From 128d646b581c8f357d11b9585f755a294ebc09ef Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 15 May 2026 09:20:12 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 15 09:20:12. --- .../20260515/20260515092002-Binary.backup | Bin 0 -> 130982 bytes .../20260515/20260515092002-Config.rsc | 1247 +++++++++++++++++ .../20260515/20260515092002-Diff-Config.rsc | 12 + 3 files changed, 1259 insertions(+) create mode 100644 MikroMaster/20260515/20260515092002-Binary.backup create mode 100644 MikroMaster/20260515/20260515092002-Config.rsc create mode 100644 MikroMaster/history/20260515/20260515092002-Diff-Config.rsc diff --git a/MikroMaster/20260515/20260515092002-Binary.backup b/MikroMaster/20260515/20260515092002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..53f3e91a7ecdea942ce9e7f92f02cf1de21cce27 GIT binary patch literal 130982 zcmeEP349a9_kWwT>242N?z^PiAZ?TMpd2EloJvcf1>_RaBrSn72}w!|iX1A3wtb8tKdCvb2_1{YfdB1w==4&WQNBal7Q zSJ^^Af39+`4+et`6}W_m&ZT0Dp6GrQuhR5~yCHc&ZnJ!C+9L z`V2~=`i!`0tJB?(6`@`P(s;bqSgxYaQxkBytFmhkBH_ea6S?BRp6c+TtGzUDbITmkzav(6VYr1=6lbG6wtQV(uV3+5ZQ

sUU>YokEIXGC<9K*Cc=B&-xjcq@UZ84=whkg!AUUnEjJy-g%MCXnzh5ltczpT3_^ zCowTS9reLIm_#Hs>`ElX&nJ>Zbd`1`aU?b((xKxSClF<%4)wSlv%H>waj4Zc-Qnv( zlo9WAdusydwT&uV9@})|RP~*KC1vA?GLp)DHU5CZo;k3j?8$$m$u#%{X@zUXK$GzN+f;ztxW zgD-CTQx_M+ZyP~;zkjOHXZIRwo$d-x9V(PiK5BGX`JjQ3ZSc>=#QvS6@Sz@ds=`O~ zoc4U-JDk4o%_9nL^#>e2r++$M?8t$DL5qK9Fc36V0PW{3H$?3^5!LCySEu9Ys}ng8 zO3F($J*uR<^omfA;`#|CQoYcQNO(aY;dVhD)ab=sF(w;eOm@Ur?1XWbQ0ej2T77mj ze#T&{KTz(o+NK*TJwBt`SzPIJ1LuEKkIm{bT73?yQJFxmjwt4a9Af{_F~KBS5z!3-3E;$_CK?$< z8O~9g!3VGIot1W13Q^u}+_3NR8EJ2h9@4l$K=5G^~v%i{K;n?+=xwtF|oN zxUxiK>kMTZ*_(GOz4_6oy}8?kV1RK1;YaEY{Cux&WOr2BJnqWg#!9O{5J2~y9Lh-U zv6}^A|J3@mB%Un;9+*Ms{Y121?62`~ho)%juu$ zu=nseT-JcY-lN9Nh~u!2I%Q^w;35KY%0y0C+MJq(aMt%V={7W!bu`WaZh>4O6yYAKp9xu;k+s6p!X5GXaCZy8Z@wHX z@d}kF7JSKf?RJsHcDjvDuis%adOa?uZPt`fF{7fl0KE`GpA(7R7>V9f6VTxIhVY-Z zSLUGVxsf?!MdlE#Um8Olv;36#g*#?0GRuq1EPB_R7sAPpdWc+~6XUkRKRKqu@(>pg zN%PQ`@|STtIbj2 z@l2l`Tb8}mC2(Y}nNf2cH)3@8=mCSGW}Pt3Q&V13;fP#5x8oPF)mC?v%W*vsHOI7} zEWogwUjkJD5$jk>l;@bn)#t6bg=-rkTBN+wmWb|BzD>tMQGu~YzDI$vNWMyWAB*H= z%5#3<*P;c=qb~fwslX_A5YfxrvJP#g3K2i*iE%G}Ne3Q^-{7HG;-PIj{-Bp3cB0qkP*e(-brQ=R{(#Z%3^9u$b4 z5SVNLv4l1WL{BMV$`*kzXbHmgc7f<=f#?~5XlDY^a{|#n1p>pTHxr0n6o_^w5bY3% zDL7tL6e?CC`a)S(V#Gq}fYu)oN74!6ZZ4*wJS6#;F?wQsUjV2Vl0HOYS{G=jNSfOZ zZ=Hul(MW;%6G;|ykrstSQquuMVh@3+h)B|-)3h9j?*|b{x*_;(D3W1F&PQ?qk@$E# zQ8Lv_3B!rRV342-lc1N9s1(Ua<#9QFj7BmB$yg*8BAG%Y1)YFi5=f$#1(Jd@@Y9E+ z7D*jSF$>UaBo`yO1j!tRJQ$pdA8MC}_(PZhC^S3MLi}8e`eQ;M2;TB)JQ+|5l7`5n z5h%w7&^bhsy@!Io7(^eAqy!08d2uD4u|vTA5(d}UrjNRy1OrNiBgWbyqBLkIah1kV z2Bi|24f5~yL>W|!1Zy|2lME=aGH8j0F<^+H8>o673>~#AMq>&mFoBk6&sGryLz$&v zZhyd9<+E0!HsN2PN`^TCq-B*O$lT#?ju38!|1OTuDmq7K{WnKo>iYkI@OKE_xSI5ZH$%A|-z4O4iXF-K?(j?gArArz^K6+(eS zg;;blw)Dpe(FTQR8>J8-sS>3K{RkD~u8^4WhnSLZ24V^XXr>1Elf@L_UldcA!2c&Q zB{n~uPE65As((;eX&aq2rT@*EqOqp4z?GVe8CW*VZDk7GLYFJNVhGuMpqhj%guB({ z@`gs|nJ*$RGO>_2)gl6dKNb;KOuS8OgvPXxfPVIRWg!9G?B^seB$f*#oWUXj`m9(M z5yD9p5wOx>bkcu%bV{%bO3=dnYs-i9=p)j2`Vr}fCsJ1qY#9;L@R|o!Stu94S4|}=C#5-q4D;I zX2UaCv@>;5jEi>REG^n&9dD;vwEtI)w|3FTTgK_f+h1q7e)>Vy;PlJ%cBdL-XJO{c zDz^Hj8zYRY(1<$fY_1x+Lsl7wEUj!Aa6li$278r8Z06K_p;i5l`V-BVOtmMHtlAUl z#8thK*QG{i_mWWT650DFG&z?z0?YoI%;K-4;row@&TMHJY0&cVNo6S%D#0Kc>J?(=SzEm@>91 zFx2*I6___!d>|672=THLebrz-j?hjpN&9=f?3WhVubBw7Pft?bek4#^HitsG8T10p z(Gmu`Kj5}9D|zR^BSsYsg2S1ye1viMh@!&b#^PZYj2cls>;m?*Y|yANgGSYy)FWx1o+OrT*o6Y+~JcVH($o?cYR=B` z=FhZ_sID?+zNk6TEbR6-Y4HjS#S{uwn6 zpVjU#4wOBP*+};LY;J3SG0W5NM}8F)c9OtY;a#ktn1d}2T%#$tMoUPH4MLUz!D#ob@?)Q#L?Fb9 z6L%D~8H(CUZRn7PLhA@_*Th;4|H!PFR=dZa<*S(*2zdQWkh2uBzuX*A@R3C9-`Og- zG!i^{WT?okPbf0e9&-#@@Ag(d7E!8F7`+q+PB1>+ivxrCOvx#gqEw}!QnfjuR7{=B zmC6`FNaJ953ORg%3V1k|mzOS$C^CwPe;_2>%uqzN=&BJ8R{1mO1yVB`o*Xax2 zPAxoBi*n@;l{8Z7YL*(7y7HCX57=@638;x84dLEIyIq6f*L*7boW%O6D(l%DGo3bv z{|;r7hq|Xh2Q6isoIS+6oeGRwu3}flMi(>|E?Aa3D=;>&s4zC93|F3G3(b=XjO?rA zPYFf-MS)XrSKfg`&BMy`mz!X}MX_Zn3Cv+n5J-@Q>qwB2lSz=M4-x|j89J9oB%xdX zVhcPg?3lbsVAGJ$JdPxx8I0*I;z){b87F%l#KnaSkl5h&y%~;SM6=4g%s1;^7X$;SQqVj;?`wnsNt>e~pwoHv8Z=x)$zDl{5DfKcIl4MU3NwOr1B;DLh zB=NDPL@ksTTPnX>i6rS-14SDoZILVmk{glSgk%|#0{o%3DEI0OB=34a8}RHAB(IAk32y+} ziR4YW*z}f2Qg9cZ>=sGVzm4P_k)(t@NZ!RC-beBQlD$YiMDmeHB0RP}R_>qT;b+M4 zbCIOE7|DC%i5w(|{S8E4;LlYgh(C!$U*g9%c=uZ*`|xwWNK*O%KnIb0kK`*PUnBVe z$&W~WLh>_`UyvL^au~@GB)=j#isZOR;`UFgs2)E^B1zDL=y8(Vss;%|HJ=*dFOBe* z#z>k-Bw3mRYAKPVYsEeR!x?(r_-k7|D@v4+Uv0JZHr3^sOxdQod{Ymjcj~O(rn;P* zoZKEpYhG_tovDY>YLV{_hu7z+2HaGl4Ej!_47yFEjO5&cg28!(1%u3mMV3eLbXNjp z#4|bWSuw=b7=x3u-pMgI{plE-B`Sk6M`dtkFgWl36oV5&3=WJSX_k-BIaYomgG2E zEDOdM&k$%Ziht3Q06`f7=+Al*euWO?D3afh97FQEo+Lv8WKj`G7Rt*{as3P=%Lrk4 zm5Hya(Ao%_u3N{Eq{ke1Ac3HSl7w_1JESK`7oKFcgqi*ptfCUJ+d!^*I!CkkQ`5}A zXl7A}l^c~<_Nc_N|9>LZ)-bWQcIK#Kh=n>i3UzX#QpXXMI*$KO)Y%rM&Ng%<{qR90 zJe3k+p;E3wrKmDRMP*bfRsMgX()KWwwlgY~j4m3^^(B#`QiBt@lRVP$6e>kuTAHF! z$z}qTK0Os%x+ab&O<_&-3Y$75iwc6P=;KIA3^S{SU^0=+it#DNqBM)^6Zuq=IFjm` z0tI7MjPtS85MyABcg4q1MqHKG=?OEjr^7UT`bmzKiJ)aNIDPg4fi2C$s({1+KBv9P zkvY7u1S09Bg1XB@Pb6Sp&6Uc283cj2PT8m9AQGk$2?zi&O%C!Pc$B~l(8GbLV*!bv z3Ui2rOO@aZIxN-a5%@ma&k#=}rHVvS6FastRAC!_8rBVs@oYLA|6Ta$#&`3Hu>AmA zY9*Z?NdQ{`YKX+^9YiyU#5-&(K!v#5MA(}kexoOvMI`1WD-#7&@jC2K5U}wR;XW?I zmWs=jAK1}14_gxAE5jQB(%|&Jm?)!h$F9Rl$_I@aTv#-yTknot#|#_TZ3$6Ea>uR% zMhzP{WKeNoQMYSO^5V6TFD^h1@+u?TY|mD4>YF4qTLzjfxj%Fmyaq>fSpwcnryJ{t zZk>xQFUf|Zhzq*VcuG>1I2dLId7ttxTsFzbrhW8mB$mw}&#+SDv+88|e5knV!EFzD z)+>94zC`1Fh2$F~`;oj%B(9BTHZOMn9S`3n5+BZc<-zxeSg4f`h@|wr_{&E`Qs0l! zV#kTPB^FzZ!Fu-Uw`i8nki3Ir5BByk*$35ZTo$nUT-Xq2F%~%zZwV!I!0Wmn+l_xDhy#-h4HNlgD}uP;<}bSM^vSH2_IwtLq?p- zVK+Bd9t)bs7WJ`C^EgL+tk*owRUgM`9_O`IaL0!pi#2|SFVp3)gMKcDeR9C(tg3SO zSZz^57^HBahANC2sxWG(!l2=ZY!6=}`r_%iUbi}8?Mj>D zZdXQP5|NNfnDR(~lz?JL(CbS&CLo}=7@b(a5{w#TMoVYNy*n9OQ=IOA!{>G|qnIX; z7V<^xFsC<=pXsyK;&&{DB-I*(09-z6Z9tF}`Dzp?DDxL8Rlz3XfC6Kau}gswiR%gU zZ6X$l>v07}B(7%^7?HT%R$wrvHx(F>xHc;=B5|oOB5`d~p2LY`lL8|W*G2_KBrf$i zB5`e3o+A?1IHhce#AQ=pMB-Atl@N)mQh6R3iEFCz9Fe%xW`sF(g7O@ZxZDbiNL(sS zVA4_XBNCTSc?XfW)c5;v(ZQpy62FiUBK zFJ{w$2(}RsR?81NWMr(Zg`q6(hzKTw#-4;;h& z&#H0+yw)m*-|KMLvuvJf>`yz{-vVb)3izPPk+x1%iUuyHyQVJ7UNha1<*?Tv^N2^T zP@dR3&D+@#@PH>c8|DnVbnGry zH=IPMnJ7S;5;1yVF%KD{SdHi_TQ-qdTH@_ydlpnhoaRZRKo`MDw3I^^S7p zDD^LF88@)K;mm^+vBOR^7!qer#|Sj~thE>j2Kgs*j5^hZ(Z~PpwV^l*e{!$w5WUxS z{9o#|l4p9BuSV^(@$A=W`|LA+_u2ncpY0gE&vyE6>$BmQ6;Y&slu&pJwd1BZ)qoe^ z!KdxOZ~yx{F!t`Bu*3X6C@L_g+P{FP&?$Nc?)=}@fz?P4QMzxE5(Gl+yi%anSzQ(C zxL83*!x5_zJG-z0CH(7DlEj<3V#|qJv*iH9XG#A3yHiIGwbVI!r|$CK)Tw#*{m4zs z+D@wNz>FC~2^!h$JX#NXu=`PVbbl3l;4$XJ9 zh+c>VTv9*|+k;LT*?mtdVEo;6|6>wz*XUih+kaixRiZdWbY0d}l|QKhM$#-#O`xX2 z5fU*@B}Q!fo9q6k7I)pEciry)BVCv2kE=YMDwo6Rb^1e$m+Q@^WxSjI?!Eu1-rGHT z?>*;#sP{@$RoCHKvA8YamU^MH^co;G2G1P9XIQLsN<%}a_&s0-QoE|^1`@~XNBTZ!XnC_ z=ueUbPmXM+>xjN!WV((jf4~}W+E5Z(jELnUT~33zsa#FC?%6!;xWrdsngoh_|w3Bq_0uZm)>GCvGd1fkAQ$Syg6qL`EIUW8~ zU(bT9O26Nm70xK~*$HiSk{aPy8L7|da!j#$omuvZOs5z90Ubp9Bz&^ksXKTdHSpr; zGE75;0f)OKGrEuco-RoBwamtR`DCfr8;rq4o{$oM1q|N?%r^m6cAma5s}cC zNI)bBM3F!Qi54V>JBRb*YeWK~Lg4g4IEljXvm24nok)PgCj8RiWC>?UI7#*)5^%&R z4!!NC9BbO2NGK!{;FCUt2uFe7BoKB8ZYhyqg1f94J1cM^4UXN*SKQliE=dB;C1G2U zgz-e8sfKxRvins0#fd#Q0^9E+&6|!Nam=q(vR5lRZLmuR(FZ(4;uoFRF|AU6Y}rZ2 zZXNv_sc_;IX(zkK(VM9x>9Hf|7lCaFWp{Qw?>m<g?g*j`z02w@=H4C7!NWLsCPpmJFaN!RUj93Fc-+#PsFPlPud{O6Qy1KcbY1mwNt?oveG&FJ zFGhl%Xjua2Dh1)y_;C%AYxN{0ECqBUl1zc5zFDYaHtJy#NNQphmFy{{Pz zvC7fXlg>I#b^o(8O=J7K-Hrf`hs3$vXP>zGzaDYp{+te*R_pXRuy;=-?v%6MbL0Mc z#MS>f#BJ=K<+e@rdEB0w5Pc_}b^6Bt_2~O2b>7seo`B!$2{DF>vq4*do5@7Xt$#i8 z#{W6pw~^O2BeTZq@>uOEcd(xg3hQ_ZLt^=#rEn8a*zT!y^E9@d4I1#UO)0`^~z#D+hI#BHi;Tmh#{+RT5uw8ml<{Pk!Z zvBF6FH?1&I6d^d%Uu|`{us(DLyx3HWYbwkyeExx3kK}j#LUE zO^iV5^#%TDNfSdzlOmA%91+zIn+rQA$B-k$NVL(E6hfM;MVeNPXgGn05j8&M?vxxt zoT5eC&{OBMJ7+uWS~`U7QYT{oq8P`5ZKQ-SH_&2Ew7dOTvI!FH)o=)NF3hyM{l;OX zGjolWSn?2AK#B&TJW|gr4|7bzIUPJFHIzr1HjmV5r_0418^DHh@vz~;2aSq}|1j)n zA?yvc*b`+;nZpOM1FtD24#7}1454hKMQM-=%m&G<)AkU|xTt@l5W2=%bglgkTaC{d zn3cthn3XQbzGz#;H@|5SY@37S$DXN5Ns@$& zn}jlMs?9hBwVP36wfBPg6m(20!mn`Ojh>5UNH6nxy~w3$D3@kunu}#(wARzqWx~^2 zb;zYzD3|8iT$0>=b5@Pp5y+}#5w=7`1Rw4+`wpmKclR==w(INyO_)Buub*+8NEOs zy{w4E7i(D!K1a1D;Mg3k7hrIp&$4-3>9dHv_6PfHT=dc+L||lT8?e=Qf0kzXYEIIF z;~ns^g4P8i*jM9nuWBK%d??Q<+M+TkE-vE3F`7E+n7T@- zCp+p3F1+h}s*7 zIv7Y;WgyyUAc;01c@_zqUi}8S7B$MfR=Lko?w8=rIY<^FS%hRU5-3v*R{~=5$`U{< z?Ba*sXbQa{$f^jUj|aTbi6RLz8e4G`VMn2J3kUVUe`S z)1YBo@)RUSTd^>mj4Vk?Psp@+YtZU8hmWxiu#359Vugi&skqO<5UU1tt!{yLiY?a? zPK;?qMJ4AJ6_)yo3rjMK3N!P}11x!i@=QGkntEPNbU(3(m&rr|w9}UnA?l?pvmyei zICp*h+$tCy*uiJ@l7J}U&8)=E>a6aBUXEU(gHxYy1(CP{erTY`B0NF2Zhn&Nu`L^e z*_5m|Ezpam1;P(2^g2PO6PtcsTDo}1c{i9+3{v-nLl+)N5rm|8GPO4wP3Z>x=s11y z$&i}To2T?Nnan1$372_%^OT$dli6Hg$}#7fdXA3?#{!`}pS2KA`UOHNnHC6%x&?wj z8%LF1*yD+PPhNG%bm5I%7G(@sV7U67uUE&VJ(%&>@>h>6nsxq&riZ_4n7gNOw+=ny zyEe;dzv|<}hQE8)^nKfu{Kze(S!MfMw)uHl+k2<(-*Lr`ryjdVx2tl7z2Cs>tCpl# z<2$a74^C|O(XgL$?rY{xy;ppDdtK9=!vntELprwhA0IPif0}9Ze}_YCv;vo^!i7ST=D*qChzS(KE3Gm zJHOd}?4sMfkL~@i_cKRl5Bl`{n~ZaM{bOI?KmYthZCOe9boEjN;T+5w{0v4!MJ#nUJ!z& z26&K)2XT6x@Pw%?em96~7T2W9jg4P(j9-1Y&)e4@@!VN6DDEFOE$6A6#HcJ#mnFAs zow@z<^IyDp-BmwiFL=W(uFN;+9-Nyltbg*?3s>#Ev%|WldH!mD_m0nPne%#={a+kd^31{(jdO==4c>L< z{Ra#B?(Dybj^A_q%>i3JKJU4Qzg;(W+4A+aM;rJjU+}<8mR-FC~E`JQ9l)-*Zz zUBd^5`j1cQEFQU~?DJ0f`Rj#eCz$u7Uh&rRIfp*z`|-zHy4J0K_(o9>_O_b5UXHTomURl|zAg8Cb!k(W~V9B>xd)iDUQ%`F_ML~txYU*XmF@2}LKbyI8ENJ`M^2t8&s0#5+cT%Kmw5(a51(Xa z`!el}r(b3qKK=Bon^=5FnzZv-qp)d z+p*=AG1BtoFI{o$3Zr}Hv(N6$E$?>lUFvPV`@&^iTTK4$($unxx|VhtclXUjyFYoY z@z}Rl+_vD7UE7ZiO1ihE-A{Lpx##w@uWa)!ZP_Zn$%oI6ES%Q)my##v93Gr-!;Og# zf7#=aqIKhE-+Qpn0}nlyt?RO(>XXkJ%}e}X%bS&}S~MS)k?-ESe%K4weDhQ5r%b zo++N&uIjC7=caLYu5VlRXvIJ7cs+g7{hxN9_+wW`|9uVawvB7mcJWhvK1q9_>mxt@ z)+OiNPkP>4_x_BQ{c;cYH9ns9Uc2S<=6>j1@q+bSK1eBDd;UgS+1@Kwg-C56}a>OJZ_SKOFkkG*yM zr}MW@zhlnWwg$`gIn|Zlb+VSOEZ;uw{97A5w=s8Cu)1)acuVS=KfEX1e(qgY^!e?& zHW$Psmyu4uTu@!-(v)$gdZFUvBYur8XfuE;5 zu&BfN%RjzkSffpwkB(WMJ!VetypONmZ_8eC{O-#iiGTcy2jBn7J+prI2V0-{;K-Wd z*XKX~8nPqFCCXXyVcg!$s^jl z-(<$P)z#Kfhac$vP+iFjs~Xz+EdBBD!k1>o9sGR%#a*kOzQJ7d`rBz=PWEqbmwVC(02uA=YN(>J{}CGM_$xvSsabi-Fi8ho>)<+g%fj_bz4Xz0ej9yw)jw9g=!xGn^Ny0E*RS3G=&m+z+|%;gE$yBib6()vtGeX`C){ay zQonh0tE;YkC-0jXi%&ENmnU0l3buBe_U7D;$1Bo5f9vr6haRo%vbFh@ zY4MA{ob=1ZU#)&E{;GmO6AXLPhSa^0EBti0_2$PfPTl)Ou>OfnhjzRhzu?Dr_H27C zPnerKYFp;(=}&z>uY>Vn@scODZEV_ny$ly(nl{|*K}gH z+*_Aj+U;nM(c>1Jd+iM2yj>jy*Y&##mVeN4%dBp%UN$kW;!@}SH%DK&@b%Qp<%zE8 z#k*?XYaASY>6%dwK6mftRrk-kc=Q`$i#vUN$|`?8Z_?@w-;}Ic|6En)7W3EtkbCd< zMO$X9zkhfW^YbfLjc%FhIlQx9!KFDD9(eGl4I^Cj2Vc9^y}D6S{TmB^N^bq^g&oH% zYS#T5*X46_6P)vY8n-9y;`;u518b%{*mvl$W!Jqo=90dyLqpQ1H_SbFG;`pA8!U;9##|x9eUSwfNZg^(|`NxoB<8stYP!2UrC#z*=b78z?A&d| z`L}iog886<~`k~S}Ed%#mzGnRc1&_V> zkG#2i&1-(EUzGks@4+v1AAQRcja-)Pi+_APds3tP=bYJ{f*Zg2^|K#7ee&Htj=P)e zx&8siyv-XgNI7@qwfPguF8wV3+s$1@Zzv!9!Ttg74ty~)_1t#(i@M&>`~mxb^e<}8ef;ui-?v}**x|V&7Yx}{aNzT12llU% zx_(Tavw(;OgTFUE!QKnMuG9d0@ZW(Z2 z)vcp$ykz>MpW>bqcO)G>H1Ykz22(q%5<0}SFg2SObsCOnX(s*jXyk6TveBsDH;*k@ z+4Sm{)^5J4|4l<5AC)tyV}HlBSsS0rYw_8jPFtS-_1wdKHhuQl_!qv&*nfU?>f^t8 z7B&=acf8&5!s9L1ZhPc~sy8P*)V=9}4)I5(xr@fM70=t^UegU&$Y}xpEt|w>suI5R*ws*MPwtipy!s5hRUjFIZUw-@N4|9z7&DvA^^@q)y zT80#uKiK=}w+Gv7zk6!x-aQY0H{fRJq90Nkx`N%Zvszs8$VXeg@2MNMs!Qw9^S)k` zI%KqOqbFnOTdM|tnNxA9b;936=I$@l+(gsno|Z~;rO9Hk*z6T%OD|KNBfnRrDc@X?>&WSum(we+z*JCSvDhr;oLr09 z-mB7LcUTH4E16y+n#2XYMpQ|Q={j<3rhKb8zo#R|Vy$#odP3K6f;5bS$_U{QU>>wj zwRy8`E~mpCnC$T~ml2pce+dSIs@3UGFc^e~4z9!O{A~Gpj#;USEimlD)*(>6i0@!l zITv9A8ky=UD?4^A8a`}LN%`b~qlXRb#tg5pEu_eKI_;C~HBNhB1R7)+LetPxXEKM- z-~`eT7E#60CjtS=2?WU~M^eYGLr0XAmlPHc;y#_~@dw=2Y6lFZj0!kn5!)+jD%_3$ zY`ak4-lJ5Ocl&>gJ%_szPT!Ml+kg_&(-V`3V0}(cABkV_>aWR(>FE`5>RTiAAqXcb z!DI{XCD?>uXhpjq`a>`ngn>ssX^tJ#n3$f9{McXAC?Jd&A}qEB_{EGJG3tULqehG_ zJ;7NEmd7fer^bt;&rml++rWhy;7BuEF!8H4ZZs;6H^YTfrgFnXmQSpMg%PLIiEjDO zMG-MPSb5-&6X$bS?Rn9@fme`tQ27RW^3XT&wLWLS0Ry_ytHK$vKpOQy#ce9|MO8T=v@J$Q$kNfPJ)H-f&^4u-c~AcwvwBdcE0-x0q_qe_c`BqsiY< z;QRDMuM5SNrcAXj+h5x=m#7pX0sBO%lw&Y)wj0iXt5ME&!#)-q5{#p)aMdv8#%FOq)B>9Xf3_x{R06lObT zR$8Qm_cZ~LLy%cIeza45bigsfaALzY0ruz4$R5YTA*hRl zWBPEMJ+n$HR9D^9a?w|Fkfb7E{%z-Q!8&?yF!O+8#}mV)3LY+MD}}BC{2?>SA2RTV zd?a0?{Pmr`LTgGGcW2&|Y%^Xgttr8|k>NkPP1#7@59e^(e6!fJ@z-couq;Gz!yJa8 zyHe>UU~xDi78h6?Mi;JU1iVvhNn;jugd}RCoOaCE2y?4I;2rQC?9S75BNCtPqV#W- z|H*Dljb%?Eqe2@a%8@~2&KR`vQDH&C*xD_(+;Q*5#@E>|zGU`Cu6`@p9=vbu*O%9O z*1{#!oc2N7E7vU@~=xX&(RCpq9rTYyHbVZe8%op4WD= z(lGb6r7@HSTsJzoz{M5kEmoRotK2=BKK0qmSM9#XcG`x2IOEQ4V`g{n()P0FcdQNW ztKWvBC(UWW4Nq-oyKM0i*YDqd_oPk#8cHLveLj;btkW^Exja=)x7zBeV-i|jh0*FN zjQ8MM1#WgQ|5c|7FS{*nnhKx)rD0m6XrOg_!VW=PxTnhp@3Q`vmdeh^ls$+TyM>1b z6EPs`sD)4&8SZcZL!E%moCu#3c5M0<&Av}mPDfab<{{kC*s0k z;<&=k;^O3Iad1>*J5gCkDv|jniMI=KNGj}Jgb)Jmn+zYc1m?*rrgdQ>7@L9yExu7k^DcgR5QK|||%##Zfi-c)eqF)3O(|=H+C$SJ&Y^Uw70!eyE zAHwwlW$33Cmi8BlElnu6SV!Y^Bredg7-ILsn~=2+t4i*xH3vDmiWnL466oyuij@6@Gr{ddjQQ3loO zC?kyx>%6Kie&diDhdlC7rp^Zev{U4LS9wO!~n#jZ>cE&RVak*ci z?~u*hCaoI%Q#HZ{D*=**{#^BosF7l!Y}g%0BRK=(BM0jkUj~p`Z;^@)TxU|yhUzN!lx3CO&%u09FA-b>Zn$>GOqbKomhz2=bOI(hXLV45asa^(R_VRG$WylX)K{Bfy)fEmOCVVhGY@ERbfk1^3*s=o^ zTfnR^%|XIUR2d1&fc2lqSCa7xTkoR4>=m#`fr`4dHXF&_FB z{Mwh7?eo;Yr=8s$m@5RLc>|TQrf_fr4o>CZG!AY^G*1mM(THfC8lIzGAR4IDvoUsR z&4)anAj<&ta0Z^2B2c&FVoUpAy_C`}STDivxm#+nrBkq8Y5}3?>HANK14aE8aA0qO zh$_Z_BmPu%0cm2uak9Fwa)6{U;D~3DCD2uq1(MQ7U>=Rb7~=^HS9B5Wl7xVc9M%RQ zDksZSCS$N(Vo_8iK^F8>wAgFMxpPB4Ibo_SZqPdLE3_RSsU=$DnmOL zpp3zV`(i4#h|Kl6390U3ywi08Q}-B%Zc#*3b_Ijb^C_A=x#up{v9YEuI3Q$WzZ@G= z*nGhjWN?tkXc8?Suv@=>YG$R!S8Mgzo$gR+zsIm8V)yUkiY?GJ%4NaWMn0+_kNt{z zw$TG(iw+wbbkG;*6NyZZ0!;$4@cD7*I(&ke5Bp2EZW?x=_~^VZ-(A&am+r`z zha4|X-SBhib=~Z~S9b`XemHcjw7z&t;<(NE2M*28dvNm;m7~B87qu0MU=I8vz$Me@dqAy<%zKq zg}R+HkKA?9xF2_#=KtE`zSUAMgXQLzuiDw%v9s{zz2el=%w*GT_iemQ(tUS+^|*KE zPImA6=F(PgFYJ2V$Tt7{?UU6xms)n*aryK+geJzNi!y%BIkNPl$`0#pXxDvoS=IBa zE^^ddHgUqDtt4)JYq@LU+TXXNP1v@nD87Hc#BR zt15P-zcE9c`@;u48;|+jxccGL&lk+S{xyr?mkVp}oH1O#_)-6?BecwSTlS#C%?4e2 z*VDJoDjL72LwQT9{WABr{#AEuZ{7DX*PVA8Dt_H}-T8z4WzX#XX-oHitQb6?YS{x{ ze%o$MyOMD$hi@;P@$Jemqw&@K0)n-|X?uw(0kUG5Al z`gPid?s2(~4|s0!!Zpnvdmw*B*2gz5-TTAGdxow#7_jVqc-%wNZ@#Yd`6r)QdjDvD z#=KV!zSa7Uv7a4-(zfHhd*3;KcV*5HQ8#US?&a~9esp+3FNgJ-f~&+AFTAPlh;i96 ze{jVfgSXk}#AmPgwA1@n4JwIyJ>#Hz=hjhQ-mz}^(BeIZHm~l~bY$h4Tl>zf+3;NZ z8;5+pYtj74vr3*>JA3hU_4hAZdZ6L2^NtSLvGv&PEpOT8oHe)qCk5+Q^-ArPbR-V} zi{?$(a_cX5eew3Pgtm1fzg>CDPftFb@#N({uV1ppzuA&>+2*uI)>(qZE%vtYUY&g9 zsKyV!_TKocrO*HV^D}!Z27gxY_S+AyFmAbTe4Ed%ESP(-XYa$G?0Tzw`=EZUyQC!A ztWA4+W^d~-ec$K-i{Dt@=b34PRvo(Sjav@Pd8Dng)ynVd``+B`ivnzko>x#jXWNP? zzkdGBhMP<8Pncouq+9mnriDGaZ<0Q_vd0%)R{b<#a_@C54_vuz@76=rNgws^mS8Pj z(!ACB%`ZK1#i+#(CC=IU(?1h0+W47i!{&ou^qqYE{vrBx_uf_cSnGWSjayZ{bo*Tc z7e4mLOU_@u?=^mCUvu*>Z#+Ew`ia?-&N=7x`?s3fjNPq@bTd5u>_FX&DKaA@*s*Yd z3#u@9p$dZst1!5p3PWS0!k86QaS%InRCu9)cVLK+tuvV8V3}cin<0+MJLw?lU@tVA zA~FWf5>p;p=4ETF@JWazBexCWu%LY*AbK+hD$>h}EbmO&A5 z4%jYGrWs?!!kPjjNZJ9_4alBtwOUp6rD`O^9rikyI_0vVG1!h%7T>@C{cX`Z)A}~- zee=lIuiNh(Q25NtSe(e(^318VLzOyBQtE{7v27U_25^xAV*uAEFb41*1;zk=Rr&TO z1JNWZwlq>>@U38q9V`~)o`<1|^+ymg5nJOX`W-%})m320GlA&bPZnEsT*E%9O2|3eA}&V^>>^&*yLlT(gW`S4~xw z!)_ckAlGCv4jNiCtcTI-^WfYazYz=B?1)Udp{)Np7Q|C9nCeU>6J%e2W_x}G_W#Bk zEm zg@k!|J@XY3ntB$PRT7#tBy5sfl$T>RnauenQ?A);HWlRMnLy2Cz7C*gLYdV)(CMGf zlh9nFkWlV=Y``wYXrZ)VFxXI~p1ePvryk=l=VM!CZ}xvy)V?>esIXT-K~H0W$&zI@ zTW!X%N|bVAi6cfRJ$*nJ{jDsb&e-FG38PHBJwu)lbKNj7Fo8(ejKwK<945vjCtueMJ(KLSZ(v+Bm%iH0`)> z?=0J7*i;Hp0Fxh!X9R5?ez0f{Os;VR5b-QB!bCR(8SdSv*a9R_GeV(J2lXC)02%b3 zPz~ZY_E?-TF?iZM`P4!4YTqac)3gHq_GMdN-4@vq; z#gc`|R={3&n9y*DPhxN5EXXm!G$I!F%|#@p{9Gc-H8|O4!qZ#zQxzi|PRfah&jf>z zV)K_hoTNC+w+XVlnHfQv;N+8$h;VT>Pj!~B#tWm^fyN))ykH9E23a>6X+V};%v54* zP>6y11}e6sGohuKV!J}MTg%P}Av+aBJgABxp~7|uu@1r<6sr=#hbUIhu#K~^(#TAr z3&kK2Tj5nTFcs?s2)(37=q0#1D2m>ZEY1|zb7D0MNHTC}Q7My(S@Sym)450>kcc+2 z*+{;JPYQ-a{x}i+183>Ta+81qfFPv8viGv$b^$jj^w*>Bb@s=VL{hU0l!qgg zFD5AWZ6Fa2dcqh{-Dq%p5`L#ctkf~%VMNrb4$2!Hm3y6Xp96FkD?hp_YSK%T-|S?i zr#Zi;?Hs%f-3fzK@3&iT#*gJlZh?y(IN9a+H4BNGeYJvhD?5i_HU4-Xl6#Td6Y?xs z0kO_(>6vB9GG&=B!XGE$k8E8u5kD)CSVPZ7;pcFojJD1h?ktPRWXd#I5Z*FNj=Jic z-Wx?4ir0#f^ha_Yl74(-vvcvJ7x1`Gg@^fe^~Af(k1G!l4)cS1Sq2zV2CSg4BCrdF z=x$kAnA4m#hdX670M@m!oN#)*9*;{M zr`;9wxOXR6@5+2U%V3*lBa00^_IVp$*-uq(8g?c?$6>ZTI4R5V*y8%5H`j+;C6QUU93UdRA3$VWxHn<5yX+CD z+Db9&C|`M8PTQ=>%199@(V*jCIteyVv9MRGi!twa_^PXXE(I|vg$rFt4G$0Md6ef+MyN2phWjrr zXb{!sOl_h($H7vyx={9Qx<4f9$RuP!8q|wT&}R&6PUoj{M#AQ-La2)& z;BdJe0dyY)L{L-%b8J-gV616QhnKktH4Wj_R|dR5in~X_D1=#T{T&0;1Z z^X9V|wb>bJo$d-x9dcB_`LSdgs$=XFmQdT45w%UQdYvI6E3p4xZA*A=iJRqfJF#4+ zj1-?^ro-oVWU?6=m5qEt(@fcTrLA0fR*f zIDFMkx78I-LFjx@AcioBg35-Cpd_?LVxXYpOQ4|Gfa<9^1h?qmD!$G* z)`J%yWcdM65ARossCtcp8+TEvgz#mu@cuRPhj!&t%4Qgfau&)wyOcVwdj z-bpMASbc%v&Ps<_S;BLuWbZ7zCdr3f40O!QI02a)BolAN6+6qvz-uTR0Tgq->^g@R zlt}m|z9KuUu~+1rPJBi77G$r;5wEjC8KIGok?j45R~p(q)mEoF)9)66 zL?|W9_wYd_C%z>+eE?@T7#0zw? zZ$D%a*&|j54FSecMq_3p^E*BL!^gN|wa_jc{=RRNSNcIAd%}6*VIds0rxOC7_E*Y= zdw;nZ82wNQCg)(vo~K4Vg$Sj?Dy<03ij7TkY<#;c0WYVZ!G(QX>K!Ml?D-j+AT;lyNdZ9EYUO~(CIW#`pv$nbTL2&XKk?}UQpE&SY#hW6D#Xr*d!_2RG#4MjYIj zgPU-0Qx0y%!Oc0i1qZj};8q;mnuFVLa9a*e=iqi6Y~z`;v7_(l%CiG!DM z@XZ{&oP%%S;9EKPHV(d>gAu}7J->0KF08n_M;AV&^FAHHGQqAj-1D`%@cEGIIiC5j zjtCw~xE|GoFX+POWWJ~)f`JUz4({8Rbj*0hu9tPhf>+>rMMp3{vFlYG z(Ul7P8kg7W9G*A0e0S=ImMQPQsUx~sf#1@}u?=wT(uIR(?B>e(woW$U;d)0tm4aP+ zxOd*wK}#WD@9AX2A+Gmz;Vpq5=m;h)cJ0*>J)*!L>X^opT_5R~L6BV^>xeeVAbp}E zTBE?9a`}FyBf4C9{<)5*M1jBH-uY5Tv{iZjl`gzp@oSDI-*E4L%h7+Ij_5As+x=V_ z4(NzhDbK&-%6w2K8#{4*uOqr%dFKZX|BoE}laA;r<(;2(;oa}Q=m_RQb{*p0Kdd9V zNqK&R>jS@X?;Pde-*iNGEAJoU>iawQ&T$T|=h_9w`KUC9zD7OY6&fQIhW7vqpAFAH z?m0FptMA0?SqOV}8T2ei4CP~@x6Tk69eo~`u6wrJsMtq-3=+m?GjorBwP zu#tl^IJi9rci`ZT9NdY6J9BUs4(`gq@L^HQkHb?`_#6)I!NHjvoW;S}91Pbu6_1&N zEgYP~!MPlq$HDm=+>?U~IJg%F_vYX}9Nd?K&*k8L9DE)J_vhe34j#b4MI1bkg9mZ& zU=AL_!9zKC7zdxv!547wa1Ji!;1UiV!NH{*jF?4gTa4o1G7c{1;L#jBhJ(j)@P!;a zj)TW@@B|K?$ic8etL3?fgC}$F6b`m>FdSIbZ*3fG=U|6EJSSG_<=8#Asci(t zJGtl6ICwe-1J~4T?_TcP86526@`Yohdd77?AD)+MI6gL0 zPw@O;S1re{>h$4xbCy0l7tH3~xtM!?3HN-CK0FUzs+Z$X;F`;o9~u~ojV)rSwsxGKaNlm=@_JYw zmP;Su;72+9k8$whTz~in2S35(`y>Z%{GW4N)uLnWS2 zK5BGX`JjPJ&mDn?85}na8C=36f&!ICgulmx=;6Fq9^?^0`^qE2-(y9zmPZ8DZ3LpV zF(P{TSsoGezFI^tKYIeA3nGZkBY?74MF9PNn%R_*`D8;WKq8P_a842S&HRUxG@@c6N?WQ0SHHe_F)*?czn)(0>RCwp+ubp+yv9w{EXb)szVK5G|q@yLEegI}IWjQ?!WEVy&9CH^LI5 zMP!T>(OgZ5V8+oR>K`Mb1Z_Wp4M>A1F4pEx)gpocNrOm?6;V4aB3Pd^h|*$3beWM>U9c#){~BEh1P}HHbcm710qbBA8`0h<=C> zQLn4Dh+xy@5%sz{#)-dwsVny_#77@G#G>Bs5kW;_Yc1XA! zXb^oDV~3o+MvDmk3Ou6eYhp$8sJ3cwcF-VtG{#nQ_0e`ncuMeyTzyJo8zQc?+7iLd zLW5{+tR;Fx%SPa%p+WRWjLpAbm$pQ3@Zb?G*cBt9#mzQo1}(fpctnev#n@_#n?0#P z1lJNRqK9K6_TpxnG>G7rqD8bZRzy!}5W%TMi|DD?5M6srOKf<=@QAMcEk(^rkQUMV zu_Dqg`r$&PMf6duh_tN+|06A;PhvxKPn{MKoR@e+|JU8OhsjZud7rsuE@6_8K!AYB zOeRPIbkB6py^{#J4e5^qM(Z$6N zyrHh^4IlCL8COO3;x6m1abR8XTS&6c@6@HwsqU$&X(rzvU!FXbPQ9mo@8z8Hp8I;&PLez!~q@qP(+Dd;_Di=O>sakMXYO2 zZ?1WW1H#5U9_XQnK+l^T5O(zeDDAk~Z$2L}*S`6y-*Z6N637Al>g8w>eg9W{ON;%4 zEYSCV6|tp#aT9NBY(`{(UflGT(Ik3ttH!B@os1mNRy88fUcT#xZIB$$-Y-T3D)1#6 zdnh@eLPVeag9AJeHej+qKR6K4XCF)P%@KBQvOvdD5xaiJuHZYP*!sx!G77a=!$`V@d0zs(=)Gqngzm6 zRTl^=2A~6_@rt}@30XtP%?cIo{_9~D3L9NnD9|H9J-y-UoK)B+%R+%35o&todmI$D z*|JceM}%6{%sYSV(q*AmHJ?kXNCaE0YUUdxZ1Uxy>~VGksMzI~a2^1AgaIWwUNUz1 z+Ne@({slj1#};E2YV$Adj|#QzGTxnFhcXMb?J~Q26G6dkkMn*28=N_)$8Coa0cz*y zRh+G`KbnQwIl3#Vg4tS;gTnS|7AjkNQ&gzKM|cIXJDY_%e8lbxL{M;ghKIuDZWe0V znRSZ*_2e6T5yjqc7V612A{Wu8H+-G56}FbMP)~2L9dHDxp54HYQLrcd}5})XzeJ9uex<>;ImU3TFaXD9|H9t!m!P*$PJrSSZjVLhWC? z=@C{zoJe4yK#vHub@Q(;V4-lJfrSD+BGmNE2~I(rhhU*Vj|jEz(+hviN`>PTEEMPw zp{8dVyI3fk#$cg9j|}w&*E-`c2M_f|)Yf@==IflTa2AAz`g&Abt!m!EDTt#aEEMPw z73{x1|2%6eoJ3)vK#vGDJ@dwyEEEp1uuz~!gxbG&v%o^(91IHudPJz7J+`2gg~Bl! z77Fx;P^+5vac0LU92N@nh)~lruW*F{hj>^h&?7<}KC+VYS2zR2LV+F;>e=gm&OzY_ z5eo%+M5yVRHxS?6+cSa_NPvf2FmwR!J%zrjj{^G_@k=n3%UKsReE99(0eK#!>4t?Cl4@xr+`77Fx; zP}4Kt;}pcPITi}^h)_4gFT9CW5U1`~D9|H9P0zf>NrgjufXaB)`L(E0P0#$6gTk3V z9_qKzq5hqN!jVB9>ffV6UHe}zaxD%{9I{ZLN3@lHItK?9StxfpC&FmLKgERejx3Zr z#S{VR?-YLIh2xSe)ZZyHQAZR0X>XjiWTD(??+8-)=k#${lZA5U^dms|SI}_QlZA3u z&>}$jmr!w3l!bDaP$NKH`(NL9A6o};(v*b)Jz}}?ZxFyiRTj$KAP_++{|*tHb7i62 z9U>8+rf2AlhhB?=W3nt1=n)m1o;l7{XPmO-p^itb&eJo;xqdqi>H46e_uC0470&qb zP$arkzviHDL>N$6&x`(g4p5weIAQFAimu@6YuF-+1Ij$q>uVzC;0dk+iSx}o)QRXF z$P;a>R5%{(gKCQ`)$wK)3a6`isN>Diq54=T9M1MZ^+ktziiN`2ZXeWB5uy6;*Wb@V z;b=Gu1$soN>6zCzuuwQz&O(769qKj~3J24DP`5>fI$p;@;aocpb-XSz)CsOI;8;8l zbs~CUIKfGUQ}sTm=u#a=;3UtB;!r*hb)1IejO37yU&un?OurB6!pOFIol_7Y0eGm_ zqbvCOYE~*l6!1aOV+0Wt?7v^f9lM^b5Ria{0zI;V$9q^P#4})_re}`#M1(qgWW_Bk z6v82}P@qSInx1(B_qBNnBANmV1$soNRn7ZrSttZ!V4*;d2sJ(PYtFYLmII)Mij7xv z-+r8v3ZWo)sN>P4B3yMwBncjhM6J#>t@pLCwn88Z77Fypwjx~Pg*X;0)btFQL*uoG zl?q`nc&OuxB1?6g^X-VD;e(3m+xzd=Cs?TvgoA|wJ+f4_&%y#WjZniO z4m~o5vm_Y^kPN|HSfEA+$lj*FVkQ-+0U9xmvLZfKHF zHUr4!04&6$VX^9S<7M_=1Sy3`HY`FzR@M|fE^4JV_HW~0GYdg*0CV$9ja~3@k6BvN zhP~`^U(jtFK@uT`4hz+gNsCh433|=L1eqD(cUYKaQOoHuRnC_$lVr$eW;lx54rI2o zS|W^(i-}Dtpu8#yBt12LnVxgd$d? z_PId^NqNpJP)7p9L69U?oOOmQDMs8iv}xOTj^-+xPwxwm0^ylhDcZ8K7DpA1OIlnq z^*Qoy@qeDv`3xHO$%3-kyz{=duw@5fqFk9!HbD<4A{PpVA&mEQbaQh18Bh5bvkVc7 z3JiyxD&Ial($|p)gp12kRvwne!^-dKaHya%i^y24War9>WLIZzT#5_BLQYU1MVJWj za1mH-CIbwG;9RUY2}v<^RTviqOHj3J%+TXGsl@bT z!kXvJLQXai|6Gdk;IXW%<%GGG?hYSFsJgcXh>U<{tjOn?s_E5!*3AYvo)xBQibbcv zes*sFZv;?dd9TZ=={We?HD4603hMs3vnded1rffDm1Jc`?qqzs&wB)!VpT@&6ph)x z4XS1c9LGvQ?IDi7IeWY%P?aF3jM#OYI2k#~Yf0p5KfSl>Rijr$a8E!*RtQ3 zLxQg4v$QVytHL7zf*_V51W}##EJd3M$&87;i9|=Ns8Ckb(t;X?b3QbxsFp0nM9GYc zhg7W~(QZ~iySu7CE)?RkTd-VH-}TXddKcUBBGRHODVloF16bNkeP1FO*fu{HU>byT zbQz*w+8wCEEQKJ*DsKq{ygNWNM3;nUIVac75qf)ik@urL-A;2K)`YH|JvV3*Zx$4b z_7}?L%>$|H*t|i6OIIG6HxHz)i;y=Rfq8?=JZ776Kp0JzA@U~Wwcx5E%6U`CXJf*! znG}Z2H_^>l;enOZslN#j4sktM;W|ASyMK`}w7ey0no(KTqQ7EYKN%o20+6youQx5h zh-c!G%9Lz>8(V&46;$Rg%$d}~1Oq=BASj}vvVyjXk`9lq7Ao-SsmitdY=Df2+RDm! z8D*1>TWVpx4Z6-TXgK&|0RkhmEGw{MRI4JRzU|Fv`~Cnq5%!jqbB$?fhKv%Gk>X=% z*}~;~xF9j&K%#~HUNXl@>iM$)!XWN0gvmQzcxxCKJ9cs!RC^>JZPat=T=0(u2#z4Z ztl;O%iJqRWp15R+S*Q7kGFsd+7kOsUw_NM8cH6Emv8@Z@7`x)4bpbuJb?He4kIL^1 zun&SIyA0`!R65H{O<*vX5ll-B9nr7q4DR;q_Q^o+c40L~q-IwTdbvx0+N8WGujKX% zBiu6s*sylnm2|)GEOU9zd`Y4+u%Z5vPYqTB#FTa!!jzX&-(Y4=hb!!|U7$qdAi`vd(iX~Vw1ZJQSQ3txgT>u5Z*@v z$`k^nvx2S06iUVYm(CzDX6c>Sbm!CPCby~QKz?F-RYF~cl>;N;^POCc+ z-0vvIcJK*usNbFkJcUruG91LJLn%M{i)^`A~pCaMgy(5QXQ` zz-cXBp&+-iDjD2+4qCOql^?83%bf`_F|zNyWDZ)CtJ7T%-Ljv}7F;~yN<^K>L$~Y? z&6d7IUtqSBW4w0T?vpHI+;YM)20fH(gEIcCTz>{A*Q3_0eliWFDAL~Ry>@7%*09Je~T zV%P@XxhI0b=iXcFdg|3@SjM%g} zcO5K9sDl&&<^^P#P{A1zrweHb3*y@f8`dq>2 z*x~4-Z-iI(j=8tx%{%YmP7vWXK$bD+p^U>SRZw-um4jedaQu7w@JRRkRrfHcpv691 zfC$M(9Lc(w`Ga{`)?fc7COXO&qKBVk3lVN@bQQ1*(Zf%M=4E$B@T5{X#%s3^eu!m^ zDJa-pocQM>pSt`$A<4Hi^Xs1x3XP zfs#aH0UU5iD9hn|KL=* zo9f*~521#1sDeB1hEm1ErX+0Q)3GR7^gEMw3^8Fz=2 z(Q=H}Zr^o2%NSS2vW!6wXB;vxEyuX)=)>IH3ht+68G|0qxFdLOr5xjdsro#tG42jy z8G|0mxGxbr6b2W;{ggE|E-+>pgC5GbCmFo5UXF3|&JTWzWsKXBS;nA;Gp?Xh zIxtnw&5`12W-uOeTqfwDj4PQ*ADF7wS&eZIw2!eKf$`jXP|Z8<;bM8=(rK14=%I{z zD(FuPOx34Zjd8;@7>^fCoepK(7jnF+T;Up+s^_W`uG9804zEsq71ZN_srn&SW8B^C zV>}eDaRsw@15@=f%NQ4h`xwjNj4R7yk!6fq$$gB)2#n`GxEz?O=gza^3UnW1dY(P7 z>(dvqCuo+!#YIEIed|8PG#Xk6tf_IiyN_`;+|(7U?hH)TFJT$uCV3y@ zCE<)i2HxdNy>|QHXIaL$ww`4SdMM-W3VI-2M<3-@A-WyL@AMYZ9t~fG=ngq8QcmN6 zsd|OgxW~sB^iYk%j;YMTn7aU=x0Erx03f(jSJ3C`dimp5vl{pL7=s?Fad&0)SY;Xa z`xp;Q)vKY5`zq?tfBfw%ItC`%3M}KdIgD>{yFL?b^n#B-jVtL_4@|Ui z_4qP}@vTM1;q|zu63;c!##N`wOBsh(r?9=@Wj)tK8|N}Nl`;-@nPEFrW?_7Y&Ew6b zj1Pqtu1e-W1}54pmhqNS#&q&3q;SoBt$1LfjqA{FEoB_up|50oJTTE_uo`bGWo$$+ z_1wo!0~2lBXmNWf#_bRgj_v!{|F z%tRYE-E>7M>X)MIWgb7v{z2y>aq3Oe+Yb$79)`bt0J$-28jOLcbzeXfDY zI<9c-DrFpAxGI`boM_`li-Uf~6K&z6#hyyWPLp*TSyS)!GoGy57;fsy7~jD%zN(b* z9pQ{C8MIB-akswgDP>G=eF>f#{6D zv?@)sg)f0rvZrZavhKZXn{>#}c(U%j5jJu?Gr$|!)m17M~_lAK59a|l9Bzv!8JUgOKgme6J50&Reb_)j&I-Ni6 z6L`6h=Sn?f1Vwq^Pxc38?>l`mwTpV#W)rs63(DZt;ZQ-=y2U414AG7) z!R$yP<}p3z5%*#q`+L_xa;@}0$_8!@vevDROh=p|*DmT|ldW^GRv1)JaIbgyBy)m$ zMF=1@_u5bS2B`)Kq{M7W23T?9h&RS4sE(Ho|E&Ik~b}*fM2B{TYQ(Q zRM9JMR<7it-yLSeLl+KoG#0hHwQG0aWJ=BM16zDS`CK6G{^#3Ef$06u9#F%eGHhtO z4{X`TTZ^LkFZQ{^hvr`FTTU%R$uDQ9BfkKyP;b=BKB1oF)-21X{ zzfmv|yZM?uyP-*oBbOE5KWK??VA@+zV<<%A42lxLlX_13ug);AS-~tI|1ZKWNhq zN&@O|0P2Jf^?Xwn3x;Bi$3>iX%cwMzby<^Ohdh47yt7*~md(>`UW!bZoXx zIUMeBq(3teg#(dzgK&@!`XQ51AWKsP@p#D3qcakZl2q68dT=Fk+Q*|=)Z_e>U!LJh zUG{+h;E(x$`TM^DK!ci>kNZFu=FOOG z;grpr#iF6)WTRl33cdfb9PZHBJC3u$e#M6ix?fm7ZaE`-cJ!|4*{?dF_c=ZkbU)}4L094|a5*b9tz5}n?fOccz3ONF^8$CAOC!fO z?$Sg-jqR4{MUBn$e=WOZYg99a{k=~J?7uShRR{Nki|bq&%j2GTtzyVK3W6cI*k=$z z^0L(~S~*QBsPX_Iq>2#IM(jV;gpf7P?;7TP9U-LCdB1=VvcmaY&!qo3O+T2dCgkoa zayB8Pft(~wi2EQ2gE2_bn&>8q`-Mx>R?-S)Y)dq2@t@Su%f(=$2O0!w&*=NW8 zeYQ=mPWWu%N_o`)mGY+YQr68bWn*JwqbFsHlsA10w$P~o7ayzkWeWI$+3`QD>$-=( zGu#T^L+j z>J(bWCOWNp4JI^SsUfYGis?<8t-^JC`}6y|d&hQf?c09y)mM!l*s=GTYd2k`ZtEXN z=XPw_dcD4D@7|5C)p(u@b5+Or|B_nLN`42-p04YY-P;cQ+1|ZY-?l5{O*^mO+IQ$$ z>k>=uJ2bLmo2=)}QE78F_fGZtjVEfzy6V9s93VN93?{3{$p)CU4owg4F3Veb3|A7# zhPlBp|7OR2aNh23G^o92OyM8)s#i32|y^BnJJ4<8-P$UqjGuC4pp8V>dGK2x9#AcE<-Uk zy4ww{U@7^m`)|w=(yENk3Npd%kl=XIVn0U6OZ4~8>GSXD^LzC9OZxl;eg2p}e@36j=<@~o{4RZd zhdzHwpZ|wGzfGSn(kF@zMEU_CWEmmkEJCW#J3=4jWy~s|_@L{2|NVrl#Qz%z`95C$ z5Rc`AG$L?Yqg0J19%uzUujgFVmN=^6-zBu<6O==zJ46WWut-|gP2c0B$G<&xdVp4; zO9GKP3WO|0t!V`JGYDzifb4`&tS-s8_Gt)3x`2S6Z5mPq0v^?P)ZkHzM;#su@TkY50gpyJn($bN2febXj*y1y zstNj6^xuWxbSAD!|3eKqmykv@rqsZrFCItmxC@U(gtRt}%4sZ| zjg2=#|K$Ww{2%xVWDCkDyt-RvkrNj=Ns-3=Z8&8a{swLt{adO5^}SVaA+UP&MP$&Q zrs2=WF8>jdp}%a`)+#4il>_B1ZXsDMk}U#S6^frBo0>Wz8|@j*7!?djHca$NA@r4w zpb+{h=Qjl0#VFwZMmZdG-lOR3c7CIzyWg_yTC5uQRGG)BNfRmdT)p3R!F`w(LuwFe z3wZEqIv7i2jHpoVZz)EgIJtBD_~8c;QWYA{tTpNv}?+;q*AhOny?uBs|T zvKqkEdT^btXl1ZMMXLoC4L3(c>x_#cZ9xVrkgE<@^rDHzw3!^0)2?7xPxaX>RLKPZ ztA~i&j1ba56j?-w)g z;hcZw$OFaPZ{hfsJH0?uPWSg>klc584V>m*ou3IfRf`9Lx*P2IgS$Oge77ofiE= zg#L%RmwO0-JEOG<++ue>YZONv?Ey41*ccjWrSFHEsCn;p-31Z>A0eYua#nHMKLfvoDp%q@-l3JCjOu z+N$=g`r*N4^Q)>DtZL)`3suvJl$1%y{VAyg-Ah zcBcOGxx?3WJwCsgdS$Sxi%+krOB1P%RI)df=td8szc(e=HI-a+_NE6u`7@`(TQzT; z-9f*$jn!VKaLMUa)$Z*6?d|_ibH$SREv;AhmEt?QXP#cY*xo{45`CkL(*^8Xb^GC0 zmsiGRG=uSmloc zwpF$~%UI>|s$i?ot@$xk&Qq&=>+K`QUigY*6|pbXolf=kq@+GL=yWE)DkW*DRcyGI z=5^BIrr>IE*6FPl3zR)WTHcH7xekRLQHUuR1k#kylgC zacZiBnmXwCuPL^sK2TCq>C~Z9;%N1JY0&u36(2+OT%gb;=-FzdL#8=te}u_e>=tP^ zWeY2grn@Y5u``p3e=l~H#W1^!MP4k2Rby%C{!6McZQSslAO8|3!RXQwku)nY)}9*{ zutbzm>~%}bU%6{Q?z&|S-53Q5ok7Kl3_Ytb z3Uj)xb=2Qwa4w0#kO^t|tJ+l7-alh+quFN*bihzsR=b;t46V4?ynXfh=BDPRwsuR? z)OHHilG7yF-g(r5JxFWUlt9H>R>#xAaC;7ivks<(;e&=LT%PENchbLoJ#oE|UcIhG zGOd^{SVJ3Eha_DO8B!{C)wS3nw`>}WnX*;To7O`-bKJD#T)S$>K2GYoufpQLyBV}{(h!4g)lTi@K&)Ye`w(+OU47^Vrz&b!eOC^4eZ zout(0kkimKE1t_2#5lHc6?EBvh^+12e33{*md;5^Em%?{?4r1Zu3J<2|Nkl(uEN{l z8MZ5`jB2p;ssU__L&-zFpzyerd~kTHV!#e%zTB+j1!LUF(k91}w2Ez2jF#1_*VA&i zhC;NgaS7DybI$uUp1@3{U+aOk#Mu<`x@*msZE5mcJ3S4lYqa$PDrcIg5_#Q#%+E`0S>)D>`V%!$)vuJJfC{hRN@Fa5Fi z^Bdl$Ec(Z#?Sm`oYLA`w{oxhw`O$4JzV_NLKG?YVo&R#y;jj>qG_x`y4UqAZuwa>lv z8{@yw+766<{pR|SWk3D5FJJbt&tJJ_<%>_%U3}~6*5QA6`770re(B&pUH;Fv%=7$Duz4KE)Z2Z$@FIO*Kg|${w z9FnmY8CxRgAGFbFLy@v_Odhi&dBi1P1=b`*dN+D*^A z%@yB*EA5epMdb6`ccv)o2SwqaWe9mw5G_S3%3titAdzP2E*~gt_i;clP~hkv=u&)d zFRQyWEXs;Q87=SW0Q1n(lWr1-FXjxvl1(v_b>Cu@ThwwnAuqv`<~7SRJQlh=k}iv? zmR0iZcR-`d`+_PP9#e=;--@at=Ph@y5?v2x-XGL-Y6_2zl0oT)tP11aYmW(i?XpIB zp^2TH1!*NODS1yLKiTHxVPe^x{n{oUH07eSegvD3hk!+Y7GXrrOPZGxu)Cy~!(KV1 zHlck?+bFIYR5|({CDVP2LYYyrIU$eDS$SFXD6o-3(dA+Z2fXu|hGTJonD^ARyYEr# zob-mAW3rpUHwr3;BjyZI&0FmV8{p#5a-TD}cQ%A7$8rJ=m$^x8QB*l*_scxXzyevp zbh_PcYM3``2>K8<6k>x~drl~pJLC;dO>1LCNNl{|$)aA!$vGFils+U2sx>q_UC9Vy z5dNWpTqx49*~8;c^TQ_qr=6WZ5wqWZ_Yz1J=; zI432W)9rnXSvfBof>*}rcOH=}sJ zLc3>EhGp+1HZUm$w(ZbAkZ@R$L@jR_n%XYOBZ}yW0SOr*Yb_W*Aqusj_9t zdC?fxy&?m-bAqTd9uU&yWOE39#rquT@`9!3bgwd?{^2x{AW25i7t@4zYk2tpqv4gD zwql~7%3hNM3%P`hqB3|3i zcEjSju4^*g4X-e+3Au@nOfEen)-9cDV<<e z9fNt7h?bPu`)%icyU8{laJNhn&D1mPf>A6#@C<%BS6zMk%P9a_At7I^OXbq!5gjL8 zY?aF~GK75AD;7RU3+b#*8(>%2^La@fWzjt<%h zCqYJxSvlQv;bl?Mrs4T(pG9mGvFNkP(#;|rb&SzP)O630qm5=r86j^8rbk6pF}mBc zIX!l>R_vI-;V>T++ftw1-HA)rTs}Dha?DV4&W^r3r(~ZMeY}xGD9l=eLH1W1M?C5Q z(ph~(S3Suc3saIR*|M?q(y<7obCufvpxcO0^1}PeEVJ5G1AGnUq?azG+wTqLyPC zb;@3lMx=J#kTc4dD>St-eeX;|y95kG3@xX5?9lqq7wmWgu%>J%f*Rw-caY7L4NLSo z0r=d^rOhG1D7KYoUd&t?{TELOFgEi!-RrBt2ADk24P`{IWUlq30Gc>#DjBYZnPy32 zgiYZ%UF<3d&GCPX-RN3?OMn$EL&#)QZ4}WsGm1AjgeV@#g0C(1kl+C+O%Y>uhtkpv z-}kG_rlGC86|>}=u3~)c3W6iHrHF|8 zNsy7~;H$D}3aXOzN-WfH3C@WyS1k4$Gp}i0sepTSzY#^RJwfltd+pVD2<*Ofkx}v? zqVHQ(6f;@YJ3HwZJtz-V6o-U7^Og#viW0g`%xlV86_ruuonswSW>Kl8_Ao~fMcMQO zMUJ`WxCC*?%Q5ByNimoi1WFhkZKw6Eoly|AqDbIt49x@YBd(%TeMgfqQPBNL;BBtV zOPPHM&*@sf9iNyMGqC}?nT2dtHo0jt$eOl{j2SZv=@CsWB5DzTY_c94Tcp>?fAi-S`iX}&N+lM)(}$+Sq1CSwS*;9}Wj z&VGlMO>+t81R!y)pjt{y7fe$hG6d7hGN%C&i|rSR8^&d{&GrWAs0H+`MC*w69;Rl- zc{xG!asfIpByLvO9nt0rrXq5qCgcXbvMGl&GnO^9g6DVKab=M#nW7%c30?{wy1>jV z^OW4I6k}EjbZ{+;{&i7MP-1e{kWDjY70WS>ZTb=^c_$Snt6eaRdwl6!Fg6+5Enl*n zAjZ;yiA^Ts|?!$NT|$aBy&RS~_;iCeC0?v_!=dn0*Ns-pPxv!Z0Y_LQqH1)pyYF@}OxrVt&{ z%rcG|+(Gfp*}<2&BnHb>6JO*6omK?bNN$mIX~ju7)MyvX8p{>S9m_>8POQ1$6aRt*`xPf5celT6I ztYSHUhvDDQ22D48>A>3@Hyq!WHDTtr0Y~B(=r4-rsOl8(?bbi);Tby zDYjlE9$RO-8|d|UPMLbrlA$E@WM-n=tb~Wu_0n##ZyavVtzaZ|&=5TTO\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=iCloud-Mail +add address=smtp.mail.me.com.akadns.net comment=smtp.mail.me.com.akadns.net \ + list=iCloud-Mail +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN dst-address-list=\ + FuckRKN new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="vk.com raw" \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="ok.ru raw" \ + content=ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "Instagram raw" content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment="Twitter raw" content=twimg.com \ + dst-address-list=!Local-Net src-address-list=!Local-Net +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment="Twitter raw" content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment="Twitter raw" content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260515/20260515092002-Diff-Config.rsc b/MikroMaster/history/20260515/20260515092002-Diff-Config.rsc new file mode 100644 index 0000000..2f79ef6 --- /dev/null +++ b/MikroMaster/history/20260515/20260515092002-Diff-Config.rsc @@ -0,0 +1,12 @@ +934,935d933 +< add address=10.30.30.0/24 comment="Local Network" list=Local-Net +< add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +1013,1015d1010 +< add action=mark-routing chain=prerouting comment=\ +< "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ +< new-routing-mark=main src-address=10.30.30.0/24 +1092,1093c1087 +< none-dynamic chain=prerouting comment="Twitter raw" content=twimg.com \ +< dst-address-list=!Local-Net src-address-list=!Local-Net +--- +> none-dynamic chain=prerouting comment="Twitter raw" content=twimg.com -- 2.52.0