From 120766e0f255802c83bf28afb5b3ee99a47f5e8d Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 2 Mar 2026 22:20:09 +0300 Subject: [PATCH] Backup for MikroMaster sucessfully creatd at Mar 02 22:20:09. --- .../20260302/20260302222004-Binary.backup | Bin 0 -> 289700 bytes .../20260302/20260302222004-Config.rsc | 3971 +++++++++++++++++ .../20260302/20260302222004-Diff-Config.rsc | 4 + 3 files changed, 3975 insertions(+) create mode 100644 MikroMaster/20260302/20260302222004-Binary.backup create mode 100644 MikroMaster/20260302/20260302222004-Config.rsc create mode 100644 MikroMaster/history/20260302/20260302222004-Diff-Config.rsc diff --git a/MikroMaster/20260302/20260302222004-Binary.backup b/MikroMaster/20260302/20260302222004-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..d9e5af86b38baa68f357a0ff253425a777233dfe GIT binary patch literal 289700 zcmeFa2Uru`voL;AfFyt*ARxXX%`UK;o`?kz5D`Sch6PhL5GlbVG#i4VSg~P6#g1ab z-o=8wcSS+5_ks-z{GZt*h~4+Q{_eg1?{goX-IHa{?#!H-IWu!+cd}M3EL;*pN5%*t zWkP~V6>EkNq9BA?Al(MX7AS~qicl66u^b&|upAu^Q&1I?VulbCF;SH>Vj<*Amq*JI zXb2&7g2oFW1Wj}OP3X1SMzz}TSi?0Ywc6ffJBZCfRTOv>&AiqRdhH)ZwSO4b{$T=` z$l@gNN`*v5$P`fq%$n$df@2dD#5PA&6e>c<1XUpxszM}g6oeSn)z#G`dH`l}tV|*! zsZ&*5U2UVk2OMos5SxOk7;xSQRq4ASq*leL;uBPAt>MAAz7rgA6vU<@ln40#He8h0ct<}d^Dv`w`CcvO*2z6YPdVn5Fcm1(8`vP^M^yh&K4Q=Qh zsXq^#=dW)w5JGYKHWML~s&5xk5pqXCY-5D-5wHoMr=uY}gK0FuR$Qr!$@}wgaIj$xE?2iyI zhC7>fBJT`@Mb0M4$;s{-O)T8n(Dwf+vGn6YVgT%I0{66c`3hP|f->%>w=rmfUlD@= zx0gA6d3)nzWxQ0C0zm7VssHL>zorxu9$Wt_tV|>c${J$n+bqyqN;MHnXf(2DP(#0? zyFdhDWpb@5QP&4HKfM^h(GLZ&;}N0^0s%y%Fd!vDC0!A=Fc z1lSD()q=A*ToA@Y4WTxuvswBlfWW5f+n~;-=-Y7pRDIiviqI?+#I_`b@gIaJFz_Vd zjDf`(A;cKZoE&MY*Ev=QF{uW1$E1NiwbrC+v_zbfoKQ#-W3^5IiZepEbDe3?jrK=$ zn6aha+r*`^UTxR8D^eTHZ1B`C>EQ0eZ3}n*D z$0_5}Yv6+UMGu>9P)XQyFj;(t2?SRM6Cweye$`Uc#M``5sYTb9$B%b`n23; zvAsX1^Fe+ei4Fkg^5Q!K&BW<#Zk(9ey3T@0ATLHq61hq<<$D0sA`So$U&SN=K+O?i z6g6eSEU!~$pr@G>a>gN{Y4x_)(qvgLakOdZKsVz0S?t!syLQv34OJ{O@m9J;JWbhc4KlHo1IcS05lApnkLj!zX#A)6ahs~juHSgqN^1N5IOaO!eJVH1}JsJ z>wPOWw)DI(pkUAw^c*W2wXbVPxtGI0kIlswK6J-P}lT>Ndh)FGEorQ3M?ZFm_;NqEfMRk zA+%a$d=z;-Y;YgL(M)FqFzO;iHLV4c?Dq`~n7h;}O`J+jz@1_0%hf*tj=3m^ZG=$1 z5wb-=Y!ie?!v-NlsxB~a408@b=A^c)uC6xu@>({jnX9X-jSbf_6u9o30yj2XtJjra zu`tfO6Uu?vjVK5;w`Lgm+4gpAta5Gsp1u$QA9kUmXOvJYyEa3j;2r=GQ139Y5>6!dNPP%poIl~w@BXU;J zi$BR;K)+~}R+FI8dd5kV@rIH5dW4T4#59KyHe9SxCncy=3d8j)^w7g`1qx!%L5Pxs z5SoY(nuHK#96*>2yU7SKt)rne9dnh!7dYa zV_-KPFdB`Jv$-NxqKWp@gEkFLPleqS*o}o<7VJ`CSDOO0kx!0NCcy9CnJjA40f?ZC zCHWAxhk81|@gWLg*C#y)m>7Cd5wb@pkBaP3v{suS_Vi3nPWB+>Q>%>ekg4K48`S=f zT9v3J)KZm1Ehqo!NLtRB2m#JO0n|XJY(e$I{6kS7M5%`m#Q`Cvmy@1+&Oj;`*twE3 zLv?i>gqSJ7G8Ajr*}&BXreW$h#tKMPS4S`84E*N|jOeUmC0l5b#)_VmY7-JB6$4jX z(NhDCSM(OL!Ok$!I~$Gw8tGL5AiD7i1c2p{A`FO56SjnTSp4zp2JDpazO_~f< z&ZG~jOwbTAPf(<_?$b(tA2_zs-v_h}X-trm0oRw5Br`QJD3Q=;-Bt0isXz$b4V7{t zUaQom{w^V`YkDRSggP=otx8a7bgB_h4buYz$FLeULZp!mlRT+7NJ9hc>=Y(wVV0h~ z0B9BkA*LD3sZ`L^^!C6JRn7+Pg-7V%hNu57%y6B)mnv2%OSMM`f$!2$4{Ysm?1d2O zh=SM#tBrJ{$Z==@K!J+@N`>Tpy&bO`EhhTxTvs`N&+7(J{Q{0i(qRVZz^bgThX#)I z^`rxmP-_$5Gb$R1GG3vA->~`AI{JKOC=z@sfIk9=E(GvNOOy29K-ZD-OU^H~wZ!L9 z1|1RkwUN+T|1>zZ)=hvU3NQfz!IJ*O3*4*@ftUT(5vd|>bAN&px4#a z)k1yyO?7oOTi?z{2(|r8VFvU8zH0+&!wO4LDBPO)bP4bc4v*~EJ)mQA7yxtKqm=SU z09IJ5H$0`LcU>$6!)tm6dHax^8HUd6TKxbb1GhVyx;5+6H7q>XJIGhpBU+`=#!KP| z;29EC4WUjV)Sj9|X*{6?;sDPq(_;i2Tvy-TLY{}<6w0EI0RwZg#d36H)kMjN~U2=G9B2!E%+`2Zhv4liJ*idxOtBwt#7xhbv_*2S1?o&LfxqdebQeON&Wn+K~z)&&#+qUkyM1h zs)TJa6`|YuzEf-UT}(x&zWy2?+UIsB8bbH<*LR_P?i)fws7!x8oQBXVecQzrUHHrSf~*5Bw`^UCJ3=aD2KkCvLhxv&42kvQI7dJ%JsiNc@Qd= z{SxIK;OO!M*zcljg^LxKSWbu)xLAaX`Jt!>TchR)M#ayvKCdT<<4qvR`i8%riar#hO{%gUXm1O^~N0wA# zHG>PYz&BVgX}$lKSkr?7!h8HK!q&JL$HZ*8n2U?qGBFzy%h)8wmhRrIoc6u_qeI>1 z=NQ9W_YKC~A2g8vYMfc&UBfyBbntfieY~wmyoF*JE*9cqo=D77=+I{DP46A~`j4XB z>E~#}wEhj++99KUDa9s1$}p``7W41Mnj;kB3bC9m<|)KDM~Aeq(b-7rKRed4pCb+S z%Qr|5TI{9x)mZ;~nbxtm6c@`CVnQUAV`4c^hjwAvgVPrnls{>asD6$%m}=jkoqnO$ zFVSw`FNu|;q`G^vG4}*jtovY9l0-|yO5DBU|IPHJAjE7jk1duGVva(L>!zfX;?CoSV*VX}+hDQA#d5BgFNZ&cTuku9 zToK6x=i}l&-3j=!7E8aMBM)}@H^}!bi2kL(GeQY@oYLJJ{}&Q3AjCqc7$?LssaPr$ z%cLaM$2(YB`Az?`#(4jqV+|h2H&{Ey+WvArGuDvP`0wIug^PKZSSAxIgkm92EaHnL zB+4Pj-(}8V{aKVle~vOZTHm1DXl&bGO1n|lpx^-Z?_z9?iwUk67mE2(F;6JwaK#ec zDBre^>BTKD`lAXi@aHIlKlu&H*I%^xC2!kH;^k_UQtmF46Ko746cU0h#|i0g^STu- z#>8xa80Ud4BNB)uIsr#b>v_*yaa*t5D1Xc_5BiSX%B0qqZ{SRSLx`mMuZ%3inUXiMc3>eAkcXvq#=zT4m6ixGSunD6NK1lnh)NfKh=kYz=dCq@ z*n(C0($8GJn1aY9rO&YiMo^evxD(FKB9|m)zZBiFlGQhx;U5KE6j!7@1JalZpj=v0MoHU8?vAVZOPRB#iEM_x`A* zGvMcP0ztBGo4_yu`(oD6;J%Gl;|%f(d<0sNu5TbKd|9m<7(aUdurXN22F@xMKN3~_zsVuhb^2!gfLum^#TE!b7wBWja4bMUY~8}OEkYDKgvj;Z z2D(-`Nj*i{x>4L+^nH49|XbE-4PCg-ItoUoBAW1_>CeXs>s7DHp zjwpx?X5e0Rx9xskyL9Tn8aor-xO3CJnfMYD)WauwqEnN95iqVYU-HrIHCn0}*2MDcVJi zg}fB2u4JH{5u-avi`I2N14IK-k*Q-$STbkAq8Ov98t7c5%i5%o%T$Cmno#3T?oQp~ z39Ta#kd&0i)+IAC23Xfb+hL_8Mk$x6;tSK-lS^BYDsXt}_mND_{rdACME_3^Tbi8VS2}*pUe!3DAP| z!^DL6ggC=uAgnjR21iSMrVWIGX$VnZq!JUN)DrpUECyJof(?#!bZcOcriGYfUXCuO z4ps?aGbAE|92gcIVI9rz?C$zBXdsmpLJX`0f`kSpT&&|`7<*@P-$b=4f$$7cX=JKo zSg`~SfD|56-O2~ax{ylM3L(b%!lg=BppR8Wxl3f^swE_&!v?7$umL=y^liY^&;~X( zTm$T!r@v++70#3C+9Z}Ngdhh1Kp>O1L0Dkr{XR`6t-#_8$m%l(4y~gfEOJd71eXe# zCc4}XScZqkl3mGVTT3vubSXTss;HV}W8*j?PNhyA^`C%(%t)sE4it2`QWNtZfq~3{ zBoh*Vh(DtQosdPV{v)G7WhYrSSB2J|x^1d7mP<9k^R0X_DYVUu=4>but^m;%5 z;0(F}7RWK8nzMi`bx3=&J-PQ#C;ot4jEFdiG8TAPMyTT^>-iYu3^tGlc|Bdb4MOND z$O}T~CZv?;ligsQHx1J4^m$wl^orsULTHZu`ez6si9RXlIYQ_oC=C62aizWuYr%~{ z>mY>>H30h<16Wk^gXOALh2*}4t1A&5-O((ek=VLN1Th5l_WWJa(K1v%+kZRT=p3p)D zj~POcg9xgTVvG=DU1c++2||puc?*;i5n?=lWV;?F5s+Y*QN0ooV)h<_5W@(eqQ;Fs4>N1_g)F*_}cJ_)%9CG=xWojy(r^BkCSHEm!_iJ!b6UG zRv#x`w935YXG!sKb-wEUbW%pYwRbxtDlR_X<5A&SeD;QFUXk?L>_a0i`jqv5C$pAL zvpmhM^D$2DXO>&tz351T=$W0DZ1wTytKEBCIIC{wekOg+gZ|6wU)uh_g}&r`XZzjl zr}c@cxSsy*fsbRi9sf{mVYu{(M=9FGu(%;Lw~d32)kZvT=M?!%Q%MUR#&J=@$U zbT_u$XIkmiZXZf+v<>Ym4&RBlns-V3XmN_e*yb_s&rH;;-}`jYX(Ka#bKxgdGnX!J z171YDd-Z&Wi1DFQd0@MhnC9$3txb2wiGx*t`_U;16&;|=k%Cbt$CZ)A=~lB{h{ZkZuDij2XweJk)NZy zV3r@bc2Q@+HtpgAJ>n*mQE#6bIx?J=J!?t))T8S(Ya1S6gqGgToXOvjBfC7uV(sRD zGs9Z7z2cBCeL&Are(JKR4f-y!I_tc$?tH6d!Br#bci*>lQ#I@f=(r6gZ_{3X5-h)K{F~P z#Jv+83LC~Rd=L>`mU$+`r%pk|wVsu0?ls?tU-?Hg@6A<_XCHqb`n{{S%XZc;PI2&{ zhmMIIGuzeZYe|WYL$7XnW1p2VH2z>M6>&@`aNq(Ik@U)#I&-dki`z&!d2T>nyVM09IuSQM;RA{wy9@9gw18**{r41Q~SHRC22Dj486CoVsDqhe*c7R zYkKv`+P7&NUS3#pcWLp4%yUb{>nz&ja9?^o?Ghp`aFf~G>U};WuxjkQ+)J*qOJjHM zY!JME_~19$rlw`3SBr3ma;tWJ$-ri;o4C-PwAwJZp8^GliX6POTpt`P{}#9Jgyh)_UthR|h_} ziFP`Zrdd$3I4*@VylnWi6zQuD+7gp{tc{oDB@GuAJUOh|Um&Ih&%QB$UmD^NY827J zf5O0l%f?3*+BXchH65ASDlWUpmQB8qoi05ax9rTEl!f*Y)BD}`oS)JtwJ=hq9D6GE zJ+pksjeY0Z%DN3XbVurNZSxz~Nv*uL?)51y;P4h!v{+!Kn*L$jenB`b;ZDEMdJ)^E z&zaQxV5j=?m&Cfa&+H_ya9;OpDdUn~M6mC(y!e*e&X%0swZ?77>?5WKVJ=2khLIzd zK{w8$Q7KfamC^OcYzwuybLqSs;$qQC@6@}PxiPcF=uV^Gno}sIMhN5JrWn(h)}3x_ zP3<0r+hR8GgJo_0g%ZcjFczGrS<^ysHs)w&&gS7bTZrLoE`~+enX~yAo6W~?HisvQ zz*^$Xv8KA~f2rfK42nx_peRO&mO-&VSO$ef&7e@wxmk*(WiPL|c3t3}x0L3#ebN3| zJLe3Uo%7~k8AEyb>c|2DO(-peeI;7Z zV)nzn12^6djoo3Ewzk!niYF^B-B`e+4@y~%1`XLU&4FTj&)C^zwC9Vm`Q`ERC?6Tr zNo^ZU#CL-FRT^ z$)~sLCtnjQjPGkRHVvHKPyKRpQvSqQbmmfTLBDF|N725`Q$+RJCX3B%n#~wmJm&52 zmv%$P&hjoVUB35zUfoxXUIcjz8EGmo;lAe|_8l?*GW{5_{CR%dY$}a{D2p?wY%GK7 zfz>glb#G`vp;Xi9G^$Y^))0O-ro*@~S{hS~j7(^hnidr^gMVAYGeShtN*_pE# z$8cu~h29ivjJXT`7{^1Vj>R%4M#ij`#uPf`Vk(tR zrKi84r&pjCC<)aceg06hm8z=kG*wEAAj*`LC*9S!#hR1-61?3TcR6$(AyIa;gWKY7%(VJTuzi&}BZYjOzlF*hu+fGxRT#p)0qaPhQ zb>#X%muCB%n`E5*+TJdjE)K4)*Cx?)WVLDefD1ea3ucaoZct= zSxTeKb;oS>+w{7pf3A>xZYRu->Wud6ndn*nN<-@TXU%ty-p_PsIA7V3HRaKQ7WbO9 zPm9^!{l$0w9k|pL& z8*y+z^o*QC`>B;>r_Px-c)z@?e1zB5!uCN6yr%4A*sKm&*02vfbIeY9m$0OO4zE)( zdz9HOTVNfM-OAEvjK!1F^c&SGhwDBWM&4a#=RT`DJ}8pSn0TC;E}3+u!-MJOFQ)F9 zy4td$Gi#l^X!!u?oOZF?qkbmlc(g&^gsJL>+I|v>ju<| ze$ad$N;^}0tw+4C?CspXv%Pv%Q=Z8^`aa0{IN0TE|E1CPMJJ>!uZCQ*UDYAWnx=@a zPrto&+NZGyS%U2dHfWz{Hs6z>d(LW^RNE=ss7CV>lOd?ivN1Wf4$=W zUwFk65OQwM5wWE*LMD{S362osa|ynT;Nb*cF5=@dOr(&=L_#57Bos<8p;U$|gc1c` zAmt0BTsdEaDHP)n!oTY=jfa1H&r?c4$k`3!$>ltSP=P4~Y)sC^<%CEs;_-QMz6_H{ zxVS(>@CW@)81$;?moZis)U{0jyaF0eXr00cS)y90O?3(-G=xMgi+1vdFV0v%*fk(5 z)ZZyorP4a}!Xf?&??dX|X4gklVQqvl;_-6=BC6G+r^i4ldUc2Lzx3E;*Na-~E|;E`X%SaAr#V=M?=7-JdKr@GKZU9``N9hk6U9Dt zdyz@r>6z!Q`byGyZEPwJ6h#iaW;(-R-GW;!9`0&!an_-^g9=(}ExbzB57-?M7;OKb zq=lyMSP3z|>WSB~W5KH1^DB|xhU)r3Eo2)eDGu6aCL9VORIRmlI*qho^y=sCIIc1iI`~b~`FBp_x-WW}mTR~AnYBQ4X5-;j-WNv~J$UT=u6Kj9ZQ`K| z`cmde>HC`PVy*T%YWcWxJGmS03TQaAR#J7n{n+Z4?RM%H16UT+@EjmOxA`%@_NCYT%MV)%_wN89S74k`GT z0gms+EFk>Vuo2w}bHx71bI7x=-MeCuK4<(2WH@_S6VIW_R@&4(zZQ+DFiTetm&G#Jp*X>Hy~n>)Vd18;6mvrKYdL`-&Bn~0TD5Y-^v%W$n|J?=9IkC&%!n}S+V{+;c?Uj~^e%mx8t)pE z^K$C>S#9Mh{k^n_e%y?K!KZH2kwtD- z&hckjx>N;r+A<|E{Maru2OO`7%0;tw=cg?$h};~0KWN5^ zRTb+Zjx`v}pXN6AWUtT>3wW&l?t8RzrA_Q|r{K*^E7DHvmyVA92q^uxj4uW5?F zWg&AnFK=;*26M@sLsf`(roB>bvd;**N*}zC=OW#AOXe zHg1NTgNx3IkL5lr%6=QUrkkywO}j5uuO?F$FFpq*A$n#}i@#TtLWWIFHBS2{91|6LR>3jI{8-XEBf#{`V{eu<)H^ zY@E$ubEN`IB9d}NxB!>SxR^pfu!TG}pCbe79u~}0kP`L9f*PbPQoDzRF?E(bU7tNs z2X$@JQ5mK5A=Fx@fOwfT>e{^xd}c?kj8e)7wHCgl;{c|8%~k%fDybw^XXX2Ne_`bt z@+ROTi)6YeSo>&im@ioSBMN(KYg_p@!OAaiC9Qm> zSivUwPdc~hzbS3;ihy3Ci!Nzv#2rqjW8O8QeA6RlU5qS>v5*b4#o4um75uhOT>6wub&XHI=d0&HiIx%TYz{ z+b$fcdbPJvuVY)|atCYg&1zmychjweyoD#aWX+y7VM;=IfyF<&r>&@#UAS#B;N0Rp z^ZGDfT$pq#?A0XM`*zDqHY&=bii>CBy(hkO-}ErK^MZN3%3Jm>YVZ2Qy;+8D+tl!> zO=jH~(J5c>?D@si0k);9?$oD%ctp(dM{DcZJh(h|?>1p<`IOjk)$(o0jeBB64cr#ry!N2Xf9R%-ZVV&rvHLF5 zJ-&NFwymgmG>c-j`f%34S=`8pEU$wPF689Im4XEd3c_H4g3>TppnnBgr=GvkDSrj} zuR#Cr73j~V5|_gjN-#pi<#J^Lp-jr=^9YP5l=BFoh|867X)1kBkCLX+_x?eeN|=x%B`_XegmKwiz7&_>0v=x?6Y)eMTqfX3 zz*PFtd<|*v-%RshQ+;6)=uN6L6P-y#L8P7J;~k<2@(y&OhOBLxXx}^531bJF6HD-<3k8TQPjR3=NOlQ~NVAcpR92a67oQnw}e(N5;Qe$f-9N8}E zEE@W@_uf{cxi6Z0VyrpWYf8q`*U_%?U)=~<=^x!I`(D|)PYDkXtvqA3uhKLxy3m95 zvV+aS_7i)GqOPyZXc-=NiZRCXN_qGiqpRJsKJ0HOZ+|@WcE59c&7SzPJ=wPMF_MQ{ zca<@f^RER6cMUunaC|*;>D;pqVuml=di_+F9`4>5ue71r10?I)jh|jJFJhkKmYGX$ zU8%U$_xzd113p+f6_s1n$=MRzZuk4kt_|b1RrXx4WCe4`p3{pC8Na^T#I5hRJ`bA zeEG0M#%j&HLbrFGajN;2M$LxCz3$sGM06q3^HV_K-Nh>-91GUJ+{EJqUUT+YGN{|S zwbE6y(;i=)zT;*T8a4f@Y0iL>x0|pL&VH-Iw|4Lpymvocukl_*Si!pK8~L7jCTrI{ z@>qerdu!}%_rhkKtK*P!p?<`t$bpSs&3fs3$Gc<3C)p+6NBJLYv+v}rc;(u}zvxOE z+48)I0N;SXO*a)-WLB3W({f+kNVwH!B`tACR>x!ErThB%kEzSV2fLKSEKUhZIh*g6 z(D?p%S1>z3>I`Ow{)1p-Zq8px`70@8%IaT9xj)|Z^L)w7|!F$WkQ@_^9hW{W^*|*2`1(9IT8uMA$SA_Bj@w)DJYoF;iYqDOH9F* z3itvZj!W4BnS@Ku)jyco9$5bC>9=Mv(j8ud{NeQbu=ez8{#(9)Hqkn6l1p+UeYSrImB%FFLV=wQ7(d@npl-?b`02IpUu>saf_FD>v3DU*H|kWNyZ;bk_Nq`T1`m z*L$7LweyTvlvPj2pp6|ODn4Gf`rbsja=r7(7K?&si1!>VZIpRpq~HF|<-_-_X?yOm zXV*64&hBKGa1pvl!xTPmUuM_Y*!^(0V?npri}bh|H^);~Zn<(aA++_JhN^?cx>dI9{(9D>DNOTBtB40- zi320LjVxSywT@rvz=vx_PFt6MfOXVl;-eK#8BJS{>pSYm6rXGVB)YU6xTUlXA#VDl z&b_(r_2(qB{;6!ddfZuyjZO^|?;f08lf2(CFR+KQo2^^a7B4z0M|h$Aqr;Y}1#j}5 zHfME+AMJ3-|W64J70O%ZL@{TF!3?P ze3Q0V%G$*4>sKhdJ$CgF_VIT4@V4{3DX-LX+Vs9&EN3b2HpxBenY4A>rGrsim*^JL zj?BC*S=9X4((=3ez3%VP6fAk(^7e4;hvMPrx~sf$PP&_M=fN);H+?;)aFup&NqAxW z%;V4HyNt8@HYxI0{**h6-I94r%am$0mAjselzrHBwCF>lpzNmM<7^8)4Eqoi#)uX?)w&nL(W| zhkuI8kep~((IhW8tz%%$1~1%gYdQD!re|Sm>a<4UZgbJlIj0-+I2+N&PT6kK zlGhW%w{P8@xn}kYQO4@?+XMHR{lh6A7y-5uS{zta@=#*8y?LJ=Yc&tsnE1T3 zv65u+51MR59l9XxwBq3#mlX_mXc181vNyMM$(ZxWY2DVh^*BAiXx8~KzrnZqy_386npeM)@sq%($3rT5w$OxKUVgU}@}xi|L#nc&E@{he6FPiP&c_IO;{|a;uWShzmy!|PbKZcW z(j8H6Fv9${lkkO^MdZ*{MXB5OSh}Z2_+9Q$G0&pq?e+aH-ExwjFpgZ|4+hFHss9 zf8d>4(_AY*Z|o^7J-%s0;jE7~M3ZjKZ}hpt?Ozm_#vVzScI(ov?&B?Khv``@dM2cB z?`PlW_fl$AD&0M|=u@w%ecfi#?jIdrbS92;)n!9(znocq5mIpezC9HlE*~&HNX=qp!5Z#>aiBfjF0o3!1lnb56c+`jFrK2(0X-=T8px{cIa*S){O44zVO0)R?xK> zPjZ|O$WQjVIkT0hk)QIWC|`{Cgq9vIFAkSj&JPYIr^mRKa{%RPktby zCPDlAsT%{O1IR>e3tUrsVd4=)Mtti0%LHvtLw1C2A=957-X$zF%sZ@;H=D<2V{FXF z8+XUQlhJXUj%CmfV;Qt{`iu^<*Sm~c_MpBRyfvhi>+$D`uV&x>cshl@?u~RD>oP}L7-(Zy<@IMfg?9;a3Jvpi(hqEcO@|D&>M`!ctICV_Zf5VwDR?=+yIw+x6?)&4wW+7D&#?8~rVYxe zGthf_A6|p^L*DNw-tC4}^>}umV%W@EHm_}hjxD!*Y5TCi7@ zQxqh2%+VZPRsF0VYg})io2%A~Eh;*Fyc8qYE4x*V^{%GTpz!&_#!Hhuu9N6u!2@?EJm-eaX2OJKa86 z_eP5mv!DAUoNAX8bEZo`fm{E5<{6*-@(W_89hZi7NSyj^&inrT*RPY@Y1C+28gthD zHt$EK`70Od{Gtp>29`k?{)?n-ZRUs~#i24m>8V}K1uJO{cRx8{_l18H>=N!|pL6$C z{9TLp@3&b!F}BMVed%v~KOeI8JMl?|oNfw*J`jt>+zh`l%4mCij<-stN%$h^3Tt0; z6?HUMf0axEIa!)7F8oTYATP?F4N`=4(4~a8#zdGPkC(?8jT>&Gj^+H;Jz}voa1SRs zALC-C#>@euJ5fe|iltI86JsNIS)Nkst$D-y^VFIa?JL0~J;}*05{@;Sshl}f`>E)C zlObURt4|Q0w&xn>j=L1$Gv-N9mmZO;_ZDw5a`NbXrn>X%ycU<&<*Yv9(Yf`dA2Rv;(NoW&XrJg2 z&bEcs58IVp%Xt0hRqv^;=58%=8h1ImaLV2DTUL$HZg>&5cy>wUg~eRoAl&^qU!_(1 zP_YbZJ1m1ztT)1qy7$=mvi}kuZ~qdD3kAMvjAhJdF}l;qHgp>8KW~9^U~K{CV32Rb zhO}x!@)1w}^S=XxB+Sy-gv6OjF*a(MPDd^@DWYFrer3nFt)?GL)11#f-@RK?!RhC) zll!pr;M|?3bKX2Ze%f@qq)#`$;q%=WJe?#nvwLik@cPs!kM<*T@3-@gYrXp15}V%q zlzB9tre4k?%NNFM@;MoG&9$2L&*Jj7zmpB5f0>c|_R@xuPD?5m7GGY&_dZ@% zrj$0{8F;YvXwjk(Mo@9Idgsg7c2=FwxQq6)m@_r6viK9Sn(nxpH8CV}xvX+NyHqjF z;>GboX7=^ig7-0Lc~nfK=(A5gaqIk$Yxx%f7Ckw1?My(L9cAm`(b>ThvRdZPSuw8o z4BGWBynN1`K0`M&wFBD+Sk_?s02>=@pT7*IuJQiJSE&6te;MrGGT7%Shl5Mxd_GsG z5aJjY=Lls2j!?l75fUzkjo};)N5mmG5?m;gVQjXDPbfqJ8CxO~5emM5gUfYkD&Lcw znlu$BjK|~g_)?jI&4b(WI6N6g!o?JFo3SoMpAU&xcV}i#ujl!lwoe)? zwb2ZlQ#8dVzhcsH%9AaZl|5w^|5)cpo?7Q`Y)Qq@jiOm*?@XvyJG`TxELEF`A&LeA$&<#LXkM+iiiK){#dd>$bYNH}bsR3ITF3N9|LUfS12XlMgG>g{^9iY zBj>vE58FP!vF!Dgb6xYL_cuTBuYd5R_Zsu>OXr$h^FGd0FmNVe8Pp`bfkP9&xVyaW zio6}oq9``##P--R%GXF z*yy^WOPufXH!IfXU>iSm={})p=bko0Gv=MpOg(4Y+1PAC$eC8y78?@HK*KAq9!tFb9iwij;n`i#^TS2ws0N;y~eZ^kn z3eAA1X46%5I>{d4*B?gNUl=>gt9X3pv*0`%zXSC&6FO7U&nGllT?_IZN{otbP zHO2>WtnEA-G+vPSvT)Mug(~Yp??F{rEe?0Jbn1So!p8T`jgGG#j>%z9t5X%`_rBG< z>hUhy0axWnH3vna)1dHwcf<`6nfB(JW#zwlJkD<_wF?@tEEYzPx*0+IgEcW*O z^+Ey4+!9T`TkO(fQq4laTQFp@{?RQI4EXZRrXL4!Ovr_S-o7=q%XJEtLAiouPzLC1 zm%3;PHD=MX*r876>BIXI%chN}?X_YaU#7&EW2TV%!m_3VR=6b@3!u}i$;UYL_9a6t zJWPar{yZWVe%5>*@!#I>2k{dxtLlQAtBVH?S{MC+(a<&d`GRXh%+3agvhQ?xBt2V+ zZL=Qw#J*!D{`zt7rNg~0u6yI`^dW6OXJxSv~wcrbk8B z9<}L6i$a*3iluZ}yMLJb+1K5vt6tf4uZZ~Y;LaJ76{{!RlAR3RGrfTYPi*UsRn*UN zZ@+lcr2bpBQnC8|?=BjeS+@JyyZyXHOM^D_f1L5O_;tqYebl?%w@kwLM=67zG%Gq5 z@4R$+(^fC4$gjcy+ZclNz)FT-{okSgzk29DYg7W~Dikt_oF~OFHc!C8F^n&hNVpsc z&c-Edwp>Vv1Q@2^Dx@NrLdat)Ft$X12_+JqoX6+$N$2u=Ed5!dO1K!CFO{$f1z#qR zu`xLp;|d5K!RJZ%B90IPjcQN|;3bm!LjUmvCJJIBgqS8!Yfz(!c2}s>$r80(8DCR~ z@+p)!Lx?;+r3bN15z5lN=WVEANY_{Mf&!W}Cak7H*<>nI=A%L>FB%IWtPpNv0*_E@ zBvAa20yP3D6m+`PnFr+^72WQPc=WLKRc4ues!=nq#0DAo&8?;W{;P>OnY}JP+|;V2 zdRv@uQF`pwHBVnGcwTgG$$;pt+eVJjFveIOGrv*TdSHuwe2-g$>(Un8Z&t@B{aL4GhNwbWbZCqrrXHVe5 z3a#D3wu`nu$;_Tfq0F@J-r1#-{d3!-$@vKjPp%nSUhk}6T+jQ()e)B+j57jvPNyD= z3ShTB=}{q9gtqBxJ2$Dct!9N!xoP+8v;fMJNh3VJK5ds z1|2LZs=Fa#f?d#s<*ni_1X673XG*!Y7a`;9N6%VWuUoKu6Z_MotdC_c z{VMif=zp+My@N8{vS?52&9FPlxM?;ID>mKQ_Wr|%=43gK_taZ)^>&A3#Hio+6dvm7 zxxf44T~if#+^zCa(-()|dD4AJv&okaFHJ0pk0d0WY>v#mvTS**KiVCpc3j(B`dE94 zR+2d}XR=qD^kY`7oGLe5>AWt_WI*HkE1EmgqmR+n?LM(uGVuDRQ6>9L0?cj~Zxx|i zH!}{VJHKta`Q{9>fu1A~7n)1Q9N1d5|K5a2&gP|4nW1(2A1&TKq_|;TRMUd|maC@C zwtwp#a5X^VbA255L4taQ>y~kD?n`6Z^?0}=MA2)YN0j{n>6W8MLcJ`4Hq9=2{KV~c zy`e|$93F9Kh2z0fd+OeN`Sz1_r~RdJ(Fb0~KD&>s^}EkqiH1FQ<3_xqnN~r$&Jpn& zHgEP{p&h-$hZoEjS2lF8?eJ=MnZ?#(gtFERc zXI1)F^gP|D&o1Xf8**cFGnRE}l9hdrIXvr-(Ul{8ybcVR=+4V2_{HtC~{OHgR~(V!AA zSyPp)flP&3q&>Ta2Kt9~?H&S!9@P@LGEoB$g*vV_`iH{NhOFgS#enlhsESNxu|NnV zE7e3Sq0uC$RSIP+VSx9QzAGG|XtXT}Z*_HbH7H)7FjW0DM^%)@y5g`IVOS+M_gA zD3t30J7?HIiC+dulyGHCT{u$*cIL1H;=zXroe@-0W{EH^4<{Fk>0kZ?N}9+Cg(NXn zOV)ISikO=CxP+Pl!0Yt{f#Z4<#I{E$pGww1ChIvvF=S|@T9bsLqMa-UvIZs#1+gum z+_9r03rN>M*X~BvGKN`BSHAdj!D!Z3b#nndCn1Jm9Enhdap5cVe5ruVS8(NgT)+`< z`8)v>cy^`+cOe;~y>}dxiVp4qI2tD;N@JBWC=LqfxXV;=af$Itt&$+Q1h!Z`W^jx} zLF@)3+*T-v4P|m!j*c*lz%S%*1D652vQQO_@fZImYdqJ~Nd=OVv$=i*j6Q=yk{B2t zN*zPxVXz4dRf)keFtj_7ZCwFt6I4Y$l@7Nh%V|SdV+IsrrMms-8Y)~v7LFw$Pu3>L z6gAdKiXL+~rs(j^qaYh(_}WG7Z%CPt<%W$Bnnj9i7KIdE3RxF>sICY!a2r{d8R`#{ z;sE^r5CD7#JZSU1`$DN!sah$IA`(<;ZA~fUrFzhSF!}m65XR63^R`n5t9)?MNHJ6ikR9+Dq@VJA|#B!RQ<|0$Qj+X1MAoRZ#Ab@1>DH`r( zru+8{bKUXqIDml^Qe#xjq?w>-DY$T(8G0VnMku&N`Mb1WKJ!}@L*0-!twV~iVLa4f$<>(mFiW0;IqEkttXHpS4 zC654krBHP$%TZS=no?^BNHt~{2JkGWrnEm}pqZXh?+ldsniM3FhQJ`C z!ZJ9znejWq%my_NLSY8> zjVdW2-cv)UlL)oJzmV!RIvk}ahjdmh>Xq4PgqU7u z;LJHN>(0aO2ttgNbcCR`yBR#mUH2sX6lkfcjHM})M!~!xPm~j$8bS+Y=WA?V2p+%& z$L2baktwPoCE~X7!zr+Bvi&YZw;N<<5#|D!gyoKl~lSC>tnna?;KQS19a0KE* z?2H0bFL_*|ez+n4s2k-;*&=|(`yVn5^#Im&sU-3W| zd1vxPJd}lk*w^$ta1J4K0U;P|k{4DQA#@BzS;rHk3kz&PJqd7~LWt=Ij6pdIKY=IE zW!RO#?z)b1s!QQV8SJjWJaq=l@z36%2;=fOJdDd00fE)3L|_t6g)&yF~*|UX+)fsNf(N+F&wyp&&M}A?SLRqhmGc zpMX)%Ft}2rnxyLf4c$qXkF?po=*vK4-&E+E3VmVnW3U*AO7>-tF3{(`EIp7w8bSkp z9dOMUJ(LgtF|+}lO#S(36gVHm_8`qNOBBS8()(02a3NTgG=x6T5c)_%=o1a0DjGu7 zfHGa@uTbd-(dY=#=?EFobprUDhWiBOA9@q+|YjulydZ<^r9_CNGTLr z!2W-}Z{M!oTd!6t#ZDkZpJX-OUCq2>=FPl$^X7qLRWEZjV?b0eVVwZ4Le&jUl@Gh`0NM2`dZOI0Gn;W>KVOQEbYiVjO3x9rHiN zap8EXG8#yo!_D@uq2-CS8(qm^d~M?Jmpw!g4xj8H+Q#9ahp3yw7+%lfaM(k1I)`H( zqQx9O)kAbFhegqPZW7Vgyv?;CHkJh0wUu4>r=IJHemIEe!9he14I=u{Afg`+BABa8 z;f&J<8RpJ{y@W~dFZm$;95?WxoL(Tp*rL2dq`XX|yh4Ow2Ez&cmI$K_VE}uch+ZSY zSOeRcwkV{$PDFnqf>q5X+=md+Uy0~yg=ninbd5svErsY>g$;C2eDrOF;EbT>i-~Sj zh+Zrv`i??$lR|W}0x5$3rH8(&5N%hOn9!|?&gr))M0Y4ecPd18DMWWGME58}_bNp9 zDWu%55PeS}x?Lf9Kq2~}LiC_Q^pHaIBZcV43egV~qF)sgJ**Htq7eN|A$n9HdO{)P zF@@-bVxnIc6ZA7-N#-eq=xK%M9WT)iFVVYRqRm9~o|kBO0r`d!d1}E(GjOTHr5=|C z$l**PwXhM;EL;vF@(rC#bU2Z^=?J`aB+f8dsnAhGYAqYE<`Su+<`FSp;(UlTCZXW8 z1wgS7`e8AC+JwszT$bW;G?DLng_u_MsKv{epcA#=$#Ps);Ifk6UX4H2;Bp*RsS1d` zj6Y5$QhURIo>54pXBAR=PsN`JT)J`DfHG_ZbQ&&S!R2&Z&d`UJ-hX&WrA@f=Pe5T?Bqr)=E<7g(2R#8+jEUK7!xDdwUG50un$%0iGr4okPu;T;KkhY;}LCY%t zqCjUjvXRMZD4B`|Qk%S((n1}k)udG zmq$rIwm=k_lI%};)K#S}evusPQ^7W6b}4kAOZ}INZ3_LTz%GT}gKheAuK!?v+S#VC z^CHJCTDO3jGHg6#CE5c~17IF%)x&gGtKf#JQ=zzE&wS zKkX$B)0hF0IA)j*luas{qZ!rTMz`juWQMXq?*uH~x5SPOCBxBxXp`ESqp~Ghw01FO zq0oGuwTlI_bepN_WV6}bCW$`y8tlap zo`(Sv#~kN}ur%x6!o}T85%a=~g2?R9jCyZOdS1u`(HI7ed7)q|LZ%L0wEUR)3;i%A zS1ddbo3?y7~y9J}xsHYY@oiY}eZKxM%>f&`0#-R*6z4H85x z$U+!`ETkgHyalFc>S8L`r@H03PdNKHa|T*CMJG?@ zNunT}R=H%tY7tJ|6_bP5on`7oU5Iqe2yY+$_tAIEPr94*9rMEoc4)upJByxka?73fs$fW&*l?PMnF<)Ch z&hp?|v6nVz!rdTk`K&nDX*qQzWNc;s$e3Y7GCjv!ErK{;dgqPCJ2R;>Q3gfPJk~TK zb@NeHVV{2^5)MWzw(p`tvyU3HTg-!TX{E@W!;(ux0M)alL&NoVCxVO zJ%l|VeACz+9L83q+c}H{{JS`eIIDX(j5sT74Z#O-R>p4;opnFI50ZCt7{P3}aTq~_ zw{jT4YQ}x+9=nI%N9dq|6WdK5;P;0M_(vc#UM~XMk!F+=0g}f1h+?~s{}!9fjCZhI z<;VO!Rze=-@C4x<#DN>XokT>B@OLVR=ot=Uv)ZpYe6WBA(L^XWJ`#z~p-MS(hIxwD$T9Amv{Y|l`wlNNK zHV|B=C6WjO7-G2zwO$fWXgv1x4v(?SpSE`mJ9js6uDO1Zfpe8ioa>fj!L2^(G2_^< zZOD#uAql&QdkgGUW??^b@Be|1Pr@a=;OBymGqJE4)tPzGpeW74n2i<2)>S3Cz@a*1 z;l2~aJOw&zyg-o&lY@WrdU!>N>JH9aw$ z8jmp8s;Ta9XFK>hE5m+wAHzz!Fm@Be`s^82{Q@zpZq;sZ#igI;xz*=*SXJ%0wB(D% zrGrxXuT1>zuVE&T$qEHeTIx5r}b5iJl8Ctb1YZTr}DPq1sLJ-e2D(b!dOZ;yARTyg5H z`#5z^aB7)7rw;z2ajK6Q0adM9RyV-DA$5;1>R@|D9r8tERCQy@t;6b`eM9P=7*dDW zbL!A98mA7?ZPoSRkQQ@g0_<~L?Gb(*YR|93zG(b9s6Ckqq{2a0y!ybtv2{<3t;6hj zb@&&JS4Zh%YgbZB1Y^;Z7Iint+UIcHBV0S&o@+;Z(YSVav?CDgjL*o$;o3$F}u)tl&Ii@)YyU!c$#Gr}uVAi{2pNE~S| z7^C(k!LZ@NqR#YU1Ne~t?G%P6F*b~kzLB$gWuVt*iCah6bL-f>oLfu6!APttWSYg` zSmB;)uD#DRne|Or*q&wNvf0bR6F*B_JJz0S$L&pA%SOkxKu~Lq#nw3m*@Aa{ZLPsj zRaDdWKw&l5{HbNEhE*UYbh4OYgOn{|9O zUjFeutH9h3wi|8O@%G%h|6b0mWx-fyyfUIiQ-P{PS9!o{T%PI$#F;6 zuG$7lKkjGT-=23T>`lBY&788?21Apbsd!aqARMU@=4cq5`#iCX;QKrXdt~&TV9&w+ zy@`V@oCa+u$IvA(mgz1xETn_v&_YV_N4>ZE?=)IG4PF{crBNMdGV zRa-I{uM$`oENy*Y;rd6ufOD~2Io3$S($85BCfRdt#ei{cI>E|r+c$3EHZWvaARev? zwN{4XlIu&p?Rvz0X5WZw&dxIJ92+41t+3_ad=D6Km$+jOuy9Vp@K7*!N{eW0pLs0N z&Sr4T(6v6Xh{mtYfw->$@i}vfnaNhI>1KHH4s)vZ85xKVvSnoT;Js-e&WVf1Xd62(S)bEX$8JPr4QZv5`!>D@dyA8gOlMPFE+9vlfryEasXy4Gn` zT1fY-ft4-yEgU?I9SqyU&K*T0gn}$+ICxWQO;zT0NGNiO;+M(pa4OhQ83;xywP-34 z)?6R@iA-w@L%1^@(N68sy4?TPNGcc7*5ja2BwIuNx;mct3}?d`a0e09@iS~$>bVPu z%J^|&3iYtOckD3RwR2n0g2f@NEf|ZoIsFFs*>9G~zd@opc8+O0ioA2kb9VwS624EM z=Grpq!6~w=<#Bp7PA^4LI~5u1aGGnq18l;ucfSMCc(Q(7Xb zrBDDAHqaGGA%h(VhvTUR-jO4DqP>-{Txc0zMoif)Ba}XCUK)hPac%NWk|LhrxOVjN%(G*utQNM0Q4* zk$~?V{#zvAyNAOgksOf2NWk|bhrysY_7Wd4Dc+w)5M3%I(Uo)HSdU7v9I+`S$IEiW zX2#@rNTP=Xc}Sus9I?sL$N!m#{=$zjGE&Kl3G=K+Y~lz`;~1kG6jGcL=^wnJgLKnMA%Kh3G82 zeKwJLRHn3M?2Jt3Oz?%4vrvp&o-9`%v)5~hWuufnbvF01oWam1=@~}LN9q#p=k*XCv}IWbwyJNr2Pv)9TkS7@vamz;93Krlfv=!4Y!-odpN1y zoAXKaK1ykc&Tupkfe8))LQXvh0|Ng_&cvCb7+5{*AbGHh*Y2eEbm>sDQD)6TNMIO_ zt`9`Qp*#Ams2HD6Tom;RUQ~9pIy(||wprAI>_r`I7L|9xlKIUm);H|vx3cOvlCL?7 zsOKzp+D+EOr;sPuT0CbX zgw__`;16M<9!P~_(JF|14;*~L=dFHahXQ(EA@=`@VZ{FD(ooh0GMlAHW{cwNZ8O5! zHcO6Pcvrtw)yl(WL5oq)8D=N?vKMr$wV>g6QVaU$Hr+k&rS+k-wPtD6?4=!NU)qJM zRy^Ks#l;ES1}B&etD3q{G0R($y}W%CQ6LiWr#b>De`g>S?9h_Dx#O`&IJoiIeyhW; ziqmy?Xb{&pP&Os3^u~!~P&$LM*P_O3b*6N*^;%+Msv{h2_iK@)=8wiw{$Q*Vf43!K zo&IHWTb}N>nxH4Fy3;gOP@_R+f0SmbNpV{&(H%&HayJd`9MF2CZGcj<5@l{GVQ&RI z)o+DG`fM~jQdh$gfEY0LDKpDC*iAVn%Zw9;xs^)#yThpte`_G*PbPwXm|DoYY}#G@ zR}EwUNAbVMCEBdUV6z%S`lA}5WQtXT9kywhkNsB-jP^g_J%L_ZWGpW(OtOf_06vs&xtPh{Y=-;m&aC@S5GAw1%=Om<1o^rr;Tj%l@<3Gpg8O zDDA~&X@|QhZ69l(X~~Lr`b}D484i%)GaQvo+ruOBs_c@Z7v9rvmCe{MBT&?|=`+$z zQ8OAp_YQn{N20uG<7bqc@@6)Fp6s^*3+7MS03Kyy{)~20;@k|N=lZP{84aM(OmYPS zh^?i%sY>ovP)5f#b1SDd#57Qb*P(RC zXb~-$G)j1Lo^4ow5_$)qgd>t0qrr|uEE?-F3wcAHg)AJXW*pKHOC{qmv!A!SFQ6ib zh!3KPG8PU%Lk^DzPp#~VM`D4H(b>1UFQ!Kwh7RoNMcwnsFmTd2~r`0^uE=~W!Y(&EJ&#?s<9IEPWcTH{g!A?NurWz$5$3fRCc2zD#qEW z10;zV&S=UfY-?|qM2ql1sM2RP!JVG|i!JKsx>yg#Z$V3J?c$4fpJEink@ksWR>i0o zC*VT+^|w~cZ~#?4=cVnPvS^Hj?3lp36{B%%5CqtOEwXKj;x{BwOzTEnU+SU8d$ESJ z+NzG>Xo9V}TQ%fBie!dUw(`mNws(po6GcNV^A|~ej0Y1*`_n#5k^G({l1Ad8T@pnF zQK(2o_bVcL0mnA$$0kENDz6X`B82vocFe^{)`(DJx`?Tw^-Oq755?)C z(^L_Q$yk9kB1ZYtQE4t96#JzA(qeSOu33yjJ?yM?76hJ_PiLuo%S*mcA;~e{ zUxAm#2>f>A&Dn?r>!MQptPGc72tgT+1r9`?_?b7y5J)y4F2ktEEEV^HsLvqH4V`N9 zs#X42)W3Ey#LS4}y3WRjlY{Rj7tz|M4jm?lMn+pf9V-9wk||<+)uE4cH>!{Fb)(v! zrj_r8=)FlJW{^EeBU+Rdl-i(USG4$Bv{ZL2vCdR@Em|sXSI#}VNAW2yQBKlnyNxN2 zH4e9m&(@>5ClsF`oml5ErBl^6In`k--<6$C8O{vJ=M3@O#E~sUq;=pf+NjyrG+bh+!~b#4s2zq6`=D_fJ!Z=1_C(2$sVdHXOn(il7EmTuRt%q_=mtzUjM1 z^|A$BZ0s&rJGZ6gh+KYKVE(p`+Yiwp!S-ExEbvgaI*z)W8MLE

P$60;>y?3#vKirOh7JM)-H@^Q&&9!5Tu%ceTu8WF{BP8%m z%A_KqiXu{m6p=Eth?JX(h;A+-np;H5{347%5sPL~y7+fD|K7;I zPsf{Q;Bp===i_n#E@+G5ivY0%02cycIRgGrNGdHTBHuKHXkihl%6IW>J1%$Nawjf# z;c_=FEIj~k4kWRIR9Vu8YVn0~+`Z@~RVln;925`G`a0dC+hqIu5duo%sQ zP5r0v`)pG`hao2hj7|M(`28`2&HH-SA?d>z93DqR4{#WfJ6CWRE|m*83>VLp9G)OV zBTXctC-{B1Y0u+uxqyEX5rz5vgM>OxCc+kQ_L)LNm+^NFC8Gc1@H8T7=CBy0H2rwA z;Vwlfskme{z+oRSb3zYX`YQe`$HnwAlg$Q%6)-d= znj5tECi-wx+A=D-#SmPmuL-3?n+C`&w%3Slt|AL@#SR(d56MMj4a>40r8dJlt(r&n zsa$P%OZJhx40#(_RnCP=IW4Qq0%Hb;qw850Q#L3vzjInfMd^Sv`K{6v>%z`WYYH|ijRcoCNFc%sVGzI&fKoEncA)5?;1Qa7nWBf{ zLb+v9YJxIz%&KEiW{x4Z_bH^@ujtAwlSCNnG-9YNl$fEwo>26V+9wrKM3<9Ys0gxA zAS;uo+y>(N-3h64XJF;}1Ch+~8@!#IFJV61OJff`EHSo=j7u(4j-UoNl= zYqa@f^3F{ZnG4J!js4&U8_aS5$vQOm0N*L;0AFMH%PgA1P0?%%BvULi&n^n%4GzL+ z$CMCIFeZc)%sJ4p_F&dLt=L=y-!Xp4>W|LHiWLWdTvVdr-|8#h=-Hp)X(lwt010SLA^3YzK-pm3 zj|OXoNQrz7K;Gj5sw(}WB1@zhX4-^hW23vtB{NU$rj#&v?Gwd7?Dd3qh@|M7HrQQY zq1BLu&NPf!H-;SyULJHP8F!Z{`dY0Kd|4uZ6dML$p2o3j9hs+btQf|zVHjHs zRV9<53U5z;>q+|viro_5+y9oT4`R64QAv8U&me8Y&`4Ox^yDr|qE*dW(jp-z7)zYB zc5VwxrnO+z>Xx~ywa_V_aSN6wgcU;wX;(rBGx%Y%O|1%XOc;>MqQE@=7Y@nQCFAy(ehY=S^M<_8NIz)3U2*Q;qfOnvT z%NlT>&or@*VD*PUaVL)QphEPJLjAcrlnMSoP7}x23)tA*AYfl6@;!13_3w0%`EP7Z zQW&CX*Uhj@(?#n+BZhz({u_kp3~7o*wTJ-)|`niI}6-Yw$D2IPKR(im$mj^lQdIMOAP_l!7Z+y<(PqalQB zUT8=nvo-ov9EFMI1E%n$W8aF*v|d3!vHy4Zi2c{~Wk2i2TsF7tF5T#6VFR06OxNk| z)Q$ZujN|Nuar{1EWZPr=3S(M#LAf1ZQEtg(hd&XD`@6%@*4PH-R)xc+c=a)BR;^yR zAXjVEPV%p?ky;NuK7!c)eNuX_LVY3tKJO}XyuFm}zqdvisSK zW%+Ip%iXyC=rdyhGK!;3z#P+@%zVvz<~W51)U~W$;SaL&@sh}E5{U%^5q}_|1^iJx z1w&feue4Q;hB#(bj!GVJtb4+QMb2n9iG-Z?XYVmVH2kO5OeedRQDJ|3S=?_o$ReCP zo3ASBUzr?mCr?^v?7TEBtMdyAu+xs|^wAK&0{ZGmV*fXdB=$cOO6e8)F3zT-R3WylHkV!S)@Oz%dOnhxp7S*4o60!6W|RJ>~!mO`E| zb>%*>yg@My++9A4!5V&!$>--?EGOEF<%Hd!T|Z}HsmF*zrB1g-+NEOLc8$bh@zy|a zoqr0lV$PqtBH28*WolkQc;}fyoc7@|o%#9KlWx{A^PO=rffRM5vC~lu4%pQ!xBa~r z#BVQzpR264XOgf_%Py)er&v1X4VSz?Y;uv8B+2%0pEDS>WGc`a2`4+W(6odW38b{p zG;>oImNC=v=b^i25c{uBINfax8Nlt6pC$j#?pitNlXKdbcJ|lS$#Q#XJaq3;i7uiE z1m_QP`WW(PTB>Q4IFx&I)`k<>;;ukK-wlZsk`m1{pYZbD~&hAFga`we!+W5GuwkEQL*rbu}cMW%ty}<3> zgqQu6nPV3OPEX2V=rtyA%<^O!E^TbOTR()IX-E{NiREUFT6RW4G!{jUSuv|Eg6jGl zwvaTB{YEx8umjH3DdC50AiI1C(icuHq#kvOmFAR1;YdnL_>bv|XqcAj>!XY2`2(R) zLQ5w7%a*KK?Vs(RDrM=stpDYoGMuO~Q1VY1JULk3P@D>WGI$X5;K0 zT~qgSyk0JHxw~eaZsl^1#Ow9soKSikh@^tI?57k z$6a1)v?gpHgH+Q<>CF$c$LCTH`(odhdYWs$M5Kg>6pe`5h!o^_A5Nr9r01gvonBl0xxtnV|C>AMk|Z(08L6Nr4(U4&Q&_T7Oe zVHoKO(J9EivJQU~5JiwHx0A^C4=+)a$oKm~q8O3yuLlvuiPWRO6cdtsTaWL3g{8D- z-vz+&^4Ul!&VF9Rzl-^|kAJKD8!75RW)P8Y#Uh-drT<+<fd0bVG;3j}yR(a?V%KYXr2MDvJ--ZuPS05S72@hlVIB?8LQMf!501BG`g1Q<`jts!lFB%DlDc50oiS^{ay!LtXm-=aQ* zU$M^;cE7n6aUCVp!&1q6jO|&zp+p|c{k&`Ewp3W&Qt=jI?ih>VEtY4UlMe^AniH`8xSK81vIJBLq4N_JkhGl=MA4&O5YWVfZdn>3R

muRbxd`JTFE!?~omu)`sZ7wCc4u5nbVGZ36zy`g$~^@i$c{&>em{4vcRsOR6c`nRUV6R}Rfqf{!VcYIV%*Z8Qs zw63vnQT^P8>bW)5i|)hS7mKN!9`%{2tpDjX>0yK}sI977{CixES4r_V4IcQ=MgW8;a4*Q@?nQk~Y=67~2$Ps!b|_spk8nx3|}{ z*2>tKRW<%f|C*?l8cIsJx7uINhP#@^*=?cOGwWtIXtV1ZXV=uR;jYhJA1PCR)LdIy zfOC`#0|urHBp3E0jM?|Sq~H%2*Z=mC@(~U%`7bX2!{uXKKJk)TT#OTSeYjMi+@j_? zqKI^BVKg3(Eg-dUOaZCNxB^}AV>Uc;`sh)P6qCOP!gb}#64lXA6&X~^(F{N;mDG9s^UzsNbzgicO?=p>O zJ(2I)AW=7w@7L8t8@S_ZBayGZlxqN-oaw>InF=CQdwY9(+i-9Vn^FuKikyqArS!ks zDXk4vv{X4-s`Mzh3KXHGe39BzyfPfEK|3AXT>Ffk>euqYntdS+Dlc3g2*r}%*&;m< zu3YGl5|EkXL}qD>3$es@=#)M!L=G*4mSQdRDv|G=`k&t}w$uch zmMUqk_4oF$SIySJ@~T}+pw=UdTKjAL&Ea*4*s2w+odP2+LIW)GKyGC&^h9E)_EF8X zkUrQya0xLl3A1+6#*bn5FtbMIQpWWsq4S zb%*~GKUlcD;rOONZTG6~#zSL?nnT0MMayeb^OH-Kt~sS~-Q1RdRvkJu(%BqawB+yy zgz}z-@-EhGR;!d2uGdl>OhnIau6@f3AJ`CTu05!?M;(hEx?>o5-tjU^)3hFQZ@nE} zn(Aq;eOv!}(@O>e+%b%lci~RZTlopWi*Pzho!u#F)lai*_0ueP5wv|?gdDvH{o^T6 zvN}Z-2dC%|(`V4@-YHs8=p)tV$|G9r(j%&5^N1>*B((deiuBOvOBc5zucip zMt7*^^XU#HxI;5K41{^u9S_luhQwy(|o3XJi}1 z?589F+d(XVL2UiLK`h5XY~Wp?E(f>_uF!!Q)_gAgpt%ieN-G z8{f}k+FWx?D`xYK`gYqA3VW|KR#GdH(-QjFQDeyg3Y89 zZYITZGO5MNP*Oc!22qb%ID9Cnaph$4`CG7*+*9rgwzXH*ws)LXFw~d{EwSM6nK*pF zQPc;=AmFHP?>Mb85Cj^dVpc?jCZb{>Dt1B?6%k>LTyKj+S46Ak?QsHc1GLANIgIu= znZx3t=~EP<6R5d%_zEm64_<-A8myF;vcEBJC|N&srR+ttvCQI~X3ud^CZ7>(H<})!D%b1IK3tEw%Y(Wmcv<-5-Ne$%8sbGsg zYQ=AjmMTP~K{%G0-X0IfrU#;dNUR+}3206<89w+P$(HVW*aW?hbc*7V;rgN}LdH5Eq7e{A2S<8I>^|*j@Ib=I!b8!y4Ut~ z6x{l{2dr4YUSBDd-NRZC?NLTOEDRFP36#Hp$weVi`M5(6DXxW14|W8i?ON#cgw`2b zuZ8@FFocL$i3CHbSXZ#4G9GBx7!SB%ACwea=a${jkKK`AQo}HbAE9Lsafc7S>%bj; z!YWda>hbtVRlI&u^^q^B1-laA)W!lom6xPFMF_;{js!#TK&m6yW`rfNX2BTL5r_(R z!3Y6^IzAYjjPGilH__+l1SXU4HF}HS&w|4d1!lL4(a&J{&UhlWVPhZZF<2kprFw_4 zh%K~OL<=Pm)q@YBc<@078qr}#u=@~`9u=%s4yxt8uB4WzjA$W*gyE6Sns_uc*&R*= zJE|)KkqF*MqL!^mEwLWtff~U>_~3gSuce1bLG412U}Q6ZC?>-3>4|WBowgA_b;AQ_ zgoKuiMb>MH>B&?e6%MXYbgCzEs_5kqhtakM4Eg^OzYo@E<}eCk!025=a#5tU{2eqP zVlVMQt&Zm~!lPDj7>#S(N0^jxAE8of_&W%fGVtKg@a6n|IT6mpWFN$e8ZbJ^z=I*u zxR0|J4V;GxbY~K=@Hc!AY=%%cd=O*W#$m*o8ZbsTLs5zf@k=T~Mh(XqN?`;Kf>SrI zRKVIunzoYh2BI?+sKY@Afq@RhMZr#L<{UiM@Fn|}AzfaJmI`G>jSrJb6ZJR?>QFRU z)gFtrM>HteVT&198Hy(TOIEC}^VhhcQNTtmuSvs`8;#m8+0_HXq1i+yKJpVbnEFf_ zicDirG+9&C71dHz-ORP>!%B7Kf|gaycDSw0e-heAHF1}iEw3Iscfs;il`U)LGZVxW zvQ{7~F_BHMB3rhwg&~7V(0AH8Fvc1n8)PC=E|@4B=Wg2#*EAQUf6y7G<1+ z7|!FhNF>(H&@Od@wj5~38feu6%}N&qI+2={VLILorU}3_&crmy#5ANc9EoU&DrV4E zCD^(_QS*{z%N8E9!VO|p#PKHL3KMZ@XS7|y>aL&+-+m^(aueSWy~+~GqPfkhR_9XC z{Y}INn21Z`iIjwu*0`?t0VcjfhO{1rU@p}QnQdn?SVv~osA~6+)eRV zhx<)TjdJmd^j>HD)8Yml>y~m8-B`0=C3+W_!t4qgE8HX#n?H?B=R8xI-LqhYiEV!q zTWM#z%rEXr$Le~ZiEq4#uS93T%7oU=T2A57h`xg$ywv82p= zk~ljeJ=8=xM@Bld6U$yH3*wDg`&q$*$;$k+w5vAX+TxQx^#~^%OpHoCR_$heri`BG^;AA zv20~S=i@Iym)la2bm5ipcpOw_n^b(cQmKUpAgf+uoIA&);+3fki){#p!l!8=nc=LH z==~%!HW-Vxh1moJpIf+@hVNUbxpoYjIF=CI;-TTXG0m(aEC=F~zE@D7-z&h(O&LbS z`T=$?4DU;^DF>DtHsN5O05;vg5XYvQp_AFB8#RO-HzSARg6M|ONFv__BiMEU6?+9R zP1VU`YU1-16tH*%nA5Foq3PkaKu|Mg0s3YK-41P}=346{6O%Qz^aSi`yRPvj)FZ%kK8iH!zTMB zAc>=hjzXSt8dR@YY5%&IF9w&AD(JQzjw z;W9|yK_Pt#@BkAh^)w!BZ~|;&ea!+B4pcCnh_!_ynlVv34$~+;CHgXlzwaSBPHCYR@P32VF=+7ZK6LMD#Txx`fTsNrAPGnd&-h9U`I>5p`i6%V!9PfI;tI zJ7aBn%E^)-Gee6t8^jCyMA)6N{Cgb##)d2f8?q3tG68=~kpnqt#OU)~+1)+w^5mkOlVgXnZH>(W^UB}Y0TlgF)OubFtIV73df?m(5?+= zVY|k~=l~wq;;~={WEdaZG`>}8uEniV<`bx&zFtct!?7qPyx@J~RZQj$7(NFB#>5*a zFp4OB0b_gT`b3){UdGTQPI=)c$1vq3L|v3{A0)g+P@TopgM=o!5E%YUc*qMn1L3H3 zd}rIO67|y)u`YNyr+2ls$ER~A6l%1ZS03N1`OpaLBOqdsGiAJgT6t+}d%TjTm1lE9 z=9n@h-~j5GIz}H=+0RfI;~92$3FKqRcw2gGcH?HjHZlPL>Y+91-LV-y1AIJ`h6fRC zHWnaC1$Z#gX2XXvM1b#7u-8?O0y-1!u408$FB^9Y6`DGdhrCSe?NJpdHJn>lrqI;l z=GsZUJ!(mx-xfIiwov*l7D3F$P7_zC$A@ZwOerS=`tbNq9U{cwpe*({;7#zM`Yv!3 zvRN-SSfVVY3aJy8LopX%uU?OuE*SKZ5A8TeVJ_>Qa@ItpdWp#2+oOur+la}u6)hOj zzzKBd3beR~;Y4Y91lZ*pj(P$0m9Vp><)R5KA8c!fAc2t$w>@~u5J&87h6^9{YV|O; zo99FisZW0imoIw^1q(@q&q#p|OawyfE%rl@^BKN_)Lc7+*+z!Xd=L?ipjWUF5-w%v zFF0O~^XTRd^P=hlE_0fh%pX8J+2Jebje(IuLS8{?C~wfIJpmNHFS!W3-*ky6A4 z1-4;RQHhix+~i_L4fZdu!=_+Z6R@VRB%)%|B{QIS&TWuNhC5HPu7wz0T72)Pk3--B z>@9?6wk@3K><%O}Y}piKw2h@vnx4d}1u(l2bG(Pmyy1ANp)wj^29}%Oq0#X>tiZG* zcOv)!$fk2!1xTsY5HJ-YD@j@*g zO?HRowRfHtIsWiZ^=LdMY*u|z3UwEWwTGiFoLdEbjVsRiR9WX$iT~+Z|EK(Is#j9e8 zc3TXE4j5`&VJLFIQ0odqu>*z~Rt!g_+X42MKG+Vk!C=H_r^1~Ycjv>?0p<#I1TpbL z-%O7&X+jeFdv(cqj%VuQI6x62Xp2WL?0v`M%}DNRDZ{s2L%w zlR1Y##TW@1z-d_Z!3UgXEXRS<3>chdz^H2#e;=CGzyrN(z+mWu_&XRBjNd|Jr||pG zl~WDaqibq?RT?E_wx?O~;-(cf_0{#!$+~fUfnvU+=Yl}vlpqv5wJhAG)g0XCHQl1a zYpU+oTcE8k@AH;!yWy>Z=J4uc^%X~vnm!@N3*4#N_mv{E(A;m|_m$%GE4rt*$}9;Q zmobF-$}qXllUk~8?Nsw^zS^>EVN2h)beU&uV6Mp=WKuR7eUOPuUm9syGrw;QO3jyw zI@!5#Q~Ka3GhY#xL#Fn5Z?O4Z>EV;+vjeUCOBPJR#GxaWO2%WU>D_@yLHG|wu5oZ|jcqViIrNu@*;rMl@0?LM`X z=$ulbb4!WNDdZ6oQ~hL*axLbZs<2A`KNB2zIzO(x78Pu~f~5>7DBWP-$=!0U7!O3()xB zdpzsq9_)uDwFDez%m*=@gT2O6YO*10!3d)1-gJCewE))$Feb!C4A~3;uJh`ti14Ww z?l%bVOaX2b;8_AZTYwMqrU&#n!u`Vq_y_?$Qh<*V;JE@kPk`qO@B#r|D8P#Zc(DLC z3GfmDUMj#x3-B@lZWiDc0bVY^D+G9@03Rd3s|0wp0Iw0?V+DAv03Rp7#|!WY0(_zX ze@TG9EWrOKz$XcCn*g^9aEAbg1^5&JUMIj20qzvwr~tE;I9ktrCy@BO!A2?6UKop0(`jue?x$;5a25X_?rTJl>lEYz*`0Q zTLOHo0B;lE>je1Q0(`vy-ypy@3h;LX_$C3qS%AMQz}p4*76HChfNvAv+XeUz0lrg! z?-Jm<1^6BTzE^bz&{n>hXwc% z0sff)KPteF3Gm|r{Dc5MDZoz&Fq}C^lZVeU0{pB1|6G9op8)?tfPX2#&k6AJ0{nsi z|4M*g6yRSA@Jj;xvH-s#z^@AMZv^jL~I0sgZ9|3!fR zD!_je;5P*L?*fe6en$KMQ-I$T;I{<$Z2`viM&q|T1o&M6-YLNU65#g)_}>Ejz5st9 z!2c284+Z!mVXXVFaQ}babjaSvUP8`5_EFzShYAjRCml{WTDZUeJL%BE+3%!ns>9zQ zd1RmQk9m+kkbUMo<}qCkONDo?e9VJ9gzR(a>mIY+u6R9-=h{D|@%-wq z9&CwcpBMk?p>J^b*MIfUr5t|guO2#&!*~46!xj?px$|!xGo0|Qzj^2y{?6ThOaFHC z8y?!q?~i%IL-%ud>>D1IeGi{;Z+O@uB|hWdNYmQyjWnM9-$>Iv;0+I5$=)WK@P>!J z$>E7_c-Vp`KK?g6bR)mt@@~4E$Gz*JZ}Iyb|MFmZ!ak4vC;g84p@+8d`z0TG==&Vr z@{xybwxKr2 z3+EO4+%(8*hIU4Wrr-I`NH6__zw_ZpFWt%Ek4AdUHaT!~`u&4Pd(HNrJladw@%N{U zPM2ZoXfNH&?;kQcUFOQsUb>dwuNv*eF{teGV*&p?W74$l9phyS&G=k9)=M|&uhX`% zUL2UpKC{N9-=96sOIPswhmG@^JaB?P{m$D5r{U0KFMXT8uT4(Zcf}#;cY3F#VXE|+ z{i0N+>${~f{mu=u(lCtvO&ov8(dqlou1Ld!R(sij&G?kA_L_2W#M<;b-v3L(>rYO@ zmF-?rMylGqrhH9rPq$TdyVvB~nszU3;pG|Ak;bzvoQAIpr*S?PPV?C1>(cKGkEG#7 z0S*fAzdFpPq*6&q%|IH>Kf-0Kd68eZTa~G`#Sv zG<>oEM+NwL0UmsI`u*_&e4+qv5n%QF^!rC#n1=r&z{@X5-yd~p8veTgf8(uo4$YC_B8ybThs8n&!*uEewl_(dm#TR0XQmaJ`tFeFg(l7m=cnOcPcJs< zHdd$MnHOI873sw3KA2()PsG8&9sHatPtS%p2V(NuAUMMl&x$~nk^Zo-L zm6`Wn`l!s*iEq9+m~Q9z-+ObgS^l?shR{{~{y}p_nEtETUm9WR*>kTRVUBwrTs^|H zwSKxa{r-~z{FDH{{O|}#EGwL_$5N^5Do^2wuk^uNdo}_@`lz_SIuDmYO1R%YwPQQt>EY-3s%`R zHx^|O)QC_9v)|y`G*F`7e7*wa%{NXyaX{pg5Wz7jBSIKvj|)VT{wN`WS5-nZ>3Nrk zDxQ-N!6hpps(8d5qA_nDDItPCS41@C?P`~ZKK{0Z2+m*$(Z`$nBEk}$RoW&gEC9vq zHF%N*MCv40Ej`I2V}TD^z~YE}P_4qnjqXque5T zSVn}!841y5mxwAXh_JFFBC7bITSSk^CBm|hgy<2sh@OxUVNFRw^tf9@Ps)g}ASEGs z(k-H=WD&t?mW1dj*N7gLWDQGUG9sIi-(nsyeO>XKTs5qtNr;|yTcSV8h_DDJA$r~| zqIYFPSizGJz3vv#hcY58|4E2;xYsA=W7SeZ^v~90=G!2%!AIrQVqNc$vyMO5!G9s)Ii-?w<;j)c7z9l2V0<(yy z;~KY!o{|w^by`B?c7*JBM`lPYZA*yWamkSDw#$gHE-oTkx7{tG`{b%&QC&iGpUYm0 z940d)rZFO-$YCqoiAdx&xkOmbmk{0NwnX>J!w6ylBt-YR?EbS}luLv_0uj+!FS~Q(Laz7A%sCjbdS5nzF_o&5+cMu$cTRE7STfzA_Py!h#qo> z=<6TLjg80)5z*KG=d!Ucze4VQgl&k3F2BMhqO0e=C{+zHA0ncw=enF3Up@B~2@wKD zWJE8!Yon{@{!T)KXcHOHZ`~r2C;bRjkrBP-7LnX*h;xwY{2$B&I-MGP} zI=b=ItE4tUgpGvg)hk?<=rvi^5S}9;dd;P*-4UHEl?bstBBDE@E@zN;{6=mg1O`cn ze&dp}@AyOx?TEsI+h=3i^3;LflK2QQTq2^U4!p)))t)-= zS_u&Xz+^<%x~%KfWs=Lg<-<=#T$!SEA?sC~I28t%-=9`=d)u z`}|zFu@UqpB6@!A)$U64{DPQNHAKuwh!#X#B3db%eh9ad5Uu>NOGI5VXCqcmLe%AQ z%zj~wj0k~#BBB@8xE!-zoh_>)LXnrP(rlCr7`;IyRz30@re?m zcWuV(xfa*4=;%jKqk#Zx2Sv5vcvYf{tr)Df8RP06#^?}xE#RVp+jh#R5JW7Z+Qz+Z zE>PY1iOiyiK^9Tn`H5>5y?@SQQd=Q}SwwaJ9DM+GQK|>$$a54#K#Qmzob#&NX8(Uf z#z>_?0JVtf{|y=G7S*<$Pai1`eTcsnQQ^7ELFU0ZzmrfQd|O0?=Pps5dEUfQu~dlu z2C4?WijU_mQO#TV^K(R02p$(v;kipx4<7$psZ@wP7g6E4OH>of=1FaZ&~*_Np1VY~ zddS=x#R?+wT||ZFE>SI*_xk=KDg@4psPNn+s%<+zl`4q1dl40$yF|6>u0gMhr9#-g zhzieLqT04otrJlp>R&{K=dMwGB57xA8jw+a;#NCv+xeK(R@ieOqk7D3TTLumEL9L& z7DQBd?y`cjE{i@QwiR|fh^X+~C8}*ZKN%*X!iEVE6`s39wR*_BfQSnFEksm!?h@5+ zZYe4kQDM7=hzieLqMBH?N@{lO_7G9wxl2^rcK%CZ25c4)QQ^5uRA-(yK^m{H*F;2x z=Ppq_c>M1qRM@H_qQY~RsJ89=1S!DHm=WxB5mDi}YgErjZH0|8GOB0Xw$;3qKYv0j z753SPsPNonsqUZin8Xa&rX!-lbC;;*t^9ehSSsxD5mDi}OH{8;nKV^Ig-t>tDm-_I zYTM3drDn$-BM}vzyGHdl2^F>|$*BJ39@QrjD(rBQQGMbT)x@%UgU`Jq%QYz`Aq z;kj#6Z%U}Jw@gO$rh8OxNvN8{8 zm30LTdkRHV#tNDXRMsU_Y)KSR8B3@xP_6yoiLZ$=h#ie0Dm-_|SJnUlY={(5836(= zN@a}@!G1~+l@TH00@b#iEJv5A=&>DBM1|)rE4Xdv4oRG`n^Q)$!>u@P+qpxs+p!tc zg37(!PEx6`msCbY?o0K$gbG_xWmK={fJ&+$cCuPfxv${I2Z}6;jj%GRj}LU+gP%$U zB=*tDs6KUXKz>>wmI~W&EvPD7mug3uhzh%SWmG%L+@op~QDGCX1y!SaRCkN0u!q=! z>TZ{)W?dG)L_~!x$Ra8{cZq7-&X4DasIY@sM1|+>QEe7cVFR=U)n?bIb`*-Juzy-c zwWH8As!t_m!1iky)u-;6;Zvzp*u8B*<-SxqkVM%WMX~u?MzzD^x`I0n5>a9AxCPZg zu2Fp~RS;XxWmF%#ui(d%#8P4Bx&;;6M&Lr@%(^U&tdM3~VdJ}q3eR0va7TlP3j5|o zRNHp$XmE+@%=5;7MMQ;d_aZ7hcZq7-&QH7|D*aI6v|kj@U80&;wz@z>g-!orsqow- zs%<-8m&SJF3=mP_xocEAq*5W}fQ)K~`%;l4&d69GqawHB>@C08FSZpD9*C&$+;s&> zQeMcHAfno~lX6gAgT+!I-GYp2$6(i`+98eY$kt#%<#ueJby<9iSSloY5K-Z|>r#Cz zwH0zjh^V&h{MfFo?84Qr(pG<4EEQ5sh^X)!r7B+C9ZnhN&p2&)Lw*Va0hX=H;;qT5 zRClk;v;EM2$?cO zbS1{76#<>PcClZ_h-ABB0mXtL&jv6}9=?p#wKTl0D_IrSl0m*u?`w%28%lx%`Wkk*oAZzBxO50<}u4JUEJ#2?jdWwUUGL;eO zLxA=oj#fo7^;EzPXZn$q0mZgN4iX?dcAQ@6lJ%_N45pDKaFMRa&TBTc>Tz#=n!YqjKU|B#jbFHdd>tt(!5kDpVC%7w8OxQHpFu zsLEahu{K*B8VY%kU@V&K>eLcQ1skfAkyo~BvCcrQ++A%!lC`?0I}{nYzQiJrOGc8W z^ozr+)4(%68A%4ygNFFCiyUYpx0pzKYI~%$3iNf!4+c_s$o|+&6>u5_k=YC-Ih1qM zgf?x4Ft%Gp52vP>*rv@0CNlrlNz9N_O)Ld#k6`z%wZ{RDRdE`Wk=9KrPMcOM^m2Zx zVZ4k)WR)u&SOsb2#In?eV%^b5ED&<7lbt$kd}eIlbSM<^+lhsObV5nkX>G$dX` z(SC4*UbHcRnGG}1_uUQkT-|3=p;I#V22=6Lu5gOk3$}f8)$HTMzCrRwl;^-xdEZ<$ z`#2YUQ|;I{+Z-AI874vSjMMZ6m~CqCNI0lPli_H4Wnf*hHn1+a3ueZ66Imab`o2Tq zkn$3R+r$eu!$hOo7j21HG!=@)68V`Hv+}O%tqz4oZcY?>Z*=k96fRs?W~9miIc85eZFE#xcB% zM=~<4RjEidn<-k{l${@LvaVRG;!lIlH4C`cL z@`1@zETMs;+Co(uTD24ow+RQeq|1qfU;KS2xuK7oKj=^xq@+b*e#i^6AR97q?!*zS4d{_PG0NB&$C{71at`)M@|4RsAwp=7X~s}DD`#re6ECqsShw9Ax*%YGs< zCsO>PxHBeoGR=?YS+z?;t@Et>9EbKn9$^riGfC&N{af1w*90bmZGmJel66KuafY+m zgHy*viDYMYi8V(OV-#faR9179g=%H+yRnn9E!cch79K5yK_e3~5MFtX(UeECFz5_8 zxxb`lhNGhXiKQB14Uldb1poKA-jqkNu_4(u5JO>|J``#jQm_DG(WDzXcRCav`Jqwx z9$xr^bXAi~M)DjPbv=-O?VV;{NMMb^Do^MwJvvZZJ!1xB+VB8nGYK2?zR9jhvKxqH zOD}p)WCLW>M&T}bN#{E}&o08%&c?fw`w3~gLGbFA^wy~BXFFzpCw$jA@Dy^0qhR0S z1)BsHO5XO%45wmbFwdMc1G1WKsJFF%&5RzI^vmh(ln;jYv3D;4~??{ci0y5bI-Schvpkfl=b1g*5#r*DuSW zy2s%k4~%kX23=X!*Eri9c7&%aYCcIMj57g1c;(l0!g%h2@GQsPyx5@!aPR;K2EP_% zX7%VmO+#Z&x?`HtKvWr&8TAH-qTt*E6y^3EdQs+>v)y1U648P&jiBOdbGYE#bqc5gx>DP-y=D`6G zDBpFBF}@`B^`flI(@;Irk$J9gXb_x20fM(S#u)QVb98IT6>=I@Ce}Jz&rYirI1K}3 zx|5e_GbenXbF`E33tB!I>N=(c5q7-Gb*?yQQ(F(Xm_X2v1qq(jyYa z0U#iJ_vSdCJ+<^?CESq3H}`D^e!wXsAb8?camEib>zw;BgPG#U8d*>}*~vKg1jRd< z7jJYhQrR8}w$7@aIjgq5sy!HrRs~~D)Elx;&rl(|&Z^tKJtlS*PGUjfy5H723(vE5 zR(+PvvLifY;i5xD!Z`K?goiYp%DH6Gp;-wx)H+WLom^x%TLuJYHJ!@1JSK?_=g1Jq%p}*GRF>?h&ZM0 zKtiiDS4Gk*U%^<024A{DY;YWSgkn5*Op-VF(iJWmJa=oc?(X*<5DDXSB@n(tO)WP$J{E4%bA z-@g6tSqax?apT#IDs|gmlj7`g8W#vZ5-|wB#^UT9{fG5gtQe82aus;$MKRO-fBjDV@|Wys@!VhG;hKgXedrAFHYkCtTp+w;dF{L zz`<-N;5uGF!||2h8q>^dMaf_$Y;hRZa9kWp*k$x+pr)}Nt0Flpt5;_$mvt^|FLgJ4 zB8ofCu0z32EML#X{iaW{i+gqMy1Z=Zh0?|-9FzybcRi{T#`CO%vk8@xxZ^ZF5d6WT z>kV}+RhRSKN4`&0SWQ*R{OI9!V5Bg>O)gaZvxf#cun=1g?` zomu;`zS`NTWJh?)qUI|^!ZT@*rHAN*@jN@> zES?a%8rN;#ewauY=R$(;FOM_`Z$Hch;oR+lDGQg~Ari(Rlpy?OoHzBtWp`vH+)(Qr zhqKBuWFijxm}hVNp-31fUV`wZ8+5{W4#EX3v9*h_D?r|e&~8B~qQZfhK(+aX4Z3xi z>`cY0Is@TIRi_@$Z&@ujX$-Z#8L*H+$%oDQmb6b6XL5qv5jW~3$8)LV`&qFH^iQ%7 z5bJ>hK7n}DO?o~0lnzv+?J9lVu;aBUiApDDGb;5X_o!7FMf_8-K?!D(BkuXk01>u)o&JjJnB0!=lts(- z6A9x8RuHcJ)NJbgvJ=iSv$Z2!xBYs_IfL_FLHLG~HX1{BcIQlewX<`^j&Rd8#Zj@w zI9wKl@9oqH<9XH^H`X}&lI;kWE&aMrB#e`6L0I{oP8iR#5^l(gt1ptgr8qVhgoiz9 z5WdKTw=|EYuG_v{%F={0dORRWec{{>oOD}y|B#hICQRDksbi#O^op2sjZPPWyl9Lrj9fR03IKv^%AUyg^qp2@sInErJt051Ar0JUCR&Ysd*-0mL)C=;oNPmrfZ7Z#iqt#=^*@6 zn@PAmdsFAJJk)ee@lcU4PG$$;`%W_n56w;zyC9sqT5P(eI4sr}2i$|O@-wrk!&wPu+vk#jtEGbx4%ny@ z{&@N6#>mAEMsVipJZ!GIf8214SmOsd;bq^{3FCRz8rSD1#}Se6s;}rZE;;fHqsEb} zgd6iR=x;btB>ed4I^o!lb;5PqZ#Xe4;rjg4Vw*^~{tTV)Gq0O9Zp%uzF%KtD(>2AN zBH_iGbi$ive${AdHUZAUTzM&pQ$)fMPWUg2O~R*SuW=qrB~4o@xCMUe5 zf*pL~SmS)`>ZUCfk{p+wsT2OqM<(Iya@>&5$hD4ZNXxk>NiEfv|tDO+&4 z?Z~yILK-qp=7a}Tn1r(rnb|^IG7vsh?BggW9GPYkJ~bLcs+ES4c3180%R~~5+ zW|=~=Fjwx2%}rY>B!hnN*?J$3Kiwpp-Js8Be%!RBA|cjzJSSXnwn;eQqN#JAJ2h>o zkY6&>ViL|iTg)erqG?NoWMyvQgqxo>31_!5v&GD3;A&~eRL|G@xb}~m4LQy} zWH#h8h1pUextor-P$&HAC1)Chv%8zJg^pyXvETCw$ih zobZ;4?6bv&eCAGD3lA5Y`Wu(&HTD;sYt;Dg>`k2?;j=};I3^4R{aZga37?&va6Xf^ zt%cHQI6vovk8e89s4+VY$5Bb-6TjZHr9yJPe8>rxw{pT;DzZCYvMn2DkYmaDa`QL! zrao@J^Yt2UsmShpX~@UC-CB5&*vHphr4zpGeolC6;YBX`ICn>R)7C;Mnd2v%aN*e( z7=6r=IXd@o9uxDXt%VnhHU7i3dW}DrcA-J|Viz^eeT}neOT~JT@NwI9!pmOggtt_z z&q_F3q^d1*T~jO>dw;rBCw$|v7wI*=rZ~H?*Og-;h zJiWIev8gZkrB3*qJHBqzIFz-i8}nE|Z`xXTrbzg-7j(kUTzjd(TxVt_T%V6Gb8F#w zBH=e))CoV;dznG_yzGSYnJsQDJVGQq_GRAG&u%dYACaAKJ|2Osg%^s1hrOW_e)WvY z4Z;^@C!Ej3d`pGoufG59I^h$yd_yO^r6Rk(It${j4k1(vyekpx2qd*#$a^y`jl+`h<$Q;LmkW4F8hJ^^ zX*D&~wKcP<0y*TAI4C3OY{A)0TMMNlSKj_qZd9l7Fc8D()8thUr25k*Z~ z3#DTi3VL$-(O@|h+ImGwNzhmHJM}}m;$+x2Bv&Ocy zP&&O~`w=?fw%cwp2(!~0vJlS0u-#H2d8!{@r4wHI>8(29Efv{4)!DW&Iv719#OA=CBtEMEG&!O_{5K=O%cYT8ORu z`ks8E{jaANGY-1?p+7UiFMUrxP+5w4EIB?94QU$|gp=#+aIXE||7yj`G*;_4YaiBe z;yEgl38&Lm(3>Zztb9NH!F!CuEqP#DgKeS8^)o92ZMkmn%a)(kX`e*pg?gcGzwiTA zs9HlKR%%^|SX|q+ZSRu}Y+1~M?^qO_*acO*gm>{0PK|1nfzw#y8Q3d3b4{3AWB$}_ zHJ$bm%-}_QjTf;pr&LuA!f_zB2WLa(wC{D)(|Y$FeDD8Q_v$HuTqFX>J=dO*8ZJ9> zr|tdaqf3~OOnc%JR^ZWrnpv}0t}wTGh3bWT2To}sL z1)GRkkaWk==IT6ca_##-yQFYm`nR*7`UsX(&27D$LjW$k&Dy3#o@4nO8s->o%8cR-3Z8-I0B2tLxU|v*@0DA=(RWsfx6yPEOE+(RKj>jj! z2P^n(b1kY{Or*kaWd@h33?fpMQv9h5;SxA^yJK*Y=KPx~fi{I(6#QsZ*y;X;_=>TsY}v z<=U)sUDPewNZ2F%lW5e%+whHY*%@%nyvVS{WB>)1mIe#w!3s}B5kKN}9>)VH+l*Ru z-Xpv9i0lq@<@NGAIPePj{bwDAu0VR~hn$ynQO92VA?IZqofkWf^Pv2<&3W9p;zQ2X z4b(-Kf5_RoakKOI){R$w$m!lZc%<;76C`!6cP0l>cmq|23RS^PD7aA-B+jR@!@BGh z>A|tJ>r%&Ys(!psEyRu40vP-mvPA`nIT&?VexG$5r$EGiyz64;aa7#(*2|nOLYR;0l)M0BZP1+wiQajsS@UB-;2p;7k(Q7e7kEQ;as}QD^HGLKYOcWH~Mz^b+rc zm&{`Xr-)OT_kx=xKfc)_jrxue`G9;6X^!EI2hv=atA5Uv$BS7dk?Qh_MVx zKz5AZ`Q$-wqhSS&-hl@s^)}|T5$+S99{#pd0Dde;#ozYSH_24|RrGl=5ZI_WWz*o1 z!m$T`i1oh&^>5PkV_q1)^M^@*2Z6w5jQ|L6gnydpdKvF1Z{E*X7REO&e}hTGvzYj&R#_ zxg#e#;$rH=ag6*t2pcto4V@qm8;<1w*Z>r|GyuW4nc8WH<9@NIe&g9_6N5t&9 z`4Q-rk2qU5U-F2v^`cFWINc63cIX{2=GJ^Y{rwx}J;$LQe^7ouyV-I6ZNuc?vz^D^ z(&cnJjj$CY&Cm}Lb~pR~QZpNuiANk~%dbDhaVBKqTODWX)wjx*x5<~M<=+ou@(v}qXUf0Nk$C1z;u!L3!|-g zwtO?P-H4AH@Uh= zf2iE-XjXQ>!-}6fv+^(f(l3$p`OjkIYdW$rNw9VC@--cKnP6N1Gdtix2mH60KoA2$ zQes);RjUz?;{sM{yX#UX$6q`k)@k`2Gdjd99?a-f`5iO5`i>dBCf~z8puWSxa<_bs zIp!|;{p?1^sb|c&u&3BABwM@S{Jv+?hiex(Xi56P+`nbktKRK57k8s!&#v+sCZAE( z3gRZO_%)wbnQZ0hwd&fiN?l!TbzP$Cs)v;v(6-5T>qZ;&;~!b08CPo1v7hilJ*;^3 zYEBilXX4gPb`_?AC!WCfHtes`Rrt-tU4@3%Z1U=wb!^VBLp*EL!El?jm(+6Faie9Y z-FlH-2iBhU(^kjTx*f24dQp{yL4Aeg)xzvrVC>R-#k#gXvff(43T**+2qmA5-~{e{ zwp|M>W>zg`e#X<*mdkWoj!zx9dE($*Ii#`=)^FWvgTLW%y9qhqFV*08&xQd9k3_=* zQP@iSU{3ulB;IVD%taXIeG(-8_BoS-8>AL>C9ESb5+f7ZanZ@JaQlg4BwR4|GO~1^Y`iVGX&vc0b%PF$S~miS;rwu&Q*@n z^)w;pw)_p?VroOLzVelh^J)C}LwsEAI9spU=r~)e8z5mJ<(9mpGG7g~`D(XpHvaCG z2yb?rE=Wr3o0M9P^Hi9V$;1lF>-8G|8oSa!shi|wT$$(9R-H%Cc_Ea4Qi6q0hW?5N zjaZi7(U^D1??CJG^80ff$N6pf9rmyH$nVd!zF)H$@Wtw(*yU_>2D+Rr&ir?$%3aQu z{&#F}2J!pP>wW{4Z!#v_>o{A!vC!qrVU8gKB-r3-cZdt#*(ti=oyC>NZzhE2aiqPO~3A@6sq^&v1vOW_G7VtL(9R|Wpsrm z`NgR0BO9Fz$=QL3dkJTag{mL1S}UOYE?5{aY%V9QCTi~+h*#o-H)Myfs1>jZmAjkD z-L1;)177(_cZb2<66EJCL^s_g3G~;!zTHJH`Or_BF4~e$sKIH)<*XJ)ifIn;DDi84 z#Y=e14&bub!*ws>?6#Iy-HX;-CtEWhxQCsk_K5y0*roTeb7)VGx~%z&H8av6va zz9t{xo@t)6n(PSO*2@kBi+&Ua*zl%45hRX*?Pxx>lLb-q0ImP`QD5knhg(5KqJ7!; zWMP^oBJ-hOF$dW#snPY^e0*IopbvU0?7%#)EU?3db*4$)5VnJ(;{IXzZX$>iuU;1& zu#feKoawjVm8*dzK}n@yOJO$ht8=`-my;@Alv0$;A2Oj4C%$@(%>nbefXj{|zsglI zrbwB*SoeZhy@x=bO?aHB7m(z$$vkbMs&`oL%fihtN-9ATDeavsB32q-){wB*B2#Kr zY)R2$y=|DcsI|hQWT0XoKU2MnE4+Dk#k)I+ydd_(?K%n^$V3HWoD!4od6Wv!>HtD1$uhhdiKTzdBzv_IYIpEcKr0YQU(%VYi=Ru-0 z0@`V}-rpTI>24yOPPQ~ai+J5z(XVwS^jcL77Ng9f#RIc`Q1t`dqHMCLOT)zWmt9&U z-yL&FASZ-AhR zxyWnIV{L#X^+3ZjybgXyr_P4U1|-}_(#e%(tHB!zmG<;`?$wj|&gp*5vruj?e{YMo zO#RT_b^S!@3<9avi40Xwb6igGbp1IQ(g;A-q??4koDY+@872alYAeKzN+5aSD|-qh zQN;!9pU$2LU|i zFwW)QbDJjzW5;<*mvf_29xB%=e9xYdU8VBwk-dApVXssgEDd>kd95;1s+C9h>}++< z@bE}!Pk9foR?5S}L&GDby+fsuq20U^IdB-kZqz+kUp=WacJ-0Y=u`wDpfu-Qrf+X@2>FSGT&X@ySrQ|?X7v0y(1&L_l}HsrIFc6xi;d} zcJG!z<F5xT*BwP4C#y3&PtUP^|MO{I-RGQo#*1&e_Th=Qec&m-`S$m}`|#Y`zdZOmA9(#=j`hCc zJsyT5VAMaOz?yW~%AeChrz=eBHq$=6GNb=AP{{L}}Z^0e8dXUw|Nf81hu(j~QGWE{#wU&!w@kd_Tfg#aFZzk&4|w1DXa4?g2LF2FwXb~L zGoJPN&A<7PFAV*UFMR#?fA!~owD_$%Ha+!41GoR>gWrgIpa12qfBfDpkG^ZunOjQ- zu726xM|XbZQ*Zq7x1Ii{>z?-U-+iO^*LQs7u`Mrs&GE&bdc5~vA366Idm7*Q> z`Inh+=`$~X^xUsCPd)hlAG?+P{_C&(+7}+a;ZuL{(HA~;$-95#z`2KS>bm~2S3a%p z@|_-z-QR2 zUjN+3U;OpN`}~K#`{|DrEWwl8?Me(0n3J#qQ_p7Msjd-21+c=`K(>~n{D zCm$Mh|MF+Q{_>$KPyPD`!slMU^q#Zde$|IR@rf_~`_I4gpT4)_y|0*k<<>6`UF!04 zFaEu6{nd2u?U(L<1ApzW&;QGtf8{S8=)dv!_^&?jivRwT|8nY`{F;w#`s|Os^V{$K z+&%ldKKa#yzkcA4uI<|J;DgSm|KU%{cmMhSzQcdx+$&2Te)ZHvi*Nq$;zxh>)Md9l z_RU{<(S{o?`S`2ecK9b=`J8`!?gL+a=D&US;FtSL z-1FGKe(BqreqrSQy8gNs%?!Q%&)9V6A*!WwM#eX~T;MR{G zTl@n5$4@`<(aN`e`rZHht{?x&i{AgaqD2&-_+p=+Z;C)UKT#tz9|#)ffE9N8j+_FWvSBAOG&}Z~6L_zwo@7$*z>vKNwhF4F0?Gyj|O4 zKXmZRz1LjvJLkSKGV`@}RxYn}{p%N=^Q@0N<11G@`-s`;7nR)2L z-+cNNx8C(LpR2s@V?S|GykY#4-~G+ke`DfpKl{@E_{Z0L;T0b{`;mk1{Nxkwec#VN zaOnPTUG^(a*}c5<4>ND*dS>#@w}CUXMK1P!m!v=m6p1Pva~LoL&C99E{lOPY4h_k|8=T+1(s4e1CAF$cRRmKYe7yi{GXabJrUi^Jxrl%@n>M!BZb)NtG3AMp zxQTfl1m?3zq2krKULmOj*y2(NSURCZ-CN<&o@Nv#q3&u`h?JZp;#!@+^p8S|%XKdp zSWI|RmjTZNJRy_lAo_R0ahx~F{<_5>>n}aZI08oO}Gnob#;*|$z9cOzMoaY z`9dqIkIg4ZGaelnhL=)(ABioeI?;#t!vBHHZuMws^GC&w?=VYxwIm_?WRz z6{_Jpn>ew!i%ntDf0P78`nl`|AmZ8&~2wc&;NSWd2i z+wJoFE$67UV3qB?Yo6>vo_#GMnY%yq-Z0b&g zLBvX`c|qdEIu&dl4G+vUnuU8pV+Dd*U==ckiwxbB1z1rdgU2d87WvH-9W#AS$r&nU z>P8l?Wkz2PgzUhP=+Wq%oog;O>l$-OVM?l31#b4ZloX-#l-(s;P;j#$rR;kRSfqz7 z%|W(Ep_*;}%O<9*h}lGHuIdWe@4DW!oe?G+CC6;@pIwUNTM8R!lByJ?CM|6lCE9vb zzlD)j2^-cTgDUf?i`9W<#B09V%oa4I_wo>i!W|2MC~SlpI0UrZq(sT5vJ44YM%O?B=#>~FX1kUL&13E>3A5=h#FE%8}$EQ*;>!<2&*kC`8ctndnB z@Cw_$Z3jEa?1I+U(a3Q&IK1}G| zwMy7PzN3DekeVMmOY?qZo-O(H zI-BLdnOB(~DC8x!686dQsUwF@mYFMHrUSaT8U>MUkeMreQ>Xy=bLyJsY{p%g zcI5#ZW^Ry3-2>Xq>JWD`cc~R8UZSwf1G$H}$dZX+lSOWXx!L#u*(`gRyR-(Ba*4Td zJwK*^btVa#688*gTw~tlBv9rYZ zb8N|r0za5z?lF=Jda%pQ`IBUXT(?egYD>+qaz~0_>0; z3Xr&}2!RXhbzVtW1FmBLi)B~5ecNa)jJQ{sXFl_TG3xhf5VH!o5>a0x0YUzFQ z%b@x)q`vG@Uxw9}-RjF8^<_kT*{i;kOZuCJUDm+M8hUwGpUa;2Jl2z}G&#GUxp(!B z-**6Vz3)tq%Vs3s(Rew+6E<;zfdMeT)S|G#l6fWHL5}&bUIpp=fF-=q3?naEVY4mx z5^5&8iGGT)U}%Dgt;c5&C}5>3w#^xR7BED|%B4n}>IuI_9kGJp>D43dRaa=3@?}3x z;(j0&u;aJ(voM+G(UKo?=FbIT#96h~tivbC4}8MaS0`9y@HHI&^C*wN!hn3(9KK=6ZF$a-Bdr=qTvQPyME zAu)FQ6u|Ln6o~nD9}Efe085`p2x+zOGQ(*Lbx$xLA$-z_T^4-&|QH&1>{+%cOZ-49#meU-Q~# zKtSvI%nwEDT1%tC&AHH_eo$%@e76gA9wc5dYGvp1LFR@FIq!#40CPf zVqRdI&6B5$r8BLmK&7*H(xB40I;v3VZ23A=I#0e5mCmz%Eh5Uz7UJ(xkNfHww@XPmy|3s8SGU!q@Y^LX%pTs*|2m$xm9(sg=&tDq8kmuON-q z!#Sl6lt-<3pFurWw12YcPHB=4X7GN}X;yw`E+AZ=e9F~MpmcK>C&FeVl+z?+&@-ft zN9x*Z9cACTT4`9B(+;+p^-C3@X5IO6p=NER6At-mR`%2chc74eNwWl~;e-WL!OQ4$ z1xW}xVR2-e!s^)ytK1_GHf~Gzf1XsoOMsIDkFk%K11_+*JuMdmRKU+}-NEjN{3H?Q z*H6s*^}63=(@7LIW_g71#Rf~|y%9u==%=T+822RM*fudJlEGOPOmXDeaLn9pYG936O13pNZa-CR+e#bJXF z1bk_r7S^jgB1;^t{OfhXO}vg-GVdiU;JgYjvs{}uq=61-_%*A9US!b%i&y(;ofpeR zRTbjJ2p^Y@vS2-YMxv#TrHDoK_HD|iUmSK3#tp_8+rfIuEaEjTRDUd<{Gi!N*rFHt zqSf=9Ay5-*dT}glh)Kv=SRFFPqz)SJrNh*I)&nDgNZY}d_|AGArA1#Dm?4Web|V>& zqA+3&9>Z=UsnqaRm>2ozOsfjYIT_Dc;3dHXcCCbYEJlna9N`hGz$yy`O#{9pdx8dI zKZE6dkuyJ0sQN`-WG?k4ju8yFY?fET29K?mFwUUOOY?r6v)w{6UmL>E+7?8MxirohhhsEdm( z7Vz?+;a26dtvTk>FdAh&3Q8(p#FJKJGl2wRbr#r@%nPzJV7+0~jwF<#LGqd~{v(}| zMa_5P_uY6=OqLT=E^_Z+G^k22(zJrQzrgD&Qr?739^mWECr_SW5x*DV(&A#Vn5w4c zE$~xQN0|%9p3#8;9iw8jG!V~+t$MW(gh_!!Qo3e|XRTGQpX7}uB3ZFsLs(V>`?DhJ zQ7wUKL?KOr+Q*g!3?iV7keY%Lei*QM9Jmgo%-O+S=*5LauioM>B=az0jN;H<(u$2J zA)(%cA;%BqR832f*MzGc?S!xwj#fiM<0{j@p+#Z`KE`#5c+aoFMvT7?L)7V(4SSpocrdpgvY1Ru5odlJ?1Yevyb5QEB9$Z40v`hua@wL4VT!ptW+$=!qORIPTd)^SUtQ=F&>1ixp~vqcu0IJ5y0GIW|FC3tdM=wn(Dp8niy<}L9nor5G>a&T{6{*Y+Cr3 zR2a|YGb&8FXss>7FyRPlDXLw^%4DWw%m}Dl5k~Bn)j4=os~Sr8aJO%RR_T0An-8C* z)X1EZrnVCK?tg!kj~(2nb-&uj4(?N+O!nj}xL4-Df;M^c)*aRf)$QA8Ob&=K*$As# z_$<;WRNjjf5B`5~vFgwH_y!x?fbs?ur!L_OcwoF(iIQTIH}-AcHh_%stnGl0k%v8{ zIxj$~YgfX&!lXwv=OZuXV=lNrU?|1Lg`;?6@Z{0ysp;|Qo5u%-cMp~ZO9#fwh4KaB zyau$kM(hxWj8$uL=}of=+(p+x@FPPfk4_&taA5l8@u87jZLM+7uLstE#@d<#>#95j zJKm6IV^2l(ecQL~5I&H`{0f)RW7t@5kDQz?fKdulWpD}lcE>90*V|)*#tcbpD5gmT z6+?5!>ddC|wzXmh4R-~~MsU}Y9l<-FBnbL&UJE!JJ2J$an4UT!y8F&2X?I%~4n9f9 znW5oy;zc!|*Qzs;mDH&c??9q37=oM=rONe50?tU1FWDF>ai6b zlTUQRTSi>JN-K(ZkdOns&*QOjsic#|jvI0XTpR`;8!TZl3x9Z-s^_S6dDyc>9{IHu zDi2u#Y)F16v=N7=qSn5rEguNA)mkpnf7lW>jTNPAj{=#EmM~+hpr#!R-1NZ!>FqBh zq(qJsc!OOB^eAH9+UQZX?-RX2*m9J~EQbh#yGy%AckL;a#K&m4TwX_&FdmJKkB^U^ zC-73~{DFg48F*E0?vA--L79FwQXDDnD(7m`cgBZHYE z9P*5aIS3@t1)Gi(N1p8HD(cEn^#evX_q@sK418oLLtt?-rH#IOi}c@nJdFG3=^oS5tjFp`fdn=% zR?Pz1W-!ffm~gr*)WWDBeZfGBT=046WJ-xe)fE=pcppognwOv*&1S zDoLG9bYr2@x}#^^1-{~ry6!&alFgRBpW7#kLp|y3Nfj^bcP;9;eRa@??w62 zcZ&i5@ta(^LkiL3(@cbL6BeFPL|>zN)DH52u(=Z94m8$V>0^VX(r{t0G`O2l+#@Ce zAKggdkBU)izi=Q#Su6+rh{w8~ek{#mKMcn96va-q<o*7hw477e+u#4m)lI;>P{AfD{@ubebQQCT%BCo22nzNqP zS@12zRlJs(&UVmt;;SrUaubvgA^>Rg%5;{Mi>ZtF9isA z{vn{E9U+kCuwUmUN8$O0l<_T-E12UEZBR0omv_}_6|XuxTPh6>?-?qWO1mqbw`<5N z50<^b!RiR#yQfsD?W)c0t<*+_2WzE4Z%=8&^M0tO^$PyR$97p7=o_iCS?|@Pf*G7-7~NV=leoRhQj&A3I~VofumK z2!#)G`*8GuHVG~mz!-DAdfn~AX$l(wBM0qP%a+*E5Y9efAU15M;a1;*$@jBTpOTEU zLkA7bouIuQC{Y%8c-e@7VAQ={_e^l6T@Z~i+6K?Ep4x)5_X~2xSay>@F z9X8~4Gq$`V?8Va2%9XGc*?kaqi-E`(^cq4i&T$#lnw5Z?nDV_S0R(Pc+q z#z8$&o$Y>W2cy{;11?=&pS)DqW8DO@jP)q`kSn}6jVGgri>|Rauf0l4>K$tna#mHj zI_?lW9RZCg7#EC@YOX{{w)sL(Qjj#^ES&NgRGNjPMAW@5SpyAMUEr!QCGw^MTkm6M zr1(g`w!o;qT}R;U?}IPfV{YfLXFI2)nKKVa8;`bgBqAX2Xwj>Wm2s6whJ{s65XZLn z#nI5C)6wGoGwBCM9%ssX*_JgSJ1f1+Oj~eA!uiMzLWpTenbYbH0nX6^>F*^M1}uqM zLZ`CLt2z195{Cc?Z%#50O~!L9u2lAl_#ZCDu*$ZA*Wx4 zg_jr!#vawgF=`|oSI(}ZWSSYUM*i!Wf{x=#Re)SPg`hX{L3*eO1{o^F`!YSeraD0c znAsJJCj$8sybScx`Q)tuyuTi1q0_?zP5eajwlS1Vk2l(iU)?2tcioF}lrQ#6%KT<9>TeCO>pnZea$O;Rx zxE(JA5@3j)yRTC8)aQpX`jbu5lUIoSsyFTuG<`m3TCgpqxM@PDZ(>~o>So`;g!=X? zcXUT_1^OtNLSa-ACi~;llKaV+YQsVvA#fF=k1ADBR3=lAug&hdXMJ|pJ4B?8QFbs4 z5XPrfnHOA%13leYBNM8fqCf^pM(<#Zof&|nmgf+wI3PkcGpW^{it1zw6gP<|BP`sl zi3x#xBa9Qc{mKm~xSGp*MQJ*QiZ z_;&IJQWKS_Q52Wf{R2}+534L1g3zeri9pt*GN5?}=>&wZn~oZw6f!}i(agwpD57Qy zk-U`G%~ce)=xq!G=eWH3qp;tsS7~wD*N#p-oFgVYj+hE?J@>;PX1%yap`X!p2;#_3 z!Wm5GttK3H`&1N?7S1(!FyfPoM0-b0QCqV=q z7$OdGugZFrPjM7iihL=I8pSH7U|<6W58ZU?NO3-C)OS$Pf+*UD3e_A@59hEyM>9kc zHvLLGCg#k3QJZMkSc5mhXeDJfRe`2XHRmF)%2RyQ67Td~q2%8zHqb&+JXOCR3=y`B zxpy3&y7kD^@lz)tfJ_(D?K?+A@cfe@cCM!7yw2w$uVHFFDc_t77kDsHW$wt(-qOhKk)gp|qvPX8hVHJG=WDl54NmTE9vPoI zcQ%bzifuv>(%RhM6@hb(Vcd#`{u(2zb~xS{0gTM2JkUNA(p%b zc_L(mXcvhJfv)NgR40%<8P3h&7%0@7B*YDhbU-p*Y0QRo1cOU+hDA%e%J>dHnV*(r zWP^%a6P3N=;7i#?UX3^cG1H! zaIz`uHT|OB^lK}{Fq)G)EIW3n<+9vBF0vD09Q!yAOS}2;DCWx9I`5}*G6n37^)noy z^n-(K?2ZCeTBsfezPwNPnEZ|>FMd4*{yt~9nE+iukGrs&43OFBS*&~YHVe( zqC%8dHQF7TUYPU(Z;nSDDnph@FG#iKix8)^a?R= zdbpvk$`B_an1enfysyHVd_|(pf`JP%g{qH;0I*_8NeT8G4_0uTR`Mgx^TL--gj5xl ztt#ssV1@nc?mm-RCPF!+xg5Ar_*d6!C74gbR#J@o zTEF!(tXJ_$4FC*2V>G2%#tT+hh0H2ykqU%z9bYW^JE$XNGQTsG5> zefJB3dB1yCF3>Y)iq(Ol%Vxx)J7@C}zCe1r2Ik+Ky&7?G=*c6Zirc*?CS=dMq}U0a zQ8vyUjE#nYID302il8xy#%B104Mt)FsRpLu_SJan3Q^cQY z1#*B8joJ|IK-VR|n#{9?7cKCJopCLs^Jy;ZphClq{W&=GEpZYD6iQQ?Kg_%=>{4n1 zmjOql*NCxObqfo<;81BmCkIt!alJ~Ktx^`YfA||^HM~k$VYS^4Ja5|!?|a`n$qxIm z1z|IM0c?h2w#{&Rsw^yq={K+!R{tj5#~3-e_ChgafdsNhc9#24+FYmy!a5x;2g?Aq zio<2UG3IMmwL{B(a{N|3@w7RaWqsWAij>?Fr&_@+;VkQ!hKR!U1Pvt7I#%N(T zQ=8J)&DjB8YVafwU|k`{Y}unK`}92G0H`21>Mbj=@(8jU_*K40M>}ZeN}o@#4_7cc z!a?3?c1=n~>oS)6FrkK}Y^K10Rx}<}=1rMYJzi9q_hC_JMIw4Zduc@_U1v2fc)!^c#FS z@fz?10prW%H4|(YGs}8TN}%;ySdlYQ5NIyhAvQHT#TR|J-CK2_$m}$a ze6N12g#dHewA*GbvlQzF%#n_7Ooie9znhpFS(x=}bN zve^fcEco(-x#$+d%%&DGZKQovY*A$TJ@xu{z1l|76F6#iD_^-Cp_itUFtT~nvZGk& z9pQ;cXruL^xZ*YW;V_!wbBC6#BA9u}Q^9(7pw7JjYd!>)%D$KLt0L5ac`x!R36G|D zv+h-F9CgxUtDgAHx{c`}AA3i~?OG3$Y2c_&Zr}>MZqZ-~;Ksp47Dh)R4t7_$Cu%3> zd2mR0xvQ6x<9AwFCMV#Zr_ye2HM{^*9PEVxv`L(Z54Y;|l>;JV0LRHdRc<0acx)O+ z_v+ZLPbHAlSP3e*FDc?<8j#9A#bcfvOVXnkqrF2-Na~0m5*1(zk;#RFzD@F}M)o&) z-70{eN4PEKPX+$+;K9%y6sMy4p`aopf+7%M7e*OyVsso0EB4F)6Pns5vZ}VN_)tV> zl-`Czyd!1|G&3R+43SJl8g5n%eloY1rYnwL{4#v^ekTvvqXgu!DZ{#v{#|lg-PlqGD1qa{^;M3V__6?kV9MLXWIgo;?u1 z`VgboxVMWyC2|6>mci}k{M1g6@-U|*Os0JI80$%)tyVNxf@cqDsufDQDhfv-H=V}P zz|Jvw7_;-aRn(J93~ZPP%wh$dCE;iWUE{mNu&<-ZB&ONb$pb}L7f=MXP7te;n8G_R z7fD%-EG(@z3KX2xWnmjNaT5B(!d&JsbO$<+cz}fz#%M_pc;*SLvRy>1-D9fg)k}eN zrwxe1dFwcOj5Bs3WFyW}ivv950k~?X=2Gj7g_vY+c&aum3I z7hZ!DO{O9(9`Y>(Fi)OeQ&Q_2cON^Qo)Km)7^K13647-J4h(ISQDdLvyNdE_4>YF3pF_5ulVyQO6wuxNvz1Awc6 ztn>y_WKg}dY}tk?(P>r+7Km8u$~jUerAPhwM?j!)qXV9_4<5k`=NY~MrxOsEf#T?< zTbQyFWRo(cf^4!JwuhJ6s53Pyo$*8(k;x*S+&F0~Carbp_rfF~>uO7q!>?1aWlTsR zk=9?WhNX=ea)hL7O=rnX%Pj|fvTPn!rIxKo^OKlF)E2lFDl*nT?43f{QtGt|U1PG^ z@<-*xh_LZsy*;X+Jo8+oV^>Paq5|m#%eJLU8bK<^jC#_=*y$dN=&UE5s(`w^E_3@_ zCf5e3`cQn1#l76 zKu_x-ZKdW-!a2cR>_av>%CYK6l0)bV6Emr>--RVyDe_dk>~}NT+lt_hLzoLy&jV>) z$`%A|C1Wxu76P&;TE)fuPc}y_DcTCFD3LWkYAkt?W<0GwP!6JJL=NK~T^hO5(j)tjNgXuo{pF7CuqR)P;Z`!dTp`8C+>WRx`0@ zCv_vaeQop*V{6tLh+>5{MTv0U!FrHj%F$a@#+F>!1bZ5_@*9=KdTCF^_G^3lz-Tvl z8we)#gg;yNE5bXM$56&VV+GZi*Hn+&scOS8{nEA|8%QbJv^4?Z>IqSPy_2Vs*fO%4 z;imSvQ)ZnG8cmV`L8D2VjwzGJ`fViCcF5N$abpIQUDGb+;szybwT`;RgHrglz%Qhz z!hW1)J%&g+7)5Un&@AkCK?j&>-98!ALzQD~6~e&~Sx4Ot#f$KhAwcV`y%GkAS4q}U z`2msBuG=o0Q#E7m&0bW+lrfs6h)qYx4BBoUrKP_;Z1TyOEsU8%msQ)z6uDxpYH7To z|J3Fk71Qxr^1BY1&ERYAHCLE0Qn}E%f<&fk*sAbT^SKE3Vi0R%4bV`O(1gfL7OH-M zi2{}1!rmUK)E4%;K^;Ew>tGO|Ad7)XTq;MT$OC5xBEKo?d>gCe4jzNw4;DQMEsLGx zh>QSG6P#S&xO%=+wopZL)8`oopqbqJNFdTf@+*Ztj>eEWPa>4>rokzn1n&Afm`He*kFmx zkl*T=Dksz zv=*0^S6);q4-V}b-o0mJuZUhG=pqeKmRlXR=FleVm1&C5dZe!$p$F7~UP`O7_I-sK zBFHa2Xt5uxzGtm%O1UMKmo#eaqz9KjTtA<6gu5r4wcV73$F7NmM95Q%03f$Cd7&az z+Au8hpyHTbq!;$PO%FE?5a*9E*GK$RSo_w7pNiI0^s8ez5NFido9Lx7fM-QixOzC} zLqDP#tyKX0`7(wz4qWm5Xvk(Qb0@< zf>|c$!b7^aP%F|$F(Hh~uPpJ4fprw$S$whT0By(FH28FD* zM}WVU4NCb-QPFxN;zi~b_6xm@5EVOJV*Ci~POdchaRi=J9Ni;2CbhUY$^)Py1J32; zkOahxW)oB}DeIB7NMt2!+8&fCh%1PAy(vS89^$w1m3~2JKNyqMo4%5UgdVk?QD55U z37Tor2qH`}>$#P$Xj0;8ElrS`NpPUWHB+)>p=>4L|VX zgh%8GXJojwEvDscDz*a7OgFsBA`hxz6jNjc9EH&=*3+pP)&u;(VX%^=XG}6#;Oa!r z!pju~P-DbbTx>`6(@mwzzQlRTsa>v)wTk*kaY^%+F#s-!2r9yHNI6%*O++4_sHWl( ziql2PX#|f9HD%cYHLD9Le>+hMENI8p0mUeGEQpIxnv(lKqY@jzSq2dS?c6Fj51 ze<28$=m;tTPtSTWH&hkJmn>kZPC85{ykMNAsI&&MedtSff+UaI3Pgnh3Bj_6)MRfN zlk2t~b!JfHd)*WDr50i5usrYWEUA$t9GUb8qlyvUAjLb_K@qA1?9j?q%L= zMcs2yri&T|t-W9owrnnxH&MIiBr96OtW!5eD;O6D1VI5AShEGoFPk_aW5rZuYzADu zQnJFMDZde_2>5`AN*_A3@V+<)jEP9m3OU~^UhONbZ zfgSFf^(v0MP|CQGp|alJgk(%wA!TeD9wowu#8I?bqEUwu`-g&KW*}m6E6;J$i*LNOlo;3 z)5T&$XjEj;QHw*FKHc;x-$ zSFBr(wHlU7Dv=Ff+>$F=EDA?FHit2RVJ}>OqvSf2?_(0ybP~h!oZB1&oT-_2ffGR0tb+v*=SxQzWYb!mk^OOqJ)^mu*<0mT?%`>uq zj-95ZMMfG-@;LV9Qu0Fgn^f{lq`uS$H?P%^!&I^wSAZbD+qDAC$FSs+s39voE5}IZ>Ly|nYr&d>a)(OL~VpL$WNnSN$ zY`U3&d@9BX%1%RB*>ugd%4$Ww%8-ePoc0C&z8X4JL8cAREvf8~im8f2*%A;Z0$Z~$g>7p7c>xzIg zDVv;8Q8k;vX$n^xF_E3kdoe@UMYM<2>Rvq0M2lu|kBn{3b$#6Ffap4{h*xRpp>Ve> z5bVIzQ3`n^;43FAArb^V#nfdnjx~b`6H5oYkA*h7&H0NwQ1FfI-xzglF$C^XR|c)x zCze+BgScsE-S-SBE=*rkw9exBw+u<8E5m_n-Z5kbw7OqNk9k97=`<(pW_HJBs z039w^l(9BLNu*|n(Cr?by0peSZThA*WmoBDA*SV-5y9KHd-cM8*IS@1V9aUch?1XX zzm2IxiZw0i(zzp0Zp;QGtIoM9MJrDeaopn3fn#DeZ3{1u!po<;*c&SBcMlxXKB%@G zC!eP)^9XBGg7Hm9^7*+dbmJe9@5!#b*M*%A=; z0V%0cc_+tBnOwzXN`(V&5hsI~jM58uT9hjq-^9dht z1rKA33|EzkLpT155bSvDo;VCx@7dJQIR|T)?oMVd-q5_2Fv?Y4POjm}<(mGrc|8rB)u_Kij)Ijmn?T5yTHPi?FrsjnqU*-5Hst zcKXC>9*sy)u1oo_hfaC{)Yc&>9jnt#h4=TmcVz{ed-v&5Veia!u!qRiOvmo9X14Xs z4J=L&SGE;swc7MX`{)$fqq^G>l}X1#YfiEk2slNtc9XOYz*1U`nwqnci<}avZj1Vo zFap7K=pPz*M*o=f5`?VN&TQK7p^O@8u1u*0>B(PeGN2BO4IOCHYhgduBkB#K^p&Oh zEeI(yks?~M>}kprPZhSYoe|ZkaeFLe4Ky`7Pu0R!V0l(3QW^m*D4e6LrP{e#AEh!v z`4pH_6QS2C3a3P>TxoRdSrvRs`449Mb=7T!^j?5ANkamVpIE@Oru5MVRg_-^^=!JxnPmWj}7Qt{LXXpU2f>>a5ILEIBRi-6RIqeUMc<4ag} zi@h+phsT&9g5-PLAw)NoWlolfO619S8D7*VyBBco3|uVl3e{dksj=1`U@BXmQ2|p0 z*Re2AHtkfoHa#_!Dg&<>9E`(TDqmVeNUF9kJyT_rMx~C>q!P1XzYyEYV9_bMm&wr< z!OJ8`hA@g zO97AcFBvk|O~*0D={L+CbZ@H}z{CJji6b$c3e?m#7H^^pK-9Vkp_)^NLxp&l;s|pl z%38C4Oce)Yao7%%w4`YEG_VleTBqvC4B*rjhgf1s=sKev;V0!HB{Ra=rNdHjo>vy) zRwFJ#PbbYPUksQIGMy`Tld!fS89;NT0w|Vftw@E*f>)mG0J$?^&_4~G)2td0VqLBq z((Z_BucfU;#rZF**W-(&6-;{#V9_L{L?9f!j3z}f-WAt%9+rkn+N1t=2+VFrV%G*d zF{-4+Dm{|z$mxRhGNnW)JSIY7q;{3`wUxq#DTkP)bxVGm4qH)$AL9tVA~{y+#O4;# z%!wRz3#Vm1R~Ogb-|L<^GfT{=+l2#~UW4N$C1OQsM48nh2{%g$Rh^`U{HX~drD3YR zW?1(tE8@(YZib+QOtOu$c+5~qvBe1h@_EdveyzsEMWv#K83LEKr3!)_Qf*5z-j5Vsm(2nQ1JY7_W zwrz8UkOu@8s~X+5Y+u=YX!RD6B5pOv0KbkN6YC)!_cLM*Ts~{r`ib1a*p=!xtLM^P zm`^WDwV{UXPw$dZEvqS6ibArZ(%@XW3l#D)*OL%WhY@>W+Lw5Av-OvJH+RjhH+eB# z6lrhSXWC^kVB36c$uJG_RHUvXT?J^0SKGkKD^1mmfhVP1D6EU>fToa)T1X?dJc)3P zi#^yn&|Rw)Hh(HwSQYfqF3_qfhemgb$GDpB`_L@d4_3F(T9FcN0z(ss6FNi<2Vv&9 zIyP!#oK&Xtlq=S7-lh?teTWVy}1KNvTMh#5a$_a2tm=adn6^6bdT?}PdXTc zh1meA5jH=mhvh0pSmZ?XQMRkJt8G5bJ;#Da4=qK)961Rprk4ph@H_A!MgB*ttF1<3 zrHC_;A?}rukpd_<$qgB4m{Gf=MN?vC(PRCM(v#P!lim+?<|5Nc9p?!Za_ts2^>m=^ zc(n@Wnt85Rs^JAK9J9KCO)vOO6$Do>$4;S^jA4%1i6}@?2hC1J7DHHHJK6LVbIPej zG{}soHk%PdbUk@Y0k4w~ZeEAeoyBmgqN0ms;_Iwl*oWjh^_X~a+3Wlo zC89?&T#c;Tl7y_i6>E(UOTNmLtL|9i1Fx2RI6ARQ2EJEBJn(*^#X*I-q|C+@9bl0m16dBs5L@&HFkVF+1Any z77r}LUx$T%k+m645LR)qMOmd&g^@xH1?99q8&+5P71?P|1aAG%tMbX)d6v`8!Ac0zV@u*R zZrbQTt%uaetRzGetZdz5$kOx?JH#d*m{%Nex8J&>?uCP~?ODQ#FHCEG~~kqpmcaC-=}H6-nuEuIu+MdtRirFkC`E+$vl22a@R3R?+V zh?p5CUR|i_#ST)c(=P>th zGn^IlMD^mq$&?|~%pW>Hn%R{o?C+6)U_TvWE^a@O{;2u6I$BOh_E=c==siA=Yah1EH>K_4fkx{7;Ml9`$GFC(n#W#<|L<3Lf$pKNi8jPSm>CZU-A-}5r0;y0 zOEpT3#`M0UtuCO4XxL?S;11LfcMl1zNL;18ekm(LNOWJ&K+!G2kt5mx>=m)$jom<) z2GTQv8U5`lQRnFcJf$kkEV(foitWPOisaOoNi-8?%1SF13h=)$`_~%(wC<0!X`kvh zTBBLZpP4ob0QGyyU_peyXv|xOrLa=KEVV6Fj+SJZ6BbZcZ1aeyO&m4T6`~++eZH>| zR{I8uImknBb&unR0lr z27qJ{ir)suGXqrx{>+eA^t7qchN<5c_8VnjLWLp}Pim7Dk7|?(C#r!+i%EO9H}M$K zS}QD57#9%I^^iH_BoLU zz#?A26rRdr)P@|MNrnGSo!mD=n|4EtWRbH=uC#&>JuGv&&Xvs}O^QUL z9M|H#DXqqZ9sK3IJLwo-iirz_K#u7oYmhnUqs_}iv^JKJvMrOSg#slbdI3#ZN^Lo` z>?g+qaZfYrv3|j*0}V12@1V_fS5JUS$-!N8xdCUS0&Z4AgpVv{F0IgtbSjpB&_tBC zc(055W(#!T>?oV`7osrn7sLTJ1*x!K-{V9whPu&8gkjrHcm+n0f>_dM`5^BlkZmb4 zcR=hq_rgUm9vv9)8i+AjT=c48T#Q-+`&h&CgMp!4<-G$#oR|0R87cMAc%v>8Jpx<4 zQWs>iMNm#MESq3YV%*BnDl?w&l7x#O-kG4l83jR`s0HXARZzuY_2GjAEEFwIi%`&( z;vuV)dk~rMp&9seZ-fZaj8WJL8G_Y@i;fAaaG`u^et}#NjnIZ@@za>$#czoNDQU_C zFH#g@=V0Zl^D*T^q?6$-B-l`%gE$RFGkuo5#5=$LNSjl^(`~MXi;FxfK*{R!1WoOc3?*wF5J{;0 zM7U%x(d0&k39T*mZsc$1*bmRbfh|GXe5yKK#4P~ zkj1AVSb5ZucSW{pLt^yO{QKdwCWHC((4Tgw8 zruBl7)HXaZUWhhs!L=228b~6+JtyLzF%_grlu~u7%7i8q^$9E$H_FtM9Mrc?9HV>j z3_s)wG9^pt!U+gI^3Ruoz=XL zKS40aoqEDSj%qnRF-y`w!7%~S3-L?IWlHWeRH*+&_ew5L4HqhVXxUH1rF$8%iG<^~ z=22YGi{eMD64_G#waRBB`DIlH$+zi~a>Tq675IsI^;lh&E~K1U3kks^!qI_`4SZr; zA;}2q62n~`W6Y&9)z)m|!pcpzwlV3AB-UWA^v|Kv6pDy1`w5pWom6pVF3i;5-HXLZ z7_s}Adspv$khb@Uy)F^vu2(JBC|4iNt@84M)Fe0Q2mV1X;TUq$iPtbXI@3#$NM)+Z%V;XsWgr$72mR{)v#8xu2XhP{k!^y`}g#Z^p{KOrdI`OauSn= z3N0zB?d>5Dh5dtl=KD}zrWz_p)sXTzIjPf$1q7)3DTMVv5&sv9Z4R!)&~5nc=`WZ2 z%l$+ByZU!)d})ru&=U3b%7B^f^0F83Subiv-byQI)mwACSxLf0UKu}j=%(?h6I0{Q zKXvTX(Njkboj7pv`0a-dxa({#E0iGy2bBgx7*N|L_m>B)!9K})dnPfn4yr+JkhRI% z3q9~U)-&11%4|rHi-x=IkCl~`l}`ATtnMghyQ5m|+>g7gg2UN@H{Wa*B+e=^HmJ~( zEZ1nX4_WISty93@d}QK z>Y>aHLM#i-L(SuH_i;!RGnJYl%cn>%)i~%|%D7}#KcY!hkFd7( z1Jn_ojtH945sU_4Z628;4SvKc2%8Mo=xp39u%YIB={CeSH7F;&;!hU&U6h(tosLP4YR3=p&98Er`GD#Ih5tOtP zwL8W%DA@ls4uT~FSA~H9ijym6#dud|IwZ(dH~kx-I6$%*He#d8+G5SeBrQ*jc}qq! zI{y*$eR2?DE(zvQ10cmclGPz1njA!B+T9S75JX(6l)X=GHmb4x zDvJLQRBiB7p2}eml5`mDl zSt=$km+%z!>`pE!0!0M&$R{&_C^Wp~0wTA;zNnnBQhP{An0WO!Gi`Ilc=`FzNOv^ku%>ZmlT;oM{w$DXII30o+$mvi6P9d0!ikbhty0~7Brhki_ z^4q0Gp0HF9QY8ih zcyi)cs_^yeEG+K|hNaG{B>exoamjQG)kT;Y^=vw!kQq7Zy_nQwvBOa)?_&FjHgqFfbWaQ91pCM!)<9I;w66D#WfM}sun2{UZg!|8a|&Ee zgqU}wQ8%}|VrGcQcJr;?NRnks*zLnST-0cQ7-~i!C^BodC^jl%ai6f<0czI0iXiw* zAF|VHSz7NwqdAIB_7;rDhl-72o>GFc3_t@qr~9R%ljR?xi|Py^4en>|z zEMZX(Oxm3&GIsKwGKN*D4<%qn6MUEt48}Ia7E+S8L)*_vu?=kpOK@4nQW!17VCo_ug=0i1>YA}o6qz3|J3#+;Biz(!fz}el8q0paD;@`SQrVbHHU87 zGS+2mY}sJhfsMyFJu^Ksjb^&X-9018#t_IwmVmR#CL}gHy?XVkbVptlfxd+PN=81@ zRI$PMFj?hgm6%1!MChAi5h2`1#4Jx-WbE;a20rIU0yj0hknzSiPpVYw?B%ZH0u#ZY zpsY|1UriYjzM1x~eLA0+0yRH=7aYTu82;;P(Vz>`4 z9=&qnOaw941d9~q;kL7C8v-e!0UFS*vI!sndWk1mMJW81J|fT8GN6^lPV1wKmCAXD zMcN-~i|7`^5B!+X=erS;Dp1vqr~%syuyMe+x*EV}VbR*yM&y~fS1C(_#(6-{S>)0a zZIu!?R_0Ij_!~_z4{YL@rJ8&?!Sv^86iSZQA zUXki)mA{J#JPD_yipb|1i+m=jdE&$fMQ}x0$u;SA%V+{30QA94HwOO-^Vd#cB}|{y z((73H#+IEMJnP3(m1fOVz+T!_oT8orqiXSNO3NGWWJ`_Lw;tjk^nt=`t|@xFhuCaU z)tV7DQS2nl&k?=};%teLa!tzyO6lm*Scy)=(0qbkqljgKA}>p0q+DI10tUc4LIVOk zmI%3tW`RXlxK%{U;{13$FycK*c(-m_;gw1lDIb0S@x!;B3j2)$c)#A;#~~nKr<;H%h`3t9=x&eiCMjik}0}e{(>3 z;e54*snT*KI+4l9#&@hB?X{Wp9$~##uwbcqZ)<=BhciH-<#dP&FMlaIKdczz$Vezc zkOu(U5x|2qgR^_6Ryq&Wik&)S8{L66*b3tdjqWgmV-`N>bEPz1ENLlZ!HEhRay?B7IVI6FOC|1z}o3yTkMCe_F)Ic2HNDdQ695dVp zDP@U#xRsK*r$XX2{Wt~ZWIU&_dZV)R9zbtU0;I_4Pp1zbv;Ao7BP|XtYabG`Olbx< zpjhEM7Xypw!9c@wFtX%ZGutI=7gbk-HmgNx>QB>PqPY7})74nC;N1lw4?1)^eb`dX z2}RV)M2uIE`r%`m);}Cfa~fWsZaoY#77_XaD@3pcb#>GFbPM2vg6N;knas<2aaO4{ zCybCQkc#TVQjrczy58hObTHO%aE{55b{H7*?_qqo`WLdFZmO+WdhD)+^p@Z*7U&f2 zbwN;|!l#iJF^HjAo*8v0fwH==)Vw1e+rlc0sTfM>Gb^9?TlKWs&;5FVDOQ@DxL6x_ zSL3&H@y<%@F+h-KQCOSAcFo&@fgT!~O%?}-hDwwHF&ucsZyKiL|L)*GP}-oI8gFU` zypY*m4M2HaR7KT@W$TKI0)V5qInCtoFqoO=Gu{(muN8dD=`P$sOPHH6>3D{}lE6|e zz*JCjso0`NCfPy(_glJ4UouD%sM5taHLzb+lnrGd;%Nj&z;3OMS;`|{S z-Mt_KjVO5$+6d!Xn26b{sV{PI{6{NqpIlJ^4$>6TpU+RscD|&86Thm)yvq|W)*k{T z!Kcyz@FDYq9XBV0Ve&i)`D``JWFWB7`r=8~9LG%P*SDKhU=AUKkX)c1_t-Nl$8u#U z$Q#m3TJ~0tbcxTFa^<>qT+If1`vNX6SXP#q!te-;7y^1Fk7ia0qH0mX_+}Z7TxrEB zxyrakJs85%4ltUh4+v5F1J>m@AU;CQ!?;E#7=H&v+A8i6#1^HSY5AQsjn~sukqp5E zE!)T%W?xfurQ(#5=j$oAuPL@tDd>))W%a(M_)75II@Z_JzEW|FJjQ|PP*9CdZ{B&Q z!!vs>jRai@2^Z4YDwUxZw-Rgvmh<=<3M!3>O_(Qx`B>|a;iNP>4d)e~GXP#l76bh5 z0z?UL?#5ngK$9(~HLMDUx;ha?HIrN(W;p@YCcZkHhQ%!7BmIHNZKeTED$w*Th!%~% z>cXpQp~+^L;WuWKm{_9Eew8QEzMSC+*Vbrh${ks{(#)jmu$I(PB`4e$POOb4dea1p zse-|nR3x4l@Ma;aQ!EX~6TSV3UT;)6=#@j;E4P|6vN^SEA60pi?xYOIv20vEFgb&Xp1A1SN!eCD@2lD?RV^5K zeNruIwhNAR)Qpyrpy=;R40uG&%EFgi6ngAQ4D@?F(l*Bp6U^7JNs1-cGP5PA`Q9EM zC`HX4%j?o8q?vb$x}M6ZNiCnZEE&)7M87l|S5RpGP@>nHZDytwBtfYFxT1iN&gDs! z#;lT;*dQUv@SdeewT@*f9+o5#8TU4L^bQCUi zv^;;EA``kA?NFmJY5w{X0|NrrRVY4Kp=T)3<4sPr3bCl#F7?neEVH)YLaEYxZ#>N2 zIm<`3X66nCb~U=29po(Jv!jF45N=XlkY$u-;Hbs~Dcqspq#+$Im}Z+K8xI3f;%%@NQ(qjF~1#ck5K zK7zsz!VfB>y~v!14wS~K*@Q7{`^L=^l^s+a%i$MSJrpu&9=4grM107i5*9CxaA24P zpNbqugYay#^TQ_k=@K(W7c#$8l+0e}Tu2HDep%-o?|HxP<6U;bOxQ|eBD^%wbjq?* zn_Es>-nwGts=n2yui2hR>^SdJdoI{}A(z>i;8aRF${rp1z9w+p-y z)n$3UbU@7k^?{d^lE6qQr6@YtD;c~w4e4|wzokS}<*^wYeLllTSoD#p@a z2!zfko5Kt}yg%#-LUn@U3g`tLobB~4xdkY))r52y{)Cq2evL6Wk^FFqUB)qv&CjOH z9-k)zSCbb0dS__UDEO4h)2CYeB_bG$t$?=&`LeErwW87H>UlkDYlSw;&icJ}$Q}Cd zUeVXuQa(R9Xql#-f`hy0jq!OuFg~2GcR;T)I%%e8ve1wCzz0IYaaYsA1}gIQW>Sfb zuwp!-jmnYmtU(PT71kKb7SQo+av^{+x8U*yN^4d%$OJ$rrYRoy?WE}zBdNThn=VRA z^hrz_M+jAX`l^H0WC5vgVLFp$DrZ}!vAZG^7p}t!h#8tF2Mgd15)pE-9d0Y)b+;$& z`Chz~Xl^YI;`Pl@Nn!S1RnmpQE-b24X`(RTEO_7nf>;hH@v78YrL?oigM5@oeBSu7 zLM#h6MHP6{WV%I#&Jd`jx!Ykq-Kr!@t_ZaNC~xB;Y5>V%pnj;UkN~hzMgo1N#YV^U zj&bi|><~34b$)~98zeSYjRx~ZN;e&9I<`Yy9nR}zJ&&(tGPX`lj)kta)~rLlqy>5d z>ejAL2~YHN`E3rsO)q7PfZI)$j9MA5woW~sTBfpP>mZ83gX^{^0F1(5MGfFYPnU;s z|AOZ%lr0$p7MWE_;~JxuU@FouESDPVjNhnlSNzqBrDWbnsaiU1>kb(6=g{UBisn;26zwhdE>1EcamlxLC8{7JBUG!1~r z@m>Mu4?}K%#;N8#bX4{*qPsaO?X|(&QLr{}6zrKqxMZgFjA80&L=3WYwy~kQ90o%% z#!@RhQTlSLUAFiN1P?T<~q5D)iGWivg+Q0w=o zLnGoL(j~tb&8pr!M$|4~i9V(tBoB;+x$p_pVHt*T4G-Z$uckC6Bk*kUL zj3vwKzd0-q6c8i!IX~HLmr00P4{*9}o)N(*;TFKYXg*vSBpz3U#{%KNU$XOk%`y$c z*pYzY5=?5YIkY0 zS@Pt0yyV~nizuaqx7qm?k9M1d1A~?iWB3$Q`EbZtg~XvH4-=itjZdXGq9{$wWrlzd zmxd5~J-#BHIvHO{TjM4VAGm8L=14%RMvCC~W@OXX5SkPT50tJbh8 z{MZC}p#(EX+vpU6LoJ8#@B_^woH;pbTqza#Ew5(=8idkgmZQdQP!&}1g`~hse!r4B zp!uV%d_uFa5oWN@?HhP97y|-VhBChM8*Idt3PJE30Hcne0A^(}j_&q}#!|VGIYwO! zw8y)wz+5p|8oNYF>_+Yhzsa54UJe2Z&Kx6>`{f7l_1yji& z9Dq8E(G3iT8%%-27F~zsk-*jxVLT+^0l+R`lm+nQqx1Mfx`e#4W*ZPn%<%*afqZmC zO?fs21WyPw2q5<~PuDLcE^quioQ;>lW}Q<)r}#J5o|iQUch|R_A7+`^lMHLoHcVHL zI9013q&ORNb5mKf)z#rPBQ2t}RD!|gDmcAd$P-iTQ|oa-q}l`xS*G;7s5VZ0oQa*i zz;qYGLKzc$&KyuemGZj1a6ayK5P@2;>aGDLWLP48&ZWOBg7CJ)m=gM@IDNV)shvV zHxS+kxVAv2a+S4t&@>)16`jKYLi(CGX3!J~l>mMCvji$Vxa49g18354^+H5U1F8;c z_C!red3PSyuWSZ3ftt+-fDa26@PLQ2j#3{V>H7zUwB}sS`!t7T1l3Q!AvjvV(D5_vv58flu}xLMlmhup$c6maoc)4)54Ksqou*V z!XxHLu`6Wl9+U(l5bxb9o?fKV?BOXSQ**t3Df9)D4pW(J;rz<88m9%y4uD5((X}-7 z;0SU8xU^(~NT3Mpubw)On+!KIcFiXZ2YIEBI@1J4m#|-f_yGny zT3#8~F*XWT@<|q8i-yo~Z5opGFm<}j6l{S55I&-%%#!ami2eZT(|UOT6smk`5+;9S z%x;j#9^O#_GEhQt_R|+y{5gr4HW%GZ6(D*)$4p-96tFjh4KW1@VsJmqD`gyyu z;(RNKHVr#?oR_5vXf<63{9Q_=bjQh*@(P?;(1{l$D2B^?3jy&X z(`M8lri3eZ!PJTon+oIN&>sm3L2Q|0fKou4fkiJwHK_lL-Fgo3dGb}A>gL7#Ni z7mAkc){`mX5<=YetAnHEb^s(m-|*Qvcdmh-3+AToSC7sg|e{qAXqFk4Fzg z$S0nmVg-bA^Z@~dD1YG`Wrae)QyeF!jOmlqO9s_l!@m`+1i__TBZa1A(7>QooV1N> z&Q+RIElNBZ?NsB@c$e}C2sopx!niYQc=Vao3+FF|N)-W+Tlo|CzV5bIFP37gi7g5) z|IB>d2N;5wUlb{4#t^`2JV+iMvk+<-I33jF8kX%521ZG$%0lQt9$AR*kvE+lT+H$+ zKsLh}-stE$kFY@eVnV7fU8r`KDh5)Z0#=oI9cQ(uIS~9(a})b{?Yp3&cQ@a`_W84rw*5BAuqHXCsz46J58YHlYntIgPqK0+>-=gn8yCR|GX6 zMap;dT$o4yt1LdUqS@IJ95S1omR6-m!?giY>6$UqO3Be}@8|^7SF%k()c$)XF8@NE z3YnL~H&Y04IMk#be^z<1GgCDPbzg$UPifuJZ9~h0<^$1~*7HUIoagjGKq?HPk#@?8 zRRn+f4*YH_<~73vg#&;70aMY~%)FwgtD~USbDW&2r{kTSv0m!8ly)lR+K%Rr*y|mG zeN!_!x(>0=eL7Mcc+DXqm=9B@R0O81r)P?awT7A1?X%#ZIWp7Igyb;e@(xTuC{BS8Z>aQVMzN#^T<%= z3Y6|DMj&7aw*daRmqe|s8F^4K;HeN`4wCJmCx;@0U8}JB7>*H@vOSQ$eYPV(&7zNp zBwv~Af<-wMU3dnYJ(WonhhF29A$s>O)xnIw^Z@=2@)`@Mp{-crR0&vJD@*xj1^-uql*hIgcHs@<06nDyk4KN#q|97B$E;Ki(bE-# zg+#@dG2G>ZTj?=^r$xOqkJM_DW4L7o1n2Vr8=QN*1@Vr4<;m__eJAr zowlRXx+Q(og@>Jf!AM;lhJ6B_=uwFrS0{W>RU%+{Kfp2(-|GnDkp*NNc{}pS0v}MI zL{y59wjgzIel}w!{XummpsY~e*8%?sLI{=g)x4E8Ou{~MX}X&#@{|ThDI}eoX6p`5 ztfz@Ek^VF$r8W^lLWGcS!XHA&EJDaN@P`mmM+mu|r9U+X%8bO1B2x{axrEe1%kv0n znAJc?LkN^7q4|U~wvVpsk9T&hn9Ox;OK#{rbN!}WL%rv$(|Xr#jGo!sea6P2LS|#! z%}s34d&i>fBgN7FzS*Esu^kO170_HnW3gBrA&qlTX%QkM25?1>16bw(Xsw17CY<@zafavIjoj`pISA+Pd=AORmh!4gLDg*N=QDa?v;bcH71q zciwvD_zT6@1NB$G`q%@1cm5ZC@cbP;UwPu(yX(*W@i)HvH}~CLFrGiH``iDsM)`Eh zwd)>v{L0IZ{^{l8t)Khj9sBmy^*sGQUpl5e{O=F6j?A4>%ni5Nzdz7%{Mom}yP9wL zM!Kb|WBK>CM{~wcp1b1V2RCkd@z~2U-_$nFy5RNw0}Yq%Bg-!PS6uv0ANkwg-MBAy?%o@&nI%um5;`$; zVq#{=6Laq9#87Ehuc2plrPdC1Y|Kxdvt@GA)@^4O%E{&1lI7SryJH*9I=fh0e|D9L ziAOtNV(ODxYOGY$ZEtRXW-8`pR*1a*-U0KgcP+pFz4cc#J^9u8-+m#yck_>q9{%%n zrxsuS;pcWddTsc~Q}_IK=^Oi2mB07u5hot|%B^P=mfioYo4Y^%)^$I>bbsjdh65kT zsq{<_=Fe7Aq|w?;mG%_ldR@7(m}jm}%QeU7|5>&3@!nEmzg{`U$mJhb$&xg|HI z@BWA3Z~WH{x#;;8-Tl?9m`$JpoA71r~t*`FBV#l?qCx7(zQ@2M_5;uS)kAk4z3)G6-umUy1DF5v^F3pmjRX6?Iq=4L>wa%@<#MvHbKsJ6aYk-qn@%ynV^dcy$bGKu>eufoTs2tt%inzO%i}+P?HP0a z?RP~lB@1po=fQgq%qjlvj`i)2pLfO8KUe?b$+|^fxMgm8ds@ZGp_^Ph%6VZkzG;kc%EmZ)U0mmw&q%PpnkY&8E~SiyQ-@f zih0fT_Pu3QOWWFb%^DmA9|(?X>smp;d0f?2L2)ID2n-l0m0hfJ48T@ia*`EDgFPBH z=!m9iPzF9R={rV7;&TYOl6Q&Tvf25+Vn5G@efx<5DXy&*S6c z5ywi6IT1e%fQT|a9#{2(RN*M8+X&=3uI`Z+I+ zQz+ZKK}f@rhX|=ZFq@E{5mNu`9728$*^j`Ve-gdQ;QW(?_!3qnJJtuOsB95SdR#;>z??eJB(P%_3w!(h!WA4sQ;b0{Eu^ z!g5@m6D9mjmon)jZ`z+zsF`Ee z%z-iR)=uz20y(Olg$E|8tBJ*TQe`2-WTiku%^Uk@WjWrMTnwh&Lk{*?&{8VsywkiX zKZdZ3W$JOu)Om>$D_bermTURjfraMv<>a)Yw>JH7!1SqxW99K;lK0|=1Iy%f4IE$d z68;{FR^CWW@;pvglnh+EWRCGHpmPr}tmZ*hrPn|S|GcqG6$q^g5$&>qoQwkoIYrw7 z^$`aQI2Hf~SyEekm@F9=0iHbf=pP9#?Bi!jKfn?tQSo@#ktFvvnN?-Vq+Kjo>=L((?VSzX#(0Dm-5 zE#$og3G9U@J9aU+&j+*9RzWkoWy;RpDN9TsOfHxNX=WM>#Xz+z7Bvi`Xn{)}%hhcO zHaK6G9Kn|WRG815$&%}OO+#n?6d3+^(Fv4;;X9K~Tumo!!3A)G9`~og!b#^+#fS~2 zGhMb-lH?|kaKsebTH3HG#skEf(u#onR8BJ;JF%*H*MV;%6%!6;uF3bh3Lf$Y-6ZKFCG!M{6V>oT4#&o;Qup*OI z$+pHKu4UVFmtKK_rF$eHjVF|xWDH~)Iz%VpI_ik#+QzxZ6Vlj}PIbgG9o?O(-lIj; zj#y_}O~#{fwWGZ|*45G3-QE>#haL9Ft(I+%qD0NASKVvpA*Oj}U|{P+*@nN8p&W2@ zI{OW{TEl+NCWN%J-@hk>tfbp`18npSv%s)rLBuM$5!Z?2tt{BIEZ91_bK~YScAnM0 zbsfM6SVO2zXH{oG)jFuUh*zb;9n?Nz>*&tG&70O%R$s%a*Fp8!Xi~$g1B&5RjCa3v z^Oh|;ht_ZLb>GhF&*t+CP0a3z_C}%Fyse`<&)U3YtFMZm3=7~dSs-qMggA~YK-@-_ zE=y1^5kfZj5ce=>s)FGEjF84-BS;wxrF>uj)ol0&B9dc*A`+UC=Kxw+;%g;uWpP+} zD~t6vN|;1p4Vnnd1+;RsuN68+*ib5i4Z+M-h;@FP(Mo)y7-G1A?;$c0Zx4}BJVY8v z4E{vnPb5Sd>k$QRq1YB8jf>$WlCvTb$>vh9tke)r3w{`c|CDCZApi$$-JNF*T|* zr%Fh5`AMaihjT?*nOHZtURh^3F6y+w1C?&KDn;8W8)@B90zI_=E7LCpUw$;%S1wOTSB9}7MTq@lbZG*iW*w!)CK%WH}8-d3u zoo!uh?Fz3Lg4SYcbX`?6#;c=oRwWwa9}tb$6Gh{P)0BtC_6jt%Gc?Zbj7C39JjT^% zxGElj9OHr*4f$J#ZVUQ?ul{A zi}@(;n2y2D_ExxD@VzF4Xr?WE($A+ zM)Yz~NNmtFNYG}wXj>DL;v@@ltW>3x%ocs!z{vt7s$vl(I>)uOq6$_M95@izOwBD8 z#JEA6%-UKJqB%qyxN3`lpFv)sN;c@Tcs2~y)ZKB-P33qRK#4LO6;UEKHS_9%QN1}m zJFB7o{AJ5armNge4DtB0SDjr;a)X;DO@N`UpgDP`dr4zFD8V5ZSE|xfQ%bv z(wb1)+dA4Ci3=xqC)-RDTUJoRRiWAK?STfkR0tBz96}J=AYTGR04fN_AW6?5)1i4} zx_%LvA`8fL{nT^=`6!ug2rVJg4YTHw>4w=ylW91?vd{GN{EvS;IiF0kYp4GOPpp;j literal 0 HcmV?d00001 diff --git a/MikroMaster/20260302/20260302222004-Config.rsc b/MikroMaster/20260302/20260302222004-Config.rsc new file mode 100644 index 0000000..121e268 --- /dev/null +++ b/MikroMaster/20260302/20260302222004-Config.rsc @@ -0,0 +1,3971 @@ +# 2026-03-02 22:20:04 by RouterOS 7.21.2 +# software id = 2961-C4ZZ +# +# model = RBD52G-5HacD2HnD +# serial number = HCX084RAVFA +/interface bridge +add admin-mac=48:8F:5A:60:A1:0B auto-mac=no name=Bridge-LAN port-cost-mode=\ + short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" mac-address=\ + F6:BE:9D:85:53:F5 name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 2ghz-b/g/n basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b=\ + 1Mbps,2Mbps,5.5Mbps,11Mbps channel-width=20/40mhz-XX country=belarus \ + disabled=no frequency=auto hw-protection-mode=rts-cts mode=ap-bridge \ + rate-set=configured skip-dfs-channels=10min-cac ssid=vados \ + station-roaming=enabled wds-default-bridge=Bridge-LAN wds-mode=\ + dynamic-mesh wireless-protocol=802.11 wmm-support=enabled wps-mode=\ + disabled +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 5ghz-a/n/ac basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps channel-width=\ + 20/40/80mhz-XXXX country=belarus disabled=no frequency=auto \ + hw-protection-mode=rts-cts mode=ap-bridge rate-set=configured \ + skip-dfs-channels=10min-cac ssid=vados5g station-roaming=enabled \ + wds-default-bridge=Bridge-LAN wds-mode=dynamic-mesh wireless-protocol=\ + 802.11 wmm-support=enabled wps-mode=disabled +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/interface wireless nstreme +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set wlan1 enable-nstreme=yes +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set wlan2 enable-nstreme=yes +/caps-man security +add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm \ + group-encryption=aes-ccm name=security +/caps-man configuration +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-2ghz security=security ssid=vados +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-ac security=security ssid=vados5g +add channel.band=5ghz-a/n .control-channel-width=20mhz .extension-channel=XX \ + country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-an security=security ssid=vados5g +/disk +add media-interface=lo slot=tmpfs tmpfs-max-size=44739242 type=tmpfs +# mountpoint [tmpfs] taken by tmpfs +set usb1 mount-point-template="[tmpfs]" +/interface list +add comment=defconf name=WAN +add comment=defconf name=LAN +/interface lte apn +set [ find default=yes ] ip-type=ipv4 use-network-apn=no +/interface wifi channel +add band=5ghz-ax disabled=no frequency=5180,5200,5220,5240 name=5G-AX +add band=5ghz-ac disabled=no frequency=5180,5200,5220,5240 name=5G-AC +add band=2ghz-n disabled=no frequency=2422,2442,2462 name=2G-N +add band=2ghz-ax disabled=no frequency=2422,2442,2462 name=2G-AX +add band=2ghz-g disabled=no frequency=2422,2442,2462 name=2G-G +add band=5ghz-n disabled=no frequency=5180,5200,5220,5240 name=5G-AN +/interface wifi datapath +add bridge=Bridge-LAN disabled=no interface-list=all name=xs-DataPath +/interface wifi security +add authentication-types=wpa2-psk,wpa3-psk disabled=no group-encryption=ccmp \ + group-key-update=1h management-protection=allowed name=sec2g +add authentication-types=wpa3-psk disable-pmkid=yes disabled=no \ + group-encryption=ccmp group-key-update=5m management-encryption=cmac \ + management-protection=required name=sec5G +/interface wifi configuration +add channel=2G-AX datapath=xs-DataPath disabled=no mode=ap name=2G-AX \ + security=sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=2G-N datapath=xs-DataPath disabled=no mode=ap name=2G-N security=\ + sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AX disabled=no mode=ap name=5G-AX security=sec5G security.ft=\ + yes .ft-over-ds=yes ssid=vados +add channel=5G-AC datapath=xs-DataPath disabled=no mode=ap name=5G-AC \ + security=sec5G security.authentication-types="" .ft=yes .ft-over-ds=yes \ + ssid=vados +add channel=2G-G datapath=xs-DataPath disabled=no mode=ap name=2G-G security=\ + sec2g security.authentication-types="" .ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AN disabled=no mode=ap name=5G-AN security=sec5G ssid=vados +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1 name=blsp.at verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 use-reconfigure=yes +/ip hotspot user profile +set [ find default=yes ] address-pool=dhcp +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/snmp community +set [ find default=yes ] addresses=10.30.30.0/24 read-access=no security=\ + private +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/caps-man manager +set enabled=yes +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\ + cfg-2ghz name-format=prefix-identity name-prefix=2ghz +add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\ + cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\ + cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set builtin-trust-store=fetch crl-store=system +/disk settings +set auto-media-interface=lo default-mount-point-template="[tmpfs]" +/ip smb +set comment=MikroVados domain=WORKGROUP enabled=yes interfaces=Bridge-LAN +/interface bridge port +add bridge=Bridge-LAN ingress-filtering=no interface=ether2 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN comment=LEN ingress-filtering=no interface=ether3 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN comment=NUC ingress-filtering=no interface=ether4 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN ingress-filtering=no interface=ether5 \ + internal-path-cost=10 path-cost=10 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set disable-ipv6=yes max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add comment=WAN interface="ether1 - Unet" list=WAN +add interface=Bridge-LAN list=LAN +/interface ovpn-server server +add auth=sha1,md5 mac-address=FE:82:A5:78:8E:84 name=ovpn-server1 +/interface wifi cap +set caps-man-addresses=10.30.30.10 certificate=request discovery-interfaces=\ + wlan1,wlan2 lock-to-caps-man=no slaves-static=no +/interface wifi capsman +set package-path="" require-peer-certificate=no upgrade-policy=none +/interface wifi provisioning +add action=create-dynamic-enabled disabled=no master-configuration=2G-N \ + name-format=2G-%I slave-configurations=2G-G supported-bands=\ + 2ghz-n,2ghz-g,2ghz-g +add action=create-dynamic-enabled disabled=no master-configuration=5G-AC \ + name-format=5G-%I supported-bands=5ghz-ac,5ghz-ac +/interface wireguard peers +add allowed-address=10.8.0.2/32,0.0.0.0/0 client-allowed-address=0.0.0.0/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-certificate-common-names=CAPsMAN-A2A7DF3D5EE6 \ + certificate=CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes \ + interfaces=wlan1,wlan2 lock-to-caps-man=yes +/interface wireless sniffer +set file-name=24g +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main interface="ether1 - Unet" use-peer-dns=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81,10.30.30.10 domain=WORKGROUP gateway=10.30.30.81 netmask=24 \ + ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=AMSTER-NUC type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=ros.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=10.30.30.86 name=MikroYellow type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC list=NoWG +add address=10.30.30.10 comment=MikroNUC list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=89.110.101.17 list=VPN-Server +add address=80.85.244.9 list=TRUSTED +add address=8.8.8.8 list=TRUSTED +add address=8.8.4.4 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new disabled=yes dst-port=53 in-interface=\ + "ether1 - Unet" protocol=udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface="ether1 - Unet" protocol=tcp src-address-list=\ + !TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp src-address=!10.30.30.0/24 +add action=accept chain=input comment=\ + "accept NTP clients on local area network" dst-port=123 in-interface=\ + Bridge-LAN in-interface-list=LAN protocol=udp +add action=accept chain=input comment="accept WireGuard" dst-port=13231 \ + in-interface="ether1 - Unet" protocol=udp src-address-list=VPN-Server +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=Instagram dst-address=\ + !10.30.30.0/24 dst-address-list=Instagram new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address=\ + !10.30.30.0/24 dst-address-list=Twitter new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address=\ + !10.30.30.0/24 dst-address-list=YouTube new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address=\ + !10.30.30.0/24 dst-address-list=facebook new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina log-prefix=VPN-all \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp tcp-flags=syn tcp-mss=1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 dst-address-list=!NoVdsina log=yes log-prefix=VPN-Net \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 in-interface-list=\ + LAN protocol=tcp to-ports=53 +add action=redirect chain=dstnat dst-port=53 in-interface-list=LAN protocol=\ + udp +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + in-interface=Bridge-LAN log-prefix=WG-nat out-interface=WG routing-mark=\ + To-VPN +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps disabled=yes \ + dst-port=443 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat dst-port=80 in-interface="ether1 - Unet" \ + protocol=tcp to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com log=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot walled-garden +add server=*1 +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=add-src-to-address-list address-list=bad_ipv6 \ + address-list-timeout=none-dynamic chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked in-interface=WG in-interface-list=WAN \ + src-address-list="" +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes +/ppp secret +add local-address=192.168.60.1 name=vados remote-address=192.168.60.2 \ + service=l2tp +/routing bfd configuration +add disabled=no +/snmp +set contact=@AmsterNL enabled=yes engine-id-suffix=MikroMaster location=NL \ + src-address=10.30.30.81 trap-interfaces=Bridge-LAN,WG trap-target=\ + 10.30.30.10 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system scheduler +add comment="Windows Update script" interval=2d5m name=WU-script-run-schedule \ + on-event=WU-add-to-list policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2014-02-11 start-time=00:00:00 +add comment="Backup Every Week" disabled=yes interval=1w name=BackupEveryWeek \ + on-event=BackupAndUpdate policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-07-07 start-time=03:41:27 +add comment="DoH Cache Flush" interval=1d name="DNS Cache Flush" on-event=\ + DNS_Flush_Cache policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2019-12-06 start-time=05:30:00 +add comment="Create mkdir function on startup" name=\ + create_mkdir_function_on_startup on-event=\ + "/system script run create_mkdir_function;" policy=read,write,policy,test \ + start-time=startup +add comment="Scheduler for Update Certificates CloudFlare Quad9" interval=1w \ + name="Update Certificates CloudFlare Quad9" on-event=\ + "/system/script { run Update-Certificates; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-11-28 start-time=05:45:40 +add comment="Scheduler for Amster-Backup-UpdateEmail" disabled=yes interval=\ + 1w name=Amster-Backup-UpdateEmail on-event=\ + "/system/script { run Amster-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-02-13 start-time=03:41:27 +add comment="Setup Global Environment for scripts" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system script +add comment="Example add WU servers to AddrList" dont-require-permissions=no \ + name=WU-add-to-list owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# Syed Jahanzaib / aacable@hotmail.com\r\ + \n# List name\r\ + \n:local LISTNAME \"windowsupdateslist\"\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"update.microsoft.com\"\r\ + \n:local TARGET2 \"download.windowsupdate.com\"\r\ + \n:local TARGET3 \"download.microsoft.com\"\r\ + \n:local TARGET4 \"windowsupdate.com\"\r\ + \n:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n:local TARGET6 \"wustat.windows.com\"\r\ + \n:local TARGET7 \"stats.microsoft.com\"\r\ + \n:local TARGET8 \"mp.microsoft.com\"\r\ + \n:local TARGET9 \"ws.microsoft.com\"\r\ + \n:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n \r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n \r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4|\$TARGET5|\$TARGET6|\$TARGET7|\$TARGET8|\$TARGET9|\$TARGET10|\$T\ + ARGET11|\$TARGET12|\$TARGET13|\$TARGET14)\" && \$type ~ \"^(A|CNAME)\\\$\"\ + \_] do={\r\ + \n \r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n \r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Add Hosts DNS names to NoWG addres list" \ + dont-require-permissions=no name=Add2vdsina owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# \r\ + \n# List name\r\ + \n:local LISTNAME \"NoWG\"\r\ + \n#\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"comp-lenta.ru\"\r\ + \n:local TARGET2 \"ok.ru\"\r\ + \n:local TARGET3 \"vk.com\"\r\ + \n#:local TARGET4 \"smtp.mail.me.com\"\r\ + \n#:local TARGET4 \"windowsupdate.com\"\r\ + \n#:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n#:local TARGET6 \"wustat.windows.com\"\r\ + \n#:local TARGET7 \"stats.microsoft.com\"\r\ + \n#:local TARGET8 \"mp.microsoft.com\"\r\ + \n#:local TARGET9 \"ws.microsoft.com\"\r\ + \n#:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n#:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n#:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n\r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n\r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4)\" && \$type ~ \"^(A|CNAME)\\\$\" ] do={\r\ + \n\r\ + \n:log info (\"start entry: \$c \$sitednsname \$Buffer\");\r\ + \n\r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n:log info (\"1: \$Buffer\"); \r\ + \n\r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n\r\ + \n:log info (\"2: \$Buffer\"); \r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$i \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Flush DNS Cache" dont-require-permissions=no name=\ + DNS_Flush_Cache owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ + "/ip dns cache flush" +add dont-require-permissions=no name=create_mkdir_function owner=vados \ + policy=read,write source="# Written by Phillip Stromberg in 2019\r\ + \n# Distributed under the MIT license\r\ + \n# \r\ + \n# \r\ + \n# this creates a function called \$mkdir\r\ + \n# from the command line you will be able to just type \"\$mkdir some/new\ + /folder\"\r\ + \n# and all the folders that need to be created will be\r\ + \n# if the folder already existed, it is ignored\r\ + \n\r\ + \n:log info \"Creating \\\$mkdir function...\"\r\ + \n\r\ + \n:global mkdir do={\r\ + \n # \$1 refers to the input variable the user passed in to us\r\ + \n :local newFolder \$1;\r\ + \n\r\ + \n # we'll use this variable to report error messages that may arise\r\ + \n :local errorMsg;\r\ + \n\r\ + \n # if the user put a slash on the end of the new folder name, remove \ + it\r\ + \n # i.e. \"some/test/\" becomes \"some/test\"\r\ + \n :while (([:pick \$newFolder ([:len \$newFolder] - 1)]) = \"/\") do={\ + \r\ + \n :set newFolder [:pick \$newFolder 0 ([:len \$newFolder] - 1)]\r\ + \n }\r\ + \n\r\ + \n # if the user put a slash at the beginning of the new folder name, r\ + emove it\r\ + \n # i.e. \"/some/test\" becomes \"some/test\"\r\ + \n :while ([:pick \$newFolder 0] = \"/\") do={\r\ + \n :set newFolder [:pick \$newFolder 1 [:len \$newFolder]]\r\ + \n }\r\ + \n\r\ + \n :if ([/file find name=\$newFolder] != \"\") do={\r\ + \n :set errorMsg \"'\$newFolder' already exists.\";\r\ + \n :log debug \"mkdir: \$errorMsg\";\r\ + \n :return \$newFolder;\r\ + \n }\r\ + \n\r\ + \n # the name of the temp file to create\r\ + \n :local tempfile \"mkdir_temp_file.txt\";\r\ + \n\r\ + \n # port 0 is unlikely to be open to HTTP requests...\r\ + \n :local fakeURL \"http://127.0.0.1:0/should-not-exist.txt\";\r\ + \n\r\ + \n :local fullTempPath (\$newFolder . \"/\" . \$tempfile);\r\ + \n\r\ + \n # this is where the folder creation happens\r\ + \n # `as-value` prevents status messages from printing\r\ + \n # wrapping in a `:do {...} on-error` prevents error messages from pr\ + inting.\r\ + \n :do {\r\ + \n /tool fetch dst-path=\"\$fullTempPath\" url=\"\$fakeURL\" durati\ + on=0.001s as-value;\r\ + \n } on-error={}\r\ + \n\r\ + \n # this waits for the temporary dir to show up so there isn't a race \ + \r\ + \n # condition where you call mkdir and then try to do something before\ + \_the \r\ + \n # folder is actually created\r\ + \n :local count 0;\r\ + \n :while ([/file find name=\"\$newFolder\"] = \"\") do={\r\ + \n :if (\$count >= 50) do={\r\ + \n # after 50 * 0.1s delays, it's been 5 seconds, which should \ + be long enough\r\ + \n :set errorMsg \"New folder could not be created at \$newFold\ + er\";\r\ + \n :log error \"mkdir: \$errorMsg\"\r\ + \n :error \$errorMsg\r\ + \n }\r\ + \n :delay 0.1s;\r\ + \n :set count (\$count + 1);\r\ + \n }\r\ + \n\r\ + \n :return \$newFolder;\r\ + \n}\r\ + \n\r\ + \n:log info \"Created function \\\$mkdir\"\r\ + \n" +add comment="Certificates CloudFlare, Quad9 " dont-require-permissions=no \ + name=Update-Certificates owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_CloudFlare\r\ + \n/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalRo\ + otCA.crt.pem;\r\ + \n/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\"\ + \";\r\ + \n/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalG\ + 2TLSRSASHA2562020CA1-1.crt.pem;\r\ + \n/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.\ + pem passphrase=\"\";\r\ + \n# Quad9\r\ + \n/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGlobal\ + G3TLSECCSHA3842020CA1-1.crt.pem\"\r\ + \n/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.\ + pem passphrase=\"\";\r\ + \n\r\ + \n#:global AmScriptsUrl;\r\ + \n#google\r\ + \n#:local CertName \"GTS-Root-R1.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-R4.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-RX.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#internet\r\ + \n#:set CertName \"ISRG-Root-X1.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"ISRG-Root-X2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n\r\ + \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes;\r\ + \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ + \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 1\";\r\ + \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ + \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 2\"\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ + \n#/ip/dns set servers=\"\";" +add dont-require-permissions=no name=script1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + tool/netwatch/add comment=\"doh-fallback, doh-url=https://security.cloudfl\ + are-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Clou\ + dFlare-doh IPv4 1\" host=1.1.1.1;\r\ + \n/tool/netwatch/add comment=\"doh, doh-url=https://security.cloudflare-dn\ + s.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare\ + -doh IPv4 2\" host=1.0.0.1;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 1\" host=8.8.8.8;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 2\" host=8.8.4.4;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 1\" host=9.9.9.9;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 2\" host=149.112.112.112;\r\ + \n\r\ + \n/tool/netwatch/add comment=\"dns, notify, name=ns1.unet.ws\" host=91.192\ + .189.2;" +add dont-require-permissions=no name=script2 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n\r\ + \n:global InspectVar;\r\ + \n#:global RouterBoard;\r\ + \n#:do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on-erro\ + r={}\r\ + \n#:global Resources;\r\ + \n#:do {:set Resources [[ :parse \"/system/resource/get\" ]]} on-error={}\ + \r\ + \n\r\ + \n#:global Updates;\r\ + \n#:do {:set Updates [[ :parse \"/system/package/update/get\" ]]} on-error\ + ={}\r\ + \n\r\ + \n#:global PkgUpdStatus \"undefined\";\r\ + \n#:local Update [/system/package/update/get];\r\ + \n#:retry command={:set PkgUpdStatus (\$Update->\"status\")} delay=200ms m\ + ax=5 on-error={};\r\ + \n\r\ + \n#:log warning [\$InspectVar \$RouterBoard];\r\ + \n#:put [\$InspectVar \$RouterBoard];\r\ + \n\r\ + \n#:retry command={/system/package/update check-for-updates without-paging\ + \_as-value} delay=300ms max=5 on-error={};\r\ + \n\r\ + \n#:global arrDeviceInfo ({});\r\ + \n#:local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};});\ + \r\ + \n#:set (\$arrDeviceInfo->\"RouterBoard\") [[ :parse \"/system/routerboard\ + /get\" ]];\r\ + \n#:retry command={:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system\ + /package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"Error\ + \")};\r\ + \n# [:toarray {\"section\"={\"key\"=\"\"; \"value\"=\"\";} }];\r\ + \n# [:toarray \"\"];\r\ + \n:local arrDeviceInfo ({});\r\ + \n\r\ + \n:set (\$arrDeviceInfo->\"devUpdates\") {\"channel\"; \"stable\";};\r\ + \n#:do {:set (arrDeviceInfo->\"Updates\") [[ :parse \"/system/package/upda\ + te/get\" ]]} on-error={:log error (\$error)}\r\ + \n\$InspectVar \$arrDeviceInfo;\r\ + \n" +add dont-require-permissions=no name=AM-setup owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_RouterOS Setup Script: AM-setup\r\ + \n# \r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n\r\ + \n## Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:if ([ :len [ /system/script/find where name=\$ScriptName ]] = 0 ) do={\ + \r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# :global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n# /system/script/add name=\$ScriptName owner=\$ScriptName source=([ /too\ + l/fetch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptNa\ + me . \".rsc\") output=user as-value ]->\"data\");\r\ + \n#}\r\ + \n# For run from terminal:\r\ + \n# /system/script/add name=AM-setup owner=AM-Setup source=([ /tool/fetch \ + check-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" ou\ + tput=user as-value ]->\"data\");\r\ + \n#\r\ + \n# /system/script/set source=[ :tocrlf [ get \$ScriptName source ] ] \$Sc\ + riptName;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local RemoveThisScript false;\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n{\r\ + \n :local ScriptName;\r\ + \n :local RemoveThisScript;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local AllDone;\r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n:log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n /tool/fetch (\$GlobalScriptsUrl . \"certs/\" . \$CertFileName) dst-p\ + ath=\$CertFileName as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint \ + ] ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n };\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :put \"Add Schedulers...\";\r\ + \n :delay 1;\r\ + \n :put \"Add Global scheduler...\";\r\ + \n :local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFu\ + nc; }\";\r\ + \n :local Comment \"Setup Global Environment for scripts\";\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] \ + ] = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-\ + event=\$OnEvent start-time=startup;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Commen\ + t) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEve\ + nt) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Add Update Script scheduler\";\r\ + \n :set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\"\ + ;\r\ + \n :set Comment \"Every Day Check For Update Scripts\";\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpda\ + te\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Commen\ + t start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n }\r\ + \n\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n /system/script { run AM-GlobalConfig; run AM-GlobalFunc; };\r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :set AllDone true;\r\ + \n } on-error={\r\ + \n :set AllDone false;\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$ScriptName . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n\r\ + \n :delay 5s;\r\ + \n :if (\$AllDone = true && \$RemoveThisScript = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :set OnEvent \":delay 30s; /system/script/remove [ find where name=\$S\ + criptName ]; :delay5s; /system/scheduler/remove [ find where name=\\\"_Rem\ + oveSetup\\\" ];\";\r\ + \n :set Comment \"_RemoveSetup tmp scheduler for remove setup script.\";\ + \r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-ti\ + me=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$ScriptName . \"\\nI've done everything, and now I'm ti\ + red... I'm leaving. ))\\nThere will be an error below, this is normal.\");\ + \r\ + \n }\r\ + \n};\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#root.mnuc.backuper\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#/usb1/mikro_bak_rsa.pub" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global GlobalConfReady false;\r\ + \n# \\/ start edit\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in Amster-Init-Script\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix \"\";\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\"; #:global EmailGeneralCc \"\";\ + \r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.21\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 138;\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global GlobalEnvRemove;\r\ + \n:global MiniDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n#:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global ExitError;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n:global CharacterReplace;\r\ + \n:global CharacterMultiply;\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global WaitDNSResolving;\r\ + \n:global WaitFullyConnected;\r\ + \n:global WaitTimeSync;\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global FetchLargeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global LogPrint;\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n \$LogPrint debug \$0 (\"\\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if (\$CurrentChannel != \$updateChannel) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"Set updates channel to: \$updateChannel\");\ + \r\ + \n }\r\ + \n \r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel (\$Update->\"channel\");\r\ + \n \$LogPrint debug \$0 (\"Update Channel: \" . \$Channel . \".\");\r\ + \n \r\ + \n :local StatusPkg \"undefined\";\r\ + \n \$LogPrint debug \$0 (\"Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"\\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([:len \$arrDeviceInfo] = 0) do={\r\ + \n :global arrDeviceInfo ({});\r\ + \n :local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};}\ + );\r\ + \n }\r\ + \n # else={:local arrDeviceInfo ({})}\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [[ :parse \"/\ + system/package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"\ + Error\")};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannel\"; \$Cu\ + rrentChannel;};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentVersion\"; (\$U\ + pdate->\"installed-version\");};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannelVersion\ + \"; [/system/resource/get version];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateChannel\"; [\$up\ + dateChannel];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateVersion\"; (\$Up\ + date->\"latest-version\");};\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n \r\ + \n :global arrDeviceInfo [:toarray {\"section\"={\"key\"=\"\"; \"value\"\ + =\"\";} }];\r\ + \n #:do {:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system/package\ + /update/get\" ]]} on-error={}\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devRbCurrentFw;\r\ + \n :global devRbUpgradeFw;\r\ + \n \r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global ROsVerCurrent;\r\ + \n :global ROsChannelCurrent;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :global ParseCustom;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global devBuildTime;\r\ + \n :global GetPubIp;\r\ + \n \r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :set devBuildTime (\$Resource->\"build-time\");\r\ + \n :set runningChannelVersion (\$Resource->\"version\");\r\ + \n :set runningChannel [\$ParseCustom \$runningChannelVersion \"(\" \")\ + \" 1];\r\ + \n :set runningVersion [\$ParseCustom \$runningChannelVersion \" \"];\r\ + \n \r\ + \n :do {\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :local RouterBoard;\r\ + \n :do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on\ + -error={}\r\ + \n :set devModel (\$RouterBoard->\"model\");\r\ + \n :set devRbRevision (\$RouterBoard->\"revision\");\r\ + \n :set devRbSerialNumber (\$RouterBoard->\"serial-number\");\r\ + \n #:set devRbCurrentFw (\$RouterBoard->\"current-firmware\");\r\ + \n #:set devRbUpgradeFw (\$RouterBoard->\"upgrade-firmware\");\r\ + \n :if (\$devCurArch = \"mipsbe\" || \$devCurArch = \"arm\") do={\r\ + \n :global devRunning [ /system/device-mode/get mode ];\r\ + \n } else={\r\ + \n :global devRunning [/system/device-mode/get running];}\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n \r\ + \n :set devRbRevision false;\r\ + \n :set devRbSerialNumber false;\r\ + \n# :set devRbCurrentFw false;\r\ + \n# :set devRbUpgradeFw false;\r\ + \n #:set devCurrentFw \$runningVersion;#:set devUpgradeFw \$ROsVerAvail\ + ;\r\ + \n :set devRunning [/system/device-mode/get running];\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Error in Function getDevice!\");\r\ + \n :return false;\r\ + \n }\r\ + \n:return true;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global WaitArrDeviceInfo;\r\ + \n # \$WaitDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devCurArch;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global PiblicIpAddress;\r\ + \n\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :local Return;\r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n \r\ + \n :set Return ([ \$FormatLine \"Hostname:\" \$Identity ] . \"\\n\" . \\\ + \r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location:\" (\$Snmp->\"location\") ] . \"\\n\") \ + ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact:\" (\$Snmp->\"contact\") ] . \"\\n\") ] \ + . \\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board:\" . \$devBoardName ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Arch:\" . \$devCurArch ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Model:\" \$devModel ] . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbRevision ] > 0) \\\r\ + \n (\" \" . \$devRbRevision) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbSerialNumber ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial:\" . \$devRbSerialNumber ] . \"\\n\"\ + ) ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"nleve\ + l\")) ] . \"\\n\") ] . \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \"Running Channel\" \$runningChannel ] . \"\\n\" . \\\ + \r\ + \n [ \$FormatLine \" Installed:\" (\$Update->\"installed-version\") \ + ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :typeof (\$Update->\"latest-version\") ] != \"noth\ + ing\" && \\\r\ + \n \$Update->\"installed-version\" != \$Update->\"latest-version\")\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Update->\"latest-version\") ]\ + \_. \"\\n\") ] . \\\r\ + \n [ \$IfThenElse (\$RouterBoard->\"routerboard\" = true && \\\r\ + \n \$RouterBoard->\"current-firmware\" != \$RouterBoard->\"upgrade-\ + firmware\") \\\r\ + \n ([ \$FormatLine \" Firmware\" (\$RouterBoard->\"current-firmwar\ + e\") ] . \"\\n\") ] . \\ \r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# !!! The function is not ready !!!\r\ + \n:global FetchHttpInfo do={\r\ + \n :local Mac [ :tostr \$1 ];\r\ + \n :global CertificateAvailable;\r\ + \n :global IsMacLocallyAdministered;\r\ + \n :global LogPrint;\r\ + \n :local Url \"https://api.macvendors.com/\";\r\ + \n :if ([ \$IsMacLocallyAdministered \$Mac ] = true) do={:return \"locall\ + y administered\";}\r\ + \n :do {\r\ + \n :if ([ \$CertificateAvailable \"GTS Root R4\" \"fetch\" ] = false) d\ + o={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Vendor ([ /tool/fetch \r\ + \n (\$Url . [ :pick \$Mac 0 8 ]) output=user as-value ]->\"data\");\r\ + \n :return \$Vendor;\r\ + \n } on-error={\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=yes-without-crl (\$Url) output=none \ + as-value;\r\ + \n \$LogPrint debug \$0 (\"The mac vendor is not known in database.\"\ + );\r\ + \n } do={ \$LogPrint warning \$0 (\"Failed getting mac vendor: \" . \$E\ + rr); }\r\ + \n :return \"unknown vendor\";\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n :global LogPrint;\r\ + \n \r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n\r\ + \n# :retry command={abc} delay=1 max=2 on-error={:put \"got error\"} \r\ + \n :do {\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using default s\ + ervice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fail\ + ed to detect public IP using default service: \" . \$Url . \".\")}\r\ + \n #:error \"Failed to detect public IP using default service: \$Url\ + .\"};\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Failed to detect public IP using default s\ + ervice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using fallback \ + service: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fai\ + led to detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :if (\$PubIpAddr = false) do={\r\ + \n :set PubIpAddr \"not-detected\";\r\ + \n } else={\r\ + \n :set PubIpAddr [ :pick \$PubIpAddr 0 15];\r\ + \n }\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n :global CertificateDownload;\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :set UseFor [ \$EitherOr \$UseFor \"undefined\" ];\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n \$LogPrint warning \$0 (\"This system has low free flash space but \ + \" . \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n \$LogPrint info \$0 (\"Certificate with CommonName '\" . \$CommonNam\ + e . \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n \$LogPrint info \$0 (\"There are \" . \$CertCount . \" Certificates \ + with CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n \$LogPrint info \$0 (\"Certificate chain for '\" . \$CommonName . \ + \"' is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global LogPrint;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n \r\ + \n \$LogPrint info \$0 (\"Downloading and importing certificate with Comm\ + onName '\" . \$CommonName . \"'.\");\r\ + \n \r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({ [\ + \_\$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$GlobalScriptsUrl . \"certs/\" . \$FileName . \$GlobalScriptsUrl\ + Suffix) dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Common\ + Name '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"Required certificate is not available.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({\ + \_[ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n \"https://mkcert.org/generate/\" http-data=[ :serialize to=json \ + ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Comm\ + onName '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n \$LogPrint warning \$0 (\"Certificate with CommonName '\" . \$Common\ + Name . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :global LogPrint;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n \r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n \r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \"checksums.json\" . \$GlobalScrip\ + tsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={:set NotificationMessage (\$NotificationMessage . \"\\n\\nNe\ + ws and changes are not available.\")}\r\ + \n\r\ + \n :set GlobalConfChanges;\r\ + \n :set GlobalConfMigration;\r\ + \n }\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (https://amster.vados.ru/; main/3419/3ee\ + 19780)\");\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetRandomNumber do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndnum from=0 to=[ \$EitherOr [ :tonum \$1 ] 4294967295 ] ]\ + \r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n \$LogPrint error \$Name ([ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\ + \$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={:return false}\r\ + \n :local FileVal false;\r\ + \n :do {:set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\$LogPrint debug \$0 (\"... which does not \ + exist.\"); :return true};\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\$LogPrint error \$0 (\"\ + Directory '\" . \$DirName . \"' is not a directory.\"); :return false};\r\ + \n :onerror Err {/file/remove \$DirName} do={\$LogPrint error \$0 (\"Remo\ + ving directory '\" . \$DirName . \"' failed: \" . \$Err); :return false};\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\$LogPrint debug \$0 (\"... which does not\ + \_exist.\"); :return true}\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n \$LogPrint error \$0 (\"File '\" . \$FileName . \"' is not a file.\"\ + ); :return false}\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\$LogPrint error \$0 (\"Removing file '\" . \$FileName . \"' fai\ + led: \" . \$Err); :return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :global LogPrint;\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n \$LogPrint info \$0 (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint info \$0 (\"Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Creating disk of type tmpfs failed: \" .\ + \_\$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n \$LogPrint debug \$0 (\"... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Making directory '\" . \$Path . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={:set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]};\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={:set Path [ :pick \$Path 1 [ :len\ + \_\$Path ] ]};\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={:set Path [ :\ + pick \$Path 0 ([ :len \$Path ] - 1) ]};\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n \$LogPrint error \$0 (\"No valid RouterOS version: \" . \$Required);\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n \$LogPrint warning \$0 (\"This \" . [ \$IfThenElse ([ :pick \$Call\ + er 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"A script named '\" . \$Script . \"' does not\ + \_exist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n \$LogPrint error \$0 (\"More tickets than running scripts '\" . \$Sc\ + ript . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No symbol available for name '\" . \$Name \ + . \"'!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n# read parts of a large file\r\ + \n:set FetchLargeFiles do={\r\ + \n :local ScriptName [:tostr \$1];\r\ + \n :local fetchUrl [:tostr \$2];\r\ + \n :local CheckCert [:tostr \$3];\r\ + \n :local fetchMode [:tostr \$4];\r\ + \n :local fetchMethod [:tostr \$5];\r\ + \n :local FetchString \"undefined\";\r\ + \n \r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n #:set fetchMode [ \$IfThenElse (\$fetchMode != \"false\") [:tostr (\"m\ + ode=\" . \$fetchMode)] ];\r\ + \n #:set fetchMethod [\$IfThenElse (\$fetchMethod != \"false\") [:tostr (\ + \"http-method=\\\"\" . \$fetchMethod . \"\\\"\") ]];\r\ + \n \r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n #/tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName h\ + ttp-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-value;\r\ + \n #:log warning (\"\\\$fUrl =\" . \$2 . ({[ \$fMode ]}));\r\ + \n :onerror Err {\r\ + \n :set FetchString (\"/tool/fetch \" . \\\r\ + \n [\$IfThenElse ([\$fetchMethod] != \"false\") (\"http-method=\\\"\"\ + \_. \$fetchMethod . \"\\\" \")] . \\\r\ + \n \"check-certificate=\" . \$CheckCert . \" url=(\\\"\" . \$fetchUrl\ + \_. \"\\\") \" . \\\r\ + \n [\$IfThenElse ([\$fetchMode] != \"false\") (\"mode=\" . \$fetchMod\ + e . \" \")] . \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue);\r\ + \n :log warning (\"\\\$FetchSring = \" . \$FetchString);\r\ + \n :put [\$FetchString];\r\ + \n #:put [/tool/fetch \$fetchMode check-certificate=\$CheckCert url=(\$\ + fetchUrl) dst-path=(\$FileName) http-header-field=({ [ \$FetchUserAgentStr\ + \_\$ScriptName ] }) as-value];\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$fetchUrl . \"\ + \_- \" . \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$fetchUrl . \ + \" did not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# Global Environment clear. Use: \"\$GlobalEnvRemove True;\".\r\ + \n:set GlobalEnvRemove do={\r\ + \n :local doRmEnv [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ScriptsUrl;\r\ + \n :global LogPrint;\r\ + \n :if (\$doRmEnv != \"True\") do={\r\ + \n \$LogPrint error \"GlobalEnvRemove\" (\"This script is needed \\\"T\ + rue\\\" for confirm to remove global environment variables!\");\r\ + \n :return [];\r\ + \n :error true; \r\ + \n } else={\r\ + \n :set ScriptsUrl \$GlobalScriptsUrl;\r\ + \n :delay 5;\r\ + \n :foreach var in=[/system/script/environment print as-value] do={/sy\ + stem/script/environment remove (\$var->\".id\")}\r\ + \n :delay 5;\r\ + \n :global GlobalScriptsUrl \$ScriptsUrl;\r\ + \n \$LogPrint warning \"GlobalEnvRemove\" (\"Done!\");\r\ + \n :return [];\r\ + \n :error false;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Setup Global Environment for scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n#:local Resource [ /system/resource/get ];\r\ + \n#:log info (\$ScriptName . \" Loaded on \" . \$Resource->\"board-name\" \ + . \" with RouterOS \" . \$Resource->\"version\" . \" and Architecture \" .\ + \".\");\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n:log warning (\"This script \$ScriptName Loaded on \" . \$devBoardName .\ + \_\"\\nRouterOS: \" . \$devCurVersion . \"\\nArchitecture: \" . \$devCurAr\ + ch . \"\\nIdentity: \" . \$Identity);\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err;}\r\ + \n\r\ + \n#} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n# log the successful load of the script, or an error if it failed\r\ + \n#:if ([\$GlobalFuncReady] = true && [\$GlobalConfReady] = true) do={\r\ + \n" +add comment="Import ssh keys for public key authentication" \ + dont-require-permissions=no name=AM-SshKeysImport owner=AM-SshKeysImport \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-SshKeysImport\r\ + \n# Script comment: Import ssh keys for public key authentication\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n#\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global configs or functions not ready.\"); }; } del\ + ay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global SSHKeysImport;\r\ + \n:global SSHKeysImportFile;\r\ + \n\r\ + \n# import single key passed as string\r\ + \n:set SSHKeysImport do={ :onerror Err {\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local User [ :tostr \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :if ([ :len \$Key ] = 0 || [ :len \$User ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Missing argument(s), please pass key and u\ + ser!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ :len [ /user/find where name=\$User ] ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"User '\" . \$User . \"' does not exist.\")\ + ;\r\ + \n :return false;\r\ + \n }\r\ + \n :local KeyVal ([ :deserialize \$Key delimiter=\" \" from=dsv options=d\ + sv.plain ]->0);\r\ + \n :if (!(\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\")) do\ + ={\r\ + \n \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' is\ + \_not supported.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex (\$K\ + eyVal->1) ];\r\ + \n :local RegEx (\"\\\\bmd5=\" . \$FingerPrintMD5 . \"\\\\b\");\r\ + \n :if ([ :len [ /user/ssh-keys/find where user=\$User \\\r\ + \n (key-owner~\$RegEx or info~\$RegEx) ] ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The ssh public key (MD5:\" . \$FingerPrint\ + MD5 . \\\r\ + \n \") is already available for user '\" . \$User . \"'.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$MkDir \"tmpfs/ssh-keys-import\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Creating directory 'tmpfs/ssh-keys-import'\ + \_failed!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\"tmpfs/ssh-keys-import/key-\" . [ \$GetRandom20CharA\ + lNum 6 ] . \".pub\");\r\ + \n /file/add name=\$FileName contents=(\$Key . \", md5=\" . \$FingerPrint\ + MD5);\r\ + \n \$WaitForFile \$FileName;\r\ + \n :onerror Err {\r\ + \n /user/ssh-keys/import public-key-file=\$FileName user=\$User;\r\ + \n \$LogPrint info \$0 (\"Imported ssh public key (\" . \$KeyVal->2 . \ + \", \" . \$KeyVal->0 . \", \" . \\\r\ + \n \"MD5:\" . \$FingerPrintMD5 . \") for user '\" . \$User . \"'.\");\ + \r\ + \n \$RmDir \"tmpfs/ssh-keys-import\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed importing key: \" . \$Err);\r\ + \n \$RmDir \"tmpfs/ssh-keys-import\";\r\ + \n :return false;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# import keys from a file\r\ + \n:set SSHKeysImportFile do={ :onerror Err {\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local User [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global FileExists;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global SSHKeysImport;\r\ + \n :if ([ :len \$FileName ] = 0 || [ :len \$User ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Missing argument(s), please pass file name\ + \_and user!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$FileExists \$FileName ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"File '\" . \$FileName . \"' does not exist\ + .\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Keys [ :tolf [ /file/get \$FileName contents ] ];\r\ + \n :foreach KeyVal in=[ :deserialize \$Keys delimiter=\" \" from=dsv opti\ + ons=dsv.plain ] do={\r\ + \n :local Continue false;\r\ + \n :if (\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\") do=\ + {\r\ + \n :if ([ \$SSHKeysImport (\$KeyVal->0 . \" \" . \$KeyVal->1 . \" \" \ + . \$KeyVal->2) \$User ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Failed importing key for user '\" . \$\ + User . \"'.\");\r\ + \n }\r\ + \n :set Continue true;\r\ + \n }\r\ + \n :if (\$Continue = false && \$KeyVal->0 = \"#\") do={\r\ + \n :set User [ \$EitherOr ([ \$ParseKeyValueStore (\$KeyVal->1) ]->\"\ + user\") \$User ];\r\ + \n :set Continue true;\r\ + \n }\r\ + \n :if (\$Continue = false && [ :len (\$KeyVal->0) ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' \ + is not supported.\");\r\ + \n }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/tool sniffer +set filter-interface=Bridge-LAN filter-src-ip-address=10.30.30.50/32 +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260302/20260302222004-Diff-Config.rsc b/MikroMaster/history/20260302/20260302222004-Diff-Config.rsc new file mode 100644 index 0000000..7d3855a --- /dev/null +++ b/MikroMaster/history/20260302/20260302222004-Diff-Config.rsc @@ -0,0 +1,4 @@ +1c1 +< # 2026-03-02 22:20:04 by RouterOS 7.21.2 +--- +> # 2026-03-02 22:10:05 by RouterOS 7.21.2 -- 2.52.0