From 153cb5302b31530492b35755ebba35838aa9e3ac Mon Sep 17 00:00:00 2001 From: vados-dev Date: Thu, 14 May 2026 18:00:16 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 14 18:00:16. --- .../20260514/20260514180002-Binary.backup | Bin 0 -> 119403 bytes .../20260514/20260514180002-Config.rsc | 1247 +++++++++++++++++ .../20260514/20260514180002-Diff-Config.rsc | 2 + 3 files changed, 1249 insertions(+) create mode 100644 MikroMaster/20260514/20260514180002-Binary.backup create mode 100644 MikroMaster/20260514/20260514180002-Config.rsc create mode 100644 MikroMaster/history/20260514/20260514180002-Diff-Config.rsc diff --git a/MikroMaster/20260514/20260514180002-Binary.backup b/MikroMaster/20260514/20260514180002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..4e711ac9cb8b47c38e2831ab0ba1e5c8c8c1d53f GIT binary patch literal 119403 zcmeFa34BvU*FS!4lBT&`XxaCYvV*iu(uJ}Jlu|ZnDNsNJgfvOp&@>52N(+iCB8&Tm zxS^l|iU=q!AglVQxTBz;qPQ=BhzpxY^ZR_~-kZz~1>*DiJpbqYzt2_Xp4{Gh=FFLy zGiS~@GqZTz%BL$o5Gam_eAyW@96rC(<2DhIKtv)*mzINLI5?JrJ2JS?A`pp!cwqqF zxE+Cv8NRX>GWyHqdtERXY$(G;M07b7TC_xugSten8i7cNr8*&w>PVnEkz%OM z5DW%`BGsi*GS#K(s;o|TLq4Sm%d_O@PBI{7uo3z zq?I{c0f%prK-7+i-jy>o6447XoJvIR$Z&h^c?a%&F#87iolZpbunc!5qBSzyg@|sJ z;jTnfBg5T@$SK3!iD-%pUq(b@WViEFvnA;cOzBE5kWN)K`Xka&RsY^_QRbA|k&G_a>rQGR(K0k%{1Kp`{Jg ztst@yE!MDnkk@8`gs+I`Zh?ds<4IU4knlk)Q8OZXL?B_e)V|0-b@U;Tut^}{01-_l zGVFSsP$olMN(#z@doZ3zY}l1ZjG0Fy8qieQ73s*(h)9EmXPiisnl#kocFgp80>+_M zTcyL-g(x+~>GoC!&}ti%x;(Z@V}?F1JwyiCGn)A!cZ9? zAIy&+H!+-|w$5`s`j~jniG~sYQWeOGb|!Q&KP}vJU>ynApDy5Fct` z7b8BR<+SIC?{I12n@13D^#>e2r@xXXJF+97)8gM>=m@GJfcJBk>FaGe5yk1i7pLQ; zixb%qib{%AEvl%b_=Zr6;@SztQJv6^NO(;k;Q>MF)M&+B(I*?APj*CK?1X+7TjufA zSbcU>e(GSWKTzVc+A57@9-q>nB?ghVSMxcYXlpUWunGAeU2g3R-YX_iyK#5lqT`8CW02hN9^A}MN3yT zE!{X;BC>UcvW;xb`{dUAOuenS+m#T2I)d^eb_agGRX4Ib%4{BYS#M*R)gK6;c~1#t zB(>PB0WbFA%t>2 zlp29p|74BnGKLl<>A`WTDuj|_4I8Z)J@beRAO(H92fj@UQ-hwJ7UF?i^A3N&TIzE8 zD;)M7K8MR1aM*iPyBTvF_R$y3EDlmcKu&4MDP5gY(@;)!pT}!-x@TBjPW#vp#`<^= zVre?cE&ywW8f%jfR+;```Gv*TgpfWeknm;%a~aYsBEuXaAzQwK>I~pFsqtq-;tzP_ zF6#1lyrqzcT_FHlx?$a@uB24Ut(ddJE7CA@rG%=#7!+J=Fmfes2i> zC0k`Cik=mjLwaNm^|ec5s9}~|G{11e%tB__k(t%sH0OqJ^1U7^*Vn|Pt?&;{=&(Et z^NGZ{XiM3l?w=ExTbEGLSVyqBT*fk=r^+}!ugK{31dM~mloaKaIP85x`ExvE;sL6i z(z`_svdcladLk!DU5@fw9lq^}Z*#-n_7COzL9ANRVIF{df9?-`jsXaR z5{7dKN)#jXc`xMJJCZkD2eXNvG>iv4MoDiQJkV&h+kFnd-#B8}m=a@eV>b*ChBB+o zQR?wj&WbL}-pUj>GS{?vbDc19Y{}Sx1@&efJHb<3QeEnZoIbbXC$Uvlce%^4fQXu7 z*pMe+n9eVeVKgiS#xSl-R$Fs$8zNdHzu%UK9)g*Hh*F5?9{D*Y$;)LJljNIZn4j#e zFn|VSvIpq|;kcWK-sGlos3%2n_(e-hV)4^B$W8o)+{CmF_1W>bRvKl|ESjTUTY$rH zUY|oYBVeS7D{=S(M!z%QV2YRyKbNTJ0WD}FXfvP#69UkJsU_ObFWU3my%wjLrvQUp|leuT()NUL-isBDszgvid|&GAHA;)!02C)yfMv@Kq;kDwu=YolYK zTcZo3>%xwOuKFGk>!u$N(fdTSj|lAy0+XqI&?Y}7qECqEQzAM@M0<$nb0RtjtrLiz5{T9dL>mO6jRMir0?{)9>zqu$KPeDBFEEuA+A?hsh+dSn z=WPOEEFsMKb_zth1frJ&qCK%huLwl{5D0n*y&p^Tx7SKqP90;Jcwnh9Mb_PQRmb1}*fZG|u^luShlfD(~3L?(^EIVR*TBNFXBWc-C- z{RkvQNK%MWVU|s$LL}{xBoUeQ(qL4qqf`uJ$uODYs;4hD88>LmFt?RW;PYIr@MsaT z@nI?o0gk)X<+>*%BrpTUtalkVE0zZn0sU^BKmz&)`WhySXgjDWM+}itNo<03L`w#H zj5M7yqE?uKm7>ff!K4Og1?@mTuXBrqW5!?xKYqya5LLY9s0?e!8O&^lCe{v|XZVcu z@FTs@>Z>$Hm|CD0IcjaLYP&;H97FaNa3&s~Fg6V?IjXJ4D05SYxCk8}#IE|rS=OTr zB#rw9I)BJB^2$}j&>xQy6iM!YQ0)~t0+HHN^LWk$;I;;!I$>J4LT)ioqpD>XYSh&- z3@$77bI98*@^h$Bii!joyh(lzS$wAqLyg)l!;sBuWtdl;4#j{5WgIx)P7WF)hHGZk z{8=m6#OpH>=?`m3%szqyjiEUjLo>9i=4c0cyFcKzvKe~k!6QfK7r@wUEE#DWF)}}I zgt2hg6{AO%47-9o9aAuRT*2t-znQ*<_0SjA?PU6{4rPjIWTYVqK0`WaW_O{`V0Pp8kY+CBbsUv)(w;Ptb9W65KG2}?bR@KHqU--WDHf0b}? z6x!ve5Xr62BbjM)9LZX@w`x-aJBx|fzrT&DVo+5aqN>e#R5A6Aqskb;NaJ8wY8<{m zDLhOiCB=6}kc^Iue;^rVJ}?fyAz=8K$zN#&Vl$B4EJSwO^T0Un%2x~?t7^rcS99<%;E zGK^c6tVSWw0F{LcnpS5SMgV~VBOqXe{2U<+FUT;mFPAz0C*m%@1B1p!`T3ho z;O{Q9RFJ?7rh-6%I6^~$n2%2>enP&P;>MI%r5Rc>3uG`DsJ>#nia0ZnKGm)P`BPy>rWY zXIp#cI(nO}y=@k;-lql-^myDc9^wuK2X`np zxI?kQ9ZC)EP-t*Z6lsNq^kl2BI^8DuZcY&4@W+L^j<5HfIMq8T285Z!%3&*XI#xk| zs~MY1G&c|(izVUbSQ5?}NQe=MGzOw)4bprv)<9%1fK>t|i@4VbqJe~61~&f_#Sdah z6!yiE!6g!X7)zq|qgc$Lg2DZ7IUe^zl85A80~wNnME4oUAYhh`hYuoI zZXmqMzm^&+}z4mHGI8sRUEku(uWv@{3QQY2B+ihTls zGxWBrZf*6lL8R22DyyxxsW#hW$}rXDn0gq!6*GIAYBMu4vw9e<*}YA*rXEJCMY=m2 zUZ1B5a8r>|=_doF()|WXO~}g49h{w)TVT%1w>*QVdt)gzhUsxH8$wcz2{J@P2dIg*r0?zw?O27#r0SCb*4POvy;pY%$((@z+0d64DVl5N&5cc@@ZxC|v zAtBedi6rC%m5}?_h&Dx}L6m9#w~8_WqD=Vzi74B!(sL0}CjRl433 zIsz3ApV^pZ9P4%jl1WI_nvB`?iMUc*eIl;Z1{HHtp(Q~_izUSv{TT`kdhzdC5}+tU z0sT!&!f7qW5F~#fIg8{^Es6SA=%NNB>7bV%;`-@H(h_Ah}jwmSNxfB}>m$GCo)vHsKmetFp zvj0t7+8O53PR6C8vH2sowq)SA)Zl#SB=xjxnM?IgElu@t$z}qVzPy-NxdL)NPgscU3iEW=3mh-wz{>V=;V4^7 zl-jss*I`8^1)~S&a_ zGQ!pNaye(diAS}iqS_J$z=pwFa11U>z?z z6aAgbCIQ*BuRj}+WmDi8R*ZaBT_~T=Ul)a6qmG36ls@;Q;%_Yi9A98tHpLW?n2$6oyr)$$dRkC5y~ zY!%aeP|U_-0#=_30ZA5Pp|jHG8B<(JT#rb+NSP(p&hWZXDeT%~1pWq}i{y|Rgw*;sW{Xn}pT)bH@kfQ=6dX5n3Mn`nU&FHvj;rYwhCayHJG~(rb3IG zNSH1!?E&u~AuF+D3(dd*(^@Q18Gb<6L1>DC7s)h)I+-n*S)kwLu=|yTNU$;DLfI4; zbSf~EX$8i&3Jk`;{)p>V_8hC)>O_2y3Jj?_m&0yuEr{SoTWV0 zsUByymT|{~9viCt4quwfVF&+Q4*QgV&skpX@UhaOgm6mXLJ1WZB~)OPP=QfG1xC|Q z*7+f{rkK?z%nA4+mc`7#E~ij_ zpPuP*D zH9kXq_}Bunm@qyprG%OjS~zL-x|JSlm+KsNyWA7wiG(D=kVgWv1dt)Zt}kksf&g;S zJ28PJI5o(OnogBkcLGAiobG_b=XNkBy=oyN^2ORsr#Fz3=Cjt|cQlS9#T$eLkUnco zK#&ai$|^n>^B2lRL6B!ahOrXTCBs+=sYF6xC8QD|ft8RD6S%Mv(k8Tftb|nZ#Y#wpPOOA1li!bA z30WaO$4W@08sQF|C_l$aNVg1QC8WX=xO5c!SPAKq-@!^q<^4X~YEM)T93{BEi^s}I zWq^Xqg7p(9BcHLK;{^P()43XxeC`di>HP=Syi zX{F=EsA%AFx~pr`?bVfzbcekfnMXWwh4Ms@An#{Kz&X!w)-Ba57wajv5-e8V0?}|x ziOgjdOn5$r+oNo3W#Prjrk_!%FjNM^5iu9X-vRj9QooDgkMUHd`xwh4s4~QUH{odwe8r*3r&y_}zi~vP<9=%genL0iYchiS`2h z=`x`0aS5~r#*6e)$9cqF0IRg3?GjkUnE|=MO^%XSY5CeE&?ZUzo#C`QJm5sMO)njs z$hZXZ_;P>18gSZxINF{lEnm9?;-(VSP?K#QcfjFhwHU2bl$NPoB8x`u3ahQko5?lo zvPi~Xpz)c(8w>DXOe%^#smDl?G5jmqQdp2n=B0AcSFt{ct|WsMk)^mmtCUu>T?&7k z)8_J2hX!QsCv;S4ONNWfMQJe`%STxWRgbU<{S75Cl$F}->2610Vw8DggI75h%L8Z= zl>E_N-BF^J)~sEMO^G&7l{d}ha0je%g{z;Or?6b0QlwRGm&z^KUls7CS6Q8|^l ziG41WW1`jTOt+V&IlX8PXdvn*;Z@`pZ{U5D5WY)gn2Zbq4wnNftI|C_)+o<=7#Z}J zqHMAw&(Ux_3&VhXe^ygynM5SmiC|j6Bt<|ZS0f^!F_D0%EktY~TC0V;)CUudcZdW; zU}2{POvo_F>P94VClW9@x?LbPp~1ui6Ouke0=9F(20#7eEnEf=33)^U>_0<@u(AZp z71)M9#YBP$Q&Tgnm{^I2Ee3LAQxcZB#A2BXGy4ly5gAO?Y{tay75Ix2_HKdM*2TG% z_@QHSNYP#;TeV>kN2HI3$nZ@kwk3@?0Os)&SjM&QC1JvBpgruaqxX|Y)WZ7yyTIJ9 z?9R3#`sjLQ_kg8bFXN7t@4$fPqI{2&@9{*2;=wGcj{QB6$T0OVi>fnVZ=56|@fj>k zfh|hJ3{6aV14(Pl$=VPZTC`xXa4eMRUA+AsUfctUi8My=?oHTzVIu|~-o_m!E8LBQ zsjY}Pt%xmsQ043z#lZy}JcxtyiIVN_L#-kjNR-@9p7D+(O4Yio?n3U}5ga^>gNJf( zR}SvN!5ulc0|zVXPp4NqsvUuuUWdO{w(XU`{3TnyCd)7^UkVI6)>Qd9Y*5&I3D+ON zV6aq%&jy1*y9~pbZMEB(ELR{A@vsrU9K z>ZFz4>nyKw?SeazrmI$>v?+{6ix5w+7ztXUWeK30WP~^4$1O;1)sh%{C!o8KqzNSU zO-C6sP!5woViU6QTbY@dkF$OzIVAY$*W>1)c%iB+2 z#hlOK_qb*_d>N7rd@kF*F1({IEHuhayC6{UUtR*lvBAPB5x;L?XaW?DP0T%i3AY zQ+P+giy)l>q?!;?ts1GwqVm$*)i#DP>{Yx7Mnb851|Y@buWcd7eX1M zMwt|`6dk1M^9sk56pY3;+LF2dQrKfc*!61cdI|eqEWbX4E>?|BDZkIbcJBHMH6I&7 zX;7m~sB)L9Yd-qsWC$S@BaxPecS&G{j~=NQLK+u=)awiUvy{e#kj6(K^*JJnA9fdZ zkhfn$IA49eDL#ZWL5(!I3X!LQh#qxS)Xga&gg8-+xS^-kX?MZ{=p=A%xtyZy#t#WS*umT2-Yu;8x-p*)iQS{~-8x^oI- zPEsh3WOW`%RZf?S+oFSY=fYtlMih*WO8zkH$sz0w)!5@COlczuidd_TNGR8%9V&hQ8P5y?A&0+sD*K!5Evx%Z8BI72ZjGL-6PDJUZS6l79;66nelk@Q_ z+;;2FMb)L3dc9uc(lnGyv%i{)B^)Gjp|VWewVmx*)hv`tb9FB9ZofIb+U*FW*RW`I z16JT+`~0w1n8U3qL0n48D3qXi2zLuL?l=|>KMq^hfJufC*w4Di5g2vJMi-Zo!UF1A zgiyCsqc$+qMPu_>D-Lh@dJ$U3f!3BGgss#F;~ByU4wuVQ!*E7LCyxk+lDZvs4?oxtv+ix z6X_IvUrPz0Yo|sRMPCc=kIdD+sz)ompq-Kn3$#~fbis}g=_*F_I{CbQxM?xZU^}D` z_7xAqm}e-@G0#w7%rg`?kHONmDB!3rk^2$D|IqV4V)-8iOfnR^y4U9^bGq1uGq}EB zsdWE>3N6i8h&t9GL8N1rfY|{8su2Z@nFxZP4SFQ8n1rz~XtuQiVxgI<6%!e@Vu~%P zVv{zI&YZ8B7P8kFu2;-3L`*G2%p*iNQbkQiK+MV80kZ%E14x?$V!J@8vy?b18{%;T zB#B56UyZp}Dkegy;JCD+K=FUE&WgF2%Tu0al};c~4n$cmvjFbMbux@8qXMHQm3L5; zTjh5=T0AebbYhcQ`~?*nN5o>q!7{Wo1X9avW4>vHX$Fmk)v~C?JQoaymm2dvQG>;1 z9N*wC1PeqkgT2Z^%(b%j8-6}bVw{LFV`-RJ=Cb-LGF%=>7soV8U*)Ls_-3yAH&83o zPc8ZbD}NN!>g-N`<-dbgP5rcDiAmJ7I&2l5e@83O)=w+ey+li^-shcNiXj)61c^Z(V{3;ZKSYN0 zeyF*`hoHLN54D&0P#RU#q%ti|7x5t?Zo_5NFmsh$&d?U4Y}pZnbWG^umff+Dxx;>~ zt-|Uqci68*>zU!O8@n?GK-T$Z`U8$Cv=&@gmVpbnVQRt!laOKzgo(^dg%+5$8X?H2 zJ6jtj;$ddi*v|O$#ctG$6u?CRzI`WM}atP@x6e%I;>nu%-G2$Ji1tw}dpCw;Hu>bNHC( zfVh~0Dwaj~w{rL#9I?s*%BmK4r_gdM+lssu3@eQQ7?91 zICSBuL_vs;Aya#^(UhXsj@4-sE`-#S(mb)J$z(Q}O}NZgHBZdUHJQ!1rc85|spnNu z;g~P9=d%`KNIPFhBGY^!PBUK+X!GdeD|^!;jG@{_5X zmc4yy(ahl^o1XlsVb=b}-8%G)>Dnx_{i;K84gd76>HDE6;puye)5jcX+2*%tZ6B>T zvipYJFK)V8v$t%zz2BgWo0cS6V>+&m2~KMG`LN$IA8Y1MderdY&f2DXMg)BOhIDN0 zKR0gbkz~`@1?zI&no-v{ZO!J(&h8xgZqArHr@r->`PRkxZ%xs)nbm*pW8J^`?$-7D zCU#yp^!8^?-SEk&CLbR;SDF9r@*j4dz4`&~rh}jLe(B7tf-i^PZJgcfxy8lzce|(H zvKEhhYg*MiuP%R7p0CxMA&&~*eEn_XYfe-RxHIMCv^$=@`i4KAnpM)Yj`_M%PR@Ga<%#C~NjH4(YUYVg`yM*9 zt!wT2ji*}Yep8$H!u!X|uDEmk?5*(wdd++2-0a%Zy_(ESmyKd(3~ym#in{3IgNYTd&l z@6)Wi?*2gKK2waVm!qa*%WdPtWy{{U;p`1Y_nwzuKA2U~?bre8ZGQO5rCnQ0`RTf( zF;{mj?lj@yd-C^v@lNCMAFjB6{->As3$srSj=kfqxQ*ZTcshUGRkI#F*5`?*UdhmO*--w)SB>VzeY)-avQ;gb4@=E) zA6!4|wOfApwe_-5ZTh@)_v*qYl-*l3D$i1(g9((Gpd;YvJZ(g&))mowS zb5F6q#5sM|ujO~GzWSxYIqk|nsB&(ZuzY>nG0&7f_u#uJTOR+i`=npGItCnW@UU${ ztG0_@?DIwPYh9oI<&Q3z2fpa}XzeG{TlUL3+1L1N^2hC#&7Jd^cg1m!u=0zy^BUd$ z=-b7M<~=krKK=3QEqzLRJahTx@4o!UV`naJIJ?WMcRW8a`SiY$M!7G4+o-|oQzpC2 z`sJpqbwl#TJ+=P&m8sh`&3FE?y0Y)2jHh=59-H~t+qEl372fv7qgQ*A2Y#12Wl7$x zy?T%C@6wGMw&{c0znr(T^1<2T+v+VlXIGW|)X7@BvSjDn;rBIoWpmcdU{&5a!@WuG zAOBc<;PQuV=<~;I%bI>_y{k#P5of2DX`N|fzPnG`fN|fTCw`my#G($vmmRuxSfedl&x~7^F>ZG6>_aynv1Ked_wa(JW1juy$xps> zq?>GqdCJ+-Fr-FdIRaO2LK-Z*-=-D^kQ&TsI=ZOn3E(YPEfJ!pJtCG?_kOb(MAW$tSu$Ra^Ahs)n{ccm8s6;Ttn_$G$#tP1o{WcbN0v z{V@64Nr&E8y<|q>kyoA?K~wwL*9?8H_~xt2_Wk+fq!%9Fec0dN@lUorKCk59>nYQF zyf=T_{iWZx^NtzYX|FGNO8@wYk93^gqUV~UwtkLRO8eeix#feYx`z&Dt^RP!9p9a5 z@WYapJ92+NrzvrNaIX4+;%6TDW9-RQ&#ipj6SHN;gGFa+Pyrk zf8fWPx@86@F1Ng(-8#0_O}BoO{loM{OZO!e4es&%$^3^)5-ioZ+q+GBf6nG}r72&3 zaPr7g&(w6;-u%Yon8n{t{{5QoR=*Q-Q*OaT{lVlRweMvKzn*Np_1SBZ4t^7?dw$D_ z-3Mak|MJoP9q(idbFxP7NP9Qs#h>SPFm5zl`}~g0O`DIp`G=7oof|T}BzVQq^4PI$h|$x1->?eP8afPg`!A+3oG?CuNsj=RETM z*c%tVo0PUJ&Q)2sx8~!C+Puio%O(W>>Y zly`11Z~gJCM}N-WHhul$Bbu0BUAby(%OuaqJ^ga8%e?aFlfP~l>8d;S&aLj%jpFOx zTli~2>zA+WIBrq1?mxH|%*l#%&i!@5{^V=w2J{WAnfhekp=X!g_VKuD`?^jHNvUj@ zb?i*qprdyzJ@deGzkF16=(6D+IcQ$eb}s(q*^J4Ja$a#}bP8_%;q+I> zzkK09AIHN@_TT=5WA4_?S0rA(^46S*W3Kxu=f|yG#%?GX{OOT_2L`>9Fgc;e;qsgh zGG3XI-)z4Ahci#LIH0G7-}w3_b-lb@&Z4e&G=IWAFy))-%b#5^?dSFjH=Ud_YW|Qd zxktZlcJ#2w~jAb+4SZ&)^5FNz}-Wi9i2J3;{eC4>6>54Zt+z?r)|4VUw*RBmao3L>a}lD zj|{I$diD>`!iK^Fjt^U2d9LN!9Z$bj{{F7gCV&V4guQ-1EB4IZAm{NWGlhW^q`)8z7Nm+anA z`@?nXcJxnNUpDvcuWu{bw)yKUPv(fd&Exm(?6APL{&38~!nk|i{PoA*|MrS6`$b7Z#`-pUQt$j=)!=V4OD{H0_-~i_ZLC#YQF!~ zeE%0{zRa$Xot0%TGiCMcX(=<8nJgBI&0cD@^fF~Ta(b1Sa?GV!j?A9fnZ2@eO}V8O zi_K!r%(9s6y~-?hhb6bHjM+8n)3{*Qs8`cswvJ4jDaUHg>FLO{Sj!xip0IVCrwwCM zK%CkW3-_SC!sgAexttDnV2Z~ZaC+Q+xH^9i27`*%=|nIXM1&5mlWebg>3W5EsR}J{ z?84U}P@Mta!L4#Rwhd@xsx2$)*foE|u!5qJDTBri8`O#{{-W#x!kA%z$5xNHnDHY= zUom9#$g#!e1#7|cSnl&wd$G+R%7*O&aiIj*J`fjN{ECkom5Qwdap9odtT2X~x3s~j0eg5bdJvDJ^Es^c?E1bzRFL7A{0&Y%4Sf?+<8uZaaG=YrDx4A9NTV(& zhfRgP(3MrYTshJQjAG{0Wxh}3a?mF2ywUza_($uc1sD2KtF5xy3xBlN>&=j(#T0k` zyWoxN*8fO`AJY=OD->FqGSj}~e{Ih~q7sP&tP{bBVc1I&`zT_+MV!c4Bd=q@hTJ%r z7aMyomJc`QH~79q-Yizx==%=&Bu;F7f}S@}4xhk@nFyl7<|erJl<&R4!M;fP$vZjY z&|Wmz0rEN&<~wIzVI`_cl!CNaJX>=aj}o@lQvQwbH32(^AhQ(wXea;ZfGxWb#D--8 z?9ZK%J+@-RrY<73#Kh4N%quN(T?tdmLR-y5l7xiCw_V0<*3pB5Sp*#03LGI-h;UJA zDRkxH4{7!MfgQS=gTHpI=dU0AC)B2he)rd_l2vUqwJ9RFk>US)tFn=@9?s#m`DU_V z<3FQTA+oTG8^$nn-Ia1Pfr!I)%(x)plyh!z-u6l=v?Mc+I<_QgBkwHE#0U$kz{Wd} zJ6N5k=|*JO)kSXKiu{wpm>NrwLPnW4M$nN;WKJzu`HV0>c6`mYdmnssbK~3W*IYa6 zb639=ZI3;+_WK2Op0x-GH79?nd+W9(BTtTe#n8YUC>Vi#Zc}5d_A00Q*7^vPVi|IQvp4GUkx>7eJaD}owG-TK)DDJ}0o*a`$NZ;#V`?w)-~iv5oj_ z`tok$W_9n<_WDB5iWb z+Fx=K+mBX?AY$Sc5gts%fUctup$IbE5delV0i8Jx5i;zEf^DjGpX%J7lrm@cC#lfV zoDD5;M2~Bzk%Z2G3mf<23P027q-Qz=DzcTRY)dKwi%l{-AV^zMVf7-E5J=wy#Gu8p zNM3e0JYuBm2pnsIN^XKkUV9Ug_6K4ykWk;N_AUG_-Ma@4Y*Enicff1mn!1zpop$$JFzYncgiByMLqqK}h zI=n9hJz`n4qCqz$!fIOq`_HwM_n?EOjfKBT3&LVwgic{sGSrbl4*$m>u%C!Ui^eha zi0!8iMOg=|i3{68 zDlnp^(^R43EKr>Z3)nO89n2Nl@p;ms(~G?f#O&n}^2^X4I6~5@995+b9|n8~JuIBT z1%*I?v9VIU+%2il(kWOcwt&*K>+y@? z0IB~299WxRKoO(B5p%J!fHhIzxKLRb9bjn`IAYk&641yJ1QJt5VjR_>kMRsfD7pdl z5|0fXIjjvrTuzX1^Tv=~_EbrVv;!}y@c1Z9J&46$P+ya@-Z|9{FnGq({H$6Kvk>)$+&29!}Wv*aN*jI(lH@3tg7Pwepzm zYT32l$%fxw_sCZL)+W84Zl2b0QM)azH(fSy)Yn^ww*F!4?4win+;Ycf-+=)r;@T%W56#w`S@@ax z#)oEQSU)(zm~hLCE6!X!`oY~+^4n%@_-OX$H0EG)=ek3q&b^g)dEd`xuf66(*}8*; z`_Ftid*8eX#dNK^=X%HbPH!gnpVRw`xEIDxz4f~m+j@*2@bQ`3Umy2dPU8tf&+a+b zV#L(=qAr8YSGeAKb>_6*UwpA+(PG0p?+qC6?nj$_+eWqd#~)v;&b-dD`@sd34+>3;cP>i(E%Vf!pOL}V$Lig4I}cg=>!`ZrQ(9#89Q}{Q$wLE! zmURAeRpQV&2R3gornfygz}tCLo2DHS8=1dYl6?KKB@1r4qg&SJ_bi?_aQF5nyDSeZ zIz4SecU{)A17Df4a80vKPvopfKXlKX2ag}xKXlEpfMwst2~Sntb6fGNFT8Z;<754) zbKg4lLF)&{e{~i{+m4SO{Al>Tvdkd{&9t3a3u3PO{N%)54(lzsHyK{P^6uJG#-&UB z!4>=U-ezOtUcTYWPM_RVP^5b|^_Y9l_R-%yxNh0d!u=<M$k1xIRXv5QU&kWhU{p{?IcLBZx$9T;O6nDVDjORX z&7HXIzTY4E=EJ42ZEHvUxbog#U)YuU!h+w{FInT?YKgyoYx2|UEWyGS2itgWPPlP& z@@Mo3C!nopX)n;KncZeo(TrpkM1QiE%b- z)83w0J33Sz9y@UHd&~N~G_7FOiTmHX_vq}W+d5mV{JF00J>9;^#ggc`xrMWLteATG z>mN4UQ~Y@BbaN-o(igTY?9qLT_{EJqzUi{+*NIbluWNbq#vKQ@pQwued_cEYYvGdS zt=4aSVVEGA3Vk*}IQ#H? z$U+5%3|3%BJq3ovNP#gbDC!_q=qT_)0q?*OA$eyo#=$eg);2>O#Vk}h9E+V;#@1UY zUtp6j)fX@cM1H{*G754Y=Y656=L;=VD$Rwy(5k;+=bo`Iv={n9SI-x0g{1C6U&Pe& z1v_Oe2AVOPA(185tG{3>t^PtU$JX<5EJj4EmbRz)t4h;gR)s!`I#=onb*{jQN)HE; ztVRnflcb$nqy?@klGq~hy409**gGUzB%L2dnw795fX_^+2*1qCBq&{&7Jr4+$95S2 zF~j7>i2E=qv}}uqezBFMAVgknD{P4;dNE#F5Q}^yqBh4%%H|Q?>QXd( zpVdCYp21F1#9RS+mCAYHUMefK^5SLz4HhgzW5vQXCm2)0zF9F4bu(So?*3G74xOyB*Y#5I=DI|+E5v6#VOn00B6J{=YKSFnVGrQ#NbLGpCu1U2WAqpTiw+%`|#l)#c?5 zyK(fuER)GtFf@Ny52M%T!7)01BPOyL5t(!Yt^ac@*iS)ksx_HR(0u`#?K!1b{~Kep zq?=4w3$D$|HDRv_(N~&fGEJ%Wmtt*nT$oh&*qe;Nd1l7!^qlleqocy+oKj(fsatZm zYRze;{7Z7q65<@%AC6g6GcDhoX0DHE`M&B|4xe$b)#eCXoNX4yw!Z^UW3b3#$*Rhe zS(u&OGe>5jsb{WPVWC;Y!X{by*_mdO$(&;{Wtq)pQ*L&)3EWKJ%K(1Hj%u6z)mu<9Y5e2{RnaDtoj4)9Y<}qw@25<>vM@=9(<&X0z31 z953%uZY**HYCOJ5W1ijW4LE#^iGL%yP$SGXDUC2E*M_DSXRfuRXB&rdpR3lWQnVs=74R{L<>HU`bAB$#1tRb;MdYJE)Vb!e>Lx>}r2$z3p4h=%Vc$W71!z zEUh1tEq=R|)#?AY6rjSB$Br3jw4|F&#;jaZVX4;-!E?c0Q!i)asyC;bq}n$q>LVxt877a`fhDyN5B>z9&0Mx)Wlc=?w;K;v%1ivXaxbU|WeqA(g-ZJb>LmUdjY zsKNVCwn2MpH!gmO@4$2%1tL#8z+3OkhaW_6dQLum7S=Ev00bo!p1n8aunUAqp~cRZH#E3Go~7MPME4O1 z_Y=_rMD(D10yt)5(DHE_btaKvP(wl}6)R3(Y=I!}*N7vd*dK=w8MY-bO`ZL5C6UCgPzbwlrWmM^6wO=l^W(ejM%lRgZxHE`CcpEX9L|e@{g{vne-mlY@7lIiZtk{dVg;_^}Mhy$G>`BwK)AGm*I2S1VW**f|WV@yExIJc{Iz zP-MvpsC8yb&va9|DcyWE{x}(bWb>j)_*sg?8hSPwKSvOywslT-r&~-WQ<}+w?Jd)# zU00ozy+P7YyjF;00FwSl`tduPU5+QcfX96?JS?`WC*EaoT-ktdm>EH4SQMx(TYfIm4W0hVPm&5Uy(mu%?aagwyNw zcw9<9#qrL#aPLl%-Ic|7j)8BU^(^KcW}n9a86+PhYL(R%aJbHss6dPhcf^}OqC$AG zPrN=)?aWJlqR3liV;;D9aG(qvUP{a+6Z!tCQYAaZ6QXQXjwzcohr%}Huzg@&#%3*Y zKmrB|xiw())KB!gJb}p=t)xvN1J24Zg#)2u=?ljU9a&g_`6d(laxkq=iYd+k3BLt{ z!2-GDxEF9yo-pR)@0fFr1ir>>QgVT?-#9s7xyow8WY_8SJ8T(M9=k&x0#T^Q`6&bi zq!tDX$?(GV)I)W#faC<9V>+`2;N${Koh7VZhr>6;>+^U$ek*GbF!C!iRopS#luQj$ z$N-be2%cdxZOG+X*ok5kj)sE?&~TV<4?)V(er&n{Xw7w@P)TGKrUOhw^aGfT3-=~$ zbeAFm6<;Yv9r-Jd%W0cAg+=}1YlvrTcZdu3mNM}mg}E-37)`v)qkzE$UOUAp$CGg- zNsc5Xat?EUDIN?#hZ>Ae(zbu7WFTRN1(aDG!(2~MSPzlt@LQekG7sp&mCxPtsq2KrP!v&L#mF%LZ+m_k=g`pM$g7{emG|= zY|aXVvgiX2m)j9Q^N~SpimGRUjfx$NRn4XFvM`~hA-vkMfEP${_sAH9P>2~HkiJR`F{N?WFjgrH5sIO$si|Sv)zs8Pm7Sv0UNSr8A73xKpg}jw&hM{a+4=ny<@NK6 zMS_M+W*4auJ*0B{P`Q<{23Av3ljirkkc9$ARVq|fR7{LTo-Nu(FwyFDvQk;S&gy9D zENUjQXg-@!ot?hM=`QuuB1ajV7fq(2GDgo~5v6SzQQBCm*BN564Ez75b&1F=!&d3s zPE6M+HPPpo;qdt#X>5c>VI!Xq`Q26CG?*Hy-Ohm15!$6saaiDvb8=g=nNDkIrXxb< zhlEvK7*v#_L!jw0lVbRA5H_1-o55nK@gh%Jb^PAq^ixI#l+puD72`OCXXmD{a1i$xxgpW8coVDFwey$9v?&d={X zaIk>_4quhiZFR*^5H?>B#1O_)P+qVR6ouAE^b{0*u@p2kpgL+!L9>4M#2E+P-Wf+h zIo27+dhiN_q(5NS!^dS3m8elj<1TWskgGE1g=A)dv@#`1Xbq&a0;9MJ40fflIf z=p0^zZWp%pK{0^(nRslWt z{L+abM#ZQ|1Bx#131H*fp-e!jMj{t<3qSY8>OFLf`rgZdTFBD^*lU@p;!3* z(P0l!v$R3zy@bo#=d*=%#$kinM_K};cCGlaly(DlAp{H;v8}zq`#ox zhM^vRpvYR~7%a^qBt;G{)+kDJW|z>4urAQ4L*zA5R|F;w=(ubPT19M3mubO$Itxo9 z!xb7Swja8P6cMX|g#i61wK4ON`JJ8t;bYt}TWA;F{=RQLuk?dK_Pq1N!%8@OPv>oX zIzXlk_W@EhF#e$sOwYlPJy+TF6e^Skv$Q5mv0-XIBO8n6SpRle0$$EQgA41plsisT zKS)HoiD)koeJCx8!->g;wJ}6EG#Pgsnhfpu9b|}8mIX5;#dd;U2G zAL8IIIQUBr{)&UY7Q)T;8}9kH9Q+*zf6u``aPW^De3*leaPUzM{)vN+aq!O^e4K-S z;ox66_%{y5QQZn}PjK)_4nD=fr#bix2misrXF2#!4nD`h2v1b<#WYxf(WVs`nz;f) zc~)R7s!?EQxe6S^!O%^W=g=7y7z&*NL%UL7=syY^&%uyD%JW1H#*n8xPvYQY4sOW7 zjX1b52RGs1rX1XigPU`33l46{!L2yBH3zrh;Iy&7A)!kAw3#7#1bvoqP@+#K8p|JeY%raPUwLhL>8wIh=zr zoGH&oaBv|97jZDGQ_B0r9E{*-<@sn19>c*U96XkT$8qp@4u*MO!8w70uj1f|96X7G zCv))C96W`Cr*g2BgG)Ks#=%&=q|oEw;4%&_=imwsc5?7E4zA>27YA2yFqT;<`Fc3m z%fZt**vG+s4u)r4!Bfq_Sh}S=hvKBbSk9%uGdXw`2VcX%*K+V|4!(|q=Wy^`4xY!s z^Evo>4qm{)H*oMm4qn8;i#d1+2j9rSH*xUI9DEB0-^#(aaq#UNdlsaWzxHP}1P2Mbp4Uig_i@2BrtGNkq9$y?+{V$lgL`Kuhvy{? zQH6w(Ue*xZCBv_1i0v7G>mSng-Ryc*L(FN0>oraIEX~(7L~x?v+Rc6YhK4!V*!8A{ z*ajE4-qH|URP1_NLu}6iT<>ssz02WwkIQ$DhG?nuDZQ^Dx<`gT&=4(=;k}yh1{?c0 zIzQA%jy_x;NvArnYd`nS0Szn}()F=MaxUWfL=#>%_^F2A_F~sT4bjsw{F#PXMcMVa zhB*z{bx1?BMFQyy4bd7I{*uf0D-F>C`T5rxq9PgohI{8*4bgV_`FEP|lE&{jp8UYQ z|0Bo$!y2N8pI(>$rNskv|I0Vbf90 zfQ3~_fe~TAw%A5U1NR(@nU!~9v}~JucImZjTYGlJa_<;8SmfY1ZMcubYs393K^x{( zqBh)a8)%8`*MTdE!;{Rx4LO{RwBa_^n0p8FQiXmP-xatS2gBH}Ja3^5pQGDS8+Jgn z(h~f&>}stIpIh6O`!w3 zpMwW*a2^K_l=~96XqVhj8#v4j#tA!#Vg04j#e5g&bVO!6P}in1iv$ky00< zId}{QmvHb{4j#wB<2m?B4xYflS8?z}4xYrp@LDVMT+P8#ICv@tTR9j3ugbSJ4z_c! zLmM6+%e2y7Ke)=dcPg~u^QfKN^JyGh$-y{j9D4@gf*lQe2H|pR!!i~Jv?YYs<07RoP^vZZ<2@LYJlHayN=&&j<7+OYn%kb8fTHavzd=AJL%;2SykCJw$? z8}{$t!kn|xb*nafsMZ}?X|E?-cWcAvkl&{bN9Nzp(fNQjd=~nH9K2i`K1cmwZTNik zm0Y(eniN?UUNDe*2U*tlw_nXxOL?>#hGcuAMx`!OwH_yuiVm zxp%g3^t{NyTe)|(ad~a$;2m5UcXIG9?wyyovUk&k+w+tdqTzCV-MbO(hXv~>j%nuP zoVdUCU3qgg1jQM!iU6@0S0C4+8?wK{v>sbBdhD2zf#wG)s0iu<5QCHfT(J>}K_5FzB%0ibdn0-e9{{P@>)p1|4&W#7^*3 zmsFQZr>;iSn~cbyLIlIN8WHxqsfz+p`$H;3u$lwW6uBiC+V6=HQHS?bh+uM8A?mOz zIz-Kn_E#Z-y`D$Z{HQ5PL}wpXA%d}Ah3M?u^AW)Z1xKk8uZswV_5$0iB~)wh6mW>d z_EB-Vy+(}%J_Zhp0k+ua5NQQfx!|BsA<{;TNUK5w?}i$YHd>0*%^I!|HKHh+b$e}+ ziX!+`)QF;N*6p?JREXe|Q6ox@wrJ|s2#<~$kuh3Cb5s<;9i&DyAWB5B>UIQQk_wS7 z+UieIBZ4DJg~$*sqIPOT@M5VDB}a>>zZwx-U@An$Xc5g(BZB`-g-8ieyp)`6zf+9} z&NmgJxlvNoAp#LRcRZpFo1;baikc$0{Zxop1a=gXzr(9)MDQ7^5d9-sie6JAg2PdT z=(T7Oy{_&e@K&l2y&g59ovOYDSEm|LJ(9n^VYb72>Y~9<3Pe-o(XqqsXem0RMg%9T z3elcu5&f)21P`qW(HGGoI;BPg_pS=j@hB1Xx>=0~zF{6wubZPB_y;7Zs~?VK9?^g# zZ*&rJz>n(chgVvK=*Jb&AsX21TU9%POPfbDu-P|JA}UjlYw(Aw5S2yA?15*ds3?Ln zU4`gOl%vRCqgpwFC!R+%*cfFO8QMTy{cz*+h=w+ZvigV5RwF_T0FP++>?nCu@qii; z0tk3S757Jr=yf$BL?5USMJpjIeo{9`gf6HM{S;+`tX!i;gt!MDQRSLw5j~?W8iFQN zh@OeE)?9tm4H6L-JR(=0;^?}FYpt3hglnh}t&NtVr`2Kvu^uW!Pe)n(^Y^MLLZAqb zX#UPJ`(5Lx9R`_8+gM09W7URBW$)59aWH!sSW z@x6KbRfrG}q(<~nbUeB@?^6{bL=&kIeG)Aq^`sx6NNPl%M~g^ZYlve~Bl;pbM32;} z5g`bQNAyT-l*7>@2bQULga|4Xq62qFNzv!(zJ~BC6{63h>}%`XT~rhyc8f=}&K>0p za^1&j9wG2ch3MlbTlTthYD9<{Qz1GRC8DQZRwF{l8IS0xm!m}#RCij$tEmtLqg4HN zJ*1xZBiM~cwCkZZ(N+JhP3oe-I-^4LOq4}?=|#0|1YveOqL*Hb(l+vX#|KpH2r+s* zqSrg#A6?O2@A#k!5d!?wh#rg*(JsFV5uyWus8klUukVVo)?PpKvkDPH3sr~?{SX~R z?;TQ)w1`XO5xsXP%8_L_LQ`(xFJ5Xi|RdVg$`GW$Sp^>BnJP#)2N-chQ42ZpJYQG}4H z5Dkk`89nf`+Uke+Qx&40>yg zqr%^#M78|*J1SHN*X2>+?@^*^m#7y0i1y`CwM%Tlx=0kfYL}=UkPs}aMkUR&qd=85 z;4+m2K&&xP*<>l1HlS;?R1G|+p0p!WnMXD7;O)_(D(J5kCx~?BQ5E!;)SD;@Sn#A; z4j@okh3ZL3phSUcc+E%^uMlU=qZ(c_BH99$>uf4i2-D_KmFuQPi)!9Nbpa9O&7+#P zP|^jWDB$wrYE%dk=TR+}t!`1Edg@Pg6Gei>23{wHDpgg_f(>{9uPmN~<;`G$aU5j8 z#PA?a41o{`Iczy$2`>=9KoSx{5@jHZd9f|O^Sib5y|;U+YTBdx@pN=bt@>{LzUAKg z-Tk{b9Kb?>9uw->oBxKB3TF#gD9~dyE`=rN&AEdGis3^)wLLV+F=>hAk4=KK}T60uOA$Ao(J<{xrUIEutVfgTg;#NvyH zlOOCE!AT}Ssh)2KJvP+WI9uT$6c6>axVGAL_#0ngrNTKX77Fy3QhoaJFLQ+f$FNu^ z&|^aFI{b}xRw|t0Vxd5f3HAN0n-PgKFgp%`u~4ALggUYKbX-4M{+WZq z(L)~UpW{N^_@Ce6S{$5QWT8NhX)AF$2L~TnD1SO9#%MyEV#2ve7RsMuiUIZK8b9*F zu}c=}&$Y$4qX}`^8>co|D1X{JhE(F5J`R1dQ2v~L3@C904QEDKD1QYl29&sjiX*2i zl)r=;1M0^A{K`AnI*1diEEMQ5%ayo600&-KD1U=M45`E&A~-M0LisyHVnCf(q&Fu9 zEe?*`vQVJMRPe;&DXu!>v@Q>IDsFW?v3QE>x8ty{02ROAPB^J>R+xt(@um7H2Zf`? zfGP%F^ry>!;uOS5WdSO_f-h`gizp5{^H48riJgNlaUDpUljfmbir;~JsgIQk$E*dY zzSvTo>Sm#EN}Go|)g2!y%R=Fhw*Zxm5A`$)g)`y;)YCDcMjtWX$wJ|XISU1POsEr! zFI>(-;eJ$Pn1zr?~`+2BSG_+?dhkWW177DQe1gJ}5+v){QL4+3Ip5#;16v`m0Sg6sYz0qcSSZ9rV4+Sdp3208y8FJ3cd$?htH45m9uw-s z;)}TVEl?0q8CWRLV?u4}KHADcA*cfj1$s=V6N^9Pd^=)70BWMzc*Xbar#Pt)Qi6v% z6<;dCRcAz`;Gsy|>fF-%a1U!M1hinGK#y%J!ZluqhrvRfSR~76ywim75hs7!w~7 z3)rB$K-Hs)t8UnHB54YRW$61 ztyhX#Jw%RrI7CK-hhbqmO+%h=q;a#O;eMZrv$JvYI!H zNgt`he?eVNm{JHI#6oox^0JcjVuJH9VL64!Lo7_UY?RD|u9oW;Yce4i2)^d7>kIo> zLm`5Zj|tZWI!wK8S}QBYv|TY3$x&?tA%&Xfy8lm>G}$t2qu{_8za#Kr@evit$A<^H zXu6WfC(5dmbS$Y*(BzU-mWrwcYa~M$CuK)h^du)0cqbKA*QQi!mKW*WAtE6-6Dv~x z@}R?{eAN`r-D5^$DT5jnc5I`c;y)#5)#ByUrzQES)p!TzFHq7yCv~^pqIt})- zheCKGb{xxlTT#y^!QZXBLsA(pb8*3Ui@*r$cd2dKjLD)c6mb79_mvuu@ zVzOl`-={EJ*R64Y6{y>On5XsVK zh<@pCs0vFIf-tMRIu!7M5YZ4=6QY&8Tzi!?k{LnXPiKa`=02(k-MVyc&?erlXb$Z! z)Xkgs=Wb&22Ejdjd1&6eKX+4%ycr118{BoW)Zh&fM16+Hn_SR>>zb^VZLM5PNRxJ2 znzUa*H)CS}R#T_`AVfHXG-ZVw3}D>;MZq%4j$#;AV_l2UhIRdDh|q|=$_l;Rb|foV zNGdv0vc)#G{>Un<%wJNnsfP&%ej-Fr1cqe=?UfZ19$l|A;MH@DYx$`V84<9SmGKJ7 zCZBZl%1Rq_n`h8y@FznAMpRu^V9%&dLq>i5E7SI!A#x((FDvI3+c7K^C90q#XY#6p zy9;rDWXyp?5Bt4h&(zfOXG4TR$YBUm_Pp?(C@^;HR%upt&*mBWpKH`iPcP~etCG@S=x@_Hh&F9(H1tFY$anZVf9@)BN(&3}>w}sdT zaiV>ObVe#)WTqxC7%WJ(qeqVDHw}h&dkzXR(5r7)%@L&97lht@6QVY$Z_2B=ZP18x z%>Z_6-Fr3N2ED{wo;P2T8VqfyKQE}kYJhOsK0}!DO6nWz!kKV|L#``SXB_kZjItev z&nH5JNBnOHZ+I2_61S5fR&%#;;M6G9~+n!R+L{05W?TLi_y$~ZJpgt?6Ys7qmwKCVZ zl3{%nMEYli+#sdWY1+mP#vG$X+K8`+kA_$bR}HYj3=~ykO0`1$I@etZsjXNDh{Ad# zL^fP~z{+;Mni?1!8CcfLb$<*QSbgd>mP5aI<~-JE;Ti^CE;_3H#WUxHn89^g!>RCo zM?J<{_l+N88RO0eFh1_B?t>nK@n~pnJ{*z*xLCqx2yeMTN@cRkYCA3qb3_T5FQ^|5 z5e4^Ju%cWZjCN&1*Hzg;!%oNcs`N^h5H4ciYI^U@ogJOl zbVZgdB^jd|gpPRVTuk?YcdcRz4=w=l<#U_bcdd#nJeh%!(8BYc5QE^B5uYIn&t;+0 zTD(GGZe>$Cy!RZoYJuBMSeZ6>6J&C1-+SpYw5V67haSD-D4Q*~bH$g4I+I85I2xHP z*;F<(Tk0|1y7%B|mN71PVHtxS$v6`+H}|2C@_<`pz|itKq9a4$`M5+kCA4TnK!){` zaj^|6-UeAu6m>a2IxsSt9!?fzrJR(FFz%TM?n@|CFSCYDo;29Z!c996&h|V%=#iN< z9FbY|7;oLX?^2dAuJvIVgC5B^lMWvkhE0*-?jWBb9T>)4%~-;^VHp;Cr6jCtj0=uf zfj2p}JCm!Hm1VBnT=5EZt)HP+|Ax&_+`;6F3xBh9@72GF&d^k*0e^FVb9A`yiD!Hu z+RZLm2!bMVAxygtpurNE_-K zJ8TaCZUh5s$7@?IR8#59NQ&)!#hJO>T%U8)0O8!vjc}(Ka3`5B4YC~c7?xjtn?7{% z`u#F(NV2+gx`>h6tv&$N_CYPs8*tiLI+_BYH=!>W9Xp(S z;>GCdKCt|@y!*g|+`%YZgvc@mJ(6)$r3$O=xNQ*(E1rMvpPU+Ax#}JT6}H%iyB{Ih zlqcCRGk>rm%lg}2!9+*>LiE@t*g}L0D}4prLiE@tBJ*;1Abe7(9^4)6fQ*d zp=j^YE;(khBx!oG z^}q$LJ}~sCkq%tA<0>^N>Xo&v`>x>*=i+Wyu$d0#im#!Eb0d0W;l2NQjJpqfcAC`> z7tykeL60tL5naK0jE6q;$7F>Z1O_xZAnL62rU5I#9mkMY<-dzsZ3cdD_BL62mdO@+@T*JIp$;9VUoW875C zG6p@8ai*bC{SY@>iffU1#t+4qEp5QmLnlviQJQcEGs_tCNR6X9H1$lqb?-HQ&6*k) zKC_HLk7S%lhcC_7W88h<-Ct!H<92D5G3e2Z8|c-JEwpo!thmY=jAuNT33?>sMyBG& z7TQf#W89l9Fg9Z_UVay>`@n--j5A!)%`yf(l5wVi4$0U;d!E%8H-dxlY}M5HNXFTS z^I7!@*VsZkSDkSExWG8NI%ONE$72ia6RgI#>s(+w5v_3p(|}_O?JCO{7pn`5)o8|z z<+02%#x3pwV>t%n<&RFs7TUQp^|&%#U`)@{hjx9k5u1vZC|q2WINVP!Fs4!BA{Z~f z&o#EtUSv(3u4P<|HgyBbLt_i=YgxvFwT#zBGmaR!*E99jedC{E84n4JL62lS+&~Xx z=;RaJGRCmS_)Wn|+!N8u7{d|AP3mbpw$QGz8fOH?phs#Pb0)(W1VF@Dli^fXxAedXB+C!fA|e7TE@{XGir;=5{!?tdAzHZ@$tyQ)yN#k*j%5(GTvRw*okHwaU^01jkyl} zo?6Dy9r{Mb$76GS7OU~zTE}#^(CC(c->Z#?hn2MmAE6&Gm7;%>A{DqkEZ| zMw-RBKF(#1d5qs&bs*6$GtGl#c`4GTwnBPG1JJ{X})a- zYwCj{ywD!q*~>Pt?ld;n$IbfOBr=}si=OpqaQ0SVO?|V-c%fa1GY zzp<9_gVBr|8JN%Yar4!;ij3#_qUWm{TK<`D<65U#B>8AO%dstK7R?GOF zXj3=RI?eTQ>rRr$c&;yc-6_*Z>onKLIgorU<7fvG6`rrIub%6(SyRikjO|EMM{R_u z%Xq%+0hY1iF}}O%xgLmQ9JNOv?4*`8qA>zyZAsb!_ zf+QEHsnkF^HJX%`5mVxlC0R#p&K{d@MS6Qf1mgxe zwsU>lO!cJ5c&;ycraI~vV_5Ok8HU)e)k~wB*ve!hab;c|d|WT6Ojvy`d1Bn_)#vlQ z*euHl%(5+%J6n;$&heE6Nk$?L$tR0%>GV)7X65+u1hhxX5_E?d>r`GPmoo>t?B}s55&sd$JzpjsN}MX;v9qzyux2EQJ|%6x3m`Q00X< zuz9(lB&J3ZQen9V{G#I1hMkkB2tuX(7BQh#EW=b^*|GQ6`e+f|gWnYzIyMWYJPF_C zxu|VrH6gu;8qY^hl$IMXHx+yuSIw|<1k-|uiDiYV3aK1ha6C8)EbQFtj3?RKJ>$6{ zfno##SbnTMKQvr4c-Zm&SwY|pQfhRR#tMrYS7?}tcMujPf)5Q4mc4HhWa^jAsLdv9 zs~48Ro1>w^taXPVSpwmb9myU@BWN-`D3T08*mOOdzwy;%2(hK_etuLf7|)*z_(z&`X_C!qf_id%~)i*AvsKR-9Pw)ewEA zG+R>3j#joEtAby(F<*p>U79eo>$>=2E_~kIjCkn6fsV!^ID*o0@cP|CR6iexyBGVO zS|EBab^z2du1#9T!RvR|JAETwE_APe=3g!ppmq25_Tnm_gFAbBdwavK+IbrTg)Y(R z>0)w9QViR>duH`ft70Sg^9_d%;#^PH4SSAgWhpUbmIVXSvGJkn|D%)bI^4&=!+@Z} zfbGmRNF*$L+Wiaw@69aug_i5cuXhWs zR+f5>sMeHf_4fAOB!IKhy^{e&@#v=U$}5sGir|NkGbq4&4jw@P?mP@?LMhuf@VH!; z_gw;R7jTP)QPk<2wFug^pOSz&8Gde|*`$o9>II!fq$t}6K~YckHM@~) zpP%fO5LWN;SUuqN0nT=`lIm$t1Ap-7A(&>hrv;Mcd2G(;^8)rc14*lrGz~*fmK`%` zSah{2u#ty;wva|}bR35TkHdqW^yj4Fa3D&E&>s*X({UhcQ-$$(ROB%ji$_hWn|VFB zl6gYl(Jh-v{@Ss?@U<@c`Vim`3BddvWFeqo&C7=c(A8x-Zu1gWJs%ffg^SlhgcY0# zXWEkj>RDCOx)-s9;D%+{M+MyOvYqntED~6}Y>@SS9~XezixaYy)aZ6KQPx%aHD|1n z7cU!R;XWb2brm&dqLQz17hbvY5QTb7y8-WAc!CQf@-%~t_7Qa2i0rG#lh&9VKlC2{WdGXf~+qNJ;J z!*&XqUP?Ms^)YYbF#n(i^R`e-vAV;ePwjr@&sd8-BVd9q%GqsI97~cXRSOMKJ=BTw zdS1(-{-J;hdN^u5{U@G3%k6>G9&SZdNS#ClFk)VUXNhgF{y zG0(k-9#&;BS1Cp%S&{0&J+a{?UbBHZd(qhcBs zBJR~K?$4HQ*~Vi2v49D>h$) zxMz7TxrC}Dws0`Qdlx>!ZRq_|5AhTzwWHq^vsqvQsjYimr|kLYfF6eZ>9K zObFTH{cd62w-G`Hz4xmKAsfBl?M(U~()8o$W>3#MNT(0k<*<`O@#Ee z6dZF)kYulrq!~$Coq}Wb1!-1qq%cigzrh*pdR%O-qhEkv{6#?Sq~jV7Kow zcDvpC-AV}gi1!;dyv_R!8$RUyh7Ake?{BvdI)Si*kOz>jr<=|uq?4-Aq~g~Fg!GaN z@#rFCTi1BH=jGEKO-)Tr8}Sa~o?8`T;<6sam`GGCeaD33n0BteKV)pyuaxb?@rr8A zUe;4K9Ib$VrINaX9iJH!Jy#u?8tO@XmyCPTy@oInrU~izT$5|?<`78#-N}R!4mR19Q0)xK}_N%JF zna~@9?m2jbn(rg^IkkpyYHbZT6~YZx9o4g08rWz5(Ic)+u1g6v@uj?Wj7oW1eJR_P zma?<6vonygM=9F^gWYtN!pFx3f;t6!)zbLyHBB?XKM-w&V9ta!gj=RLNecBPX*>aYL3g>;htz~jHXq;2GM$ICCj{4(0WE;_?|1LjtL)k1nN zlk+=wIhC6ZkCu-PkIWq0lihdwb=S^bzyI(JH}1Sv-#a>%FYVvG=VtSo!-sb~-x7E( zOq-qJ|4Uj)FZowsW`=G~5AVJHw+BpMzemvbu2yK_z0~g&)NGF1Pc6L!gnh4o;{&@N|FQ2Y6t5g@EIRv3* z)~GH*O9(>EBvD<2))0i6$(<{!c4!Lh&{hXwgKGzI<_^W!8t%7@ildc_{=W%F%IhjR zE64=DLxO+3-UGG!dUBdJjU7mYLb>Xwf#EzFRJ*Jd3aUjR2q9navJU@#fsCiWN63@3 z#eR~I=jiVr(&yjM=U>q0kLmMA^!Zox`2+g=K7D?ZKEFYqU#HK%rqBOFpI@WTZ_y`; z4n+DkA!I!v7+%o#NR0HaJo8UrV_2$=-aWPHDZ_ix$T_i()*{!Wj zUa}?+Dp;~WvQ{Kp1GFX-KTEX@eM+_Z3x+i^tIk^2zU*nfd3oi zaNK*3qI1yujgszv%eHHYX5dq0o@^#vq}p>0e!B(tFuC}CWYT=riA|z`8Tx$R~=!;edD^j#p zVA05TRJ6gQEK@bd8<49FSoG42&b*zTR`b4KSlShA7OCVafVD%(uDqSjtG45#HIf7E zY!{-#w5^hz)NHD0O{0wtkuo8h{cfw>ud9-+o(oeFLjKt+Z78X~^nRnH`oB@te(b$R zN%h~Or25~Yr26kWnD-dy`DwbCH0VY6@8L}S-*AUM&Kla{MF8_JEyxl|@Mn8_7}bAuyP)7CpTWd3txWxde; za7|a8Sxwica;bq_TFDKia%nl29>~dQs_NRr&dYkfw6dAHBV5(?Gpp)4s%kbTr*hd; zZg?~|TyQn*_|v;@KDM%%Iu@>J$C=gC&D6ncE>*}W>D+K3ml||c&2IY6vGpsfsvNFr z=l_JN`BY9RX zRY%lZHlItWIXR!pXLE9%s`|}cYuD|2&&rnHTfOXY?KaUH6ot~s-su21FEps}N zyMK1i&swfpyRxPADp4uEvwO~&)r;*dWYg#y6}&EBcGEp~|9V4{JLY~RdDyXv9J-es zdLM(vO&EH=`tRFrUyHdwWMeDF-Rlf@czz5+@0sIGWQLHAul%g-_F(iaHxW9K*%S=D zJI0UfJK8gx9KaB~^M;*!u04`Cc>QiV7JuOPe|+2MQH;gcr*heBPEvD;hbD}& zJ5h09?qAnz8uf?oucRjMGf)Ra4Le%{Z+709Rj+kiJ9-1nx*qGJ-yO=VysN&rM!B{? zxeaGlIoDM$R^E8=vEx5k@is{D73;*LXXlzgt5*eDJ(qUf)}_B&bz7Z+&!W?XUMY(^ zX}C(G>(Mmdo*TFRedC8PHH*C={kH00ebM$8!CvRho8sTsd5d6}OU9Be7QdRYko3r< z&6p(acleqReS%gYa35rL|%TZiL4`TvRpxR5!R>9M-mQQGQ4EGkNYC%J=8Eoa8F$mn5m%t= zExl*6zjeqms=M6#H*fFm>h9|6cML=Cr(iuLLs8v*Mm^YZv~^1jRI+DtGA~W`mvAcV zSYDbuX4%q}se$Am{hQ4s%}RdrwjRZH5~k!#?ARQUbUS3o>4q%nJ+8<-JI52Y>Qv0G z?GVqNwH>w8?;5UOQWSUh#}+TKFOXTqpB3E9$@*4AeOy)9ebysf9ls5oZD*-^1ot4FdEQ<7d$d)}CM{bogSq|Mv5 zcXxI5^;hhCiq{;5>4LH=ZgfOwjA?W)DK$Fev<$;ZmdX`5iH%zoQ?(!>Yr9uoBvP@Z z^O8~v))Wc1DDI}K)Kvcezea}s5ItLb0yX=x^L|SpFjMKb2B1AjHpTXCcQ*~z z=xlo;F{#c59`kXyO+x6uk2j5{>Ba>t{v$Q^qqJZbgS!E>i;&*IBV#+$!{K4t|OE2A19=~b#p&O>BX5^ha3x(N3k~FlVm5|=^0@ua3EnKA0 z+Zj-ru+-H|$iS;0R69hqYzaFtXrHL5i9Gt?-~R2?_dox}ZEMaxzNNVJvA&<(ciH*3 z{_2y`>wo^$Z=d}2pWm@?_ooM+`>&Bdy!;*7n!jDwKfbZ8_4^n6<>bbMa+4 z>*==F-MP7U@@K#JljbKrf9&tB{QEl=4?gzf=*UY~Z+~{1^3vzNcKCDmJpR7_`;)g$ zjHfPm`u7vN9v!>$Z6Eti=Wnj~Mf2I4u(E2)6DoEdV*>>JgEl&EX-ZK|s56eDPWc3^ zw|azZT~%**1V(IXf^2{6sNp1(GQpGzr!-E z_pxbMj$C#u-KSw`m!YXM0TLF8JxW2z`{|jtrRrO7r9Be4ihP0p&X!g4m@FN0EU9cu zvZEPQ`Kw(SBr+V+=L3b^J`M;L3LO0dU8?WhMRcErC0Kc)V3Y$LU>vf%`V$Fg=nGF4eOidxzK4rp{SU(!`8U<%RcTUpoCvg7Ye zqO0G``(uVlO%c#hGAP|rb!j$u9WbGl1iS!n1iVVf@Cn1QO~Y})d|grXeFCl9THq^Kl8`+t$+o6I^#PI3J|OFaA+-N~ zTGDk@Nffb9EpR66htowZ@Pyz+^-lylt$ki_PFk^Ky1N#OYFV|Upp4V+0wP85zk@ZZ zq*6il2^hU;CQgY56&-a^Gi_Dw*AztSZ~_;EcF(0us=-TaSJEtO(xHDK;iRU>M%l3p zyAS}=yLD!~ZX$3x}PRmWD#vNdZ4MFw)0B-vy>T83i;D)}^9E19~=*8?ArzI7}$usk+g0nnb-9C;!k z$$CO9JC;_h!^j(?n3~b0a{rX0ngK^RJ?uM2kJZl?sANo;Wv`hC-ouWjNsoH^Ns%$g zlw-OfPx>$2bY{OK1!jc=rfK%;X}ZT)w# zlq23%`y9wFoSX8L@MS|8wubvlrf&CJ_LSL=!MsmIOUmr@cJsgAW*ZN?tR4xX^LXfnQFPgLg_LaSmm()`h z-J?pGaSWU4CR1meL`~A(x=D4(Dyp@K1@S!g)y`!7yeP1FftHi8H59bW$)Fc5SW&Yz zyT;P!*D?@Z8b`IzM*5Z#Ol@iskE(5{V0VAw(l?hNM@WuY zn#tKw$a6{-tSInC5~;Fe4F*}PIG%Xa1LTY5l&J@jdlsf7U2$b&>!oKAO6MxI_@P^x ztETkwJ^*&SSvTT%?MxC;klqsd(wA6w&;|oo#Oy7Ic&^`eJ5z8nU z0Xwul^aVTK0IaQAnxrSV@f~EdRm+isP5?f)OL==jvZ`$*nisp2NB<>I0*vi)$qf2x zumL7dOiP=R9F=Q5DS#nQ+FF6DVYXe<7-0)I&Jz0yLUa5dV>h}M;1gg)$C3&K-Izug z(1I2W4k1cFa^P#LJtTNQO4HL>5)MdvuH^QKcK7F z`5MF1w6<#XGZPG0gqaGuoG3)ox-3Z&lLQ%w4!*A1wxnytpu|EApWvPU^2K7mvCD=L zlnS_K{~K8j+7tASg4aQfhrs?@9~mVdA`0K?vRo*#-q}mX=s|htvOFP`nYUCRT~^R_ zVqR0$x~xqz?>y_+DvL@rb%!~UEUR`PD00j{wI#_DL5?vWD4NC0AW*{ebU&?c{fvUB z6;%RXV`v@(A8{3(>N}lI$dV~4fw!ePFIDy>Jg0B{etcp(%)|!lW><x63OV8M;iWc;;!9I9dQB7s<4@ac94Tcq4ljr zi-T7mX}&N+lNuV6$+SpMrxOUO;A6RE&V7fL&F~561R!y#qB~l`lx*9aup~RkGOq!W ztL+zx8^&d{%?<|Xs0H+`LhDHI9;Rl-c_m2>asfIpByLvOAJLX7wkC6U{&iJQP!ej<_~pvw?pT#_Fp@{5 zs)|oPt4hXePq_*y_nsLyuE7J68CiynAMDi^D>&~V_c+hzO> zkTDaIHw;I$7y@SEDt54N1Hr)kSia&o)p7t2!@r>onrRE^z}ud+(+MSS1%=u7b?iH2 zFLkVHlIWVTFwq7+J+hn^N==B9onR?Qip(ONVW}^J8goiZE z+HSHi4tM8PFp@fENrC^SEmrk7zdB_GMMM~3(\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +add address=github.io comment=github.io list=Trusted-VPN +add address=vk.com comment=VK list=Trusted-VPN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack passthrough=no +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260514/20260514180002-Diff-Config.rsc b/MikroMaster/history/20260514/20260514180002-Diff-Config.rsc new file mode 100644 index 0000000..6d3eb3a --- /dev/null +++ b/MikroMaster/history/20260514/20260514180002-Diff-Config.rsc @@ -0,0 +1,2 @@ +940d939 +< add address=vk.com comment=VK list=Trusted-VPN -- 2.52.0