuUp?(UE_$ZN(;4X>$Hv8_;*rvR8BmLq)}qY#%eXSbu(sGg{lJU0-b>{N|CJy zRoROm)@G|iLm_V!igU!pV3furU}&;e6xDM7*jq)TilDR-9dxMbszC$oinU z-=Sbgq9qn=b|PLGj75`Oomv8^U_+HM^2&BC))~l^yQ?iovR3zWhaw}_mssR+$w<i2?w=kG8}EM46IAm2G%8a!OR$MBI_el-*+e+ zQeL8Pn|R@7m}qqSqAd}Nrb4k;B0tk&R^D~J)uGVH&51&f{F>gPhb2>iL{(c=C?asS zRma-TteklMpw1*4VVn`)RaEoZP6Xyc+e0U90US4&_8fSd{aDVV!JD zJ}{YzB{XnUTc~P7tCqsyHsPR_bUBgmi@y&gH}sM72OSE7l(Zy5cA2tp*-u2~ zM2cS&cgCbnrup$at9EIqb)J=<0n#ml;Qt=ioAM|&HYD2yVkoTBheB;b3Kl>tnsh_wPKUxHKQs#8 z!wY|qu4Rq39M0A3oOh*+sb8*?4zyKOt>52wwe?-WqlNY{%^Hgzq{Bo9jOsp^OVZj z`B&1(RzW6s6mmN+dh}Sx_7*f%rF!%AoRJUuf^;*JlT$juh z2WiDZKsH>LIg|~l@lm!1c-h8kHPtg_R_Elop6;RyVtwrFj=Fz5FiIS>kftBy`ej*E z_c;9Hfl&_4pexJz8fUx1j_{O4%_oV3aV7u=ul$-$7|&f0p5@q^7d!L-4jur(;Mbze ztR5YxX=uzzcT95{h$@3Jqu$_96r6j2qTIeiFUlNqwi}E^B3ck9swdgpUJLBX62krh zx;|F_)eZ&3VGJnXPk8}H2WlGY;CykdXJ>VXBcWg*5vp=w2Eh<_^u?4d{d$qeJUAc% z<-4vi#+SstUX+!28mebHGS3wb4T4iBK=9Va7-ODkj&3cvLQccV#9C+T*=f}Rr(vK> zck(ig<_@x;>#_IH9BN@F({=DzK~4>)B61W&vw&iG+wopV2CFjE{^BMV9=I~fO`pm-+jvXVunMwFg7ds$k5CdP5fK87gGgS#{gD$HdOUNh~N__uG1B;d$21 zs?X9{c7&%aTy&^N7{|VV@Q|icIhQOtG%MkTTIY$OlZy;z%Yfjlrc)W09OZU3BSY&t zb(rgw5+~Cb2jHNvkF4on)Ly!JQ>`ScApFEF2H~aI2fBtD=a7s|4&x0@9Rk4<|BzsuG$t8J=GY+<5vSB0 zNNAPjsz`d}D;Uer;7eDC4UPkkP>kn}N%96?y23?+=WZ?5-TmGJB4M1a1j2WyDMlF2 zvl4Esu5;|^uQ)U~j&K6OQ43S7!S@eEf|bdRaIO(ZqwO2pDFy&1MuGGJob-NLO>M)> z8qxZ4hLzEe_)vj*CMHyNn(U)HK#(RV0UH_3CWpvd)F=rS7Ir zL~+O2btu@0-P{U`3(P&qC3;cP&ZY|;CA$?66FLBA~PAGQmQ4tplL{!WpJaG)V7aQu7SoQbZ# zGizVgS35hE>|V7^f$KaM%7D7-2lmPB;%sv~K&;Ulj@Cs74UJ^bnmeo@XbV z#S>yzeS=;Evw}wjiJ^z0~RtU`LJ2vlJ?2sOiqwH;zqsXcrKNEKPy&&{z(=B zVm)xcClHUiNv}tr(t(P!U8T<(cDy!a(K2asF3t`GneTs}cln}aY;$fFi_F>jwyt2;XqhMq}vC?wqNwc6QF#5pKGsI4af{ zhs%QSy`4H?JkMI=#u{f|vK`^FrC;}ngmIEB2rJ*y3FCQI!VP(G^+l4m6vyU*@UTY> z!WX&lmgdpab=$W~S(7`GLgmL;XYJ6XdP8iR#6VAh`ZMvpda=XE?+egh!ugH1&ln$C)E@HRNHCG+k5ND%Kb$ zMuYHApD}CPn!UzZ_Gj5KSJO4ck~rabY7qYAD<vczQ}oV(4{bWL%)*wi>I9fY51 zGYPk6Z|XdjhnlV_9x4*X$?PC}-)Sb{q1g%Nqn#Et-zyTvG4LRK;N?1DJkLtFJ`W3| zZu?ErG6v3^2jRcmq!Y$-7ldfO`;Der7gxI4j|7`&=?`wRAAT0ULF~ zA1^=M7`fQN2+mxchs{;@j~k8=Yy2Q5yzHAgVLZ=TY!eCBpP>_e=5@2iZCMF7=HUctx~8~O zB)oW&PI%MIuNqCwCcs&kD=#H+iby!Z3IAoWN%)lPHO^zHq-jeiK#f*Zy&{A;;N= z%!YiXFk31lcheCU>V#jt@(2)!^mVBB2;e^jAI?EvJ!k1Z_he5x!@O+W0 zmtUgS_?m;x)(LMdJU=T}*XLn#HEk`Fm}}IfI^hTRJI5fLow@RIDQ>BdW{ZF4gzvh5 z6W&sheYV(;&)jKi;o)Laf8#Q}#{QynjT#@Gy{Ypfe6~m!$ArP4f9uC4;j^<7&S%oL zwNN?@=jWX8@lEF$HD;&bI4X&J;@6wDR7lR34>{rTR!(?JMRw;)wq@fCax6JtZvLj; z)W_|2zFy-k71^CH4f&Y2TMI7|`}n%6bi%jY&k1iWyvRi#=k6$P+FB?jbNqx8EeQsaP)(K5n~Cc-iZm@Ro}8 zSqW#0RJCQUYl8ao!#q` zr}s7_HuVL+)Cr$+$JdP-hq5+xV;&3WO9EYcDmJ>&&c#>+|ttZY?}d zB>cvUI^m~!FEa?Amz{7vv&F52M~H;SzRa8Y*)0a)BeE0D$0M+{@IsOBus3wVuby$a zLHNS#g!7r0Z>f;{)%X8hCw$_TZ|H=#RAl#8=e7K^wNTPdvA1=?>;7`3QRD2|DKB@^ z*21&IroQ*zI^oSXUu6(JD|=Jtqn)-?Nb64H-`5Eb`8y}Pr6T*fQ$s%5X-kDPfV|BK zKbyMR=;Q1INVfERwqx~{ilo@o?|-1z_!I9|gK#oyQ)df=u_e5<@B)!=^M^X&$NtI* zZ!NqaE8%Q00!}-f&i_~^SR1>Rh09EdcO`-yfuyzzd2hz0aac0GobM3uase+%BQMD~ zt)`~Bwq{mUAcve12W2FkEjYVrYoT=H%G;mn4b%ObZHBb5BUhX)qbv@C)t34rqNr(W zp>zyGL9b4@>cZ;`!t5A^41{g-HZ*N5l#UF!>Cgf;hxmT^cMP2D$dC*;`Bv0?*4VZd zN~bq$KSC$mcH2z`VRm{$7Q%TLwp%JBPxa%gbizwNy;Uc?r6RkhI@>lzC-#kP(h1J` z=qF5&%2{@kWN2MJd1VeTe{7dj#z~%E+zI6C_hNIo%5Ot_gE%%%8fg zrqe!x8N7(E@gi2{l&Z=>I1a@2;B3g8_PvgJTJPS2@BJU^UOgp{i$nmq=h`z;!(~VA zw7tK4bO{rZX-|B@3OqVcGiw&h73MatP`!}vz$s0HoEpHXd*66LFVhcx;R&-W+`)LZ zU=va6Id$-)?5Lbt>&}nLSZn?E<^5R6Dv>TZ6-ZXsB55+)C{kr6O}1LsPUV_lBC*Z< z?9^Hh@G=E{qnBxVFrLlXnnP=4L*?K~Z17Fii#KKE}ESy#_7QkyyQc`voaoT3+X$o+FK))-CDT4BiExLD&m2Somw;%jwVxyEwa+vE8`+>kON5xR8mhth~G&M*+3WEiW%Gw;mvZ znp#nQz)_BEzf3||a_owh%2iroy_R5Sn%K44iZ$=6qP_6bt$Oh;o_smOh39BB@vtIW zMEHn^p5%xQoT4Mb$0ecy>EyAeIHCpha-zA@#5$^U8>*ySsaOG8SByoE`{9-2QNg z^uw;CmPoq&DY8*Uwbb-eW69~M4X2(=L<$id%!}#~V6On9YQ{T-0$e1(#Y9xj@%RMz zU##^N8zpi&)&PhM{-p6!mWMSyKB}DY|JBIO1%mz*_zRewA$5bt+nNS zS@vpoE$!NdUD>o|YNWPiy2sr;dazz!n~*@bApvfHK=^p$gm4LgFEIuu1W3pO$Oi-n zc|ab(jq@NkKu8D)vG4DH>e)R#l6E1)-}n34-qB1~)u~gbPMtb+>eQ)C8rEhz7fyOv zxi;%u7j=s^67~rHBpP+`HhiO8b_QHCFEVT~89>3MrNP2^u)i-8 z19j2mA9A*C-0VEQb>o#Ea=JGU9x43j1WBFioykEI-awV1LRD}R3T{*diSw!Kur7N= zdT?y*y3}!;svj>@3vpw%00w`CY*9gC4n`f8-)9}iDG>1=@4DD|92IxH^)jc65GLf_ za+%Xjfm%1uwRoHii_DIdnHX?`&b+0`;{`7orXv}f7rkm2W6&9#;(0IP7<3ptQxXyU z#Z_^?eu?uk$9a@Kw_8Yk@Dj)Q&?TZSLTr1L*SuCeVFd1xOPua)1GTyr&krYzZ1wPRkX)aDc?+$79H=NC6Q&vqsU zuX3JvS(kIs3!N>SUg&JO{wl}WEdREro{*{d+n!pLsrcKTx-3)i7hSO7g^rLRVl0Ca zkR9W9K6%jFXjnm`ci;g@y^T3-g!=@jhrjI0(H{9zK{K_IYMBLD&%dGhcFjpmCqcErBNE^iycwK+9{ZQ(X9 zM=D0}nEZ|rtR{Di;KTAgMz9j^FYXe;@G2?Fp3a=EOD>1Pb-A;3(}o+B*7a1pBiuG! z?#RiGxR^R|93wvu!bS~YLnjEthGRJZHUNb#4L~q%rgj?QxS!Fk9pczQBM8C<4PjF! z6bQ_L!=1noEjDW~n>&Fae!^Ud0jKM~NEZ}+o6~}0Th$cYux4N;y9%mptNZy=c=TPPYS%9eM|hxiw!;fB%Mg&vB^7AC%wEZg!l1+b}u!Z0GT} zbUEElBWwjpGxURmolY9fT0FxNZ-EDFc7@UJ7dVddtB&LRn&UWwj^kiC@KdC^Ib9XU zaiE7`rg^>NbiKiGoS%0b=Z%ij1$O&{1K}iQNhmolavbM`Tn<2g{4vLIh8$Rk9ZW0)Xc_Z;t|K$^6O7=oC%ruR>#?T^{w*dZSv)5`S-(^yh91@ney**@U6y~(A=6p;qZh?DInaa%+v||{5y!zmrRO)T?;plu=VHg{ z-WXTC*W$jvb`N2Z^JvU+VF$7I8OK0 z^5C9gsaPtO??U1X5=nG>$FkK}6!e}d= zE#Hi6H{#<4eC&4|Y1=sIFO1>MUVsQz12KYZd+@OvAH(?AiH~dX(T9&8wc7b~$LXFZ z76+=FZUPx-*1e<_Mhz@|2S&Ww$VjPFY{jz!BVGwlvAR?l8d#pM_=WjOwOA^8tt1=( z?gQmQ`5BJWy$L_AR$oYZJt#TfaW0UpNs3CgrkQoS^SHAHTW>vV^YleOP@dj;(KX<} zA1XIHnw1^!u;S;=to%#A^h+dt{by|MMj1Do22QzwAe#eZizGFtO$@j1isPC|_+%4Z@ zj=4*IKfBR!>KSt`>?yVj$<{77zwg=f;o3zGT9SS+_ivf?s(1U%#ocJwv#Y#@$!CQdd`7U6<&(>R}}Zv~9B8y3q#x_(#@g#+4d$>?gcX4=Y~1 znp1`CnYeY6U4^OOi6`*A4g0Hf6@GJZSE1oGo4mSa9h>v(5YHNQFx)2XCAFM(+-TWp zw_aq|fwiaowAFF7ZU^k1UQ}gaP+wtrwJ^ID7`rrIv99fpthbi1LR$bHLdj<%IDvbg zZPx;enN^FKpYgP{)^W&^bCu(C zJx$2DEq?>JnA*^*uY9HBd>TLg5Fb}N&ep3oI?mSW21r;)xg{^D%vVEgzS=FDjla7k z!kZnZ3z8E1CZ(3+JQe0-GO@z)di@4~#;!C_>Lz&^SLS)ORp$|OUI^u%lwcv0p}*om zBbMcNH0E9MJJ9;P{QexraeiBVhyCk4^80hG@7HVwe6e~cb~#&}fi7o@GymPGa+kBE z{~a5gLHz#ny5E51n~VwfI?k4FEOa?@m}AHQ2{w4z9pZv_c8YFzXK^L+n@OR|>Av)i zQw6VDEhHh$J2l7YzWR<+1(_jg1qIdO7YjtXie1i@$A%n%%cTqRz~zC_t%S>CuX?q? zWn(@rSKQ=P7Ftbq2p74tJ2+ne9+!!?<3UxR2t?#N%7}c+h7?=woRk>6;csUMgWI|s zP=O4xoAYbF>|l5^JK$C3IXhf$#q(6}!DG{R)33WJh3Y+cY}(F;{a7sE&~mVK8C{`C zelaTh$VMkaa&{o%Ucy;pq3TDh)(Ysp3l;_po6AY7iQ4-H;*~hz4cQ?qY6Yx9jTm~Y9 zugOQaXPPIiCObm6^|C|3q926;HoU1%1c_r{JDQK}WI+@?KtJg&b z>|;G5XZkI8Krfd<)q3Nr4%LehfHY1iLYK`bHKbV;IgC0uX2@) zDN-gc*1aHB?;+4<6CNk(1tj@wGEbYR>K)emvT!qul1h+7N_!`Zh?T~dH6-k{$dppCr~hG-xm*N8};|O zW)`Pq1t!A{n;mRqK(HDZs3=UDvM3Qv07pXPsrR6Vd5`Nnxuz8+-O79|3{rHcG$II> zN^MTTz$R8DY&5)}3N8=AME4bzO**N`EA?>B4^%nOuR3384tRAQ={nH8^tMv>d5|cL zfOgug_jiX)x|>L+lPwLdX!Xi|b@Xsf;Z$_fvfh57nYqtKj>W((EI;=RzTt|Sd5_QMNxE&R?$l}f3D#L1C=n)tYE!va>IdWfXq!!psIz|ds^zL z_h5gSKjICG4?%C4ApR7vm9C13+UvZ~@G#-1*P@m>FT`Ohs&L&Kp!%E_H>0rT8z87+ zF7lf5SQ}tTJ<#wBuY(`bsk7m-0SPyfbaJKHYVd|ar9FL~d-Y_#bGl#iER@^J-`nCX zQ$MtKT|bdJgFvcvB16^F9G6o(U4Kr7Gy;${=_a8s=ffm!hKT^C+6r-_5=fr-%AP_= zRB-|Or*kbY(n*j+{#>KkjKbxWfjJ)V$kTiSkS38JsM>&rNov%TO^4PDezO^dbv>$K ztMQvLuM8}3Eo!jl@S}SbJXE#dS1VzVL}5KOH-X>kysG8DDgySb*J= zjC1+-+~&!_*m2&{<=p6$hsw1I-?L|ASE;;vWba;Y*ejI=OGDmXUaO3hYUL3=J6qi| zJUmj`Q{Ka?mGbcL(C|oU?@(!EXg9A!4je|X8+8xXSC4IUwqnJywGv`|6*x{A2Cr^s z!Ew589NIfLTj7jpyDNOS%y(D!?k-nKduv{0@5spRy(1%DX=Juiu8nxL z-Fs$t@0s0I-MzO|tND&|`FsD@OKI+(cbw8MZYsTa(>peFIU8Qw)#bds{Nu0u+SIGw zJoy_R>)BY{({pU!|9sk4_c^DY@#5RAeR$$+A9%`dzWx30K0NpKFAx6C2VVb|W4*6< z&qqJ}?r+?2(Xrm!F8R|NU%G$GxhpQOo!lW+Qe z{$(ay`pnB8J@;$PQxCrX$8Kf6|N3jc_JxOU_|#u~^o5UI^6nowaPHxox~{+Ml~3!t zeCJ2b2DcU8^wIh+e5vQ+rN>5A4!nka^yMRuzUGN{RDR>P_Lg69;J@$qgC9FH@EP{1 z*FX317k@qRKL4Tbe)?mDOV4!u&+zkKM*Q~&;f@VVD7z31$=U-jWneBz7${`2qrr|<1}?<;0sx%JCKm%9Ai zi+}H1e>L5E`=$Hez+e08^Z)YZU-^p%`fofw{;LnX;=ljoznpp}zvg3`KKrBZ{Pw#) zchCN=Pk!~_uOIlMYr8f)_@MLYfB2K~-GBbS@9^I^_sY_TUp;lv;+sFb_|cy|b=hr? zee;)IwBd$JKK`n=9sY?|KIdPb`@mP9`ETDnc;-JI{^-E_58ZV9Dc{)q%^UtWe&n_* z_dNEmU;6f@Ul{qnuD|X@GefWc^Ecmn{3$Qk@RVQp`|zQkyZl{W?7ib_58eOp9ao)h ze)2CraO-#XU-$MG^(4+E&wuTYzWLPlL%`wpzP|ar-V36Cy6or&HvZOR@!w87xb>sQ z7Qev%@zaldwDPT=e)m7W>&JicqW6C;>7M@P?-t#^f7--1iz6>*KfC`wg3BJc>B`T1 z@6qoax%rXlBai*vyT5xYd*4+*<~9H6;=QLou=mhguKUFHi--12B`)1T`B!}Je@%Yw)8Dva z(;qza@blgq9DDW5qu%y!e)bQ3;?*~P_0eM2{V#uJ-*5l*2mG%(FZtB(Uef>7?@itC zs(*jm!^eN-IamDAx9+;BC?7LVy3x zGarA?Skt-hGrv_Cy7bU3wQHwGYgdkb^#yO$G`jgTfTnfFFbE%@+yr+)ft-@4+Dmhb%K?_B*;?%-ei)ayPyfu8u~!|(n1 z4;}n+?=@Ha&bhCQ%zW*gmCGw#|N4dJJnJLR_{tT}zT)?O{po-8YbV~?de<{%W*++R zH=lmRt#|#*=PK{}*iT#(Zy5jNcYpKs-Eom;K69b}uje!^|7Ho>{&B_Luxo{h^I-{%YL4(KhP|LI&hm|Stl4hf+=XIzOYFojmvXl{<4N*#e$E!-x z2w~bfDYqVWh&h0)T<{FUgBeG?$JWEM_)(x92|4t#t3i9%alQGg5%qdfUTc}k7wdzo8$Ct6YhdtU0vi#a#uB+?`PF; zzR-&5WAjPUj7J9sVqR%QezH=eH9`$Wr$RM|u|qvj4dTMREgr4(vmi|T8vc3>K4$Dw zg=#p@CQdBwV&%_i?BJBFF&uQ9Esu7IF298^h0XM(K%?f>>$6^E;ewF@5G;bn4*GLG z3|-2gGZlsjJ21XB+BTUSr;A8OL?m+Fqno6g1J1owH{)7R$TTBGq$6QCSLX$oJ3%0; zCOny%9?Gxj=o($Sg&g)D@2;&*PW0y-p<{Qcrrwd0(}H4C zxfPG|csHvCai)R;WZqQpao{_L!H=y0|255K6Yy_Yn+o@$z9I&)&D+G&DNL}dmV?Rh zH845-k>4Qa)90CaMD+^K{ z$b8KK&(jhQGOF2Z4%7#eCLD7kt`~Z68frG1Auqt7;ae+A;LuE(DMJL|fOp0Yg|!Ss zvNVV&EU-F@h6ftWdOQ%ti_L+imtNdj`)*;}tPOaPkQ1#=n*R?$|5*6ds}WyScBbb8INCp;Q}{i_xDiCz)Ho@arP+4yo&Xv>N- z7wuW=UNpzsGiT6~aE*Z!W~+8!HQN#bGli7}4UC!#+A^D=q96Nl8>M0Ev_Qx_36Efq zQ2m`Db<=Oe4T7XHWT40lwMrprH1)DQ7s_lL={0(WA_7XqXjQrCu}Q~Bu-Z}yo4ONW z5V4YKUXXaPP6eAs!vk}TX5pUDSb?AxScQz?B13m&0anz=;IT@NMSe3y$4sA7a)yeT zx{<|enbDU6AvjJ6@Ql zg$6c&?`q!)!)8@xQ=K~w``ax$cj~ ztr9kn@2DRqq$h9RHcI@-j!sOUJT^Xgh`CF`RiH(l0x_y}QREJZCl!m?(!5`pXG?y) z&Sp7q=2hkg3VDgGgne>+>d2v!W#$T)>3}Y-MnPm7WadiW6e_?yn|a8}oVw;Yn{ijB zU3tKUnHwZh_keb@I>g<~U24UNmnbarK<;5KvSeb|WRV+TZZ>{EHp^b-F0BEjTw-oq z&yOi!U38a)TrM+rF^m$vT&#MDw|b+?gDP`j$q&|3V2HUjKA0QmU^S$6Ny4qKECYj< z9zynwtD84r@kr{TwZvDvOc zw_rumNhK(`T?PJw&>?|?< z99#0Dzz^n_dyM3Q9_+Nu-=oG(Eo=o~U1E!`@|2&ze1*!TF=oYLkwGH3+d(Ti zED!rpoQzki5j!m*=;~(nZQr(iTj%yceo05pu^s~l!osu_K8EmD7*mbdw|(0=#_KU} zZ~F<^4MH-(=|q!EH@y)qqP4X!T7qjK2tZwomwt`Jr|PQDMAX;Fc)#1LT6&-S zGN`@`sV}?Kmtpl~xB9Y2eHl?-_Np)ClK!S)mo@ORhF;#)=d$NLkM$%gP0sFT?p?j( z_Z@&-?>p1uvKh&DG+vJIgiV}aU;xZ7wJ2<`WM0X4kYhfqS3x>IU+u-`3RtO%ZF5GS1q{)#a;Xugdcv+nhP!{Gb|rsiMKg!ITH3LWN2WuBOX_<-0F z6p}2XX#l_AY7iq+2SOlehV7G0J`v$)4Q2NOcJ%lWCMG&55d5GPvR+rrsi7{>SZZRcR;a1Skejb@!R z19rzLCVUiPAOePi{xPeyuPc=HHD0X_E>>ed@NCWNH&>QP^BR5IGHG5HL-QKW*SxkF z5YW0l^Fz_P*3zhOb1rnKACwve-|a%32Z>jVTG{!0kh$SP&if(eE-pwNWk*Ue!(5xW zm>1Y)^W-UG=}c=XQ0eTQG^lj0jw)0-TfPpJ&Xcc1rSq&`i^`N+LygMhUWXo)DY0%v zDpT(N*QEZlG$}3rjRN$;Q>300suTp8@b&z!(4^L->ZIpX@{`tcYNhkEikAJ?D@ddD za89WM!iLe<77l&Phaf30&cCel@i+GI-)gOx|KWMfRw&+E^ zX!Sg22-L)yUK|S>ViK|zR)>r+se=Z5=`gjQ^}vWA(sr;VzO!COY0(!3X2>Fr-AKlx zD2!Nx$FSQ-DmA(o8^_T!DH(sj5BES(!5{ithe{{Xw$DOupZO;-qWLX z9$0T?Sb>%MX8K@N8qj7XK*2K_b1;RXT|2x|M~DKIbB5NPh~Xtfj9EVC2V}-NPm&C1 znyiB)IW3@N`vo+;%-U#~Z8TZ=PGk3n8zaw{>5duJZ5#6>(FN5NJ27{sDX=p=>f)k{ z1-yJ{xK;UVYmT`zj7C|Hf|AM?@uU^mOdx?+odxzJ^MdRQSZ^4$BMGHwkh~_0|464~ zQS;sSeK%edljQ`Ji`+XH4XP51G_9cSFYx+`ls93M2l#sP$&)8o#P3D8w76I-rmCrV z3;fj7QRc$2XLMjd$EX-B4aDnnCwZfZNLH-Z5SA6e{;bG) zR7+qQQAm@Z_OWFFg9vCNq^6*R9|mk52d)Dtb9S&7dU0XVtGD$^e06&H?x5p-m%iuTV_DD**tlEmmG&WW$mP+NAsg^08(U^^$P4N%N<@t%Rd4aIP z0Epv^Nyy^)aEY~=EGE-Z#F-xlJ0T<^ufmz4NF@xaKG9fEAG01NNI6qrDkIZg5)mg= zLz?jtGQQ4om|dyE6gb&&FcMahmRGN@sF_aWkbF`>02@}4jZ^})Z792jgWQbyPYp^K z`g;Vp{bOvnq%8L;1D+kst0g>Q!zFetD;3MJuyn?lQ+LK}mh*rOvzUVxalhO-6a0>; zx*i5|j0a(BZr=1Y9unV51TgoQnPe&$D`X$Frg|^2CI(w#5G<@D1k1HcmrS)Hn-)GM z6~=STWj3&>wz_(v9{*Gx++h> zjyL4l*i%t`-}Y@ggb$=Kzrtno7&aE%BPXW|V3fjC8C-(C-LVS$_4e4HF+&m?ifK|o z#n9ZbIN#p%9`2uFk#=%Sg9M}ghmgS(sy=aq|Hr0U`1YR?&w7P@-D%@zh>+5q1 zO3yp*Qy;ACviUGh)L_t>Tt}?`3y-La$cVJ6uxL9iWF4K6Ot!aNEbkpGmPhs$2TAJDiF)C8oDpkuU{N_7?>+DuTCP4+ ze+`MZYarhKIDfe+#oHjn+cP%rfbB~yFeWJWVsg6&JE2~7Oogq4M>mCDRHfIjG?DgX zC9u<{*=W;?V$NI@VhCRFJeozhfjOSIY-T27Lo!ux8QUULfqI<_UM6;cZ8bow&oi*) z%RI<%==J9KfN()x8~%xfxl_&Rw6OZQ*bJ)q0k6`GCap}OHg;Okro9T%Bw+1`R@COt zm>_cse6I|IRoGA7!mZftJ11;NV}qqqBW4Y6d2HA=)e&O?592<1y2tc1>#@2~Ab|~x zRkMJ$8BFsVCY&w{wJ<73A8~R<4_mNE&cXVrjEt%gL#sAIE`+@(I!IxDC&>Nn>^WMS zN>XPN-B{?f?&w)}fv>ouuDg%9WV5C3=l03sP)~Y$QpF4VU5h$yUmmyQusLyYhCm&_ zOE%00-OeRq5RpM`Y&e%xmi4aJJ%l|iw+}q9gPk5tLNAKE6=rBMCTIflkD>{_pJV5! z5mp)3#hVT^CJJuf)}f76zG#|x*2Ogv0k5ORn1WWi`v^fJSbDRaV2bC+nNCzvhV-!% zO@yto@7(rnsX>scai6ps{@ImEr@Tz*l;e|y7_ruDrSkRv?bRfG-}`_t7G4YKdr`jh z-J$?M{3ciKkV5qMG!r4*goS4m(buRRwS#;hY_3GO1C8}o`q*HpG+Y=g4en+X_lSwW zM>kUVqhi$BFB}L_7Ry0D;<2u$A4{{?4}-BiMX{5uvxv~y1sMMNg%J>w!;T$rYaqkC zS68Ab9+f_d2;3%*?%nW;8DX5ygF##v1y8zWV=KRKiZB#JgM_IZ>PtN#_@u*XswvAO#C+;R9i#5eCBEO929& ze+Z~(M+oFO?AN);QF#6#Wqixz3g&o38!qE?&~yr424Mwm6nm`ksC)n)hH$Ih5-C&tzQ zLgB;QJ{*0ZO@a#sFveW3UU&O&n!-lF$U(c+vL&`OgtJc=hz%QRxYf5{^8KvTrz9io z&_P3UCupw+N|Xg2UN&MN7w!yQkr?%ki{eoOEmfa*!%+_aioT)MD zy_RakrA+M$>RrJUmD)D4(xBi0Wba%NRj>h@PjhSLsTpQhFb(&E*xh5SY!jO?xy$KJ zhYh*ij4kg7d$Dx1awTjt0ufX%*!P=u##a>qhG#k?(pfkp%E^e(&dlDB&0?ms z5jbt1U!&wKMy?v#>R^-0Q;1 zrYtFuYb%%43(`8l1?vMaSLF^Sg^un5wvH)OFc``F9}Mq9(6o_Tv#2FzaJ>&)J}k*) z^?{nzER!v`^`?~r$K-&Z(JYlFl_XvsHp7wfVz5vPN#?LxCodKDST}(zV?ByK zjynWTM?hl=#sy=fnk!L~ZN3nc6eLYJ3#WVrm1ZF+5p}Oi)h8wq;Go&Pp#c(-z#3a6WQ_5Mo+V=Cry)fOE7!`g_TR0ZXEm z(5Y8^U%b+_7imhTTlE9;tQ;Fos(dDrV%_K;82j zZ$qWH!+=W}oijY*o(U#)E^<~41I{?^_aINsej0T_xWp!QHdx|Eyo!JX_)+H`4)qsV zU*DPFBsu8nm?D96Se)hca0y4iaXtaj8={6+FN)L8a4N*OBbUGvUCOlgRAt(uMc{!} zoP-VAy7!M){~THO9(}pkTN#FRFXz4zY#m=>!N56}uWjG9BMQT$*a%vcB7y_9nsgw( z!?J%B6N9}R%edy{DwJ+<)>{~$OZo1e^%m}qV(-RssW?RckCcne)+`PIXy4#9vciHa zZpTZ31Q?>{?yD3%_4%QU{$$hiW#YuO`i{%7Ho?tZkiD4n^@O?y4iOyp}zgf z9oqp$b@RAD3F1Y(K{GpX9ggt zVnQI_2;&59zj8wguIBRIk%_=hG&8atim2H_ zBroN4a}~ucdK<&QIWDjMDC{@uRa%_(wWCuH=ZFc9Bc=je&;2lnSugHU=x1~tf;jS% za0b(Ps|knQJ{5(eg>y|_%$9h)UIe-m@N-8Hnh0lr8a$}7R*aP|ugr(6Kqs2SNf1E? zhKPgQtFm6@Qyj&WB3}xlMzP8%7}&tULpPl|Qk+j3^&M2SAd2>(LN!O!!#V8F(F~D< zO}`S4i8-@h)Fv7>*5HjWT1lBrRiLR;&AG^{@)RGn#5;XgDET*w4YZIHPu1@SLxe43 z?j6UcZap$}{L~2uAk)Qk`_2&&JpW{fovUhSwm;l`Oz$k)IS*6>dxEZc3Nz&D00ljj zK|%@%uk*RcYnYl($~Py&1s+UPnL9GHw=}YQWN2{L==k`Np}VW)`P%JMgOj_PN5HN0zAX=vB3 zVUoY>lsdkKGZkP38(A9qo?&O|H4OQ=C~P&+x7mtM&LemVsvat-3cy;b)wu9Ip<@{H z-Xa}36oLdyPl3fK-LJ;17aU6U;AeLqC>%!OI2@L(agiMX76{l<50`*Hl_m3;ys?$V zexp@Syns`PrD7*S#V2L$q~cm6g2tOAqIfr49^AESWN@UkN4zMPM)vI8Ju)&#UT4q= zcA)6+;ND$(hW8BZB5LH!ZK#o&LCC%lqOG!drdAg_6?dSd1bTu*5Rdbl`GJ0%LfUG%UF zoNUT^O~2?j{n|<~jOOGH%Z?ptxhyx3i|j-g$3D)((r$h{in(&O&im<{OaXgi{R~Ga z{a~&iY{u(h6H%s23xrp~0kI=(_M;(dw2qLuZH~0Be%8#^EwsCS6ckX82Nli=3h5BP zyqLKmZYJ_;D=uleC}qEcYR7shijwF6+UpbRlW8$gP9lq`Vjt_VQ}*>08J#;0WmrCg z0>YaudVZaFg<@FI^>ML89mkJgqa6@Oltc}zSHw<=*$Zo7RN;acFQgHkex`Yn&I8T_ zSK+T$U-DMe5olFkKlJ`Ud4$LcY4TJwVugILx!`cvmKG8qnd#z#d=YLU6G5fks`7~w zij5T~X1bTCYdXoEbu0qp13BTv@lqI7nR|lA3tlu#a+_G`@W~UhCU(0#&y1i@avdOW znDT;Z*f>Z5uy7zPoqDQS54|c)r*VzWM0#{Do!Q`SQI6Cw6M$t=9G&i&sPZ836U^Cp z@X-Y3wy#+rd$J{_c~HH{4-n}qBRxd5NI$ep2a-Cb+j@EDTsg|0SSjNQU#~9Ct17ky znJ|s{H5PM01t3oIi0|S0GEhlK_I_fo;pC$sYrA@DGoS;)$kDNg8e3Vc zs1PMqjdq8o7bd;Ho8wW3%8+H!3sS8)InUX_R<#p;lw`M_D2(k*nuR&BdOxixy+X{J z9&V_sGQ^1p=AaJ=@2jvTUy-P@VBmsGq3Rs7o`0|0~17)@!G@q!grA+w5FqynLw$81}6a2RsM7{o!9nm<;&v~J3EA^5DRx3< zl#O!-W20dp&fXr1B4~`F@fn2RCL|X+LdV6HwA|lQ)UvI(9gM)_X(VVadQ=<5)0@q* z*C?Q)kl3XBi;ZPg^ZYumjtZxPLlK#TcaTwz{F(?43TNn^395XN=HW5cBfo;b+VV`b zL>vi`P5wg8obFnU=E9%oe)q1lElFBhrcNC@6Wwqouwr7iksp*@mH3j~74_xM6!E88 zfgB)2qc(&)&~?eLCiAS}MGHJ)XIu;Ee3}b8sL*g@e-2K4OPs_3h0>Jf4>KH7K?6y&j@A5SSl#Fq zg)fjV(4C?}Epqgbs`<;38h)_05WL^L)>VQlGeEHC(#hG+RAT%3>9=r%Y)9BVdRWG_ z$&SVErz+u`e9p{`f|0=)X_GCw78-<#EfmW^RpCBnbK$*nnF6HDr<+8ESB2R3Sqq$R#5AOZOuFh zH+9wRVzn?HRE>#188Q3-rXnq=pz4!- zyaqf$!1!``%>*09%(9-75@`Ka)^vmY(QuB8?Gl!CwgXlQxjkUAPsFsbAm3Za-QoF3 zhomDsInkP(5a=qZ9pTBieUu~vDw}37ki2jARh26R1e!~Bh)vB-@kJkQ_f{P!GCR#9 z->V;MA;4TV?RFlG!(fwwhLH7sFekZ14hXAcI=wx?lt{Jbrj}o?qF3$tVd^-xZWIoR zZ1#a93%)#IF1p1qv#CW)8)+XETNIgoPrW`~ueOo&1df{B%2#ej=%wi-jBFmY>?js` zM|dI<+Gu?!u6Rv;IE<$F+@WQw2xeaLRIuJ1sBG8aV2c8@K|mTQpb#xN&fih0&3SgWXl`iQ36| z9vl*0?&{^__?=dk$qD%9skED04KKhH2YaCaZ4xKq!>xLK<$wqoz;QBAm79nU9-GF| zy*jq*QwbzBR)R|ION#iI2Bh*&@t7yalJw}sXzx%Hk~-ptLR9wgI= z%>|a#io_tsf(6t{J{T?quzuvHf>zT1RW&eA1em@sCp0a9=H*n1@kksB*A*c;q41`s zN$u7v*AIS7hbM6;a2B!RdMK8K@kq1gWb-nssF;+@oWNL*0wA}idrCNm&?BprXAi`$ zKEx_+ zX#?VL-a3vR!C3pg6ke z7N+b3*`$oAAe$_Q?ct?1>P*c_XFQQcWU`1SH%{7$No!sDy)X&Ly4sTD@avRp852@S zr1e*;VQFKA93kmi(^+!Ua?63AESrZ_sbwqD{3Iq3wFRz)ij4ISd#6yglzOc~*O;uf z{84!^B5XWZZ;vV{&pcP@*p*VUs6e{GvTf;-Mvw|Jqn>mzcDlzRI_pWNDxhw!%iKPf z$+bbMewAl^fEa}j(d5+8s!1PGW@>wgvl1H;QPU6HJmq5deDz$*BfB#}?PZ@?0bB$% z(9?QITd8@Ia87U+`;d)}a;$oi>``wK8wj#LW5avSF^FUgc zvIRj~$(Rg^g@7!IR&g=^lg&{}inhWkN@UHC8cSZJ8BgmER9;Jyw(`=!H?O?Ve1&>J zn*d|XZTQW2meaxeOo|sZGTmtnP-APg)<1dM5BhX3J@%xjo^~;4Mr;AY;tOjI)g-?_+bs->#Fcx=f23J~;)lBT! zN!>_pUmHEd*qXHlqFA9#Q6ijoupT6sa`aY}u_aeF!JbB~{6=N5UfNT!{o39>FxpMt z27*aF;m_9nitx_mF_baTSV1-BHPz#Gs@gD2zqBpL22#p4ZB2lQej5q39rATb+?WAn*R+edxIqb9t)s5-pcH;B@Czxb zupg&ck0Fu{M$y{?GzW!L)={@Z@gn?W2+(?KuY^J3Rg!g7 zen8~3>$VH$RLz)svlmq{WsGJiV$%^agSMMTY3Xkdn|yL+3uETcWz}{vMXp$@S{iTY zKec&B#dN%u{H{Z0Gx*wj%@rn$R4#O`Ad%@BwkrJ8d@jPh7{uCG12hyRG$AsRg{og* zqCn-hu(wAlwT1m|P=}BFIv4~f$YNj;m&y?-^1vB_$ZyIz-^MDrgU8_agGEn5%VH-v zA|n9Q1Sc0buAVQIEmYCm^mzsXXeReQIoRJ?Wos5gSJd2bXa zt;MC~l^2!DgG0N9ckdb5E20+(x=2Hmg_?^$b`Qf^7*C5>7;>A~d>*Ux7i;qD1%Z8v4%v1?)>5%Sa`0LU#(UZ_Zw zHVn%=s5qt<>4p7n)5DDe#Q9^)^$|Z6*1omjr=m3#{pwf_#2K~rCVHt1;8_tBt{%?$ z(2uA_YZU;0zRY5QDaJ=vnk`n-lghVFhesB>uS|rRup<>(F-50vuRVAXgfa_{6cAH| zV3rBG@Q^Mp)Qa>`%*m{`#ICb=d{B&6qlD|tWaDaL63w)c;=B|pwx&K2RC$m{RahHn zmCk)4;yCHu&e1vtdF4QYjV6NU2MxE#wE#8BYS56$A*rofWO>M7a#5WL$=sHQK_Tny z5#X<7gHrxdRJ0z6c#*k<{X%aeM8!^*7(W8LlPgVr9DyelNB4-1Ni8mp@&M?_fOB~{ zBmps_*#s3#%6eoi5?KkGwg+Vj;tC>OZ^{s&hxo00rC$)*55{Emrmv(Sp+~J})R*>o zf@YdDf(Vn$dT!+_nv}SjOHXA+#SsL^GQGe`^}==33xddUFD+v@$+S66qEw5|rz!2k zu5-+H=qyEOg^Jo`)V+L~jZ&aMNz7jN3=k3VwcMc9Zjh1!gW_dd%qWLo29B!&;o(uj zOWHqIK|!qX=*qe83kATz;80>);~-H<^#U%dR63)*vvVF@(Z=;6;x@h4b_5J!aZRZl zU~E4dDOu_lt$yU)rXov;?b#zZk$eOck!RYvm)a#pwb~#PgF%Vo9jv>%n>@Ca3#v8 z;SssQ85wSEi)lHVimiY%(+#h($b)Ja#S~cqM`1LJ^>nI+^#Ffx7_4OJ8Iw#FxH{3Z z@N$I#)EMy<7u!+&bW`cFFL9o7YL}~Ht)f0sT+;ky41h}_f{Jh)QqEOy6OqR!s;PK{ z;&hR68o?t&OWJU4e1@hf93Bdzm*| zQTH5_>7s@~YcE)YEt?DFP1No=$%@u6>(q_W3dRKjK~O*j)@;G@%O+09STR)@n*obriyr0il5@L-VQaBp zV2Ar=y^13*lrpYz>7gwXQNsnmM1za2@-)d20(QSz`yO&UT{!l-S4mN6V^@p^930Wv z3^i>bu@-mLRQQhnSF>0C?J0&L7sg*}&_*+uVh*8&ncFvEaOr}9m2vvtc>LHPn$gC#EU~4a`8tRlUg3i zbg>u_8WmY|)Z$R4PdB{^IdE$+Emt`de9X)aZL33KbTu<5%aM2~mi}1wLPJ$)&@Sm+ zdAC}ii6#gXkhQH6(y~=KYgMN-T~J5b_(3<(n|hgs)FN|7C1(&nWJ~rc=mjR78G5{c<{sm>E6HOflc z73-E`t%l{2N@N2Vx8#Zzi^36)&0$Pn*b5inD7g;h`TN0i3gSNE$1b z7=Q#Qa*U3W8P$z?Ta(%?SGR-=pi0VEU9I3zmXejp+DgysJf%Xl^&H~y_{oYz^NcK@ zW2b3pk&ynRhHDY;0oy4YDUd5`Vgy^rE4jP2dC zPwDAndx!RknQUxtSxq`h6Yq7;ly5ps`?3V7u)n7a8PcFv^c5LO4f46L+52cXN9H(1 zQAXrp?)6f)-;dA41v4Ul|ifa ziKUhOAZ{93_dP?33)2@Bt+ROkEkjc2%5dPCcMO>Ut?n1nW8P3%I?YMDnccCO>a6Q^ z5Fy1}Wt6UFEPcC(VE_vILtJYK2oW6A0-_HJi;2|pkqEaBW!(82^-BiPk29T_%TJ~6`3`PV0_b|YC+P0*>$NkS=|`Ou_OTh zt%ns>A-2U{X{IyAU2DMW@u}72^=KbbNf7R=!j}TE%TvliHc`YXPi3+2u#Re5wgiNI zKuW4q-pO%OCRcHpQegy4zH~eQVS&yQ5Q;!B_98HfxFZd}tg*U2v8lL+7Knn(I2BK; zG1^#H&CLi)ocL{Wu>z3CD8y`TZ=tMh0w%NZJolry`Kp_5(!wRK2J$Le%b;r+etU0K2A-hH}M*gJC_>>+YB)3H0OnQeV@ z1B(;Hm2CxDtv0>UK01Z=sP1+|WzzA`nv?7W0!~q^-6X98u#{G#rsk~VBBw;E+oHZC zj6iT5`iBOd(LW}=1R?9RGn+PiD5Hj&D^sdLdh(Z=45$NRLkHUQTG)^Ehs+#U;A15M4&Q?;-aSe_M%ltw@c3g;+msdlc`N2!cZ zJ_Y8~MCi4O!YPp|R~j9ARt4Wu{)5?mU3FU_y%(TO(vSdTXxD35Rll1u_)Gh|+K__6 zKOy{)%a|bu1lY_rzFR(eFzBznWg_&NR6I2Tn&VU=dq-+Q5ckB-A|SQlXwiqq_!5@g zVlPbY;W1{2Ao(752+>VtnUiIr5_vLSh8H!;?ggAX0~gD?LbX>>YOJ*fn99~?RKQfh zbu0{&O*>VtO;1gw%D`&|2jlRT%9j=qlB(@X&r}(uQK=&|sl;s9FU0mTSagc+WpcDd z@G?n~AebH@;g}%9S*jI{R0{Nr zBzm5FWEJ--`L0zcr3|kg&RfN_&b1<#HkgI~c$IYifG?@LrG#Zi;9vgFfo8s;z&%V0yVXb#hd5?5VdYXsOHq+P$3?sIKrHX zveqmhQ^f&U9Ja$GEh(Bk4J<^r)~R|j130zCA(mJYy3S}v_({1)$&7Gz>9ACs=aq%H z)rgDG(@C?+7Xzk)Oy|noB&=;n2GCro0E#7AD^g*y;FTvkK<-Q!^iMwqe)SWcg1y`ho#|?_Nf0I0<+tZ*tG#q zj4EldN{?haa=Ku>OeqlxkBN{Nsa+*~ZKbeb${}WH-ICv?!&X$`$2fwoNRCxHvAKmb zb0SCG!fBb$)y1{<_qu1!%o20zcHw}g*Wh?biC9q@QD(JB!p)LGRVS$-e`*r^U#oF(QK{%|Y1_=7MxB-2=Qe__8XZaPxu3Ol#V5&{!*K}ffItfMjgxc&*w%M^E6%~#@) zOK-j7f=6Pl`bEnQd6}ZU4J_J+CnG0ewuX4ZC5(mr>CPo)>N655JsqmNk~Z)IF0>+X zICzYeu!AXA8JV1|s9uQaGDzZ3nb(q1^qgj+l`vSuf+&f+AjaJ{V~y%CwBva$PZ!mp zZQGn7LpcBT5w>bZ0m z=F`hkZKz@U)4OC;%W6uNqLA#UG&q;;0)@QH^(4g8VZ>gT_9Y(OZ2cwQ&0VwWOeps;7Ms03hSaepeZDy7Sf019F={0@9bk^j-^YOB#$ zDdJ3IhWLXc z)Xu6tT^~%5r{{Q)JcPp_96LBJtm%9_By{t ziRjS`S0n4TBq3{W#abi8lCN^*syo*Bz^f%6j!x{70WsDPx2BD$<lSU*MLt zNH2A8bCWgmi*A&=sEY`?&w7=kNIcJHy#QgQclOBdJNuYgrI>vjYK_ocjU69Pwzaf_ z#RJRm*J0tIR3m99#8nm0ykHAeOpZX;z3!R8A!U@4l5CV^X6m$5vLWWmrB0#=#~Wjg zTZQOGWNn5MgjHN@QC8_xVWdz)K{@TuhSimRMRwW~fm=WHs(kWxp5?T2uoA-b*pfJn zn>IR7>mfBVD+$pAD_i#%vNV0f4zbAx<`qZW?YHizJ0p(i>wP0(Nkk{ksN1_z$aa_v z4lUy{Q#ho^{R5EFR-4idv&E7h=XHy26ES^O7J)V$q&ixg z7Bb4Fd~eH-cy;RdbSDSAj>1G=r>FKr`bnO^IZwvHHOnqJ$a=EdDDX3~*NG;>@oDCk ziX|+eNm6!RN*k6)$##-LB*XI<+#UjL4N3cEizkIyk-7bBY2Jr~i^&zX!4o#S!dAi- zB4);kR~M>!v4fQAGzo~xGQD$f5=3g>p;|}ZSUUi!d-RZ!wM+_U$Agn8+rHV!Im|uW z3}*#BQN4I@GGz!g^M?+QW_BeC`+FoH*iXlpi`!46KWcuij+PUWJr>qI`g=cI*$7+1 zde(5z+J`OkO=b|{ zf%J@EMt{3X)Oq>eOFSP&sF8uQj+DXbJQOKnS)qa|79gayKUr%)W9^r#8vx9es!FX{;Y!K6glp82^jMvu&Jq*cm ziao?E5j*W#?^hOFYv0-y8wRzu`8iEfbs0~US0e7kyeh1$KuEJ0s1j&1(r=$c86KPoe#8_?!~j_rfw7dL5TAdElqFf-pHjWCOGL^rW_uu z0U%j~;P@xFLliFm(qZ*~ciE1FyV$vS&O+1FQ z)(XoM#s!2lxr<&C18#zb-|7zLgj1gB1CQ=t$|bkmvg(OJqN93($21@%Z%pY`njjf4 zk7X>5CM2zCjp(qr@q*e$Qc~tjS`mx^- zu!t8hg{QI@wIPRRQsIA7C-=?Jrri)DS>)`JE3KeI{U2Y)&5PCCYyV&Xy}kYhT@8e|UoX!9}=t&L@*Y|A8Sp+L!qUODJiVc7N)UV%}hAeJ;*KFE6sWLt{N z9T2JnXM+XMH24YMW7rkm27o*m|KGyL3U|?uhdGEjw=jFY7MoN7&-l)q&kHD6% z)CJjW5tNe*%O=>97`Jk?%8VzxB;g{6cP1!sMnTXfY5}@O6;yFpefS^&3q{M*A{4Zx zc*rW{9z-U5Xa+vr8zF);V-$8mhG4bfqGQ4;TqvKKUmzDmBeWq}{4{2G@mu0RN}4jk zixh>}IavAXd`$Te>122d2{x4HAWnnPOrK>h@y_o*(&kj~bepT;;v&xqP_jMOa;XIH0GpF@koERZfdOQ+a?oz> z$wqUK?FY?DX@XFpLCiN2ks|B4$q&pjNHLwx=oZsTitv^YjUfaS9jVS48VRI5P~r?L zWHac%(|YBNCxee{G4)(Z*qehxxnj#KV)U6V!H}Jg?+`Pzjlx1Yx`Tv*6G*5-G+zv8 zt1H_?4eiW*-}e z!wXs2qplir3_a!)S`n z9a=WMCWfgPQaPj8wn?dpw5_45p4bx=fEls-aaZy5%$c6vzWc7d?uN7H&YV%Ijb(fJ zPY?`pr=D<-qgswn%#t)va7=*oLi|#4nUXsV73zP{y^_mQ!-dKoTJ{rh>0U-`BH{S0 zc@!7)qWBT3MD`Rwt@7DOep%H)@@@L095Js%1%9GlJyw^c3n^#TLPGF}aCG2f1D_aI zNHW5@#Bf)~7<1`NwKdzguyWI_ZA^M2i8Yuj{d1@^g(Bk1e!`_oCsmx83p4e1_hNAp zM(lp(-qm{_r0soTuSs8A&%GF16tGv7*HOWo-fq&3TIELJG;x&wp&h%2GQV(^U zU)fiSRWIS}G){xyn^G`TDve`G#kXu~HLTUF>y+J6|E~Vw{yqI8{pFIn=~aQ6oW$gz zLQ9HjdwU2(VgF#C`99Q_sfG$tHKcq_PU>`G0RifM3Sm7^#Q()&n}aJcbQ`{V`pf11 za{o~OuKwK`Uz+1Ev_!qVGGL~=yzB*h){B~vx6%q)_0}A3R+4a$SH_PWx@mms#MJon zPaQjT^wg0^bp}*Ct_HI& z`xO|#ipY}{fjXRoo_5;KPouP%*9pb8shc!Yz&hb2;)ZP{>vES=dg2Cl77F5Mynyda<5=Xdr=+nBwArwk<5uZLURi-rtAf4gH#2+ z?-9r}yydZSNlZp~hsm!|wE zRR37Ip5PSJjdOzvS^KJNm8QCb&Jk*4VX@+lHbH4gfgGA`NGk7!cWBdo3c z0Cj|?BZ8)M1fv01n@8qIgCFqT;qpl}S|xN0Se#Oj1Qr1SKs+ z?T#@G3if}EgJ224Rbe22;^fL%G2Ydg4heGAP5(wH4v?&djo9e2wpjBqNy`&s-jdOb z&VK}bpB#jkOM-dS07!9;)3#a28>gVl1Jvr`b!vloJH{Hx~^(q)}TgK5H@F9xtwe?4^wd5svj@d zGiqE9ld*(=VW(bxl~SG9$uiv?7Bfm&XsDtCRVD$MCI?ZOb~nT%1QC}iW$%-ljcRPa z3S@ko85jPF{fr0RY(0AnS5!zzoQXP#o_MHtJ82{WZ^Kun`U4U7$aN1?!ch{CL?C2s zmWs*CB|L>ayOWEGKoNmG^2tmf3Jq_$fXHpIFDhrO)E-h2CSJYJ;EgcC9TEd<$SfRE zbAK8qA*5w5S?x`^C9KlqoH3+;sexnk1x<66q;)_s(xAY~0hCo<>9ycEA;0Ja!o}Jg zlMmPQqBY@9dJAwm(=ty^GXR?s*Labg?Q@Y4PKRIyayrz2QwZjwV&;FZF0PlO>EB|f z{C264CoC0&REfdBIHo!|MH@^iFxN@3kWu^A>^0Fv9i=lEn1qAXa;b^~GszVxPBaNN z7a9_!cre>vQlL|-Nq1=%=Auc8c7_c_OFD}6@jFRm3N|albx^Igm9|P(E9hT{q@*q| zo}4(ADt!Gq3(LELVX5;f3IG3YTr%B4brEJpJ)2G_WJZp9FD5lv>~Ivy`&jZW36h!a z@KbZKwkIk`baAu_!$vBX4c*8V-O~a&!9FsGH4qgyt?RvG*@P4@EJC58n;mM&oC22< zA?96a)Xgogm>D9n-F&Mzl4RKucKa|77d09nhMExwip-iVijB%x+$St|fSPr$A_zXy zhwSuPmezaFXpW+jy#*ukp<<($r<9;91JHoZ>3*r`Wci2aqB=uJgZr5~Fd#)AwN$*e z?_*NTCsL4|xdSenk!u?vDbsS5q-qMR!qgJKWlbMSoLL2;R+(f@vop3LIfgpUx*|*!ZHhdCy)Zpm8T!+$k6Jp|!&0t}8`%98uyN!Z@v{81BQ1 zN3WbX6G6;1!6HR@xb3XkhCqsFfCjXyYyt>?UgC*X5emPhkI3`23}~gX)B5OQrE(r( zk@kn$BD%%!13zZ;`EJCd3RJZtYQQ!FY#cDIt_Cn#ShO~_5qW0rRm#$!aUKwK7P<69 zTcyN}mHAUW{zg;G1DkkesV3hI3Z*9}4f;e>A|7!cPD`Al*%*>tDk0>78Z4>m(V8VP z1Np7irc%LUV2yw>1_@l;B@*f7i9{QGH8*SdVotjtsk_<*cItveqOAqeFQ|xH<;lO2 z)^3xnQ0S!#vPlLXBm@RCu%GRLT<^G9)KX(wR*z6iVm!sO zSEPDcLjEs9HRm((;Bo*;3>6t%o=WeV{O#YlhZSzyr>ZWYn8I6qzwjChX{-mTkKc%>3X%7-67{P1n3!oDNl%zA5DuQWq%ZSV_T zHw(`Yl)v!qDF-x6G{q8|0W;^zSL-yD!$ zIA5({s59xzjROGTbJREXw29FCHLlSO=RRidFQ$Cao(W5qcLPH4w))lEcIi#|-yD zN?9TwZlz@IsgQV0KTg3p8P92~-l#0S2hbao04Z|%)9J&c5#tr4e)yQC^$!QroQBt@TMvVbMTEY<3K6V9UEQ=k-2(WaAo^!>CiAjhoKWf?)|Iy0ZCs$N}gEWQo=kpV@oiFL&#ILF`@AAZp^@l)7 z@TqhFe8~J@$IS_0m^@EHK3fel83=5&zIf6#$1xN7_3dUAm_rC5Bp0a1J@(AXv0PaS z@`f~%mc7*@UE;H)T)D0tSF^$1zJSXMmX&3uFgyYyhJaqlqnTBLs9KaTzFCGNS6Z=3 zt}?Ds4~Fox1B~YB147jPfORwu-Fs{)F#@|7awu-w1u|?@-T7G9uCDQCYI>4U*(CkFK2kdwKZCraz~b~G&AWstR=Nn$qDy`6KkW1-nEJT z?nFO(WUGL7PO}RtJ_3Ov!|_DV+QdMV8!f>-jWv#8>RERGV4|lxkX%C_%(K946Gls2udA%Kpes7qWyj3ht zs$eiC6^SPXyjjTV6idVLL~nnh*Bez1dgaje%B|*%Y)&m(c~{Hos$*pN{PgxG`n@q> z$Y{gNs=8U$^Hxy?vOUr7p#?15>;ifYW8L+1BnCV{@|vC1Rm%n!N@~imQ+c_mwTXU@ zWN1-aPgj=fNDOocoB>mk5Ymz8_2>%ts|xYERKpxoi#h^D>9@Bd(X&=G0w!-#BkhS^ zZ&C_Y5{RpqvrHM-_QZgPAnriJM^)aWJ1N6)EE|^(OwM4UCocMSQnr=P`>OUzRSQO5 zpHz#Q?Sf++HKU~@DEd1S10IpHvhXDrg&unn1N~l)w9RqD1oJg)l48lV%xp<&zPHB* zN>Q`N^13t%Y37}xuBUQpQp@KpOU83N(Jzh06%^V(l<4(lo0(|^Nl+>Pt|%a+b9qvw zF{|VyHV6y>^Z^e>Y+?ts+P`VB^Gk@NJ(o z&9^K2@~au6__leuWzfNS3M`ItDPpc)5La`NC9XcrbWb_$C~Y+ zfOXP3owQCTtCbkQQ+v`9BC(oKtW4-3xn7kaBs(aJB4g~1D4Q91n8I!=D&?E5r10MYXq1$2CyTnM1dEx5da(wbEbG64{ZX^IDaJ88PbNGfmWri;=N zeG-$#5keK8zUrVgSwJdWn9ih`%Gs7_?5+sKh3l{aVumKl!2-C0M1)*yhueyH-R((x zz85bgnp=y5czttJQkeZ$m2_dS3yUgMnkWo73m$lYAeIA4yejopDeWxsARi?XpEtg& z5X-_%Q3c*KnQl>`GX!dB?siyDw<^h!D?%**%GX@TB= zy0z<5!V^7Rewzbu(@Pm6;C7QGqgKYNty7PumZ@ynI*4NM;JPge0HZKiQ3E*9)8(Pu zzu-9wWlP3@MP`-KxW=d@n2IzE%caIT<2UNt6@T?&DVaA?s+LaMx&y}ixa5qYZ>$xR z%UHuq7n;nVrFpBsAP$0shw@O^$mC9R-)(CtJp)`El%d!bZ=C^yF94P*@Wcs>q+JJI z&uI!Cg7A?hdj*5;2seVd0Ukwqsy!~Ip+yB%qX{XJZNpUJz^Hr>iu zyjOtv!;l-GajJO_9hE(d=x)wRdu=dx6s!##1$!nDE}3aPW0-mx5rZt9ZEUD6hrv*c zvD6Arl)l_*mo2^m!2=Cz)i0f}M102Tt6ll*ls={Q6@tr&wU!Mt#KXN)*-TF{)cQT@ z(1>`5bjdGI*tEh*cv5#ziD8voHD%|yLE%zt5hs(y4EOoyY4UR5X$|t%aEq9Z<}k#m z=tFr*lx*SlH*(u-8ml!CQ%(X%JK zPJxRPBx`nOg1?zpAI4ys=%Zu)#2#6KB-PN}%)2U)EQndaN^nKYUavAg2bG6>Y!D}# zGI0tue|D`ji{8O^DB#x*JlN#6f&Vs|Q;k^psFp@t%gRR(ZB@dVOEiPQ$kUFi7Bx2~ zdG~l9Va+AJu|wJ0qG*nak2r9oOOfSqO$itjXMllF@&Px8&3m>hO&O%a9eYJ&5 zW6ARRZw|`?1;mJb&QEsRWfG#+1Dvj#XGCyHxCO8;nh#e7iN_V;u|PQRm+X9BvrNM< zb|hf91e2Pp4y~2egRoXvd)QL|ybode=%Efi6;nv303Q^xxbxDaNcF%?=5{%c%aluL zmOObLFF82DB1&oDZFauJquplVz@X*B7(NA6J{)pZA#rHQ!$c=@<5MY)C`uD^nIRy= zr6I&#kFQ9lPR3W#*0{+7d4NMi>X8^1Hlrm)rD+hhgSE?E$#Z_fQn}O+WJ6TMsx_<% zKQ=*LD8UTUHadmiP|IOF{6O;vXHL!;+& zX#Qv`pU`YPj!_o_ z?eXre9z>ADXgRk;0h~rq=F^D%aX=0|V#Xi&D7dPW0nC>kPPc$=b@h>g3nKKKiO#8H zYQ>$a8hvr<@+p26&R@zLjw{1v*|04W;#w-Hysp`8$~Fi5xiBa8!)BRTykhMdxsUkiI6488k&gB|snkEP+Z7F1eV>z?pPhy$})8fU1L< zJyDZV-krzwE1Q8$pk^}y;KPCiJmBH1qtwSo`u>68?FeL1XqFya{$^)w77t-Vr7utS1BSu`TZbGWSAlgf}bNmU8TTFdrBaQMWD$_-!t z6*O8o*M17E)#C!LOrx&R-dw2@T)LgG$3Vi{k!&GKlIKT3&#%Y1F1K?3xbS+Ii zID(u2E-jfL5-0-utEbN6Cd18)T{8_Cb>)X1eE1zX?%gpX(`v*f!CqCbH8v|b(ng({z#gvlQn zvm2zeULGvjJSG@kOUX#~m4XafgvUT)+5Dd%G`>%x!MohPe%`LE zINwU5O~Vcz=Vhq^T1^)Mf0t4z-ElIdyaHzybm9fcxNuq(%Z8YHR4_3zis3TfLO}e; zv>7#sDdEapFtz2Gf|__HXO9hJs&NV1RQY>l=Vwbs;wO>m{ULH3pSu5Jnh_#X4ciNZG>~0{)W0?sB3VKjmjtV2swL`#C`*_4)ixQ7UJJonJ-lcp30?sI_Fz(D69(`u@!ud;~QbhpdR{jLOue&YQi=`NAVvB;y zKQmwV0fr#v7e&gMF$Az050Zz+EQDGHP6su)hGlz%fl-pGvJiTZM;79Hiw2Lt0I%NT;dl*@z|1MAt2;O=yEuPNQy*0A`dIVV?QP6+sP1 zk@6iq7v|CbDvOV-Xm+*)hsk zLgwZ0%@jf$4mGLApH*J$%v23R-It*8Q(AX)+tBi$`9L(L^}JC4=Q({4kP3rnq@A*2 z6~Ujr1HapfdCf3E;lQ7Nz*ICgGp{J>>L{r794Dvh>3C;nte5&NrJYK-wxjtY_Ik%) z-_(qbu0!l|pN6xNptzl+$`z$zUjtq4I?W8QT40ljC^rYtK zT^)*RYo-HsxP66mC&U)Y=@W`K;8;sgYXp%mAkagyknW_K-9SgMT_=*<&`F}@?FuCq zz#s5!nQnlN7~Ke#r8JM}lPU&~zOadg+_2zaow3+IX{3&TtL+-71`Ql+7}7q`JTla| z0;Ri(5eOKqkzQ^|o13iS3&VQ?zx<|wA@g9!=f{nEAanHskToF57I8A7>BmoPJp4$2tL z`w%jO!d_UP4O*sam?d3WG29Z*V;nOVK%@?YxoeY;nxu^$Ig+1A#Q?|tq3<@ zr|sypZb=_?;bEs=Fj7~CVV{5}dQ>9E)d?R|l?Yhg53o$c_d3FOWC0mR-i~~-zy}m4 z5tSmOEl3@lpUs#_e^8wXC@a+Wb-+J@5JDw=HE(4Nld#WRn(n5GJf#6r3P~rY*}B6M z>uDlPq(6;GsZE5C5FzB7@P`mGix6@R{2_$Y5kjtK=}*mpG9&S$$W%jUE+O^M@;pKs zW;GDf5CY{%Xg(p0?W61ZesbBjwywPOk}ETFL%+WB^&?-3T=b2<-L~<@ zowuGj{z5VKK>gLPKK8)ho&SX&Jby>eSDrZc?)r0o{EhGa&3$(ljOS15{`UW@Q9j*r z?Yc)Ezw+{*xM>$G*LFJx~A7myT%<|N8^2BXg$|bHlCn?+yF1ok0ZU4VE-Sg^-VeQgQN4;^}6&L^0NB;JAH|~p_yZ44`X2}z?gicJI zn3!4e#GE@iF;v>sYv`F>skMV08}pOrY?<7&b=%p6a&q~$WI1-u?%0O2&Mp?$pIv2Q z;?WM6nEIra8Y>lb+nXDpnTolY6(X;{cfkDWUCZx(Z~YZbPky!jw_gbF-Tb4YhyQ%t zsl}In__-aAUK>90)IGml`o_LhbzIJzwWj(-|gT0t&xvk^T|!-J2$;~qx05npCd2NdhziaW`DiB|GmNs4=sJ{c=AHi zU%zf${Ngun?74j?w&$W>z5Du&Yfk>*+js2W_Nn$?UH*U1|L>n3__fvl=N*4|Zpn@5 zyZ>SM8-IFa&5>8{e&zY!Mw;gS>Xzeo-*(+?3pc&IArvL-+s|gE`RKcSKaaUty@bg-~9F6k3H4)@WUF@oSUI)_!&>IezA!oioNS z{==ou-CN3CGIV>|eBimd(7PADyYA|FOHOiLzwL?cP-^e<6Gy#w^9c_#Mu3*l}&@$sfJ_)NjZeHy{7-hSrBpxo6Q|_qINg zihlHI^|jqUJ$B86{lGJS_0XM1@B5FNw|;r_z~%q^e9zcso{!C`_EKTb` z+B~)Z!Mt}SwXrp^Xj?n}*Mpp+LF9N8T8n#J^TiimEI)nEj+RA>cQs|3_b+|n^R369 z_xks>)&KqAFTeZ7zwEi{;vcj>_jdQ4tG;9`dhw{p$cb}iKYhY4#!kHG@lQYc$3H&1 zuVG;KZ;tuiz;}NC)jys08D*wmE^a-VCv`t`dCR}I$v@;Bf6^7zkRd&Zo9 z`(4pX$%32DdGOu?bBe#aV}1MM=Us92&(;5UvTo5AZkb(w<74sf{-OB)Z#rvSPxPMq zZ27AD2g>KEYTYAmul((|pJ~2p+5MBxT1&T$-*^7J^3hMd{7jJp63}UHLIJtt+|#Rs2{Fc2ArtsuIlQA zVqSB-eQ#OS(zZ5Uvj&I32ZH0;x>gWy9#^$hP+W;30s}@$Wf$ul1F)5soMZ*kV2_3k zI-+SBlz~r7`i_y2_#8qmr8_k++S#z@*1=uHTtZ??mZ)6|=DfFQf8?kazqZd<@QP?K zl@aKNYUKiJ6=j9-d`ihgvbFMjptLwxYP>F^Z599 z#IaIiPQ*_GAfk+q$5p)`RX9rOHUhbht9zt|6j;h;bqDpBd;ri((zP>=>XedYD_<&j za}PMQ%0-hAtpopt#eWN{4Bxkqk@#bTke3O_GE-zenF{?sLK@cm4p93CLh6?+BIGr| z6v{Sl5Yn*ZAwud8%qHY#gw#JfhmfB`_9O7;UkRz7o}MO;64J2hmyq%}Aq{m;z@I1K zpZ^AbmXN8&BLFg$E~glXgXC308p$gJ3DEcX1tGDyQj=3iMCOx`xH3Ie9}0y+vk2LbGz6oj!<$2<0RCx! za9%R+6x%cxfjg3n#6x7N9$KEmggj#EZp74$Y_5yL3seuO&bZ;Ga%w?K`DRMWD(5v* zrA#`>oA&1vYUbEA zb6^a-wG(`hK#rCQHVJz^ibQ`FP%Q0(&R$ zU9IF=J2SSvi*GT&yx{}i^|;JQsDc+)vUavXAg9(eIEUfq7{=NQrMzpXaPwBo*_tD; z0w9!%X0f2B4N(cY6Nwf3A`CL==1{ASr&`_@46;znI|U8yPkAczkhG0-R+lyxz#mOi z3wdur0(;@fj$I7y^TF)2RnQD?nX(q&7*1QMG2L!6tjMHQ zvaPX*YuPs4rB|R}=^jZ);|V1v83UPy4$+CYjyj^bwsG$9gfup#QysBPM|Y>H_h?bI zBi5N#lksR=?P%|gb#-)hw|7O`VTV0(t7Y4xC{eTORrlI?h-uy#7}z>dw&Aa2CfMU26$p>Z{@>!vgqA7Kqy*A&w&p5Vw(~ z%M#Q}gpdtB#61j}sv!73Bc$=z2vP<^DIXX>H5>kch~$`{h=iu(Ie=D{_*%(ZSsYg0 z%3}SE5++etgC+uV0j(VEYlY4cHk8U>Lol-yVx1pnv=ZMah8S+(dx(t0+e0K250OR^ zgFjLD6A6*VdPIR+D7J-2<6?M;a1Ef*;1IT)m*?#<>FW48|XTqSvwC zFfn2F`_?)_&Ipaf=M%C&L>7}|$$@c3qR|-q4>J5>;1P3$I&uM($)^`WGGK6ROpPkd zsS;9Meo`ss;arhcCe{tESJqjMi#l!aK&9KQO3}8;Mp}22Ku;}z%MYok20|L=Mkk`t zXdL*_+~`Cs-IWApHAjiJMWb_oZFTfSfln=-$fXQ5mrA!q+h8vTwslN3&}Tu$M&NNu zXIocWyTU7mptYD9T~`&2@#<)tRf)#<2Sg+GMA7)+H07bOy#kHx42`opqtOo&k8w2` zu8Kz>$G9Lz*stm;P`Em##;Q@`pk3On+saxkrMopLFpjAEfK4!zb#``lF_cBSdt#jO zVm`_{remFkUG`5hs{3uHHMR5OPR2b69=X`qTDT2TnIu%Bg& zY(X=D!+>WJ##vDIVL5im6X}2hr3!W`Z@LkPjl+wBSd%K)6=|q*FfzX5gWVYc5yvpI z5xra#5*suP6115v+SbIRILU$>D^)2avqfJwaI!#&s#rvc&T(z6sDjl52Mz=_Q*(<2 zF>Vkiv$j@*XbuqvuG%8tXOLH@k`4MSo(+RFb$48IQ#qanP@)V+MU;q5&Ahr`RBujC zPji_7zF`AjNTx!w@vda59`ZwkG;D?$TiDb*xN-gPrmZ_i`UhKZp8@_hpE}OiS&jvAmfIa zv?kQ{wvP5j;=&2u$u`r(mKD@+RcLm5d!PX>6@r8_hY-Xz$d>>SfC|DfNYZo2bZ8!# zu3to^$O1B5KQ-MzK1!w=LQBYW!>qYvx?%RwWExJe>@z(*|KlG|&L`9C+Ub7*`jnFN literal 0 HcmV?d00001 diff --git a/MikroMaster/20260302/20260302230003-Config.rsc b/MikroMaster/20260302/20260302230003-Config.rsc new file mode 100644 index 0000000..573aa8a --- /dev/null +++ b/MikroMaster/20260302/20260302230003-Config.rsc @@ -0,0 +1,3971 @@ +# 2026-03-02 23:00:03 by RouterOS 7.21.2 +# software id = 2961-C4ZZ +# +# model = RBD52G-5HacD2HnD +# serial number = HCX084RAVFA +/interface bridge +add admin-mac=48:8F:5A:60:A1:0B auto-mac=no name=Bridge-LAN port-cost-mode=\ + short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" mac-address=\ + F6:BE:9D:85:53:F5 name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 2ghz-b/g/n basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b=\ + 1Mbps,2Mbps,5.5Mbps,11Mbps channel-width=20/40mhz-XX country=belarus \ + disabled=no frequency=auto hw-protection-mode=rts-cts mode=ap-bridge \ + rate-set=configured skip-dfs-channels=10min-cac ssid=vados \ + station-roaming=enabled wds-default-bridge=Bridge-LAN wds-mode=\ + dynamic-mesh wireless-protocol=802.11 wmm-support=enabled wps-mode=\ + disabled +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 5ghz-a/n/ac basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps channel-width=\ + 20/40/80mhz-XXXX country=belarus disabled=no frequency=auto \ + hw-protection-mode=rts-cts mode=ap-bridge rate-set=configured \ + skip-dfs-channels=10min-cac ssid=vados5g station-roaming=enabled \ + wds-default-bridge=Bridge-LAN wds-mode=dynamic-mesh wireless-protocol=\ + 802.11 wmm-support=enabled wps-mode=disabled +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/interface wireless nstreme +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set wlan1 enable-nstreme=yes +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set wlan2 enable-nstreme=yes +/caps-man security +add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm \ + group-encryption=aes-ccm name=security +/caps-man configuration +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-2ghz security=security ssid=vados +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-ac security=security ssid=vados5g +add channel.band=5ghz-a/n .control-channel-width=20mhz .extension-channel=XX \ + country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-an security=security ssid=vados5g +/disk +add media-interface=lo slot=tmpfs tmpfs-max-size=44739242 type=tmpfs +# mountpoint [tmpfs] taken by tmpfs +set usb1 mount-point-template="[tmpfs]" +/interface list +add comment=defconf name=WAN +add comment=defconf name=LAN +/interface lte apn +set [ find default=yes ] ip-type=ipv4 use-network-apn=no +/interface wifi channel +add band=5ghz-ax disabled=no frequency=5180,5200,5220,5240 name=5G-AX +add band=5ghz-ac disabled=no frequency=5180,5200,5220,5240 name=5G-AC +add band=2ghz-n disabled=no frequency=2422,2442,2462 name=2G-N +add band=2ghz-ax disabled=no frequency=2422,2442,2462 name=2G-AX +add band=2ghz-g disabled=no frequency=2422,2442,2462 name=2G-G +add band=5ghz-n disabled=no frequency=5180,5200,5220,5240 name=5G-AN +/interface wifi datapath +add bridge=Bridge-LAN disabled=no interface-list=all name=xs-DataPath +/interface wifi security +add authentication-types=wpa2-psk,wpa3-psk disabled=no group-encryption=ccmp \ + group-key-update=1h management-protection=allowed name=sec2g +add authentication-types=wpa3-psk disable-pmkid=yes disabled=no \ + group-encryption=ccmp group-key-update=5m management-encryption=cmac \ + management-protection=required name=sec5G +/interface wifi configuration +add channel=2G-AX datapath=xs-DataPath disabled=no mode=ap name=2G-AX \ + security=sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=2G-N datapath=xs-DataPath disabled=no mode=ap name=2G-N security=\ + sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AX disabled=no mode=ap name=5G-AX security=sec5G security.ft=\ + yes .ft-over-ds=yes ssid=vados +add channel=5G-AC datapath=xs-DataPath disabled=no mode=ap name=5G-AC \ + security=sec5G security.authentication-types="" .ft=yes .ft-over-ds=yes \ + ssid=vados +add channel=2G-G datapath=xs-DataPath disabled=no mode=ap name=2G-G security=\ + sec2g security.authentication-types="" .ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AN disabled=no mode=ap name=5G-AN security=sec5G ssid=vados +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1 name=blsp.at verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 use-reconfigure=yes +/ip hotspot user profile +set [ find default=yes ] address-pool=dhcp +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/snmp community +set [ find default=yes ] addresses=10.30.30.0/24 read-access=no security=\ + private +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/caps-man manager +set enabled=yes +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\ + cfg-2ghz name-format=prefix-identity name-prefix=2ghz +add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\ + cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\ + cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set builtin-trust-store=fetch crl-store=system +/disk settings +set auto-media-interface=lo default-mount-point-template="[tmpfs]" +/ip smb +set comment=MikroVados domain=WORKGROUP enabled=yes interfaces=Bridge-LAN +/interface bridge port +add bridge=Bridge-LAN ingress-filtering=no interface=ether2 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN comment=LEN ingress-filtering=no interface=ether3 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN comment=NUC ingress-filtering=no interface=ether4 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN ingress-filtering=no interface=ether5 \ + internal-path-cost=10 path-cost=10 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set disable-ipv6=yes max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add comment=WAN interface="ether1 - Unet" list=WAN +add interface=Bridge-LAN list=LAN +/interface ovpn-server server +add auth=sha1,md5 mac-address=FE:82:A5:78:8E:84 name=ovpn-server1 +/interface wifi cap +set caps-man-addresses=10.30.30.10 certificate=request discovery-interfaces=\ + wlan1,wlan2 lock-to-caps-man=no slaves-static=no +/interface wifi capsman +set package-path="" require-peer-certificate=no upgrade-policy=none +/interface wifi provisioning +add action=create-dynamic-enabled disabled=no master-configuration=2G-N \ + name-format=2G-%I slave-configurations=2G-G supported-bands=\ + 2ghz-n,2ghz-g,2ghz-g +add action=create-dynamic-enabled disabled=no master-configuration=5G-AC \ + name-format=5G-%I supported-bands=5ghz-ac,5ghz-ac +/interface wireguard peers +add allowed-address=10.8.0.2/32,0.0.0.0/0 client-allowed-address=0.0.0.0/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-certificate-common-names=CAPsMAN-A2A7DF3D5EE6 \ + certificate=CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes \ + interfaces=wlan1,wlan2 lock-to-caps-man=yes +/interface wireless sniffer +set file-name=24g +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main interface="ether1 - Unet" use-peer-dns=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81,10.30.30.10 domain=WORKGROUP gateway=10.30.30.81 netmask=24 \ + ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=AMSTER-NUC type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=ros.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=10.30.30.86 name=MikroYellow type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC list=NoWG +add address=10.30.30.10 comment=MikroNUC list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=89.110.101.17 list=VPN-Server +add address=80.85.244.9 list=TRUSTED +add address=8.8.8.8 list=TRUSTED +add address=8.8.4.4 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new disabled=yes dst-port=53 in-interface=\ + "ether1 - Unet" protocol=udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface="ether1 - Unet" protocol=tcp src-address-list=\ + !TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp src-address=!10.30.30.0/24 +add action=accept chain=input comment=\ + "accept NTP clients on local area network" dst-port=123 in-interface=\ + Bridge-LAN in-interface-list=LAN protocol=udp +add action=accept chain=input comment="accept WireGuard" dst-port=13231 \ + in-interface="ether1 - Unet" protocol=udp src-address-list=VPN-Server +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=Instagram dst-address=\ + !10.30.30.0/24 dst-address-list=Instagram new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address=\ + !10.30.30.0/24 dst-address-list=Twitter new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address=\ + !10.30.30.0/24 dst-address-list=YouTube new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address=\ + !10.30.30.0/24 dst-address-list=facebook new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina log-prefix=VPN-all \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp tcp-flags=syn tcp-mss=1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 dst-address-list=!NoVdsina log=yes log-prefix=VPN-Net \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 in-interface-list=\ + LAN protocol=tcp to-ports=53 +add action=redirect chain=dstnat dst-port=53 in-interface-list=LAN protocol=\ + udp +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + in-interface=Bridge-LAN log-prefix=WG-nat out-interface=WG routing-mark=\ + To-VPN +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps disabled=yes \ + dst-port=443 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat dst-port=80 in-interface="ether1 - Unet" \ + protocol=tcp to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com log=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot walled-garden +add server=*1 +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=add-src-to-address-list address-list=bad_ipv6 \ + address-list-timeout=none-dynamic chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked in-interface=WG in-interface-list=WAN \ + src-address-list="" +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes +/ppp secret +add local-address=192.168.60.1 name=vados remote-address=192.168.60.2 \ + service=l2tp +/routing bfd configuration +add disabled=no +/snmp +set contact=@AmsterNL enabled=yes engine-id-suffix=MikroMaster location=NL \ + src-address=10.30.30.81 trap-interfaces=Bridge-LAN,WG trap-target=\ + 10.30.30.10 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system scheduler +add comment="Windows Update script" interval=2d5m name=WU-script-run-schedule \ + on-event=WU-add-to-list policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2014-02-11 start-time=00:00:00 +add comment="Backup Every Week" disabled=yes interval=1w name=BackupEveryWeek \ + on-event=BackupAndUpdate policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-07-07 start-time=03:41:27 +add comment="DoH Cache Flush" interval=1d name="DNS Cache Flush" on-event=\ + DNS_Flush_Cache policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2019-12-06 start-time=05:30:00 +add comment="Create mkdir function on startup" name=\ + create_mkdir_function_on_startup on-event=\ + "/system script run create_mkdir_function;" policy=read,write,policy,test \ + start-time=startup +add comment="Scheduler for Update Certificates CloudFlare Quad9" interval=1w \ + name="Update Certificates CloudFlare Quad9" on-event=\ + "/system/script { run Update-Certificates; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-11-28 start-time=05:45:40 +add comment="Scheduler for Amster-Backup-UpdateEmail" disabled=yes interval=\ + 1w name=Amster-Backup-UpdateEmail on-event=\ + "/system/script { run Amster-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-02-13 start-time=03:41:27 +add comment="Setup Global Environment for scripts" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system script +add comment="Example add WU servers to AddrList" dont-require-permissions=no \ + name=WU-add-to-list owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# Syed Jahanzaib / aacable@hotmail.com\r\ + \n# List name\r\ + \n:local LISTNAME \"windowsupdateslist\"\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"update.microsoft.com\"\r\ + \n:local TARGET2 \"download.windowsupdate.com\"\r\ + \n:local TARGET3 \"download.microsoft.com\"\r\ + \n:local TARGET4 \"windowsupdate.com\"\r\ + \n:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n:local TARGET6 \"wustat.windows.com\"\r\ + \n:local TARGET7 \"stats.microsoft.com\"\r\ + \n:local TARGET8 \"mp.microsoft.com\"\r\ + \n:local TARGET9 \"ws.microsoft.com\"\r\ + \n:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n \r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n \r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4|\$TARGET5|\$TARGET6|\$TARGET7|\$TARGET8|\$TARGET9|\$TARGET10|\$T\ + ARGET11|\$TARGET12|\$TARGET13|\$TARGET14)\" && \$type ~ \"^(A|CNAME)\\\$\"\ + \_] do={\r\ + \n \r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n \r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Add Hosts DNS names to NoWG addres list" \ + dont-require-permissions=no name=Add2vdsina owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# \r\ + \n# List name\r\ + \n:local LISTNAME \"NoWG\"\r\ + \n#\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"comp-lenta.ru\"\r\ + \n:local TARGET2 \"ok.ru\"\r\ + \n:local TARGET3 \"vk.com\"\r\ + \n#:local TARGET4 \"smtp.mail.me.com\"\r\ + \n#:local TARGET4 \"windowsupdate.com\"\r\ + \n#:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n#:local TARGET6 \"wustat.windows.com\"\r\ + \n#:local TARGET7 \"stats.microsoft.com\"\r\ + \n#:local TARGET8 \"mp.microsoft.com\"\r\ + \n#:local TARGET9 \"ws.microsoft.com\"\r\ + \n#:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n#:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n#:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n\r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n\r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4)\" && \$type ~ \"^(A|CNAME)\\\$\" ] do={\r\ + \n\r\ + \n:log info (\"start entry: \$c \$sitednsname \$Buffer\");\r\ + \n\r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n:log info (\"1: \$Buffer\"); \r\ + \n\r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n\r\ + \n:log info (\"2: \$Buffer\"); \r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$i \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Flush DNS Cache" dont-require-permissions=no name=\ + DNS_Flush_Cache owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ + "/ip dns cache flush" +add dont-require-permissions=no name=create_mkdir_function owner=vados \ + policy=read,write source="# Written by Phillip Stromberg in 2019\r\ + \n# Distributed under the MIT license\r\ + \n# \r\ + \n# \r\ + \n# this creates a function called \$mkdir\r\ + \n# from the command line you will be able to just type \"\$mkdir some/new\ + /folder\"\r\ + \n# and all the folders that need to be created will be\r\ + \n# if the folder already existed, it is ignored\r\ + \n\r\ + \n:log info \"Creating \\\$mkdir function...\"\r\ + \n\r\ + \n:global mkdir do={\r\ + \n # \$1 refers to the input variable the user passed in to us\r\ + \n :local newFolder \$1;\r\ + \n\r\ + \n # we'll use this variable to report error messages that may arise\r\ + \n :local errorMsg;\r\ + \n\r\ + \n # if the user put a slash on the end of the new folder name, remove \ + it\r\ + \n # i.e. \"some/test/\" becomes \"some/test\"\r\ + \n :while (([:pick \$newFolder ([:len \$newFolder] - 1)]) = \"/\") do={\ + \r\ + \n :set newFolder [:pick \$newFolder 0 ([:len \$newFolder] - 1)]\r\ + \n }\r\ + \n\r\ + \n # if the user put a slash at the beginning of the new folder name, r\ + emove it\r\ + \n # i.e. \"/some/test\" becomes \"some/test\"\r\ + \n :while ([:pick \$newFolder 0] = \"/\") do={\r\ + \n :set newFolder [:pick \$newFolder 1 [:len \$newFolder]]\r\ + \n }\r\ + \n\r\ + \n :if ([/file find name=\$newFolder] != \"\") do={\r\ + \n :set errorMsg \"'\$newFolder' already exists.\";\r\ + \n :log debug \"mkdir: \$errorMsg\";\r\ + \n :return \$newFolder;\r\ + \n }\r\ + \n\r\ + \n # the name of the temp file to create\r\ + \n :local tempfile \"mkdir_temp_file.txt\";\r\ + \n\r\ + \n # port 0 is unlikely to be open to HTTP requests...\r\ + \n :local fakeURL \"http://127.0.0.1:0/should-not-exist.txt\";\r\ + \n\r\ + \n :local fullTempPath (\$newFolder . \"/\" . \$tempfile);\r\ + \n\r\ + \n # this is where the folder creation happens\r\ + \n # `as-value` prevents status messages from printing\r\ + \n # wrapping in a `:do {...} on-error` prevents error messages from pr\ + inting.\r\ + \n :do {\r\ + \n /tool fetch dst-path=\"\$fullTempPath\" url=\"\$fakeURL\" durati\ + on=0.001s as-value;\r\ + \n } on-error={}\r\ + \n\r\ + \n # this waits for the temporary dir to show up so there isn't a race \ + \r\ + \n # condition where you call mkdir and then try to do something before\ + \_the \r\ + \n # folder is actually created\r\ + \n :local count 0;\r\ + \n :while ([/file find name=\"\$newFolder\"] = \"\") do={\r\ + \n :if (\$count >= 50) do={\r\ + \n # after 50 * 0.1s delays, it's been 5 seconds, which should \ + be long enough\r\ + \n :set errorMsg \"New folder could not be created at \$newFold\ + er\";\r\ + \n :log error \"mkdir: \$errorMsg\"\r\ + \n :error \$errorMsg\r\ + \n }\r\ + \n :delay 0.1s;\r\ + \n :set count (\$count + 1);\r\ + \n }\r\ + \n\r\ + \n :return \$newFolder;\r\ + \n}\r\ + \n\r\ + \n:log info \"Created function \\\$mkdir\"\r\ + \n" +add comment="Certificates CloudFlare, Quad9 " dont-require-permissions=no \ + name=Update-Certificates owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_CloudFlare\r\ + \n/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalRo\ + otCA.crt.pem;\r\ + \n/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\"\ + \";\r\ + \n/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalG\ + 2TLSRSASHA2562020CA1-1.crt.pem;\r\ + \n/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.\ + pem passphrase=\"\";\r\ + \n# Quad9\r\ + \n/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGlobal\ + G3TLSECCSHA3842020CA1-1.crt.pem\"\r\ + \n/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.\ + pem passphrase=\"\";\r\ + \n\r\ + \n#:global AmScriptsUrl;\r\ + \n#google\r\ + \n#:local CertName \"GTS-Root-R1.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-R4.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-RX.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#internet\r\ + \n#:set CertName \"ISRG-Root-X1.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"ISRG-Root-X2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n\r\ + \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes;\r\ + \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ + \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 1\";\r\ + \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ + \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 2\"\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ + \n#/ip/dns set servers=\"\";" +add dont-require-permissions=no name=script1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + tool/netwatch/add comment=\"doh-fallback, doh-url=https://security.cloudfl\ + are-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Clou\ + dFlare-doh IPv4 1\" host=1.1.1.1;\r\ + \n/tool/netwatch/add comment=\"doh, doh-url=https://security.cloudflare-dn\ + s.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare\ + -doh IPv4 2\" host=1.0.0.1;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 1\" host=8.8.8.8;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 2\" host=8.8.4.4;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 1\" host=9.9.9.9;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 2\" host=149.112.112.112;\r\ + \n\r\ + \n/tool/netwatch/add comment=\"dns, notify, name=ns1.unet.ws\" host=91.192\ + .189.2;" +add dont-require-permissions=no name=script2 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n\r\ + \n:global InspectVar;\r\ + \n#:global RouterBoard;\r\ + \n#:do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on-erro\ + r={}\r\ + \n#:global Resources;\r\ + \n#:do {:set Resources [[ :parse \"/system/resource/get\" ]]} on-error={}\ + \r\ + \n\r\ + \n#:global Updates;\r\ + \n#:do {:set Updates [[ :parse \"/system/package/update/get\" ]]} on-error\ + ={}\r\ + \n\r\ + \n#:global PkgUpdStatus \"undefined\";\r\ + \n#:local Update [/system/package/update/get];\r\ + \n#:retry command={:set PkgUpdStatus (\$Update->\"status\")} delay=200ms m\ + ax=5 on-error={};\r\ + \n\r\ + \n#:log warning [\$InspectVar \$RouterBoard];\r\ + \n#:put [\$InspectVar \$RouterBoard];\r\ + \n\r\ + \n#:retry command={/system/package/update check-for-updates without-paging\ + \_as-value} delay=300ms max=5 on-error={};\r\ + \n\r\ + \n#:global arrDeviceInfo ({});\r\ + \n#:local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};});\ + \r\ + \n#:set (\$arrDeviceInfo->\"RouterBoard\") [[ :parse \"/system/routerboard\ + /get\" ]];\r\ + \n#:retry command={:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system\ + /package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"Error\ + \")};\r\ + \n# [:toarray {\"section\"={\"key\"=\"\"; \"value\"=\"\";} }];\r\ + \n# [:toarray \"\"];\r\ + \n:local arrDeviceInfo ({});\r\ + \n\r\ + \n:set (\$arrDeviceInfo->\"devUpdates\") {\"channel\"; \"stable\";};\r\ + \n#:do {:set (arrDeviceInfo->\"Updates\") [[ :parse \"/system/package/upda\ + te/get\" ]]} on-error={:log error (\$error)}\r\ + \n\$InspectVar \$arrDeviceInfo;\r\ + \n" +add dont-require-permissions=no name=AM-setup owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_RouterOS Setup Script: AM-setup\r\ + \n# \r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n\r\ + \n## Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:if ([ :len [ /system/script/find where name=\$ScriptName ]] = 0 ) do={\ + \r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# :global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n# /system/script/add name=\$ScriptName owner=\$ScriptName source=([ /too\ + l/fetch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptNa\ + me . \".rsc\") output=user as-value ]->\"data\");\r\ + \n#}\r\ + \n# For run from terminal:\r\ + \n# /system/script/add name=AM-setup owner=AM-Setup source=([ /tool/fetch \ + check-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" ou\ + tput=user as-value ]->\"data\");\r\ + \n#\r\ + \n# /system/script/set source=[ :tocrlf [ get \$ScriptName source ] ] \$Sc\ + riptName;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local RemoveThisScript false;\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n{\r\ + \n :local ScriptName;\r\ + \n :local RemoveThisScript;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local AllDone;\r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n:log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n /tool/fetch (\$GlobalScriptsUrl . \"certs/\" . \$CertFileName) dst-p\ + ath=\$CertFileName as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint \ + ] ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n };\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :put \"Add Schedulers...\";\r\ + \n :delay 1;\r\ + \n :put \"Add Global scheduler...\";\r\ + \n :local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFu\ + nc; }\";\r\ + \n :local Comment \"Setup Global Environment for scripts\";\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] \ + ] = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-\ + event=\$OnEvent start-time=startup;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Commen\ + t) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEve\ + nt) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Add Update Script scheduler\";\r\ + \n :set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\"\ + ;\r\ + \n :set Comment \"Every Day Check For Update Scripts\";\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpda\ + te\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Commen\ + t start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n }\r\ + \n\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n /system/script { run AM-GlobalConfig; run AM-GlobalFunc; };\r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :set AllDone true;\r\ + \n } on-error={\r\ + \n :set AllDone false;\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$ScriptName . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n\r\ + \n :delay 5s;\r\ + \n :if (\$AllDone = true && \$RemoveThisScript = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :set OnEvent \":delay 30s; /system/script/remove [ find where name=\$S\ + criptName ]; :delay5s; /system/scheduler/remove [ find where name=\\\"_Rem\ + oveSetup\\\" ];\";\r\ + \n :set Comment \"_RemoveSetup tmp scheduler for remove setup script.\";\ + \r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-ti\ + me=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$ScriptName . \"\\nI've done everything, and now I'm ti\ + red... I'm leaving. ))\\nThere will be an error below, this is normal.\");\ + \r\ + \n }\r\ + \n};\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#root.mnuc.backuper\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#/usb1/mikro_bak_rsa.pub" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global GlobalConfReady false;\r\ + \n# \\/ start edit\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in Amster-Init-Script\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix \"\";\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\"; #:global EmailGeneralCc \"\";\ + \r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.21\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 138;\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global GlobalEnvRemove;\r\ + \n:global MiniDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n#:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global ExitError;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n:global CharacterReplace;\r\ + \n:global CharacterMultiply;\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global WaitDNSResolving;\r\ + \n:global WaitFullyConnected;\r\ + \n:global WaitTimeSync;\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global FetchLargeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global LogPrint;\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n \$LogPrint debug \$0 (\"\\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if (\$CurrentChannel != \$updateChannel) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"Set updates channel to: \$updateChannel\");\ + \r\ + \n }\r\ + \n \r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel (\$Update->\"channel\");\r\ + \n \$LogPrint debug \$0 (\"Update Channel: \" . \$Channel . \".\");\r\ + \n \r\ + \n :local StatusPkg \"undefined\";\r\ + \n \$LogPrint debug \$0 (\"Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"\\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([:len \$arrDeviceInfo] = 0) do={\r\ + \n :global arrDeviceInfo ({});\r\ + \n :local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};}\ + );\r\ + \n }\r\ + \n # else={:local arrDeviceInfo ({})}\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [[ :parse \"/\ + system/package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"\ + Error\")};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannel\"; \$Cu\ + rrentChannel;};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentVersion\"; (\$U\ + pdate->\"installed-version\");};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannelVersion\ + \"; [/system/resource/get version];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateChannel\"; [\$up\ + dateChannel];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateVersion\"; (\$Up\ + date->\"latest-version\");};\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n \r\ + \n :global arrDeviceInfo [:toarray {\"section\"={\"key\"=\"\"; \"value\"\ + =\"\";} }];\r\ + \n #:do {:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system/package\ + /update/get\" ]]} on-error={}\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devRbCurrentFw;\r\ + \n :global devRbUpgradeFw;\r\ + \n \r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global ROsVerCurrent;\r\ + \n :global ROsChannelCurrent;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :global ParseCustom;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global devBuildTime;\r\ + \n :global GetPubIp;\r\ + \n \r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :set devBuildTime (\$Resource->\"build-time\");\r\ + \n :set runningChannelVersion (\$Resource->\"version\");\r\ + \n :set runningChannel [\$ParseCustom \$runningChannelVersion \"(\" \")\ + \" 1];\r\ + \n :set runningVersion [\$ParseCustom \$runningChannelVersion \" \"];\r\ + \n \r\ + \n :do {\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :local RouterBoard;\r\ + \n :do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on\ + -error={}\r\ + \n :set devModel (\$RouterBoard->\"model\");\r\ + \n :set devRbRevision (\$RouterBoard->\"revision\");\r\ + \n :set devRbSerialNumber (\$RouterBoard->\"serial-number\");\r\ + \n #:set devRbCurrentFw (\$RouterBoard->\"current-firmware\");\r\ + \n #:set devRbUpgradeFw (\$RouterBoard->\"upgrade-firmware\");\r\ + \n :if (\$devCurArch = \"mipsbe\" || \$devCurArch = \"arm\") do={\r\ + \n :global devRunning [ /system/device-mode/get mode ];\r\ + \n } else={\r\ + \n :global devRunning [/system/device-mode/get running];}\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n \r\ + \n :set devRbRevision false;\r\ + \n :set devRbSerialNumber false;\r\ + \n# :set devRbCurrentFw false;\r\ + \n# :set devRbUpgradeFw false;\r\ + \n #:set devCurrentFw \$runningVersion;#:set devUpgradeFw \$ROsVerAvail\ + ;\r\ + \n :set devRunning [/system/device-mode/get running];\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Error in Function getDevice!\");\r\ + \n :return false;\r\ + \n }\r\ + \n:return true;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global WaitArrDeviceInfo;\r\ + \n # \$WaitDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devCurArch;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global PiblicIpAddress;\r\ + \n\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :local Return;\r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n \r\ + \n :set Return ([ \$FormatLine \"Hostname:\" \$Identity ] . \"\\n\" . \\\ + \r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location:\" (\$Snmp->\"location\") ] . \"\\n\") \ + ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact:\" (\$Snmp->\"contact\") ] . \"\\n\") ] \ + . \\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board:\" . \$devBoardName ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Arch:\" . \$devCurArch ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Model:\" \$devModel ] . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbRevision ] > 0) \\\r\ + \n (\" \" . \$devRbRevision) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbSerialNumber ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial:\" . \$devRbSerialNumber ] . \"\\n\"\ + ) ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"nleve\ + l\")) ] . \"\\n\") ] . \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \"Running Channel\" \$runningChannel ] . \"\\n\" . \\\ + \r\ + \n [ \$FormatLine \" Installed:\" (\$Update->\"installed-version\") \ + ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :typeof (\$Update->\"latest-version\") ] != \"noth\ + ing\" && \\\r\ + \n \$Update->\"installed-version\" != \$Update->\"latest-version\")\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Update->\"latest-version\") ]\ + \_. \"\\n\") ] . \\\r\ + \n [ \$IfThenElse (\$RouterBoard->\"routerboard\" = true && \\\r\ + \n \$RouterBoard->\"current-firmware\" != \$RouterBoard->\"upgrade-\ + firmware\") \\\r\ + \n ([ \$FormatLine \" Firmware\" (\$RouterBoard->\"current-firmwar\ + e\") ] . \"\\n\") ] . \\ \r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# !!! The function is not ready !!!\r\ + \n:global FetchHttpInfo do={\r\ + \n :local Mac [ :tostr \$1 ];\r\ + \n :global CertificateAvailable;\r\ + \n :global IsMacLocallyAdministered;\r\ + \n :global LogPrint;\r\ + \n :local Url \"https://api.macvendors.com/\";\r\ + \n :if ([ \$IsMacLocallyAdministered \$Mac ] = true) do={:return \"locall\ + y administered\";}\r\ + \n :do {\r\ + \n :if ([ \$CertificateAvailable \"GTS Root R4\" \"fetch\" ] = false) d\ + o={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Vendor ([ /tool/fetch \r\ + \n (\$Url . [ :pick \$Mac 0 8 ]) output=user as-value ]->\"data\");\r\ + \n :return \$Vendor;\r\ + \n } on-error={\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=yes-without-crl (\$Url) output=none \ + as-value;\r\ + \n \$LogPrint debug \$0 (\"The mac vendor is not known in database.\"\ + );\r\ + \n } do={ \$LogPrint warning \$0 (\"Failed getting mac vendor: \" . \$E\ + rr); }\r\ + \n :return \"unknown vendor\";\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n :global LogPrint;\r\ + \n \r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n\r\ + \n# :retry command={abc} delay=1 max=2 on-error={:put \"got error\"} \r\ + \n :do {\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using default s\ + ervice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fail\ + ed to detect public IP using default service: \" . \$Url . \".\")}\r\ + \n #:error \"Failed to detect public IP using default service: \$Url\ + .\"};\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Failed to detect public IP using default s\ + ervice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using fallback \ + service: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fai\ + led to detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :if (\$PubIpAddr = false) do={\r\ + \n :set PubIpAddr \"not-detected\";\r\ + \n } else={\r\ + \n :set PubIpAddr [ :pick \$PubIpAddr 0 15];\r\ + \n }\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n :global CertificateDownload;\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :set UseFor [ \$EitherOr \$UseFor \"undefined\" ];\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n \$LogPrint warning \$0 (\"This system has low free flash space but \ + \" . \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n \$LogPrint info \$0 (\"Certificate with CommonName '\" . \$CommonNam\ + e . \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n \$LogPrint info \$0 (\"There are \" . \$CertCount . \" Certificates \ + with CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n \$LogPrint info \$0 (\"Certificate chain for '\" . \$CommonName . \ + \"' is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global LogPrint;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n \r\ + \n \$LogPrint info \$0 (\"Downloading and importing certificate with Comm\ + onName '\" . \$CommonName . \"'.\");\r\ + \n \r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({ [\ + \_\$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$GlobalScriptsUrl . \"certs/\" . \$FileName . \$GlobalScriptsUrl\ + Suffix) dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Common\ + Name '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"Required certificate is not available.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({\ + \_[ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n \"https://mkcert.org/generate/\" http-data=[ :serialize to=json \ + ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Comm\ + onName '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n \$LogPrint warning \$0 (\"Certificate with CommonName '\" . \$Common\ + Name . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :global LogPrint;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n \r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n \r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \"checksums.json\" . \$GlobalScrip\ + tsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={:set NotificationMessage (\$NotificationMessage . \"\\n\\nNe\ + ws and changes are not available.\")}\r\ + \n\r\ + \n :set GlobalConfChanges;\r\ + \n :set GlobalConfMigration;\r\ + \n }\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (https://amster.vados.ru/; main/3419/3ee\ + 19780)\");\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetRandomNumber do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndnum from=0 to=[ \$EitherOr [ :tonum \$1 ] 4294967295 ] ]\ + \r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n \$LogPrint error \$Name ([ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\ + \$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={:return false}\r\ + \n :local FileVal false;\r\ + \n :do {:set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\$LogPrint debug \$0 (\"... which does not \ + exist.\"); :return true};\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\$LogPrint error \$0 (\"\ + Directory '\" . \$DirName . \"' is not a directory.\"); :return false};\r\ + \n :onerror Err {/file/remove \$DirName} do={\$LogPrint error \$0 (\"Remo\ + ving directory '\" . \$DirName . \"' failed: \" . \$Err); :return false};\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\$LogPrint debug \$0 (\"... which does not\ + \_exist.\"); :return true}\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n \$LogPrint error \$0 (\"File '\" . \$FileName . \"' is not a file.\"\ + ); :return false}\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\$LogPrint error \$0 (\"Removing file '\" . \$FileName . \"' fai\ + led: \" . \$Err); :return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :global LogPrint;\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n \$LogPrint info \$0 (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint info \$0 (\"Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Creating disk of type tmpfs failed: \" .\ + \_\$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n \$LogPrint debug \$0 (\"... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Making directory '\" . \$Path . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={:set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]};\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={:set Path [ :pick \$Path 1 [ :len\ + \_\$Path ] ]};\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={:set Path [ :\ + pick \$Path 0 ([ :len \$Path ] - 1) ]};\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n \$LogPrint error \$0 (\"No valid RouterOS version: \" . \$Required);\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n \$LogPrint warning \$0 (\"This \" . [ \$IfThenElse ([ :pick \$Call\ + er 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"A script named '\" . \$Script . \"' does not\ + \_exist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n \$LogPrint error \$0 (\"More tickets than running scripts '\" . \$Sc\ + ript . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No symbol available for name '\" . \$Name \ + . \"'!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n# read parts of a large file\r\ + \n:set FetchLargeFiles do={\r\ + \n :local ScriptName [:tostr \$1];\r\ + \n :local fetchUrl [:tostr \$2];\r\ + \n :local CheckCert [:tostr \$3];\r\ + \n :local fetchMode [:tostr \$4];\r\ + \n :local fetchMethod [:tostr \$5];\r\ + \n :local FetchString \"undefined\";\r\ + \n \r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n #:set fetchMode [ \$IfThenElse (\$fetchMode != \"false\") [:tostr (\"m\ + ode=\" . \$fetchMode)] ];\r\ + \n #:set fetchMethod [\$IfThenElse (\$fetchMethod != \"false\") [:tostr (\ + \"http-method=\\\"\" . \$fetchMethod . \"\\\"\") ]];\r\ + \n \r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n #/tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName h\ + ttp-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-value;\r\ + \n #:log warning (\"\\\$fUrl =\" . \$2 . ({[ \$fMode ]}));\r\ + \n :onerror Err {\r\ + \n :set FetchString (\"/tool/fetch \" . \\\r\ + \n [\$IfThenElse ([\$fetchMethod] != \"false\") (\"http-method=\\\"\"\ + \_. \$fetchMethod . \"\\\" \")] . \\\r\ + \n \"check-certificate=\" . \$CheckCert . \" url=(\\\"\" . \$fetchUrl\ + \_. \"\\\") \" . \\\r\ + \n [\$IfThenElse ([\$fetchMode] != \"false\") (\"mode=\" . \$fetchMod\ + e . \" \")] . \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue);\r\ + \n :log warning (\"\\\$FetchSring = \" . \$FetchString);\r\ + \n :put [\$FetchString];\r\ + \n #:put [/tool/fetch \$fetchMode check-certificate=\$CheckCert url=(\$\ + fetchUrl) dst-path=(\$FileName) http-header-field=({ [ \$FetchUserAgentStr\ + \_\$ScriptName ] }) as-value];\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$fetchUrl . \"\ + \_- \" . \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$fetchUrl . \ + \" did not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# Global Environment clear. Use: \"\$GlobalEnvRemove True;\".\r\ + \n:set GlobalEnvRemove do={\r\ + \n :local doRmEnv [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ScriptsUrl;\r\ + \n :global LogPrint;\r\ + \n :if (\$doRmEnv != \"True\") do={\r\ + \n \$LogPrint error \"GlobalEnvRemove\" (\"This script is needed \\\"T\ + rue\\\" for confirm to remove global environment variables!\");\r\ + \n :return [];\r\ + \n :error true; \r\ + \n } else={\r\ + \n :set ScriptsUrl \$GlobalScriptsUrl;\r\ + \n :delay 5;\r\ + \n :foreach var in=[/system/script/environment print as-value] do={/sy\ + stem/script/environment remove (\$var->\".id\")}\r\ + \n :delay 5;\r\ + \n :global GlobalScriptsUrl \$ScriptsUrl;\r\ + \n \$LogPrint warning \"GlobalEnvRemove\" (\"Done!\");\r\ + \n :return [];\r\ + \n :error false;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Setup Global Environment for scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n#:local Resource [ /system/resource/get ];\r\ + \n#:log info (\$ScriptName . \" Loaded on \" . \$Resource->\"board-name\" \ + . \" with RouterOS \" . \$Resource->\"version\" . \" and Architecture \" .\ + \".\");\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n:log warning (\"This script \$ScriptName Loaded on \" . \$devBoardName .\ + \_\"\\nRouterOS: \" . \$devCurVersion . \"\\nArchitecture: \" . \$devCurAr\ + ch . \"\\nIdentity: \" . \$Identity);\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err;}\r\ + \n\r\ + \n#} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n# log the successful load of the script, or an error if it failed\r\ + \n#:if ([\$GlobalFuncReady] = true && [\$GlobalConfReady] = true) do={\r\ + \n" +add comment="Import ssh keys for public key authentication" \ + dont-require-permissions=no name=AM-SshKeysImport owner=AM-SshKeysImport \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-SshKeysImport\r\ + \n# Script comment: Import ssh keys for public key authentication\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n#\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global configs or functions not ready.\"); }; } del\ + ay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global SSHKeysImport;\r\ + \n:global SSHKeysImportFile;\r\ + \n\r\ + \n# import single key passed as string\r\ + \n:set SSHKeysImport do={ :onerror Err {\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local User [ :tostr \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :if ([ :len \$Key ] = 0 || [ :len \$User ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Missing argument(s), please pass key and u\ + ser!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ :len [ /user/find where name=\$User ] ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"User '\" . \$User . \"' does not exist.\")\ + ;\r\ + \n :return false;\r\ + \n }\r\ + \n :local KeyVal ([ :deserialize \$Key delimiter=\" \" from=dsv options=d\ + sv.plain ]->0);\r\ + \n :if (!(\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\")) do\ + ={\r\ + \n \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' is\ + \_not supported.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex (\$K\ + eyVal->1) ];\r\ + \n :local RegEx (\"\\\\bmd5=\" . \$FingerPrintMD5 . \"\\\\b\");\r\ + \n :if ([ :len [ /user/ssh-keys/find where user=\$User \\\r\ + \n (key-owner~\$RegEx or info~\$RegEx) ] ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The ssh public key (MD5:\" . \$FingerPrint\ + MD5 . \\\r\ + \n \") is already available for user '\" . \$User . \"'.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$MkDir \"tmpfs/ssh-keys-import\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Creating directory 'tmpfs/ssh-keys-import'\ + \_failed!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\"tmpfs/ssh-keys-import/key-\" . [ \$GetRandom20CharA\ + lNum 6 ] . \".pub\");\r\ + \n /file/add name=\$FileName contents=(\$Key . \", md5=\" . \$FingerPrint\ + MD5);\r\ + \n \$WaitForFile \$FileName;\r\ + \n :onerror Err {\r\ + \n /user/ssh-keys/import public-key-file=\$FileName user=\$User;\r\ + \n \$LogPrint info \$0 (\"Imported ssh public key (\" . \$KeyVal->2 . \ + \", \" . \$KeyVal->0 . \", \" . \\\r\ + \n \"MD5:\" . \$FingerPrintMD5 . \") for user '\" . \$User . \"'.\");\ + \r\ + \n \$RmDir \"tmpfs/ssh-keys-import\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed importing key: \" . \$Err);\r\ + \n \$RmDir \"tmpfs/ssh-keys-import\";\r\ + \n :return false;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# import keys from a file\r\ + \n:set SSHKeysImportFile do={ :onerror Err {\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local User [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global FileExists;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global SSHKeysImport;\r\ + \n :if ([ :len \$FileName ] = 0 || [ :len \$User ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Missing argument(s), please pass file name\ + \_and user!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$FileExists \$FileName ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"File '\" . \$FileName . \"' does not exist\ + .\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Keys [ :tolf [ /file/get \$FileName contents ] ];\r\ + \n :foreach KeyVal in=[ :deserialize \$Keys delimiter=\" \" from=dsv opti\ + ons=dsv.plain ] do={\r\ + \n :local Continue false;\r\ + \n :if (\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\") do=\ + {\r\ + \n :if ([ \$SSHKeysImport (\$KeyVal->0 . \" \" . \$KeyVal->1 . \" \" \ + . \$KeyVal->2) \$User ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Failed importing key for user '\" . \$\ + User . \"'.\");\r\ + \n }\r\ + \n :set Continue true;\r\ + \n }\r\ + \n :if (\$Continue = false && \$KeyVal->0 = \"#\") do={\r\ + \n :set User [ \$EitherOr ([ \$ParseKeyValueStore (\$KeyVal->1) ]->\"\ + user\") \$User ];\r\ + \n :set Continue true;\r\ + \n }\r\ + \n :if (\$Continue = false && [ :len (\$KeyVal->0) ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' \ + is not supported.\");\r\ + \n }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/tool sniffer +set filter-interface=Bridge-LAN filter-src-ip-address=10.30.30.50/32 +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260302/20260302230003-Diff-Config.rsc b/MikroMaster/history/20260302/20260302230003-Diff-Config.rsc new file mode 100644 index 0000000..7c5a526 --- /dev/null +++ b/MikroMaster/history/20260302/20260302230003-Diff-Config.rsc @@ -0,0 +1,4 @@ +1c1 +< # 2026-03-02 23:00:03 by RouterOS 7.21.2 +--- +> # 2026-03-02 22:40:04 by RouterOS 7.21.2 -- 2.52.0