From 170b8d62d898bb3f07edad77586c92ca51dd6c64 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 29 Jun 2026 08:40:07 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 29 08:40:07. --- .../20260629/20260629082005-Config.rsc | 3690 +++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 35 + .../20260629/20260629084001-Binary.backup | Bin 0 -> 369594 bytes MikroNUC/20260629/20260629084001-Config.rsc | 4916 +++++++++++++++++ .../20260629/20260629084001-Diff-Config.rsc | 70 + 5 files changed, 8711 insertions(+) create mode 100644 MikroMaster/20260629/20260629082005-Config.rsc create mode 100644 MikroMaster/tmp/Diff-Config.rsc create mode 100644 MikroNUC/20260629/20260629084001-Binary.backup create mode 100644 MikroNUC/20260629/20260629084001-Config.rsc create mode 100644 MikroNUC/history/20260629/20260629084001-Diff-Config.rsc diff --git a/MikroMaster/20260629/20260629082005-Config.rsc b/MikroMaster/20260629/20260629082005-Config.rsc new file mode 100644 index 0000000..ad06f2d --- /dev/null +++ b/MikroMaster/20260629/20260629082005-Config.rsc @@ -0,0 +1,3690 @@ +# 2026-06-29 08:20:08 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \ + wireless-protocol=802.11 +# managed by CAPsMAN +set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \ + wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/720/6faffeff\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 02:10:04 29.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc new file mode 100644 index 0000000..12be446 --- /dev/null +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -0,0 +1,35 @@ +2617c2617 +< default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ +--- +> default-route-tables=main:2 dhcp-options=clientid_duid,clientid \ +3270a3271,3272 +> add action=accept chain=input disabled=yes dst-port=18880 in-interface=\ +> Bridge-LAN protocol=tcp src-address=10.30.30.0/24 +3365c3367 +< VPN_No_FastTrack routing-mark=To-VPN +--- +> VPN_No_FastTrack routing-mark=*401 +3367c3369 +< out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ +--- +> out-interface=WG protocol=tcp routing-mark=main tcp-flags=syn tcp-mss=\ +3369,3370c3371,3372 +< add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ +< 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +--- +> add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ +> dst-address=10.8.0.0/24 new-routing-mark=*401 src-address=10.30.30.0/24 +3371a3374,3379 +> add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ +> fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ +> to-addresses=10.30.30.33 to-ports=443 +> add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ +> dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ +> 10.30.30.33 to-ports=80 +3390,3395d3397 +< add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ +< fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ +< to-addresses=10.30.30.33 to-ports=443 +< add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ +< dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ +< 10.30.30.33 to-ports=80 diff --git a/MikroNUC/20260629/20260629084001-Binary.backup b/MikroNUC/20260629/20260629084001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..73d2200822a2deb260592c38df8fa9d2e3227518 GIT binary patch literal 369594 zcmeEv2UrtJ*Z*u1AfZSXP{hy#OJLIz6{RCelV%rFArc5C0Yp&{8+Poy_uf0UYwrzv z?;U$r_&;Z}0aU!#_j~U9zW4io=F#1gWy+Z|Gw1x~oXJk{in(jI%{M{j2q7)sKS!a} zsWh25LI^_$F_7UytwEdApv`K~UIZP@!4P6#jGq&bCsU#K&(SKK$>IaZdqrhsr7cOv zAcO)?G>3}N5)7H6Xbue_IzotoA%vNs3d|f;APiM7kO``wS5{V5GEjv(vOyK@v*R_Yl}w>)Ll&Mv7EVD3eI@BeHE59bHjp?%$P`1UluToW zA+(8nKHe0e3>3{tLl{QzgdvO(ML`(D(h^||)B-N12y>^XHFShE4vgl2h~x;PL-~)X zh=DoL5Cf}ALk#3hLktra8lpGD5Tel#+tg6yBWe}-wMJzWs0^bZjIQyZAxnhOzf@LM zR#j=L(5ET1Y#W5R+sOoSiI^|svxEY%l*QvoL^#6SZIyU)A-_3a-khyy&Q~@U@ffu} z1*gdrM2RtSbb1$s?I*as?NppS6*1Q$Qx3)*|{i3~VSuXgES>1VU&eLTC&^s01OTKnP1i2vZ@1dLkIs2-6^hvJgUMsDkKg=<_}Z zp?(Nq{SiWiF!w~BLcI~9Kcpg*hY+1_Nsg_)kS!ld8GsO> zbOyqcLFAXg2r&wWAjB|HqN-_RgOEE6W_Nop-^iH6u=wzxkg&$hy?m1+LmLl6$lcP* zH#j~rG$JfID5UYIpClapeZnHBff%bbd#<#4&eB1VK+i=OrY-ue=jb^KeHu%Wn@Wzl zCsfe1)+n0eU0K0!W>!|v%^3{JGb$qbUY z9I|-qIp`ZA-Ih%?Mja@=KN)qVQZ32(?-BQ(9dU*(C3J;>B$0zuDK}bEu(&kRfWe)H zqB(#Xq&kH*$7pW9PXNzl8InwuQX*5xl&OFX!0>^Ugb!Fw50VC}+K4pK6ayL{hA3$j z4HJ_<10E=v138UK1yTTjAha5h0#JcGO_t>^Q>zr2`V>u;UZu&@0h)PJSy>rDR{6HF zvNDLI-w~G2@Y#zHiXd5mCSj<84*38D1yB%jx5IlYm0rFfQITOWi7BB;k)e&NaEg_o zPL(`Go~@DxeOC-rSyhZJ-Wz9E6$6T*sua4hlosC=0DM9LmcWOFmv5Wcgv6Mj=&%}D z(=Nkdx&Bn_E`Bn|VHSIq|o8rsk=pu00G z7*Gnm1lR(!h9Trm(<&r#er996B35_*mFW&exf6<%f~xaC`L*Vu{5%iL<684jf1U?;|2_`| zrX{U9k8v3<$;t$k1FAz#ss*^qN!1KpX^mjTK-vO8>!2tY6auIlO*X785iDO38>%M- zV2O}BU6rX8M$43G zGL@>-Y^?;eATv#(W6IJbnW+kSGiH`rA<-$AT7^z8(dwD{GzHVJlxM0knHsHJp=Ihd zOi5OjI*<5crXrWAQ|Q5?pzDedCPxVLHt1~31|eby+arWIAOt!M6d2}=5LVBi;koPqBi;6@` zJz;H=4qs>p!KzB0K`LcfUBT*GgAo0$H?fLi1j16w4OUsylhy{m%_-teL#M5g!AQR$ zttZ?G=g#?oRVKr<+H?@pAFKx$00wzCM~J?~f>0IoxNun782)aB5WUA^guuWcWP`xK z*n)vUPH=Gnt`5VcK0*w0SA^)!&ImPt)PV?{fYc`;;VB|NqA)>rM-XDPJPJ>25IP2T zCJa$So~Dqz8C>F_Lh{qT1|3#|4y{3l)S!cF(6NMJlVnEMcotQIj;ukqsX_bJpnYo4 zUNvaX8gw1fSJf+9k*(0@Whr#M$(fu;x|~3HbR%h)Sw;Z#s~yD10_p&~SficksFppLw#2pda9 z*aRvVTi$b57Y+?(NCEXSe$`;#hgebmL1E*k;C_}+-RSXvxiJW0TjUWpg313FRWi%Br%*FvV9xf~l zFf6bwISS`nF>9Nbp8JQ!lnN6 zgiHI+3|O07l~$ov=yXQm_W0XJF72NuT-*5=x7d;*x6AZMRVL>_1q9HbcEc^Ve^E)UZ0nM*C)Lu;2blA5=?;t ze=>#eSPrgkOX3m2{*K?sWzg1XAT-hbV->y+#BM z2oIYbJgIWC!7`q42-fo2EFJWc!9QsDfb$6|fe$#StdL;~3FM~K{L%ZV(ZGDkg|n5bW3iFP%w_o{baXKbrJ^d>!xh(S0Mff;vjTe#DeDs2X+V(@2V z>l9jJ^lLO(D+tF(Lz=PVbMSc>10oRkFa}CaQXqXa#|EJ#249{lLLh+Z!3(?*;VI}B zN@IlRyL}j_NmVC-8QCK7puDzjE@fPcc*S{pZq6KGZ3K)j|V zH*F;O9;3U@zM1Y)ao(lL*mjFPnmroe+y7?6DdjHeC713QxLIL7^tfk(wx;cL+xK=Z z4ap_AA$;s(e?c}7BP7Nw$R;qiJ|P=oqC=n#ww6`68)TC>&3a;v!{@;fB|{hTMqirM zF4Uv-+IyCJj!ZlC*8axxF$QjWcW?NlWt%5XEl(~Oz3Z}j-)OVB3kox_<-V%0->iSrY0+gS|uNdt6W>X8*__t|EVK(44 zWZPWsH&`F!XqUe@A!1PDWYuzDh>-ydrAQ@2wCJxmg0N#1N8bz|Q{c#?nj?x&tCS$B zG^7r)!C%|TPiCB7aIDgLo!S(urxlH&OfiT^JNEJYo~hmkMBPIdcFS5-2ppM3S4S~n zYWPbe662&a27%!YF<290jDnaj#B?NFwcyRSadz=^2)KM>!?oV+xr{GIA6X-Wj4S;t ztwyO*6ABPMH_7P*_nRo1Qx`#`1ZFkt263s209bg2lO>rib1~`LZsxrV6OqwF_{8GH&E72ChkPvpo9n^LzJ z7l>NGGlm!wtnt|GMsB!oc|;j=tcfsa zg}X^=wnC=|$yOJsOOt4;OiKtUS-6LwXiljGI9az7S16k_HP}`Qgtl22+^vMVChFN@ zf!t~SS=mz9=}67WmV(aH<>~Z_4A>_DA3yRAj$Mdzzz4j$#vv0+q>1K`x|?*zJA-(^ zClBVv-6||wtI1OMM{9I4O|GLs+harw$T(juQ8cF+LiA6SK|LWXN9^2y%@f9YJjuG@ z?rGSB>TVH}(N-1~-Bi>uC=N!fIie!Wuye||U9*=)=dbVGs|T6exSIi5W2C_r7-_Jd zMjGsbk*>KD0%XJ?%Y#UjkzR#Cde};ez&a5dSHO}H0~nAHgzgO?GKiirusZM+I>VR^ z0&3r6g9y_1*(g=nFtWBEvQcWu29bF~ZIqv7qkfx>LKxesY}B7+qt%j)R+WwRvuq}{ zWHYJCX2LN@@`tvWewz)Zo1s~zKg(hEvm9p7s|3n{!45;hIM`rF7->jkq#+%Q)P@Mr zSpzdvM*1@r+|x+Q{eyeL(2*&$82}%kTyH3Z#AFHN1`Zf%(_ok)Lquu<`5bP&Ng6=V zGZMH#QVEPblAmj28u;@bGCT#k=PF49km>{D6ComGLncQmJ@6CF8I8~!Dx#r~fTRRd z6dMqk5FcTVLSh2qH5xs$Q`jH^>NGRd24PGz(18C4GzMWjGdR6Gfb&TG*f#@ zQUcoww}3C^_B3b}+Xk-#U#a#)HOx+7xSNv|hmVVKE>3(pJ6ZAID~H47i}~Wt|8jXb zxQ(e9!3_m7HEBA4hCHZJL~ChRx%}43{XKiFN&8H1;F)Op4vGy3Ri&yz6k0tqGE-)cVv_=Lb94RVs#KLs zq1F4zG#T|kgI1-AP-~Yju!(5QuLJLywF!xBI6s9;b)sV?_4C{@X~ zN)>~>>4C5}olvJ3s8cs12L=Y9{*WL)nO5(YrN~IZtF-KTDqcigjTccS8?>wqy~WMs zlHl;QbF+IM?lksbTinW&(PT)QA@8j)%)|uYl5h2_BW`cdvzEpRK`?9=+zB3A*xP(B z9ySwqGpJ&xsvO@62~;yKV6)i<%?zrU%dYYDKfyu~=25fZmJQv?<9Lf+;kVB#51Opc@u@qe?<}{8{mM7DnNPobesv#9v8keIYNx?znO!|O?RLfNe%LwVPS&nmn_XY9cY`l23AO3SS(@#9?)1E!5x0GM zzM01T5J~SbqAX=Y^Fh1jE^8aruhq%e6m?GbIqigFXI=HUpK-#W-sql3D~_*skUJgh z(s&kU*Q@eRXDx!umTwN?T(&HG{$aqm?V~!j-dO)(r0=|}%WT@U_v`AuiZYKeTk@=J zK=+LW^Go)w_MuQQgw2=XlJ9KKkUz6M)a!Bl?t<^YZBPy_~s)5 z?09rb#*9At2U8j^x7~OrYtG!`QN>foj~ttId%3mi&hbktW#{gi^*B3!*UT=Am*+;` zNq93__Nn#aD;tzIq{{QBGlNFGVr_h!+jjQMj<=h3+8yZmjOAMt)+#S?T%##B3)?Ia zK7VmOuSebMD<0N4p1C5_N#q}S`Bqq~CR+swC!5EazV~~$uS29-;_iHowz7B2X3Y!J z7e86;=f2-0!z<-mbG8@%Wy_*2#ni(O&6;C zU5$u%T%JgRE5tk=PbL(}q#OZXf%8RjzCtAC@uWPth^G__1RSZHBallue4$b#=JF&w z9#tE$7pyF?GRo>T|*)*%eOmB znE%=6d_Wlc+G@gG215gcL>%*MIo8rXoea4tt|Tm*OeC9ucE*#<<{#3&o1 z_Kn~$6QdHC@d-gpgMgSIA!bMr`!5ypvG+F8*hSlAnr9{P$@?>W`u4F)9{%#p$MX+v zjoC4A`Kum5j#*di&?g`BjU7Z?`mJj}zSqP$J%c86;n)Av_tWONlX@q+DPD^Zm++SdEh zh?)=)oImf-jDGjaq7zpKPhGNy_DAlF^KI^)u)W!&aO#VYtdp&C(oaW4F8AvGhgH$n z@FmODgR{qdnD(iA_jPL|_Zl|bTELj{FyPa`f(X@I1Hvl8itr+=KWn^sesJM#<-r@m>nC?K7A~VU*!k?Z(>K5>#v_sGJn{aW%=^}#K5eyoX6iIX z`~z|$oCMyqy10WWy{Rc?Vq!+cswfJcW27;R))P;|y^P;+Y>0E3UZ2(6-(MrsWqq?4 z!UL;PQHJoyR5A&ym2}@E{BByodL@Dbvj`7{rZ=Ruz{R+54u1}J2-{eUR?YpTGSqkg zl)5SnQI)@B>79EwGvU1PyHdcx$gg+xKqnJKn6>>Y?d5+-E2$eqEc*v?EXS*z&d3{<9chAjEvKnC2zKV^2Z$ZcTJXKm--D|B1)J&qFZ=I z*8@I-29)(5IdcB=_y-4yp9=Gve14JCS){eOi0n^B>8>mj@|QFopqi0WdfmBiN!gK; z&r_*iX`S8cuC09B`o`6ww@==58s}-{)nuY~)RDPk@0V>}F;u_)WybueS3aKGF(`1h z*%W}FpirwIXiq8OVF&lkZ%xPH|JHQBHJ$%&P51wSrmM#0G7-+QzdWOrlpX zgR=E$8m&s7$7KB)W|z-sO9Ymj9v0NZ>~z5FYTsI8OW+2r1+X`Z(69)uSO6+mHMn9` zam9+@eCHQE41Ur5coAi#0j*=`I~0Hq82BwXCPPegdoxmMYAl+ zXl`#?Lx#=3Y3j#j>Qt*`u*&Ht0h~WPjT>h2!WmhjL{pF`l zy!Z7FJI{Y#7}@cW$3Xi<`~q+aNNkbvRryB#J$nan*CE?Zy!ZjcgCb?TLFdFMV( z?vzTEyzJk?l%36*%N!l67`oy8q8X(ZANilU(z*Pkexz=LDEP8T-w%}REngR|y|C)t zh3oc56Kwhq4?jKm(`LV>w#!S__!NG8IJ@&B;q2viZ>ZM~cA6P*$tyN*EdP88?MdOl z<z%0-tHU=PaH5bk_1TyQv)xjInFZSg<4XtEr=K&-A;T`OicTFUnsx z>+kS|@_6>~O0zVlD;^~xR-aL)6JM(Cq;QY)3FvEn=SV?{_}=a8ZToYaxhI;v@Q+&g ze(i%3u}k(%Z<}bkzo6eay7g_>ivCVpR&;+?R(D+p!!r8a;`9wu2Puy9DZYI>bZ6K1 zk6qsqkw&M7#2!^5(kPz+Kcgj}>hEd(cPgXb)BN`||F2E+YMjR7vw66b%i#$XQn5@X zlJTWHB`z0A`CMGgRtmwvg^R=rfr2j)a1|UOPb`;nB{GSaEfy){5(1~yrd_L|$`qW4 z8~?JI2F&%Nz0ZUl@zu~E10vBRb|Af_y}t=S$3@jgu>nb$sy+(6hMB04rDbYh^O8cx zOz;cxbBAa&z?4m%8en~ufY$_zBymf_Q_;C&a?`pyU2rz~H{Dbsq$ z8Jsft!v$4`xz6HlJ>_`^uudylvfGOC&(O}a^L@xnX<;_+ShViS>s7G_lh1WtJZadc z*UQt&Jco4hImz%TU6H9B=!$D^+?@C5%q@Mk%Z?_q`Z^}k>R$*EuT1jYf4koHH@oky z5=C;4R$Vva z`W}g!_;GRK(ZnHfVM{+o{t5W123z!;<44UZz25CV{%m_m>Fq(n@a*?LV6$36)r*#_ z^f-Y9ESg^_J=JFBi0;}oy+iL@bzRN)>e=SgjwbuICeb$9%pc`*-J(c#s{Fd8FfXW! z$GSDsg1Rosx>6N6XLEdJPGgxaI{Z|8X8D!b(=2=_{KjhoCqDT2a7I$GOZfTCytn;Nh^Ji= zy=?zJwi$pg&=y8NA!raI`1(D$|5RE3lJfaIxqnaY|JvlPhFp9ZU&IrLj+Bq%Y+Ndkvju#vkSCETMO=wc&XaICa;Z=tlJR)BNI^iZ+H`CcDtpW9*xMgN6K2PpP)WI*7qxTt4VhA6cO=?k+&2>~&RTxMH^R;S3bLQw$*iW#EP z=Q*L+fW$NfGbte~J~2KiA<+n_d;x6{PXTHXQBaui2A|kBxa_Zk*o7|2c7#LhOr^mg zW@C5>jyWK&dp;Yd9@(f4n$y+W@c|uL!N9m+|_{K z9BUOT+YfIBf2Z1eSGDBNgbM(TjpLk}J~9!`W{awPWd9siizq+tJEXwALy9@2h=QR) zJB5>=&fY8Z^`};Ju*!LM+~;i6%D91&+sl~I43?a6^~A8*#{!lMLYV6~g+}50WT9;YEXm$Ic{;>0gv1L;Em4f-E zFN>XfmUy%*t+0PF)S>UYyA4N|-EDusHZ`2y{^$^g#MY(UivH>um33!2?`S`ozi6@Y zkT&&-yK-&W^xo9nam^nddvUdNR#e4mlS%xB9XfBWJn=DLbF)qF60aS4VAni)Rn+j! zU8il>%nUeE;K5tfzeSo73w?mageOer_IN*GXM(Uq7xJ33H{tn}Wfl4u)xq?UJ;q<( zchK_2EzYWA<6E@vJu!7ec|dZ7aEtXD8j zaKHVyIYbO4lmbJe zOgJy+OG4c4LDLVU$7~zv9y@Pzl635AmE*6?MBX-)_w7mo}DsAw5ESPbUJLc zv!lGk&RXZ|xBs?R%$JT&U%Uyc@L2!EfApD4VG@%)lQm0nv|~n$6s+E5Wpbj|sQZgF z4b_W!N%vnoHBf8$GSzmNF@xn4Jx^}2Rzt9oQhyKaihJ382H3Q4cLcRgBZ z+y3O#RZpEZJ?u4h{c8;@{L<>TC|dn=VCvwq zDed)Zw@xh_R$0*7rE6Z>9)9BjS49b%G&_7ydZM_ol8H+IFe$EYH!EU47DTt%-eYR*wA2It@J< zA2jjtn}`eL@}Q*rQJp9guSsYAv9-LjuYS6=RqTAJN>J4~SGocG@8(cUrx@Abu28*4q_Y0`|Qu^^o$&#;xqx4K=m7^4FjuET>*8l$zQ}tW_|JMJ% z_5W}E|6kGn)yp}BP|THyr8q|^7fB>+u7bmsaoHS>NFtL-aS@v>7Vx-IAx|t5iA7=o zPYRnI#`}YpyK7!(LlY~%^7|-Ye6jK zJPb>@?|$O-^WV)jFz&f!88##vb~!|FzgxeBQ1Bv3YrF{CPp;ogl9Eebbzi{e?_FSh zZh4rt=8r)C?Z2>!;1Y{6E)MH34*bpwHZH&yKKb=O!NN~|vU_durR~GFSbVl9a6j{6 z=T6;gZnt`+yvNrMOfNk(@!gAKr!2Nfy0j1PKZ`ZHe6-Bc>8V-P+mnO*0te1`*g7bq z#mch_96AYl&!mQw+t{nM*H;xUo}0cge2v<e z7U#Nhy!FdtYZ+s%sh59BFPKBY#mX*!$VY9N6?b*XxyX6X4qiPSS>S|iIW%NU%*f)V zOQtOyzW+4Z@gec{w0m9h*ZVjDK!hP{bmqb^HUh-o158`B?Vb3wX9V~60Q*-5ShWS> zvL$kXfG1Ll*f@{P70HBLk&-J`NO)Wh&gOEtVy=QKVT)ukoWl_d6iTsB#*xUx3Z+2E zWy^8G0@XHiYFHpXpU)RaWl9boisf_pGOmP&E9HENl*boxe*T-62=2f1o0n_9y0gw1 z#ReqkC0eCQp_YFW;5BTrYX%O*>IB3vtM(}VeY@-||MgvVtSYwtrEPY%AijGIFQSlU zsg`YaW4`qx{^B+}Z`{-1Lv*cT>>GiSJMK6*Zg3?wu1@wBV*TqacmFt!|0+nd{nP}XX?%x-gOX5Q_2o2imy=e-e|E*uHq`wa_uKUX#V`tW*R?U^$+MCNiDCx6}g zbmTRUPui9TcLv#W!;oYQ|!PuV|gp-ud-@T50evR&^N+)Z57?n9Ec z1I6WoQ?E`>+^3W8C z{$!(~K-uec+MX^}Q;(F@$v!6hJYv|MPA{beDeF@d_=m-tqjNgD<#gxmemE(4>hSe1 z3KksSah1c)AA9m8*D929wGfmC@M zFtx?BhDC$LWjQ7jy5I60pCRqW_+!qJvNhSFm%N@c@6H}Rq*43(%}yU+Wlm(a9fv*L zGCZ{}`*y0|$cfZOejzj4vftI&Xt{m!ZDE1OHZ;FZ-}ukz+gt2Ao7X<(c*&boGnYdx z!~0la{q}c!ka2%7?ljG7pUq9$`^>*!L(y9%j)ZaKQV1`JA^?j&vN|uSt1HC!PGGK;PYa?pvjaUxC=f6QVyuc7%YD+IzRq@R)8LR+f)s+|yrlFifht9SCSHU~ zyf^D7zin^|35wH22gR^Lf>?ZZFoz$;$AzJ|&>A6p3GF3&a0~zXV;e$;)Ajjt4ruJba?a{Zg-lH?7c3&>p zePn2#M_+f?W^`XCF7J4#UFY?EG6q{QU%jKg?z={oD2&_deyza}K6jCJ!t3KF9=+&~o28FA$KAPZ!QjC*lZRN& z;g7DfBdYZH%HGQJT^iM${}fx*FVCY-PZcK11HD{F z1k4|JwdLr|RuzuIoW*{n>F?UkyjC(axVugqxohu^XWoH(7Bp8J*cmpk>7IcrdpGf` zoYORLak>B7@_Lpp%1<6_d-uBiwbw2C=OOm4XI(2cCUh$cn7o#K)zr<~Y{jHU*vs7W z-B$LZC`vYzb`QCfxM5nZ+myhFBNt11jrq7zao%di>YN8>K6gAQc-6_WNxjO74{?iB zL!NuTkufDvGm>|WoqA}CS$X)oq!B4g=PJHB?LMCWBv*~fOyWIaJ@UeMeMTtG%wF;; zzaRJd`F!(h@f}J>H@Xpf%CW`Cx_do4w{7>wZILY3@7~E_>vFv0S$zl0G&>kOtwG+> zbL-dd3}_zuydI~lUi`yHo!+e3acI{24*7$x>?l`{SlDjc^5VH)$F?xtS|(fYbYxcd zXRP{L&h0i?$qqfBv^W%Uu4wnp9qsEcC^`6XO}zchVCu*n=We{cf=XVg%AI_!n>_z= z!8G}+=15By|GDGB+RGcS|Clgs^}aC^w}uwX*~vW}eR%!e8xy==k6dhfe883Nky96V z9v^L!dc9fY@}mW790y-1W=xnIvY@P^c5ZUZFFB1uPj}dnG)(`TI<0W}blYdyUChT` z)Hm4w;lq?Y{US3}Hhwn2mk*#J62IIezg~+iwU)D%*bi^D_^y{)*UDkuqM#&3XVXI+ z*Rig&(7d_SBkl|R*;$Vpvq}c9iD4|Bblh&}3(HAwJvNP~C|K<`fHp0~e)S)_V?VOp zEZ)?slQ;Rw)T_(;jyvA+Y=4^YLH6TzcV?y^nYmx=bxraId|n>=;nI!1;X~Wph`rga`^P?af~MLv z-+7U-{d{G8f#R+B)x12v-V+uLc8l2A_f4{8K$|{E)aM75-j-sHGYf;aoF6iKV9?Tt z85wS-%X?U7Z;n3q;#i*G)|RWQ+uaUc+8|Ix(I5XKmtPw7{@vPB>F0L!c03iO*Oov8lNdvtNg(G;3%pVoy7n%uoVdR1AMMnl?^tb0HB@_UC%PrjyyoS6A=*XQojv({g| z)_l*$K4G`oPGI&EZ!C_R)_77_Q|ATu@P*BTDni-^Y3mh4%*XEDxo6+^ZARcYw|70q zuI)bf)5<=Hj$S>?etFHbsfH`lXT1G!MdwBDTAV9+ubG)0M%y@H@^>9f{A9^z*pwYP zyY93-*muQ<7yd;jGwE{$rj+FcZrG~LA383)I@5E-Zd#?s+qXN`hG2t+Q#_W2y1cm9 z@r~Hr{N40D4sNukNAzz8z7KNO+co%Ln)`Lk#RCbgx?Rxxk^I!FjptjR;d^Y3JgOhE zTic=)$IHFmzLqJA-$v{_GGLLeiPzrJekXjM+dSu>ZEi&~xv+={-= z`+7RK^hWEwYaXrWFmduK*}6Kqly*zUizn>bC7Y5wK=ZlrVu$i)w#(b-zIJOwe?KMR zj<-Ot3j3oA`-1i0GyA!3ue7{zqtv(esx|NHi|+Qe+I;$jvfa2<{kB^KiU-X4+OPKq zvD2h&J#C3K)2fOpM=QKR)aYpaJyU+q6s*d-@PB=#jQNdpeiBQ&0d<9p(cVNJAJ;pbEGw5&{tCjI+o*%pz zb&OsN@L5=a&w^g{uJ51tEF6q{{OGW-J_RSlkgcdibH=xv58B!m8NW({H@x6ye&4mu!7V2p!>L=lg>K*T zpw+0z<7ciXN+({sJkT=!R&dJey8&zS(kr)aFGD`w+l!Q^>ro~R+mPkzbZYyGrG+OJ zxZv^APS^J;J@74eckFRg##Ir%I>&!jB z&42euZt2StuDv~XE$D)yWfzhXZ|NpfcYg6U;C#&6yJM{aw{@0fHg_vN71!6TG27(g$;18~ zZUoh{Eq@sG?#d^r;6~QQS0%Ul<+G9-dU-Z-Ezt+g-RyXBO0V~6dD*uQzrQ-K_tA58 zkDWbsZ1@)w$~*NRs~xEYMfAnO_tTSdBd1Qj*k;VDXI2MtdDaDeM=+K!hYnYj3A=jV z@I0TlTjKDlNw>+ihv%K@{B$PEZqDUftui*fz1P*RVAGM&`^QSnH%Ia|%?&;A=~8{C zqTAv}56-m8NI0yzzmPl0`@z%p&Bq*$**oc>SazQ=i#?f|Dhev|UeUTm`K?Xs-^ zTz_8?n`zx_f!nyebHNjY$+Pxx@6>ztIqsus)o#scX1&zip|>{oFWJ{8*Os4N9J!8Z z)qTT;H$Gu&>a<&DcO*Sivf{{x&NGr{$DY}DmecFi$U|vUXH|MPoO7b2(Lij$rH6ToajDE{L2ujThA$kFUAE=csYmC68U2s%Purg2e8YFGB;DYKNP}^RKQcEnfPbf9v2CQ;zrhn;OOppTdMc zVlO>O7;|_hYnYGDt9ZLujm~zp-C;qemTYidmA_9~@b%-(`qVxx^?fZi4C;TfZ@ z_+ad^k7j$so}x@kE1~X?(qL$q`c&75JZ`YXTilq13J2%c{bm=tNzj40f?bm1ih+I4O z!=70tZfYw*kAA)I2klauwA~(79M#0-)5S~aW;dRPMn4)hBP6m@z$33G9#rYV4#Avt zWs$zU4^DrwIh|#lI%RL^8;^tMPYk=h??|S@j&^AuL#3J1r%#@G*R?WzSTEVkq7kkg z>X$j45hp#~P}u9;`7`o1Tdy2?HordJO%v?7vK4*y0*5^pI)cN(1soQRcoFuMbXfE` zi`N}7VolI@>)Bs&HvE;tq9MBhUY`h5Th^*R|I%A=M$>udS4Fy6VYvTh{j&n?YM(zF|F-CrJ4xNM?4P3jh! zH1WWW&2<;&Mqb+$>Z`ielE1nvR%$)&(9@HqGr6)IpC?VVzkP2*#{qNCnzWx*;k`)i zmoc+=?hccYcFz~Sxj`Sg?ON8S#P-|cH`R?_Jhy3y z=ftqEan_%iZ7xnf)Yq1`PU*Am`I?E}yhX7#oBLgF6W$BA*7$@$daL9@atyd=7Ha@+wFm2qXgF7EhU2WzpS{Al@b%&Fl6o+$zwk$mDcI!yU zEWfXpi&qRuzIOe|&_{M_Id~7Q!_KoFn|0!#4$Jv>c3Tb4xwdqxW}8S>8gQY(`qm52 zFI+IH_nljc%xBI`j>;NL%`XTKYu~9|W7`j(>%Kfx&;Ij`J5Iu`gWeBoxVu5uO9KWS-@B>noiQCeJFXtuI=;@(H-eP((d^lOyen!|dfs-M?$I8XUY}ZM zIGy)h*N@+vkhzuIu+nM;j7+^$P~I3Vt9G_#aSA3t66XWon7 z)8_ZI`H9o-|N68sxH5iY;NKYdHwONVf&b|km~dtAaV}3RQ1X;)xr8g0%47l|pUq** zr$1F8T$77Oz?=T7PgOzu+o+@u!NRZZDdLA8wK~Ws{wnv#a>!2LEn$g1st# z@5(I?KiqzCYxBhxirEeqN|q`Lw{K}@6)<Hlb{(9ABg?p(Y0FWWoB%yk@jc-i(5ffL$ni05|m3RH~t z+p?GMd^^m$boYmVcP+NwzTNr2UH2z#Gpsj!(hRZ1rYp|5bo}bFZ0Fhosi(WFY~uLT z)8u{6%#h>;^wy=B6YaNOSys7nXxlSLRkRw)aQ-5C>8y5$Z}!;L!YWN~(v=OEdt$0kFf z&8HlB_2|u~eJ}bk7vx=tesImnkrN?eU%7hgQMv1`*=g2SFRXbMJc-f$g_W(kva!FP zbN<@vrO$J=D zC7;KWD{-Ds$WgMDIETZL$)#+L80RYlVkItMOL+>ekk1wKMYu@H;m9~_E|0^OiKF@Gy=Lf(t*G83u}mQ*jw)aA;{(R+c|`9yFXw z51$j{mIgRT_!3Dkro!`Rjw5j*q&;! zNv8;*LPVS>3a@!Z!w^El5keyng2M*UDDuGfG324{aNs)}^d5i^3PK14Bg5Iq9P;33 zK6w|C_vY|B&6aR!MI7^9S=pMr2f}%M?J>haz7YN(PI@<-ElnK#YYw@b$a0JaQ@fDg z;ecw)mHYw+)xt@u#0jgO2r&xbm}+xx@<}5o$QLe+;X)kd?gtccmNRj-w_Kr=WUKW& zIGLIY7i+i>Cs;RyV>Zc8vl=vU#V#EQ}*vW=0lErpd_2&Q$4D3Z3zY zWaCNOaPNVlIrR}*f}#2-nga*3!x;Nvcv+ze%oHKmC{3JxZ4C*D1Kk~gsy=ny1R;0R ztZb=TB_oEsgYlqnokE+V(E4jNgpdTl%WK0FB|fbYLamAOq$@BQA`V)o!{0H47_o4G zyOo!3NK|B4OkzrOP)K8Pku;nM?M~8g9JDb#9O-PNK>|jaUgPj}Uksi{b1;O8LDLxC{$)7B9T+u@WAkx- zrq2&aDAjF&pSbCxR7wTA(GSU}Rmm8V44qz~4OQg0|B#ASm5LUvN=*KdA(N^ErWq== zTA}?hiD`8bLrp&>F{@6JD$z<(6@FEmfNbHwbb3`1Te&7fqRM3H6cVj0jipoQ;oNKD z^muYm7c6wNV5 z709jxG0Z6?#89J9OAx)dva*s^g6M0A$x*?;%u5ghGl8bkO9erkUd&7t=|#Z>g-jTf>B@kaPqZ$v9Zm`NeRplr&wY*BzMDwLRo^+0rH3_?UR zsL+9nmFd^G&4$VYHQ4&L;rYLEg2o{%B zm9s~;LO_s%0*yA~N3i$;0p7N%qXSE02vMW4ao=XLh3e>L1}#E`>fj3$VhM$? z1vrb(5#cSWt2K|UD#3!Nwq^;mnkAUlZjacav9#z3yovwQnzq)S-j;>>7?>XA&sy`DjD8`d=D z#B?A*DcM$uL?TnB8o{3*nHBC}wP|3nOyIX{U@1Wa#KOqkwqwWU-~Ouu>pF$rUzMe2 zDOGB{LJMVr;R28cAGkYwYeoqB0$^0j_t$E&^{UKN;%;n8VOKIQ+`EFnFayH0#1O+R z7PzrT6%05Fgh4UG3?_q)AyjCNAqKL*5W}1hwh4wBTSjxdD=Qd?2^T92H8zjtFe@wQ z=5B87K^VZjL@w9rj2+*Stei(KFX02mtR-ngX$V2)N{~+_ED{?LgAX%2Hm4ZwU<09@ z1}G9-GcSVydFf_EqYQT_fk%|UAo`4M&LAXST>`MGlcg!-*=mIrSOoRFo@5pJZ6ith zBZOv>G}vfZO~Z$c5V}axsZ_{IU;@k!GpvEwAi4}#$pSO1UI@`&q+_snCk-!1v`JWw zLYv17mE!4^>f`UA=H7qk{yi2PA^fb4e44i zy$mV8eG1&x1#XE_zWLkCUuD|AcBYxNF&!>RS1^OMDtW3w(4OB4+8@N6p^^IsMYAH~ zq(nM`N9*q%4*!ukh8u{pktz_xNuOJ6u!`^s=UT>tZK6W0NYzR*m?3ErJu_INhi-TO zIX8(BtYD3v;KhpM#qj824Ne|#5%R|ny-?G#CmZg~8AKmHxE4nAF#&TRepCxbAqH^? zi81;^FH17z%wUNuJv)o3Q)J4SnVK3ecGhc{VbKzm+7H^m`nC<#L)Va$P?7}fic!~ozhJ-+!l($r0+(S0I;9Tm+qI$_6>l9gSkQoJH1uPZMyuB) zl7?vwIiUe$uO?}z(MSU>Gtz*|j5Oe~b!2)_)}USB<3mGe4T|P~TDL|B10@Yc#}OgS z2_eiGA#j>tU}MZs1*(q_awV7l4Ui#F$0QfbbX0-7$%XU<19qgtl8NxESwQoMg^?9d zcHl3w2jxTf4`2>cV7);jTx%YX1pI1{odFt_QAh>FODOr({|0_R$Nvkw(tuZ!KjW27 zBP?l!``^hfW)$zg$gT;nYx<|`QvX5hngY9Kf6A`OKZsp3V3+=<>>6NIg*#gJ_l@0e z1_OyL7{4&j=*9*ApK@$!6flGcpn()nA#ftJzf23ON8)2;e5OPzm4ogA8sVBiP+Q)(H0vD4OF&L>%gpYKl}%m^rEd zzdWImED*v#r2+KnNCEYQ7*x=*2LDVQsMD6L81SV56@exKt;awv@H2^eK)J%D0hz!Z zit!*~3ItFFXlU+;kh`T?A<-#V2IRwlQ=&4nWua|C;ta?XA*2A~VKfUy7YW?KI{>n1 zM?r*U1a26FqNG4U_A*6g7AsAio59LT(@I%#SxzrHJSSWmI+Z3+B~xp%<#5g?6(RQq z(W-QL6E^lm!Z${19to}6p#&cz7ZHJbUMQKB>|teOq`~83 zq`?>&X=taB24iHT!5A6o5fq>a*BN0{z{LfZ1fO3lI>nHt?#e^24mnuYsPKaj=#J%!V17Vc$Y zTm<|*g`0d^_yDrl|8e0BYIdk;&BB}fKla`(HnMCx534JUtZ`do$(H0GfMV=Etg9yP zu!=>pf5}^Y#r~V2?y$Qzw_w_S$Q$ zz4lsbul*(8>a8~lG=_LtZ7-T36ce};GX7rNe`VSVpI=wXn25B~(5ksI&`wmyWL z=I2_i5C8tpk_+|2U%1gC=`@6Y<(Hr-{SxHC@RwSx4}a$uNjD?^3~5KyJ+`3eioAot zaLOvK(gB8Zl`T4$l;v0X|F&AKzx1tE>+iyD2*2#NTCJZ0b3;o1bgT7;;-maAc9vKg zTCLW9@zbr=2DHLftMxk{v|4}Xm-+91|ASWRFaBfx`*%NRwSEu613upm*yoGqFMrT# zeE|W3zCLKRCQ|12K4`W2((hmSpw)T~`#F5WAGBI8#5nXHeb8$Cw^HUm{-D+R12~vl zt=3=rpw;@@($0VKL96v=#IW?&KWMcMA)H#R*5CM`)jEcdYqeVc-3P7KZQ!8QYW>5( zPqqH;wVkzJY5j}8^{v*Q60~eoNm)V9gnt7U%c+QLWI7B)ut!0tTZw=l2F#uxcPhCg3#esoO=ByT2r z#lZc3l8zD-58uH4<=#9>3%oES*P*Y&-Mib)2Dv+iot&N zqe~wmHS~~XhdG+xxBZ*GxnY0Ym{X9z?=#T&8^uD9zYLL2WW(s|*XEEZ$`OGedGjqJ zqOHY^*sL%o^>;+%pq_qYVUJ#GQ{WY4G=k(!GMHA0bk&buz1o<>MVXlW zNdNlM(9|zR?+BQM%YqdxZJM`cKYIN-+BEwNWDS5XsW02NgF+FYhCClB`pzMx9gNxn zu*rSDMdu3!&tW=B`ilfAO>x&m-J%@q_j(cNa$}eqCnOGu-DgWv(FNh*b@1@Q3K}-? zaLAL?rmAR=xM-uw%c?Mzn}~O*2H1rQn?ascNmiA8;Z$WkkN2prwkJBJ?&e3=E`d@c z&0CXaounx8LS*5QpRNn5l+m21|vnN{r37m$xbcPQ{X9zbpm~Y-D=?8@;8)yC&ct=HtmIsgmm$-$&OB z7;+wFYim4>VP;uRk7P7PkxXsQV{<6h%I8$@B4S2iVsi#F&zMaf7X{=4_p?&v`Do=Z zsRqYpIvM5huz#MEW?GE;i)}XAzNFVLixC9PO5`ttBzm|TOtl5wOv|L`hxN;(Fq60} z&+=jzetI64r74R+2OiA2U<(If3@y&=0s%ch^#KbJc5BQmfI;>MWK?;v?W#M?hwGBC zggkZK(q8!IenyqppYxU2RbPu8{x^S>wAe5I_rFS7ER=otR{mPE3i~rqVOOEU{{9DU zA8j{Usx9?N!C=*PEu^1)#3?!SDo4qA4^U7uD;xCK;6pRx6=j z8aYpIn}9*9M5j!mwf3k;&nxuyqiY)l;lQ*lE@*^qa}pAQdDZqO^>U&z(NbhqY2Ef^ z;H!4nE)@XDg!J`}-5Ks~ZGLy33%%2vW8N3SiO(lV=FN(zN(8zn2kpI`=jLHP9g+Xa zByXxB9$-60e#&HMp6waL^<>G&92WUlSkcLVA%IB>yYd|Gd%;>nPCgsM;N|BdcvLknk zX<$PbCWp_?vZOE(eFmAhmY$?VS?x|)(h-|&*>_ej8{;atuCeHOpR^l!y`WV{D11LT z|2!T|lf5c0pogQPZpF67FDJu?yPrMbp@ts=QwP_AEO4(0NEXoknqm4T!jwejtFKtf zALRLnmJ`#bjzoYf5w5-6bQHNxlFpcg6?jtkis8gMPw{9NnnVR&pC|O%w&Vkmj!Cybv1dW*LI5A!?;^*uI(aBs!MyVARfvkuGZ`)2 zC-R$*BU!HNbHqSTihP2w;69pN_J9`?k@uz_C95|N4+rt^)yZ3qT$&2Tm0}88%8a_WbnNXZWC(eeQ>13#2 z(WVmZ)ND7HryP=`-)PxW>w%hgOxxp9t-;|LC9%8mVSA6XPI@PQ<5ug}YF`vSXfSh% zfwA-?6&|*hNVE?OXHu@)rL~mG%nq+$K^~AEk)_nO6xUGKnKXDZ1y5}iii#B2Wxf5- zVieK^c0SU8m|UVIlTWM3wCZESW8$)N3OQws<0&P{LaMW)uYDUovEvL!@tVv-Zel6^P7K+=aQu}Oh6ZkCP9?5w_!=^^ zPPs~g8D5?h797vj{Nbq=Z>3@YkCMT=^4=7|d;dS@4U#?)@4Iqdlk}Y@Vz$Pt-3h1H zBn)j2I^NO_<4fl(t&a0))fp6{Z$<_Yp^!bR?es@1No|kg@v}^@1U!C|mJsWfi|4#< zWbOr$99|6(9t&cYwv9H|HciAlV@mVfWsKObqaQ9@FUkS5q0e#NWxx2|ezpMJB+05i zoM#FL7$=Y=S8|}uR@;VC=9S@Xb)Z4p<&<4(3Wd7YJOEhl6bn7eQ{Np&bKvj37s(0a z)#{t5YrGd+1shK5mf||xIKj+y+zYB>XlLr1*0ED1b2(Po%{HkPo9#(HN(bkg?O~o( zog(?|X<8(mNm7hcgwSN=W_uKq#vK<`GTg+5wKK@4S+&{bnc8fp*=amVhnsDgoy~R^ zzq(oSrlLQFNsQm|K|Uoi++0jfM`p$FKf@gL;%wLt-;0}-I)m|%2e>)RYvpJe@im9f ziZgeu+=VMIUSEL`zeZG=16yjE;CuTRFR!Q+}PiDI`#+Lcf9B_W* zmAUAlzODkZQCrDTS{+Xh5Ky;LCI@j@rE#{pzA{EUUX`A7aQG!D@=~G%OEUdnL^xa# zn_*fcgDNl14g3k%ZJwq>Xgk`RN5L2O>D;Lpvd^peVOp4Ig#%9p@uVEbS!W^?21Sq!p%}K%ogt@Z zdT7VFOx{_R+6dLpU`4&y>_E8{qekCNh@YA@*0QpV$?BhC)?Pw+OtnQhgSt&q_U zisU)lB&4!=n{d3%D!;HRMO#PRc676Far|`v51wEWRM=F$uOY(>k)K#!WWx$$Xm1VZ>h@i z^Qy9J?I3f+bmHqMPygU&zd-0EqEDfl1aX%iY7K;5+8@wI{`Rkg+pa(Wum-w;lZ(_J zKC)J>O6`XJ266D>sk5jN8?1<<>cf0;UZh9Im027tnYCW;R%flZcANKmhNJX@B7I6LnU+-oLqOdNiVTy}bdYpFgUd{h+)lV-qzzjw!ju$=6j^ITXOFXCxgoW2 zVv?~zuhhczG&vJ|MEvzfSePRCoNXDlN^!AETuK`3BB5oTO~Q4=7Gm#(HB9)H&nws^ z+B1Mz>nJp;cQKIKu{tmpW8TS%DUgRB91xvzq|`$=ynD3pR@k0q@d&d~+t^vNjnb$f zh>y_XydxRE`-|_09xJK>zn^x3XuaqPmg5Cl=K>t~7W(M3C$uz>e@!-a{`c#Ba~O|G z@uh*z-LfQfmuBx{T&Y=85P#9oy*dy$W|_<$jZOaka*;W?$!~30q?bSq9#zZ2pgn# z#E0#A+MQ<4vOyxOqNU*!r$*IXs~>pRLG(a+GzX)wGQB(ALC8R*URaK@aDL@FtCK}u z8}^0}yjQq`mlnL>Ex|@mS<~FhVzf6sJWSu1wxX1)FvKs5(If1QU^?ZPd|UHjQdDrg zH%lm~*fsb|dgw+gi1NkSDb1sehve5JQE%OvJ_smdBNEj&>O8|2cYZH;? z`Q8omO%#tt(USSqUkw0wWhf}^l?nXmG7{g04HKWb&}rZv?ZNqX-}ILB?1zp{yr>j! z0G-lvBGetJzDtvu=U7hqQz>}KDZasb>(iv!=EskUQE-AG&O||kO(F`k9tD9XXyYdf zJHRswCi}}g&Qt=c&ygO)C7I1mO`^=^8TAYce&~V>+J~`Y-}$dC)F{g zGA+$nk!ME+jv#ZMPYZu`ONu>a=btqc?VP;8=_I=Yl`*~;PoB`=$O7fTNv0-V5`2?(0-|yPumv03E}g&Og2S{#8WWC?gpjC>6^;oy&9WH5F2N9_rLDJYk}N(zR6y7B zopU$zB@vK>9A(3!aYDXW5}~BM6=eP*8xC;njD$A`h#T6Ux6?(d#kmXo2+TmbW)Z2) z0$|KrL+7LVtG(X1G~@V9f3?RV(>uRFDuyxb-7zg^)Tpd7^>A%4h&3cO&mUEHHbw84 zSr9v1X9R}9c)Yk2WfCM^;N@G zn9WWlT@OeXwY!`%1%!p2EHxmzFwnNxqpe(K?%~5T#FT8045~%1AuFQDXCRM#+C6Ns z9%<9HE|WK9T2@NZZlrC;AYMpvefhq)?O~pjH(-&dbph19GHsPa5E;Sl!<$qNlx^+@ zD22sifay+#*F7tF1C9l?;<-X5hGuW?6OG@7CVn6@YJOOKiobf z;oO$A^0dg5Kr9KU$X*Ner$Q*c<0e;!aFNX-8{r$Ovy-z%!0sd`z>4n7h`Q z5OR{Y{!t8jlm@nN8iO(&xcVXj&^aJN6XO?=nrNR!woaA@iEWrp2oP0znT^Gg01zaY z)D4QwWXjsR2(||`ZzK3>^{kCXYz%6{65y?cCWzg;+=9hNoa(y~XT@?;V6I@Q0evx{ zhtQK1NhuK?mT5sk!1P8E~xB0IPcIVm^A}*b1C*iD6We8TCIOgFdsra zgKEmQJRU3vtt|}!=hDR?Lu$w1tO-D&MBPL3Jve{(R7jh) zJhe}{&$Rm>DvPa{9ig*4gf>Gk6$1;C@}A~#Bppkn3B|Van&v~w;`v$j_!QX{7bBU# z^f(`yYaOWw)(^SvMah)pWg#Z?+tVz!nTtZ)07 z)spPOM1gN6Xdf%0vDq+vEVAoG(8yB8H`VGmtUL&sjntci<%qj2;rQ-gDeKdp(+PX9 zPvcR4y@$gHodh$}Z_5-3{WNQ$``Px5QyeA95|bd4CT)|K$pM|^XJ-4x*i>ne47=Sf z{TL-N*s!~wy`YpDXX$8U4sdQlG>?O1l%Fj#@sPe*jN_40mvvVuTra>eC4QF2~OV(HXJF z%c;Gt*iXD2A1jx(hyq8E?r@3TkTv!)pX1;8W%Zo?InQ(It4O{B^}qTb|B!;b{*V4Y zrywt+?tvpUNVtjAtbPNUuGN1Bx9Y$7%U5%&`t_h+%g7{Ta6=6Da$H)zqTGxt_0H8? zsXyRUCmZHbo>ivGr-Nf=qEVV9*PU-dP4-vxg1BMqCh_pxYUps^0$lzMqd$34`5c2f zR1rx+_FI%3=Vb*>A0~%smJCfwd2>O@awri|T515-798B%5o7TZXRC6FD=gjwW+nYh zxm5S2d>2OT@G*Sek_g=Uvg!v+5Y9VpuAgMHp_D z4dw4!Ci#U}tHPAi2@cIInL(Uk?xrOI8%lGQj7Ah5v~7k6T&qlxFl7%Vd@UIq=ca=S zX6PY;g2R${XcjfFs3-^BEiD&ca?u`5`6wUI}3*N2JhJsbGw zKGWf_Pm(Mt;?av-j*r^-2b8sbb-(DtfuW;^m>*G7gEfc}Ao~e^JC!6Wc3o@w;urZz zl5G!7ba(w;@9yop>uWbRwzfW5|Iu*u`0(@HwVm6OPqvO8egF1fI6Z!r-2C->ce3+* za^??Gn?fRFwA5Mc_115%udes*^=_|6n`R-pdF$rQ-ulg(w`fe}Wr;W$7~b;PY{c|7 z)&QA-p=pB@I4bh#1e2@S)s9~r7fC!s*Xup)04ltWx-&pb&UrpH$1x5P=OSA`^>91k z%y?zeVQCgYqSOz5US9%+^MX=gkd3MAnoj^lY2wi+KSNVgm#q98cv6}&9ZyG9oF)0R z9G!P(an6V;Ur6t?(0VAsx?4vgzq_@%cJt=lwY$AL{9?6t_s+fBckixI5FGUJ1ysGY zcJJn$TX)uP5;mIqmtjPU@o2OZP?};DQ2M35I?l(*SNY*#I!LI7YuG>B1c5>-l#GjH z1%s>ef$kXC7x~fA$kBqh9!z;YKFCKUCfz6F(!-_SW%+}&I^L5yHPQP*0!JR^qr7-V z2mQ2&ga1*2*u!mXAd5$QA(;#RNGGQ^9jE7~$HCcezv`2CG{O-xS2v!d-E@*3o_F)& zi0XZGZDBz(ugkIgu6dr9WqL45IOet7fbxAXN|wzi&yG5XeOWe0HIimW%OJC4luvLd z#*KiEgC&yCz(iahcy>jw<=aiNNJ{fthj}qbIK9wsk)RA8 zM6?HGAS}V0_%|M%#pk7TsQoQtXPA*J&8L-g$YJ?{BhzVawy`;rXS~$}${aa8N=|X| zWjh;;ro&|Wxk>{iHy)9lUc#=M5TBtu1T;4SdPJ%u6FpDLleoA=%O8=_lNZl59lyOd z!okQe?8ezJA3vfDjc_}L5W193QF&NRHda>ndNP-yf^$Iy(kjRXh2zea&*!vHEJXYeJa2#dl`Z`QP0(B0ZX4szHn9y{uuQ5dw3Kk}Xd5 zKpRL8O_uY%bQaa)&nWw-z>O*57YsS#PV)+BMCDXUedtt}$~gZo8hOn3AWAd!TKd)N zbuY=vv`SAA1%C)D0huP!OaZAkf%1NRnp8$|y(oS1y80{~Bw3kAX;yu(pMLo1?lPNO z%5;=u$Uae?q?4t3ds^S$mhA0)YQCSG&w^PVBlzZ-Aae0w>2+j*)zC%dqUeSDRl) zKWuDtf4@6i>C&knN>;1~S41ahN(ej)t|V`G@dRI%I zkS|2OP`YAYeg?=#(hf!;#l*}2JO{65>99IBGmJbipH}4=hzm8ny^cq(ojAGv51J?y$;jJ_9Ptq0T*hVS_T~L|&K}(^z98~j3%7?2`*rd#_k|wwebs`y% zu`2Ld$w5@tGHlH$+2P1YdZ*W0Ib6MY*t>U&(oZP>Tv)u*bdG)vI8aZY8e$)*EiOC8@+Y2w$|<4?&7!?IkGTP zC|K6LB{FA_q)>MFlo(upp3%oiA;~3aR&Qcw6b&#d0%!xxIoVRHH)j|&blvV8>MoCo+$XPr^i zt4Pb9t>YbSBk>RGK&`^VX|Yudj$NIgAOGxTQ+E%ig<{rr8Z;o}#sge%d)Jz`#!Xau zgp*QkObzxpZ^Sc>67QRDX%i#eoUdw!^FFin!po@3!dwjWUP0f^{v!82@J=wW3lQZk zn7uTE5z|V3?4Bt5kI8Vu#n656NO>pC(noQXz^b)Z#bcbNQJ{8^$e{ia{31pR@e-HD z^X-so?fq6?k8Aa_{D@pZ0`((0CP^%gy8*>}<%(~YQqQt0<}-jw&f;hKZ_mV2q#}d^*@oPE*Z|EHg~+_mU!wM^7pL zORc$s&y!*cX0V{OFhj2JgjX~CKKsGd2!MYuO-DmaxmRQN861lWf`a}0_ zq{(4`jmIh6o6mfjctTc}&r-^Op`*3qTI&I(Es&DeY3=i;i9bO5aRw)!6p7FFE}5g( z^v>3A_`kLhrlnAQIvvLu^aogQ86x*_yL>Vojm{tDSw?z;S8uy~^mK2RE_zBc1XpN- z+a-yk^NjA-5e9NEAI1nHYAnB-lu7lp3ORr09evj|zW_;h-dV2*vD=mRWETSrM&?Nxqb zC`*~_{0g4okc1|P-vhw=thp?jzXI11_o(=`^2U=zZV1~Mf-I`fV;@BKayKAc5}x&( z{Nb8v!#QO)mX@>{*ADTzV6VCk@TX;bAJHCQG7 zlMnOC5oz|hU5GWomK!L1g3J%&pC+^9%N6*BIz$~3Y?bF65ZBht}^GdGrsRZCEQ`bl(CTI!M;Q( zq-55-QfcXYvucl^;rgu3RydnOp`ieKCxoV8!0`ATCLg&E%9=WAc!P;?1bkJRzY8{$ zIdiw)4q%gE`|tdbi|Dv6C(MvUJ}BE1Mn1z>SMAbC6Pz5&50S*k+mRSPr$_FX;IN)B zNmv;2nLRgQD~uO8S}-ea2>pv;6{MI>PGyS~EnULsdK#7NsB{|D7e9m@Ih4iuilQYe zlH}NwSZ#4~)7@s`j*0~nK(ovdw_*dXZ~WZ)Wi`dxzR;~FJ{d6mNS!7D6cq3%Hh3RQ z3V&f4$UMc)Kaw%HR+4e-7o*W2t10=`ErqmeYcx>Sd=OHRsvbZ+R01{=7_P=)EN~oW ziA|j@w5g`xgoyGQh_t|OoE(ANLYxFMs7el!mb5my0e;uq4iAq6M`47>UGYV)>c?i4 zxmHU3Bm?urkSrk=3LcR&KxY$?IOJZo#(5OfSSgfnZheG=_S)8U;R>Q!6aj$l6aHNO zn<-eQDS!fEdMD{c%?508iR@z41HfD&r$nh>cJdao_aRkxTznowg~E&PbOVr}*uZ+^ z+EVG#V0!{3yHjKJ0&`eBWSBrI&a_|$q(FFvH*_w7FPIp@r2XU@jAy>UOv94UFE7r{ znbKkoo_Qab$~>r=tYzV6--P9T2@PV-{57{o2$EE9tk=Z-VQr7Y$-IM3c`*pgUG6oE zAGn9D*~%>|xioQgS*0~(6nk{(lrM6$+s^$+6g?|#w65sUly($V>5O1IY%wy6dJI^r z@$Q`541yXS|90tp@x+R)$1ZbnGe}H1umtuRCQ3bXhA`ty@CG9dSYnye1QO{C>5y5i zZX-F>@E`+4S0VXaT241B-iT`wHkbyw>nNL!Bi?iJ9*bw_zP+f9Wj>>>2F@!Z_tb^c z*s~igZc7zNog3+Bmu|XiZelS6^kcIIC6e#a3p-Q2-SL1lFE{uxo%vnj@;C=lGk)|U zy&3G_!whah>_}e@JAUU5H`E1Bwd&TAuu5+Y)a7Z?sQ1OTQwWfe&br;BrKWK=)oEJwfU;22!cc3S zDKVh1uf#PJ^`;)B9n!reuhx2frn#O!AM@)9mr=@GL4>fz{5rwPjn3>+KfjLlBbG?D zDWOaGBujuSU6;4yv?y)i%2k~?RI5to7xYTZtpYfd67y>b#di+VVtf`Cz_7Io)J1$l zSye_G$V9XDU!~=SvKO>0c0eCVO^iE#&^BkdH$~p4EtfZyy8x~k_HKIuVLmi$_3hXl zd=n)0Bf57IBiN=HPkcykvN;VuxIL;9H+EmB8^HR;ks7ogNBKca@svJ6>sJjn3aSL| zW4AdB{Mqhx-6L+bP7Uj~w)7F76M$mFGoyC4Y&@Z*I~z~PQXG6`SC(nmU<-Qd8YNYj zXNXla2X+xml73j!Tpq7X+l|;npXMdqr4zZ6E*yUxBmk-1q$nEnVjDy3+>fx8f<@+Dd%~O~3{SY?;3@Wc{ziva%(Wh}S zgh<+`W5XX3^cGTR&@g7HzHm~etIJwIP@303(<*wUc4+1F8q!r2m1S1uAyi=Z7S|b! z;uhTCYnP&`Mxu5!qJkwc?bbx1Guf5^THqtPU^9C%e+_@iRBODsN0{sFAsRk

dYd+ zS4d}U8K!Zadsm98=}%XjPEq9|7_*fHc=P40&0RJs`Lr)(oSxK$Nx;YFTqy`Da^24F zRWT5d&pc`t*k@D#;;UNTX4_{I-mmxF_j+qf7Z1t?oOn}PZ{kX$vH*rUC2uw74W>am z^v5!*;$1SDC#sQpq|wj^XrpsKl#ES%HO{6L29ms`oDm9j_F>HgH&jzDs+7a_D0sg? z0@rJcx)f=Wa-1)bcjh%*S*)AY%vpYPmW}>u&_+lLZ!Wy}<=Z8v_t~I7FJN#+1N5Q~ zohI|jY!unBtO_$qvZLy_|H`zrASx>6jo9Iqc#%a3ulga(}1O-|~eHk~TNSJviz zXPLSm7xBGwKbph{MJD0hH&F_sB#?7?`$3k|ZaVBYwD?*KlWGd(F5v*>8v{o9Q3^$x zdh|SmIBH{e1-xA_%Ji5@7q91LQo|Q)d>@DMN#a7EArR$Q$J$wPe(V%r z5z|p?8G~KMVw-XH9k^_0<)mE0Z2`P%B3W|V1Skh#un=JAUYt*oXSi)%*|N=ONSpJW0+Y)Bb*PZc&L?6|01}ZJMpE(Yv5&#;R8pv!IbKgyzsjULSK= z!JPhnLzzYPD1pL)$x=isDC*?0vus_$JeP~nKH2r1k1~WxP|SsWViXoss*!dg&*jHx zz#~hR651>XY|*f8()R`d?SMIS?XfV(Vi3#%QtM|qBcYB^{ZKwo$AsNvq~-c$fJABv+% z6A|T?@D9e2g;Pa39oj1YKO$XJ+i%4kzN3Cv9Q}HJfPi`s#~1klpYvBkYR#dF zFiy_CrvcJ0igQG>QDQb^;xd!z!6+S=?dOsua41Q+%A~+CGKo0`WQaGm0mAe^_7>+Z z&YP&gjSx3#c(>^wy6_Bvih<^Fk6b~Ipk0BoRRPBz$|B8yI3c8GEe z;)jQE6}#wRdMJFTe@ibBnHRPRC5MoR9oG}O597UY5@9n!oj3SnG4Hhu{y%wtqJoIT znV}lc9?np@V(&o*hnivSUu!~GYdk*?%*i`Z!X;R-q+r8=MT44P#ZhZ_+p)-N({WLs zwAj0E!Hpm_)`B?h42gr2VWbOat&m1yxF&n1O`xdCuga4v5=cXD$FJ+J3<$~qYdaj* zZk0ayK3C;agpdXV5mxagTNOU}zK8q9C48AtC<=?j8>q;g(f9(5*6yB3?6bNJRTis} zep6+~tln0oi#ucxf|Wc_D@94tO1#(PcpzX$Y|y})_|sYATBNUC6Kx2wG}eUCiXiQn zHMz`;;J1y`^*0-}Bw%Bvxdmvvfo3ZK>2unfZODT~wOi@^H7kMA`lXAjcTlTNPkWUY zT2Ut^iO}P~saFWjF3f8Ru!ZfWy+$EGb`g~*E1}C8T|J$SJ)*m*ljoBd6AMiz&*szV z82XmPbragqOw@~b#9X~ZJ+Ba~LF!`VvVknn(At@qLymd6!c)(<)TfWu z*-%>O22gOflaytAl=xdjJ8z;}xzx%5hr8E$3P1R)OwKQPqBzmBF9DhpH@5-zl7G-Y zq!#Mhj^4^gfwwvNf@=8fhR@KlU7VSnid9xF1bE7=YQAKpu7B_LCY=-P-@CJE&N$n6 z|K9p0A5Q7tTh(<)TU(6wS0B8>j;&2Cb?&!UA&bWJivC1_-k6So`Q-gseuVYQ6Pq-x z(RamWavwRGAl1lt-If_;O@$XWi>j~9V)VmB&P(z^@}|?=PwYa3aGyEb51jWV(Ko1L>P!pT2Igz_$aAq(OtKtZjxdJw-obPX)%g8TFWEE&+ zWs*W_sc{#cc*laB`KdA40X5*Sq0*Trc~M04X~nkeYLMI}&8j3DCP;Qp7tPrNknT=2 z5`)ri{eUFXIs>4IkAie8heeWfj)%ie3Dv~BHs3XO*YDoF-Mbt5kZSjr26tl)icv>z zwx^NNk*DAu)XS>VHLSe<=eyp64S7I{7CC7t_rjawxHL$njlr11QCuDy9?rp(Q=eHs zW0c}v8@{w7;k{9QmQjvDZ@*?9?taFp#m~zs87r!NWby*%k=K=G^l9!>WZJkh z`2`^=cKrwWz3WY--^2~NSH3@2N&Bm>9J4N!Y)yp2VlomVpqxgjU zSafYCWFYg;=W+PWe_K)wf0q0eqXwf#ji}f68yZX_uZqmym8b3c0cRF2Tw#cCdL502wBqvQ9@WSt@_{~#YvMoE<{n{isw zRSR6$!Uqm;vv~>C+gfvIzM1N0Y{S@2T$MB~K)y$AArX2$zFA$uiYTQ~Ck+}j7tu-B zHO#TF<%77yB_m9kO$F>__dyX47U;hAA~$Wq&xho+ou;HK?yJqq<6hyc<&(USd_ANW z)kTAfG0LZq4GrHQj$i)TOgCjfcDO~|!&M{ADIp1J0RyS|)*ryw4*id|&#KWZM9Hz-=*kAk-8@3r#nl{2R-g*v#MRE3rGYuGlnR10h zsU22V;{l|&op-OrVOe#M^SSS;sSTQ_!x%clEi>kBa%JN7j{kVeT}^#egRp8?jT3qC z)VV3X!AXOWJhDuyyg0wEHh*iota39x0X}e5hHugj4i71Ny_-5kQqR-l=SyXO&4{-5 zc0b|F@4vB%og^uVp=ONd`ZuDf@xu~aHAO_)PSa79W*xe!h868-$$V`hx-W~iXBN%+ zT(Oa6t&N}e(%l*mhG=PjZNx*8Lo!uJDj`iW6^IJCMY=(WqE8F`7K z4EU4{)f1yKf=5?i56LtWr|s>BudIAw)fIj5OrQ8y2>?8z#;Muwm>31Rcp17AUg5Bc%|S;fl) zdn(n1>Y|>)+o*3((hFJ`z$++ywsC7;<&DWsTp{!BtjSqzP^zr32IqD&P-W(!VbKG$ z-{vmzBD^rzzNKps_~#Ow(LK-BscsS){S1B08fhZ)G&f@mslN0d=F@DbT3HjrF(w;q zc)=hqnv0+yGVBa#c3t^1T$s(lKCJMX~Dp%QIirvH=d%lsP&MSE&VZ6ACGb`txiE|T!ZY` z0z~J>zs%1S=@EHL@**(m>ZYw+BS-);f|o_y^3aj=oj4gWJoU1=r8xs!9s)?6*U; z3|=z*)IzP=T2bS@QXB#yvJs+x#ZGijXO=FJ&=$>wVM?|3=@ggC6fqANYHJ3Tsaky% z7Ai-gpcaJ|00C@q@(D(tz(B!#Dzf;C0`}IB;ihjTntq0|$)eR_Bk&g1^W`?rAI+Y| z*!z+iJ9IxBw9X!(Ur%_(#gX|LRCvimY2@Pjm?;@?-!)V)BqaW3*K8G55?Igna~Xxd1{2H}!eSf$ z|Bf_GV^j6eX;yx>x2+aqrO=Dz zVn2l>IL4NAWksYBPawZ<3_7J6C~u+_J@sL&ggW176{eIv3h`tJW#EfNCH-2pxT2pB z72#?kG=!Q~Zb;D%#|>Ylo8Fwt+L_25YB>-+PGPC(9Lx+2nCDe_zS=;XXosRAkjA22 zSgObLIfQXpkB?^LJjvsq_)HN+zRxaIY;qE#oOVrgFN5_~c-dZJMb_XoJX(tI+4FyCHcc2qPH9vV>D`kYiXa_8DbZX<3ciSS~}oj0VQ~e z^X){b3Wf_+=Po}lvs7Z!IKW8ND`C;b)u(odD&T3(EU!YD`kv8YN$=rBfK%YX=DM@> z8)mf!#;!F_Q&8nunGARs6$Z4(ZFj>}j7AgT{xhg_uUQ!5;hzZqC^g=Sfu$U7PIL*EtzF>6*>-I$A9IV?}nX9taa0*{9hFKfim2mq_VYb%yd*jvZ=yvKi z@>s;$b#$Db6gkuTL7tCXP@%i+Z!qHPCTN*rgrCyI$**AUz+bFc*)~r}NYYpQRsTB7 z4-dVxtx<3J=JKuOJIi;MS9?*d@Xii;)!0n#cCk%ObndS$xxd$!>NROuMP_T-`0VW1 z@5FN4)Yo*>Vx^1!aOA?n4~-U*W(M9n%d4x)tIO-lHo;FMefinTPaZ#i_~O~;j~_-?9IolCVvSi- z^_U=_vF+SnUGpUAj#+H)Kyz4gn!T*~0eTm)$@ti`cb3emSyyza(B+9gKR-X82Vc*d zj@9~f42SdQ@upYtR=whDR=_ccsx^T-I!aoQe`<)>b5a-w;5rN$7t6J zhf(GdKU&bLeEwpjbV^uSGdB@2sPBeD$Y%e|r=Ql}jK^j@tW}ogwz*@^&S@xQ!$SCq zdZqS3?C7~Y9P+=Pe#-xj$NX6tYbBzk1Rq}v&4+OTL+TGxc&5kFR?;cm3FR(&bSl5szVU;~)YO+>!~7=S{QTw;7mm{HDK(JO9F5kfO!d#Ll##cqM&#Q8#QLw}^n|NeP`i z6~fO|`OdKBS%S?yHAVONSD`)!>K}G34*ZLWHOpH{4c@ zAEh&@(4({vCD1d-^1uZlf=YfjdmxQ&m52Lds8_#ln5b*o(y-9FFiTq0E#ca~^hxWD z6l+53Z2#SE7sk#3>@`VAF@?#Sw5(>GFP39?pX~Q#&D|8$tpf?xZ|XX9$-B$$IVeZR zLRzo7<{e&UA#(FCAl0s@2EX(Ci#t=hpvmxWMs9#^c4C^qJft&}68-jdg{4d6nCpeq9f=TvQ-Ex#y{fZic zV@v)NK`(2NHGMzfRcAHWUq~TtnH9w5Y!^bj)GWMx^tL8NlROO*(6zf zFiNu{M^z9{G!XifkXil-pZ>%{6N#rbncg>&TYjLec~~Sdg+!uZlOGZ~7#!Deo7b|4 zpw!GRO~kAK#>3$p6jKwOar~wO?nbU05k(A8-S|uzKN8>Xs0T?-^_}LqWY2KB=p=Y~^S9PAf3Iz@<7qt;}h6c1hle>4GvV z>11_5qk+iAi@L~e1cigkDYH>1LIdz-0dcxPJSviSc+RSUM@VzV1SD8n4T01%NQBkb z=?yyO(rpz6jSArfGj@q22I-PW@Rtr&(gB%JM5v$I4?g`7g6h;)pDPjDG-g^*W<@rW zpkmGu;3aZ<>o-VhGl8v|`=+f%1rhapWYYe^9if`(Y-jsvQ2D!8tSn}6SbKvDbnENK zzxH7*c7&R=rlyD0FIsU+q}nLx_TVQ)F6XR62TD-r2Pyj&n@?(sAzh<*NSp{z)Vh-@ zcBUCPCLgywt;cuB5Q4_AIi(~wHp)YYlL3C7W33g(Kx2I+X5Z@K99C8YNZlSh=2&~X z77QRmR|0B9iq@;b*>K3W!|KB~FFeh?ttuy1k0|?Ja>|Vd!Cm zG&crokO*dlezvvyrdRr{Etm@DEYI@dq@*)FKt~d1hO*U^%Vv~TNfD1sp6Q7#PU?4@ zlu7ANPpvN-9_}MwOer#$0Fw=8mFhgq_c3W&IY9zDc;%b*)_fVRP`<&&;bvo)xcF*H z3P};x+L$uOteN4hF@B;(WmQ{|c+$^##+)JdN%zPDd4G31wA817Y<97YD<- zyCtQ;Ah<@b!oEOTG3t{SRS`-$DR+vLAC^~bdAM#H+ptKn8a-!BnQa0D&;&&owq<(^ zTE-waIY&PtW@UAQu*m)4E#Z!a;+LoOc(ww)b~PaHAWwkt&V7KfB>Tga({pL@&0}n|12)Xqsejn)j?9lUloI|_V>F>c>mRG z4g{#Aq0Q)N4#|=Z<-Vk6dwMISD9PHXT~h?Bbv29WTyL-<;ISqN#E>(uYG2*Prr`?P znIzC4$QdQKO<0B!j1|QHJZEq70Z>dX=?5kW`zb@4a5%Jv$YrrA83En6W=({rd}vx`1Ok4Hngr{Nph0r-qoN5tIF6y|P9;ADDlRw@34eH&IZP(n<3Cy1-7 z!;C-(J?)4hKxj{(8nZ;cAS5wb)&z@o4cf-y^QDP?oD_MqX(AE<_ybY^{}zKNK6=%)B4k-J%4O^Zw?Rr=u!0%Pe)Y>7c%|3BE8QnJ6`i{d4ues8DMCY zDQk-$O7Z+ivAF=Q6Mz>qL$iBXE4MCdr5Ie=#+_OlB5qXbTs|H11}TaJ;*1I7OG|dV zgq91YgGtaW>tM7%XLX6Y>-@}Lyw%tfZn|Kn)lMw=hnpR_Hg?X-5YL=EXOkhX9aztb zVIm=YH4N6u2yr*$N+l%KOCys#LBc2s+t#zpNL)?;bnZ)cd^DpmB`bAvQO#PHjKp8h z5BP#^r`gIEnE0aI1>3)Y z+&F>EeUeD5Po{@&hZh$Tt1?Ym5DP*u^)wsYF;avhdj}%Rg&XA`%NbO_BL_yxcKIYN z%1U~1fLvjMxBCoKPTxU*Xi5Si@j8*z&B z;QHlybEE$Dq=w$Q=F7<08V=tdvs)BBXe0+v{u_}ZS@?096U z>#!_|^C`GpJA zt(wpFaQQvRSmxVnnW)>f7< zZ~0U+_lu?J{ejnz7Spa>mXh75sGAdQH_?MiUUwGjv1HmF2q>`CCjw?{F zi1`aA68RBe`*)&QFih|}#TkIPAzh_q$Jm_JpBP&hd6uioDlTwhVodA>w#u_X0waM~ zz-q1rM>F5GM1@--kYWlut06M+o3l8jxC$J?K?FV@btRjZy&WJB?cr80$%g)|UZl`A zgk0DKs#YG}T!ZANVKZyU=aLuc5iURJZJKg=@I^AH`t8+CGv@5V{r1|X8Kv1tzrDU` z%5;=uRlj}H&<>2vSla1hoVMX3ADf0x!N>uSHZmp`MQ}i578X^~g;Rs^s@p{tVE>z* zgps`Gx(MrQ#8)mqO3Oi946$FCbCsHQj+By(t#|IX{U(>lUOK1bend7UzdTt05z!IU zQ95>R#J%(JK|XqL{xVAk`H=I7DQt=uxyHh|6{#7;jXDK`m)vam_)S&B{DH-xyf=%Y zN=NZQJeZbIKiYrN+rRf@f9uZvmYn}Ku-%?adEbj+2eECPgZzzG=+6G#byw&(E|B7X zP$V(({(0rr_wU}Tl}oeca(7+1Q9d0CxcBbv-(7WIio8VRQlXf*_h|p_L;E?2i|W|* ze)r-2-ADH0VOk{a+r69nTW*+#qkJ+s?@$<`orQaA`w!eK93_mU$7}odw)XG2Q5~aK zh4!A`>T!B>+&RrhReY3m%JfL*=ib)-mKzf#PE50-PLiD_qkQ56xxT;U(1Mt;V$2r_ z3mx3tf8YQa#l=z5$%{BUN;-qI7>xX;p6qWqlHsC7GMp`UbN|6ji!;a|4V}H zK&1;%I%#&&nItqirr&!v_wPQjjUa-|Yh-=@o|}|$egNW{9Os!2?E3x#hoH%{Jf5U} z^XvYkmxHt{^Mcq1lk;%@?wakp92EIz6!z}ur5vZD2njs>Lnq(|hd3H4Qn!k5<-v?z97bl~{8-+LX+f#`^;?1JGgAT2$6QE*TckVB0Lv5P5B^)4=$@M^n z3+?ff{Rel!(3tP~qWL5*{Pox^n+-}siO3=8qhX;8*5BZ}3-jUEz;m#q`z^!X=8RQ} zhMNAUNjBCrK7}lLHUtdgHn?^y()b&u)LNvMsy#d=C^}?(rZ5n){u4TAJ0Uf_fF|4y z(x7+9OY=HR?BrDhWWh|l%+fb&k8(DvxB+iedO@Y9wa|D7qL;=xI##dU6Rom*VzHW#_WMecBs zJ6z<>V=G$znDPiHSyN;lY?d6q17~un83kzaXMG9kL}tsC%kzZIGwMU0Ob;MTq@?;1 z=I{e2D4@;)0oIg!V7q+ubZ<8)^AVrJ(z{3z^tFMz5JsnoiQ-Axt&&l4RK#QCj}5bV z%$W4_jqG)uq}wi^Oh=>hhk2GI1ME_5e!U!|0kP?n+IrtL z>*FR`K)|R zHA7{i%5U!8mRJZ6yKEE#ZlC5pYJI#G$%t;i%rmq5;vwmQ4?o@I8&L#SGI+hYd)uKr zWO<=yLaY1|eQianYqbE*?Q$u2O~^&6Ic5E5i|-AQW9e$UckS7-m^lW)jQ? zU*9*3M5E$@#_0HA@MiY7;MFb%VAUWQ@ThAlIXm77A6^!pD9a-g)$Us5P&Gmlqg#(5 zFY-||%AFr3g!Lv(5;q8WxA}CX9y6}5s?4&^nC*F~BtS#o->NCuR~UX<23a>s*P zkD8iA+rPV#-Op!>Xi?n$4HM@)?~RVDA!zdA`wcwI(1xk(d=w^OKOvI_9R$^FcIZ7RNyVj*FGcgH4BjdZ)wX{H4wl z@xw(E%))ctm{>uf<;WMgjR51yFgjkW$iXK9+jj{&UY2$xH1FbN-dD(Kq<~yLVyU2`(9N%G<^$EvLU+G; zq*i~StSCZ0M5pw>Ci2pmYuW+L$bYBE^Mpv4xLbWR8ctV`Pe%DcJYpurbs~X;#}yuF z^`Jko*enOtwBRKDo~uwwyEyq3LY7%1|4@C{Xns=z_Pt@Vz+I}DS{Pm1 zSy{!S5nshZh;MQWGHwLHPzGwoAw~+9dYYV}Z@%zX3@^rozv-N9XDO}$nPS^TEG*gp z!@V7D*0^W6FXrLyXHSBeWIQ~~vqK3|558{WM&Gmw?HyxLs zCq;S~R<7ecsE9g`(qbzcs@w@a*X!<04-eDu#v?Ux2K8o`B>0MC-NB1GaSL)Am7>|R zYe7?bzCzFc1RrO-u;EuS3fAnZK?yzZuy>wSafk*XqH;SEx>G`t<)~>2O|+ZmmHExb zk-a|#s{93ulb)z1pT2*?lXq!@oS|4YRY98=iQ&+dV1ldpucnw0F;0Sbd-x!Mv6(M6NG+#xnHg5r!ZRP3jJVcr zf-5q)h^HLL*GI`|I!Jc-u#WDthxD?8`>#k#fCwWoL-m7ltP86 z@_e*HS2A7URxzt$n|D#Ny@}mojklKJqqn^-d&b(Q&^ZvL1v!3ol1FL0_q+Tx4!W2V-{;)Z{*soDB z<7W=XzMp!=kELAuN0V_0kC3ZeR|*lV3VD589s$m**PaZsP1=htFKRTP)tP2_yD+D5 z!xy5k;U^$cE55o#IUo^kVR0&jPocpAYSju~qUaoZ(ryXMfZT*RN9C}%;4}l+Wxuax z@eS)1qPG$SkQ~X?Z;3ful;W2-_u>H^?L`Y&*CW5$xpk^p+BF;PH)! zc;>KxSo}y4yP}L2&Cj#{;o&htH9`g+wkmM4C{Fb*zQ>!rn=|XFT^gJjjvvcf+I)kY zgeF$goGy}-0Uf%WnA7q2yo(#Xa(I*^{Q-p&e$N`L`EjaEkxnW-Y#@+%Gja7n*~RO^ zMNd%BydHUi;~QDI$R0z9i4-_)cNVjA32SQzTWoclD3g!lY#NV7=if7XC+S2yY;x=Q z4OUC~&<$>wG}C>cv((NIgijmncnGOSwu*TCg-No+JWbA;N95SVTT`Fr0`APBI#+0g zkY5U+DC%V2gE@-XeNc=J1BfksF}GQhm&SF`1?-J5fho6kI&RmS9+A`b^1=ujkAgEG z7N;IE`?Z#=7W36tIszKkymGUY)i@I@09Zk;^+-#StQg$8wfhf_5%=3Qk24s|ae5#r z4a94e8$cCKmNA~%?3oCg>^}Nz;2tfqVa}T|e!hW0v1{5S{#dHq%#PwR4)IjC24?XS zNr78>X7#3=|GPxox-kaA_Om=cDa|N7Nj!6s-ReM?dMiIK{E{@8Gvq9e(-IN%raVp# z;_S%u&5gGFePhY!E+yO?UCMYg)iajCIU5gE<)pma5ZI=h4Lx31jP}>o)oLfZ=?#QT zI{vLoCBH?I;IsVT;nfpOaDbHwO#Tp?&Q8aOZRBp&sq#WWLq$=<4)WpovZ9?XEyejf zq~U5t@BCG+c9(!Wz9bG|vqlGAzrOkk+~l8|X5#RQUB@vmAyXfHSRy4-kBx~mP0>b# zTw7}{x1RU4mfXlbj*>l$KYmm4$ti*5>T3cJOI!OnL#LUk%Oao{qH129Zx9D|b&;oW z_>cuUa`GC@1FQ>*2bo<>$v=)ubC4vNiJ>@zTukb0GAfh44f?tWM48!l=v*DdvQX4i zz6+?_lc5A8C&Ht@+5C$~R(I?7c(w;3Z8F3md;!;_&Ips4R8`9)PvFHBU!dD|36t48 zR_bSgMc?0ix&qJkOw{Z4U~(iSibT+ij{}b*i9oiK6k=;<1A+T1^UOfVj#{&v1dt&O zlBD#P^caD^rw+PUP>a+7`2S{o#l3qSHo(n*y$Fh{rzz(lr zk9Gp{zDv>ZB#Gg+UA76HEGi!D1cp$j)k+8&uEkKd1daxBLy}?!Su82<#=KGuE-k?h zWRC}R+y1?5Y$tY<9y?g=!Q6?qe74jECnr;g%>G_v20 zQ=HxJN?h;+;8AW29g{wX&$V04VK#PcvQ{K1*{&>Qc}ITzy%@!g2oZ*yq&*__*x3!( zG!U)`j{9d-BGauEw(C1+N;|A=xj~WaPi*W+ny7uW4Tr?Q8wFgD?i}0}q)_)~d$~wv z+RJ!S`t^(jfaX0gSg_4(&OR(8(M#&lmMl2aPftUwuW|k2qTTqR;{JYj_|-TcF0FJM zwsk;m;Qeee*9T5AVs!c+4>_nk8<^&Z+Ig9|3dl&p3N%cW$r}gPHFcw(ti2(a&xMA% zz44+P#={emlKHZjX2xO%0UznnCbCwzmq6JjpEFRSnj3-_@%S!duxtnhAVXRmiEf`R z5h&uezONQsFF3{DDmc()*5?qXqBR&fne2znSyG$}1)`3soS~nA)R(tW*GN22GBikB zFd8O>_N|sRSt*!$W}1_Mf42b|f8ZLB;_5%7O}|Ey&3@lWkC?t>^^z5ut9_OqAx)-! zV&8;X#9&O20!_=9l%A3JLCYldS)_zZU^7+YvDrQAE&0nYwRRB|5cH7XVw|mV(7R{T zmFaLhxOZu-q_7)rZMq(5gZ?yYu%MeQI~$D{^-g$c%!9`OLLzk8ca`_OR)u-$C}wM$ z>(X!2zU|z1@qybKK+I3zWW}QdqIu73BVsWrtD?aw?dv<<2Gdoh6Nt1^r&(i$qr{-9 z3dg5$I>LP}vwN0Ctrw4-U=Q*cVs${wRZsBDp$%92f*}Y2Hj#`+(FCMt;0>U6-MhtP zYck=ZA!B9mW)up^TTsJJ=d+>Dh_-TQ+7aiAgDw!puF~bmna`c*WcKbnJG;tlOzQqI zkVVisxF*1Rg@nb4YqI+DbfDau(Xts#ivq!$VOQh$+++!*wHb2Y zWSVDKSbTLolI+Vxa+)S*qzH)llNE&yx7o>0lVTK~FT>xEnIh?62@i@m{&2HmX(l)? zE%;G#P}U}Ih?7^cx-?2F=unLqZ|VoA-Ou(jX>h}{J^b;AJ?_ z=F-GPLPz{+@>q8;));hkYGSM348d*M5j3bYGLNM3>VW6;=!B4WpJ%;KTj;`GZ7Hu` zWLC1PuIgToFU!Y-llzRT1%m)gGtLoIR(^Et9b@XS)#3}oMF`mKgTMRnBJ4y?TK}>a ztVb%H%%F9wY3~L?MFBm*IwQ{w~nG#o0({O^wXa|TvzJr~!sF~TE%J;G zEqopqDO5DNna*cNcOt|N%#V`<5%=M=-AgJS+2iaKL`yCbxA}3y(db7Temz@Ttt0CG zu+f&9c?k<8FOU&G6EWn)I;~inqkW&Fh zM*8l+Xgd~J3=I=2n~T)QWv6rwt^ZV(cBIPw zFgbmI)A^c2X+KlXk*HL|2?o2*XD%UWw)YRKa~=$q?vql?N7G;==v{6 zyH=z4y`SD$`<2$e_*>s<{n-}J-3CR|J)D+RKK`)vN3E*WYMr!NAO4j;-1=hFYJK?E zzy08gZ?*pD!{7a&)f%^2fAXh)yVd&eADw)wb<}EI|Cv*qg*j}suKy{onWWV+fBvTz zt}Xb{jW}!4$D!jA(UI0N!t8`&i$Fv7AU;_c;~?RW4&sv^6=nQutG(_z{kPidPNoR5 zx2Kw;ONwq@Te!ARXiYLqMO$i0v*m7aAiHew&0`? zMebP|iO*66XRj-bc?q#ThoV ze(jo)Hj}GI6A@9&#>z^Omt7*ZZZTb{#*>w3)7Ij=2G>;Caoz01S$vcfzm^U`N(77G zoh%KwQa(aM*EDy4zTUic?OkcNZM*d-bkVj5+qo;TN!;1`%Pr-`Kdsy-7qJQ_ehZxV z_x|+XOu>m?|H0o#!HNHY&xwD3(5i9b&q@6-h`xReeqKY z%b!zN=yu=aVV+fSnk9uV9sa^ShUwb}f0JPP%L3C+HA{z|uQde;@lU=bb1}%XYWs zC1>$D|Ni6$VFwS2ba<2iKK`ro=ow{d^njEi0jL702g?C9RD(ua-~8wrlClV7R49Pb zc45cH&<6FPV9>Cot4Ur|)D-^?Yt&oXCK!Mrnr!@am>!XyTg2lIQlR$l+`hYGisUFQ ztKuAoPgtOXJ@w^kcbE@OlA@dDxSo2L7X31=;#H6uuSuiIVB1215U+isS|K0~-`0Yp67To=XqJKg&^npPc z)&O){wP7A-ut}J_&`=qZPE-BDR z)_QBV`5d?TE@>6Nrn<%bkFG87f3wkF%jyj7-|4R21DrNM%nQ<4=JP4kh%6F398EO! zMSeggKe$5C2<$?1k*|!}-;8^{+^ZO1{C!x>^itcs?VXoZGPXxZz3@ZX`gkzI(UF$s z>9ZGR@9~T4=1Ka-Y{P4C##~JP z8ep9`8axd{6WLa5CDsv1juR|LZq2l$wr9F0-93_(lPoNR zWf#JIED&zOO}GLHEU*C*64>2v|CeNeu&~_sxy#z$@4b3eUER|oOHRV>_x=7ukY~E< zeD&^n^@;>P3{!qbxf>e?6yu5oA*KiHVCS>}E>iw2(76=VDz}N$OEmF^`(nC!5>d-w z0QC)kyKkW_g!Zgg-?G~8Ij#bxbfkn_N(i*@`F6(#<&5HTr1~J^#AI10DoC3G#xPBO zC}a#F9aH`Wp521~(M1a=rW^I6;VN|$BqtZK3ZZWF;)0XXI!aWDBY&RQ=+ z$G94ab|eG9dI6Q2;^Qx&9F*Gjl=!H60eYvl;oi&!xUFT*EKP`LF0bdp&g~cG^K`}6 zh50;O1Q29J)sj^rEs0M$1HD)CEN@XG&{mD7cuqfx8SDm8vv?%5pKs+I!3MGX z1Q8Gvuo=Qg^hQ%$MVl6ql!ioaWCTXiCQt;Dgs?tNm`48~&viDK$Hlx;p9g&Cw!M~? zWIx>S-H%5KJuRe6#RsY{Qmsd+j#F=hmciUrIAeJBh6Q2X)8aZudBFdK$&bkD^3kC| zP}fSPXS$YAhHR{mgRJL}=hzTvTr+#bkcI6-)dX(#@03Yb1&uBtE4?yRX`|kn( znAEm}I1^jXo>iwUN%1wcEg>*`!YZj%P;eyuBNmmYS0q2xY?@Pa+kQZP2@T&7u%L1x zRGGNBn6?V}42DIdrUpeN`@LR!9`2-=$8)smY#FtHbFY@?Cwyl@wSby|lvqTcs<{E# znj*zO57pugTNdgewM`Be!5GA1Bfi4r3bL0ToN;$_qd zz}tG_nN~i`321httZPgkX;8o%rN2HcFccNI)v?3NAic6)3~;-?7rXmyE(=3KKTrr4Qw5eJuKnm}Bu^H$m<%z%i3fZW8K|H# zIeuB8KF|+gMrwj%L;lY)*&X5|7_VI99-g=)#9YKj@eK-G4l!RaBH#d(?f6zv50QFWQSZ}m{saY zO02DGMBV@j2c~1Qzw+n}a3aV>A|lcuj5MV4aCMs~-WxMDHe=d-WzR&WC$bI@GEP~p z=T9Jp0i#2AU`t}RSuTt7Pc5+p(>$>rg1WJeinIwni6I-3kN|fNNAiRSNH`jJg0}$a z3$Nk&R+?ZNH{=zr=y;NjruB(daTjXPo6s5o?G^A+)k_kr&z_N8bS$|X!J|Ptl z>JZ2x^9;^1NrI(GL!h0+6s>xcJe9H}J_{1!pfiUgw}^EWE1KYms^NLoEXK{%AxnZX zuHuCx^~4-alyKr}9V18KkijXmN8@3YnlH11^|U1LP#xreP6sQFF@~XYPU7kV6}u%bHiif&2&@t@?c;DY95fU~ zRGv6a{gPvwcq=l*EcCSCy$m>tY*tgs#7E+Q=4bI*oPK<))3A=zc(GEV(_4A^G40D!01BZ-}oJjm0X9A?EJGKu8 z1Hw0JEO3)XTn6b#PfwOo^#rL^{7F-+!m3pRl?^Y977I!Ip%6#;;#nOL!^QE)=cC$_ zI#(=Llmtyo3ky&Y-pMQmH-uTkgRvo=L{dnI&*It}bjS~v2D+$I)bP?C457p*!iYc# zVOVs7S9})a-a0D~S=<}w6q2Coj_X8~4Oj?$^WubT2cc}$uhA1?KKx&f=Z%e?#W2LU z^^4jD8cSDS>v4-1CAkpB%p*Q;NsO39)0&0E4$_(;w6cA&oH35B=%dyeqQS6oEXh{c zQp%{OMBJ@B0nFX0`CPr?EeVk(oeZ_$1?0DjGrSVKrGKZ;pfyherYW=RhSqWz=TYQI zokp2BWXCOR;l$f80ma5SRi)DgARZ$BCynl&5UP99jrPPfPEDP;C2RwhdXp}O>(O{Y z^|k@51F8_VW3<&^0poTAddnE0z-J7*1kUkBEI07UU^n=u&N`(XLLe8Bol`em>1B?$ z^8;;?+9GteC`YGO3Nva1o?EbxMK>w%h@w#x?4HPw0I);)T-R~8@TB@Kz7Aahrl1Pe z!_+t81RX>ab)R5p%~-RHC%T|Mo=891Esp@;VVwRiiio1yDHt;pPW03uoG8=)1Qs=V z2O&nUkK{&$03vyaDjJ+QwkzCrT(FU_zCmgbl{V~K=H1jDK z9+##%zYYdS$Ia?TP60`EiKgU`qN51{W8|A)w*&dNtf*~@_sSG5p#sr+wL>pu0E>7? zUXy5zc>hBkyUOwwid>aBW$+?cklo@&?=}pyLa=G)v>ROSNKQbwUo_@Iv?nt(0Oq0J z=dielfQEPI7L79REtkVyQ&NKv_x6~!@@vV(#usuQQY_1&16mRj_2>sy2%0dsOQpK) z;o9kMU8X4&0)TLI4ynD^(v4u7bQ1f+*PSX(N1w-JZy_ z18=aLx{Pv>b-*D;`-D8~J+7xP@gaae{)h*>nzds3Gft_e>Uh2skm7Uv5D0w_!-q&X z*uVhYF#}PaG{Ho~GQ>{dl7`S0hH{9`h&bc6m2LY zRnjkT#!;vPcgd9zm|+XgLQ1sgNZ|T0(LV&41zeQ&4gyXYi~_xK5GiVvxaA3ks7o6R z8xc_pbdMQMQ!f$|&r$DjZ`8NggKyM(Oe}~nu^(T8r)FW&K(GSdnQK8Pmt_QMd5W7y zs%FvmIP6GcG%PpV=^7-|A?6p(rlt&r)V73F?zJsyQY3T}gC~VZlk83IM~8TxeAsuy zcZo^FoCsJjrhjPGbX|*biAHM&;yToANK(bVQ2`Sm38SsbmkV|sCj(@^^e(o39LEoh zV#kc(8b#l9A&$%_hF`{>2M7W%LJfrl4#9ocb$qAjlt+En3SUtiyVnqEaIahLvmxoC zcq(>(gx79hr>?+?H|XaKl7Pxf!qsLo-2f{yhUbY5srP+HijYW5zHblS(_CU96)a~2 zEUI0o=J6nwApzHRBzkUuD>LD~?t`%XDZEvjC#q$`vhnQ%yxa(X_QRh8@TUd-w8Ed8 z;m<+%vn{;UAU=s^cy%%SNx`2U_;VxtxdHy%1b@=-XMNB+X=}=UfPsrRF`PnbTM|I1 z>tV`%l*WU)%maam^(fvyVOwxhV_3CFdjEgK?fB6R?wI!Q?W5$Pz>oQ&QI%%1ph$<`J% zvS5Y*_G=piCoosamZqx8;UF4?r!9^+HJXNayQo0AWduumq4BfYuk2w(AXr->hVrm(Uu!-5?Puh<8x~^++?qZw#rvx z?`Px0L}=4vU?*=$>_>VEiA)IQkPm<|4(NM9bqGrP27sZ&w!}8<#KcA|9)U)($FxUl zlZVWr(hCLsg_d-WDf77o%3}nLwK!&-2KJct9?L$g;a;R(*|HDgHq%C)7dnwXFbL|^ zMtCuYUs7!pzo2=lh>9x~ukdZWeRJ0)ov{T>4eb0QzS#Fxa!c(8)WI{DT9&u8Z|cbM z6pll}P5i=f2tY%^#8zT+LC}-vU*Uubu9I6K#~WW1a>1~K|Lv-5IOsJ7o zvJ3*EhA3hpzIrA8M1bHGEzfgYyii<=h|)nIQbE(Q@HxZdzT@z+W8ZRRbXy4ND?BCXjfk?9Z{)dbmS+e7E9gDDa022;B}5Vv3h8tSxqEDESXkgF z2q&x(9yOADGR+ek=$QP3Zct#Mx<&A;vT4K74Gk2D4Y=#69cqw$)K#bLQQ`aBKoAQe z<;B31gbDQ_$2ezBPE?I)bD}D;T4V6^hN|Iu<^*PR8!+6%C1=jQDo@A}>z5D$;K}vB zH1q^4+0h;wf{2T(wA#n-WNGZ=U5wL(#PI??UFEs$X-O)i1oVTG7`XKNIoyLRY>WW& z4KIb~l7B2e`na9oje0sVeZ;!pwOJH$z}w2qXs?9gUO|^1Ff} zy?|aKN-32@*Xb9}`HiySR#L^XQ#>3I08zeYc_GF}{%X&%i>6?1L6R734s(r^Aj^x88>pA!JBD&@!6kRi>C+i7P+@9C4QHZ9wU?ss5SN00E z6-ZCDqX~Lc5gt?2DvJHJQ&h^-U=G?tITyV$tbGoA#MBtj#U`pVt@hd>)*)z;w^q+Ca_~fg5CuaFuYtp+ z;EqT63f_d>RLT5JTLMp1`xeOOPX15JpE2DbH$dWuZ-IIXGDTp4mSm2mshcU%Q<2Om z{;b+U}$7e`R-8+!lj)}Qb;$VAU#jwgcmmXR5TgJhxZK_7S?~_gCMu{bfr7m)7>z-<0YnS zrty{vJlC1Yc4YF|d?!@gXHI&SZx+yggv`FvmOoRQOc$L>X3{k0%~>d=>jm6Q!IJTo z0m#?r)m#(K`0^QJ77lYk65*O_mN>2}_e8!85fbV+Wsj$}iC3)wj~DDg#?sU~6r>I% zQnW$Jba5p@SP>0*3VSE1RxJV%t*lYDT#{&po)#%urXuKp0{x-@owybeK=` zWS*zEf_RIWo=)>bu9V;{C3DKCm3;{7g$J!rOH^x5^JF`835&sTHK<}XTfqMkZCtA^ zFL4AlJ!qvP&66EGrIHS}I8}({G0LiL0n|21;-|s4z_-FIw!r~u8c}DOCp&qH57}JY z(s8^B8ZE*1sWR9%1vfNo6#j&9rt2s*_jc4+vo zPH|OTXVxmg5GB^3&)nm4a7ca9#35sA_`$1^FpHcZ+v{pp@h}i*tttqvV%b*3(7S5m zb2D%_UmSZE{Q)sfmCYm8q*aErgm~F5s@K-_c=1hd3lp zROV9x6kw%<(m$a8ETo6YtPHrHioUuWKIpeIu3uTKu3!0LF)TJbW8$ts$6aw9Q>nUs>G|X5%HcubvLWjY#?>7+ zuApGu(1KSnOAnk{EImeQ#)OzRlV)R0X(Vi74&*j?XgfYnNq%hkBCt?Kaqzf& zxihA?+AVe?ChUd^um^lA;$j0$I{_{!ubRM^pMac?cd>!s-jYIs@q$JM0^hWQs~&^R zo`9_J2!__5%FwGYRtV@GiAW;nFRVh3wuV|J;DD%+O{pv=vC9%DZYa1&6V#RoZY%X? z%t~mL>Zgkr76eeEnK!yC6F&8A08^`PL%%2!>d8%Z!Bpy7iHt<)6~O}7BLpt zO0aNY*e-T7a&>7m#Cw)F7}z$+Sw;6_UvNEkCuY!m@H(?}HaS>j-VhBUf( zJY&MGj03PI5KzetvX1)hc#3~yaZSkQ|;h}}-Xyt0GdjlJ2z^dwA=+lGawu9ze zB%)qM-0Q+FDT`@hn3!!@gA%5h&ZzBCo=MjCFHil5Bd@~VkdTQx-y8)EGFO!96wfcb z)V+2ofD2NTd_Pn!MP?XNLsvf3WPz&U%5K;Y0HlXgvf&}S7}<;g_{UWbbRGp&VgU$D z3=N{|R5SL_;WW?0jslwZor2twp>>2^ne@1QjZ?eGHMzm39jC-6o%!{=wRPO?zo^2? zM$Hx{%D{%C+!&V4JGo~T9lN9_kH!mhIb53?mWG-$KqC#fbr(v?T}WIdzz?;Zw=@hv zTQqKh;_x&C5m8u=U7qLT+Cq#6#Ma=jd6=gtB$Lj1+=^@t4n{0G3WpNAr6AW+O5D_% zsv53ufr|z#Ky5!1tn~PBKaJhAs04tRK1wtRDv@Zijl1Sl%>$Df7;q7iTw%%u8O%i1 zFEJMEFp`+CnMg_!4DN93GHuf}%43d}*C7U(wYO7_TQo%x?WuS$Og@{s7o%n<+l0Wz z9W#b)o1nb}c_?C?pUs@E!1j36@QX84AI`5qF724{0=+t(=q4fjB>NoquyAJ_^nAFU z?I8MV4nibu$~WE0K{x;m1M<)>A=nJ{VNLOY-phwZ(gXd2LnFL`qY(Zi+{DWBZQ@Ip z@SA|Er7PXhkP~xNXjvE^o0NJB2fAl~=X_)=y!wK*jtm z+w+ZbdB`r$4@3WQfD)I0H#yhu8c?@DJo((PHz3tW^J%)u?j>Vkr~xw*8qd4?Cv zrAp>(25L4_U<(E1dc5kIQ`QkRw$XuMp4fgkV9y2N8KyD8_Azet${_tj5^9iR%kv$8 z5HHnCL~hD5nC8O}GiCDPj9EO)%g(e|zKY{QT6f>D${sqP19qB#lML82jdwgT0Jk&y z*5M#kj8XHQis4&DNn{%cpT-k>Hk}N^4>dWn6zxav1EfxYAB3=T=7829w23#NlC zs$Z9`JtnS8$X)*;;3!%{us*??r6HO%T@TLNiV#1Km#nEN(-n(1DICFK4XGeBRjAf{zCQ`- zU%#hOHV`^bbfxp@TtfWYkvPD4GpEFf$m^HVKzlkDZU8xlqT%=fM4XVbrkhhycOpDy z)^zhcDWVXYIUeRMii8Rkp+F*?Q0f*K5lJl3!&5n-`b*6K3QIFy%twrRKcxYK zwz3>+tM)`W7h{mLV$=sF_S%oC1k^qdsaA6Qyc#LCp%0aYfD^~Ja+-1udALVG9$f?7 zP?VM9zy`&5^9SU-NC|35im5>^U$k4Wst7D6MQDdpslsL)sEiA&o-@TK9e+kHpG5al z)(K-GS-*$?i5yrJjb7#{Wr!RsC^9g9`CCdk^yQ1|x#1$!;^A7=LqRSk39cj8n1>O9 zHwzPg4LhD^!F{YM;ubds#kL^cpA1FYaBBn7Aeu*f*lco;I>iQ{+>8n~;aX9v!)-pb zH6?O4ST@Cx1clYUOF_&7E7QgYj74JsVroLA@pw|q5KPMhAwmrolO#gu6I9ZS5M}QP z6oVc>U6YinJqBfsC)<(Jao$k$D|(C<{_6FUEBvvWX|kq-Tqc82?GYaY&K3gLK`GbU zxMf#sK8Vr)Xa`ZX2CJqSY!eF)B&d{E%1c?$;EW~^`YKfDWzZh_Z4#dECSb>pID`IL z5i~SI6B6NlVnV7*eo;{EB2W?4s9?LkQuBP+%riLXlbC9XC=*pU)wDFz>KY%{MzxgY z)8lqO+NqHie1~5|8;)cnT@;K2c$d~6PlQWCK^(CFL^6s+!U6?htPoAW1`=kE&U-we zHJ%o)M4KTZfzl9>Wle`GxLz@)G|-{PZ=jZ`r!Cq~(G-}+Fs|liK5V*Ej$7g4Tn7yi z$1Jb~3{KP>ffnPvF2YeD77Nu;FapJd6w8wQsZG8Bjuwa208;W(%c34czLgx?PnmYn zov->m^QOG6FF-c|@6gS+f!@8q=pO&j)vB*zi%n+7k?5mTSajW*D5oEjJ>u#Z6+>j4NS zKESu~?!bkLvzK=cBrvoNi2 z+l|px4H)@=%!V9v1;@JnlECz#!GpX@GpacZFN@*2vFNwf)lLR9V z7>2>imhYF*!luwG;vt{`i5)ix!tqU;4rq~AFi+R~2K;J2-t!0IWZ^!S4zh4> z%JbS#kjJ3^ViY-X--cOAlTlD2D0yuSai)#t7RDwuUS#%UGHDD8EPpgUgbxqAR1ilF zX25Vb;!qeCzQbFv1O!C7rst8x0P%#Biz6^0Ajy#U1rdLU@rLgk#TnSM_X0y=3ra({ zF^*yvfcu*zXd0?(CIv@_0*n>?yragH$rDDYV%e9LoQh%D5F(%831Mk)$i*7`DiWtj zCwM|2T~4Y{AuA-@ys|=Q-Rd07N>f9)$V3_BIv}+SUu}0v^TGlNSLxMYlI%dnN!6qc zvSDwvguch1;*;uo)Uj5unqJ=r)tfx^ctTX5f$#8x$uLaNPX}hkXzyixW7iZo+&YFk zsfIldKGs>wsd?pjd2(7cB(NSaRhV;75j=BF%^!A6-W9r=9bRJQJky1j^iBlqwY2Qd z_;9+7jzxf|FB_hp^3dG{Dk)sa>6B+JdpcFJJz>Ngw~l3}s;)B)h!4@A5;tVhr^t}t zZpiQy^eO~o-6TRd3g{Y>j_ZR?C*dU?%L{oVE^}kb2ggyk8@U-K)sf@ysUYM7_PbCs z7ppGCEbM}-aYUAjw+NUPcyeL*wZega#BO!#Y;FrDMGX|Y2=rQ_-~<;`pjI>^%R*U- zBSN$(IWoyvXekk2eWxdasFGv#B(Viay1=&R5t1x0F8ZyJsu&4|iol_;9$jBe-+?goI-J8QZShaf;LkLv``6YVb`beeJLaNTh3Vu_$faM@4OwHqOH z=9wr-#1mp;DwHHBXjgy~$xYs_wh(%WsS1VPGi|>OBOt+XW!e0oj^76*b}M|6M6V+Z z-x?wco$wIZ^x-Xxw-RMRRU||avs&L1fgr40U5PN8(Z^BGWi|Sz6_Wu6g;2wijDX34 zB;aMoLHir^(g-bu;6Rg+Y7%L~xh(=H8U=>Q4{1+WAAl9j{4&c1|Fl`OaA#oBfaq|? zMkY&RNA#%!S`Sa4QVaq<1dRYWi1`pOLK-xj@MtV?gwb8~Vj3DA?LNd_C z2U{xu^=5wUwc76Cwb$bAAu5{v0-n-6DtzTKs8cW~$&15-2tk$uLxjqbrQj zIJFo+J*W2Y1@xjLiC|KA;=}T|!RH+Juz}YUA~6FwXbz`zE{`PbluM>7T|$C?0WTGN zq0s=y4#E)-RuCr3UfdpwGiWV{{F1!W=x-bkALY6lw zq=Il3E+*JF#?~!d(D5+c&isNHLct%ww#mWqxB)Jbg8(wcOz#AdN1kMt5g{=E4+V%I zs71gMfu{bo3Snwk0#4LHs!{>m`W8y&tXX!dc(7?9ejEqcP-{zoX}I2rkzzByO6dQ1 zz5~M*EwKMkv{P_QIBEtVU`-)o6C+S7VR>RPh&Ksme=UeU;#s_of4^jaVCY4bD|HAn>Hv_uz3WR0E&w%DPXBCUJ0N? z0yfPtM5SRk9iHl~Rbev){BwjmB!^WNumuD$S=)hnOz}Sy=2H)qnD+r~EDRPJT|M?7 zq(XsL0!|X=!nf@XzQSqn*)iCGL%3CDav@Cv3ymCq$EsOJ=n2L2BMLeS546K-1);cmP| zbMC4EKr@qAYC;eKLcXq{UhpMRJB=GckCWaGD%C;*0M`izPa(`(4HZ1fDwN!gi( zI8yi|Fe)yf1yvwO&r+dqOia)MiCD{yQOc--9!8r+<|F0~IT5(3X3ATdKjRl@8nIh2f1e@9J z7%sR@^uWs#Y)XVyavNhSMU&xp%M)xjFhc~3E$~?wZbMFVg57MdS>+PC)X+~Wb`HbL zY!Zs#QK|zc*om0SBmkXXwvVf83JW}`g`l2bFqcrtn*0FNd?a9|+L z<$lvH(;u!)_S3~BLI4ieCd*c_zp6}co|MJpS)e5|0nw&5Zpzym?F-{9g&#g@*Vi>c zQ-^JgXgk1hZ{l2&zreCI|2pUU3%(=b9upY#DpW|#rPIT6sH}z_>7Ez#J~n!*yI)C* z)b~3eDPzU5Yre^a=tNhHWkc#>^wi-dK6pXFJtrM7!PW-cDT=C|2tsY2|Ysb02S)0mD^*0 z1vli;mB(}(2Hcx2UID8W9r6YtB52InPKr*-QoBYdaY*RVXv;gLbmOYidLQt6>A-*W`2rRFjB7@*yxAVyyQ?+i}X_ zuxMjX+v-%CghVx?BAr~+#zH^6z)DhQWspV?t(U19#lyz5nGxmifI8V|J>j}?7be;{ zF18M*s6b8g9W~d5B@XPGz?{*n6w(c~L25Uk#og2$>RL}Iz`TK3 z2zDB(-oq1vW;}lhTc*&lrUL}_R7|&EJ9vIdGp?X_ii&+)!$9H=M^eJ@qbL*NlYk-G z$aVCQ6D70zWt#nYfNal(oNs>YSV4tG4sgJV`w zs~r+q9B#GLHILA2&TM@YT(veW^6p>a+lx+;ff)r^&fvcPQ zxJ^L_BBW0Qf9tIIARHQ{qo(547=f^G-qaBr!oti%_%_4WYIce`7&7Tok5 ztf!C+dSrl-isX(K`ehK%O@tAFmr`qZCwuI@N;eR*O%jgB}*NIql% z!%j6&c3|v@Pr!)8K52+K2RchY-ISaU^XwTRcW$8dX#92Y>^E3pLSHLR0}pYhC}Y-T zt(XqnTT9r08Tw$GTVjI`x2gyos*O*YMWg1Ka1MYR&QI>->g1bnm4(O^?`XsgWiiTN z3X_`0JQ#ZraRGAx`471h#bNgt?|WcBs$je*KuL*+v4q0w0Hj1wI*Jzi#nw=i7Aa$+ zLB^;eLjANh;p#$$g4{EOjiXpZsYmw!)uj;uSw(^AiN+w=B1FyyaG~ih%)0Ab+Ip8ECYE8xkjpTd8_L5Pb#S ze0{{aXJ7H$W(0w7wG)r6*4(P&nQ%TdjCYV`R_uJibHVV%AT_ZRBjRWipz4~i-Hh2k zRR8fRVPles0tp2U$)1ap-ycur$>eSr;8d$lyGBV1)WBUQ$p&ZB5q1W1)n014ByXYV zkY!omVbfCHsE6tZQ0k)j0m)a}f#WN{-gMr8IDt`d<#`IzHM9c`wB!MTYbz4sJdGgR z3-QuMnY$()?7{@`0gib?}lD;6aVgzsSL^A(L z)3h}#D$mQ-gu4%q63A0V;0pv?Rtj4*L`uOSmRZGErGhfzXC(qFk2@(%3kX6nNf6OY zBkN7PLM^qftg5Mzx)DAFtiu};ScneOGJOegZABnO!!DXgJ;J9d@~IF_2aZ)a#X!N$QO`h;3Ej7%0ppYLc6UlrXP_DK3>HAnF0xG^ZXH*TyFlh(Exu>yv%OV=ZW z@2aCZhykei!qUpN0)HojL?v1|y8je!3=KlCr_dvD&7Vld5Z9`RB$l>&98NtE-42KG zRCd}-$CAP`4{==T9bBH_IU^jk3FGgyScgyxs4b4$!G+!m#G)7>=HuvyTBz$t%CBJE z8;lpm9^OzMwtxGdPm0i#*G^fjN9X| z0cI6(_gic;i9IoTByJYgEB6iVq^iohO6Nb2!3p6<+=G-bh&qlrEf$HlB^s)yDtLm+ zi!jh+#N*UE zqih;BFsE9T0F38hDAx@PPdmw~@hovbl;XOhy-GGE+|zkFOB0wMvEnF(lhPIyB}tU6 zDtDfkfjMis^LVE@@NnS`)NC=`_0`6w9m$CCmVotfbm$~j8ElBVPR%!6;jtsd3+)*c zWH>z){w((Dr!2QJ2XSpOaXw{tQ?tS$0B2ECfjlbsSn5_vN+}&4vXerHU`ry{hEN+A zvXm=PWcwAvdxv+X2K%laOKl$-8cU7!j$W}vyVpxDcI+7eo|GdC?jO<$M$R|z@q}(4 zj3=~yaZal=Ql4ZV7J7{M0x0!YweNMQz_I4EIffcD70q;e!8*hs3@CJ&iK8P%5N ziN2AMp%FeJKu7FJ0*#OBXJn!{DRk2ynJf-UZXm*pK!uQZ7Ra=)A@+^AaKwk;p*>Ob zBddz(YbC-E&|c8$EFK8_I8cy7(5I~Rr_Y)!w?^wzCs2dU10AjF+~?sWj0+kV8Vlm% zcCTI1`j8}2M;`0xK&R!em(~KV;nI*P3`f;V1g$(BXB52t0+0!2rr8_9)q-0jL>!Gs zg{Pz)Ch$OGrSa{dI;Pu?p!NjYFi+Hi2h*xoF;RDuTx+q~WeiA=mbB+$YC+EnhL4lX zr8}l6uqa>PEyIrIr-W|O%J+ucXWNH*M|LVfkHJJEH9N=yd)yGBCAW=Tp z+lbR$$PtZE_ozl`dP-ZMsEAI(N(!w{v{f-(&~AkK6Rt$Q!!(6fj!aTa$YppFm-d{X zcG;X*3mG=9w@H3Uls+L*6dh7brNHH2X#O@$?Ig|8vbn)44xC&e1_J90n+U*aq@N(< z|D#Pk^r*oNRDh*&_<=ZHtV$wvwtTEUC5{!KPTMYZrx^V#D&ocy3kX2a!j`CfZQn`h79p=Px*7z5;R^MHLL!wRLHjP61sYJJKV!KiG#c8_BL!roBb)TB5})?N z$A?2lfg?CTRD((*ihQZViUG$R3f_q95`Am-tW+8-sgMP$aVGB%Q>Fh53&z zP~WV!OMR$bkrq@DDULdUblM84j?A0)M8gaMsY^i6lDS|+tjtA*2}Ufl6moya{j&m1 z975kBUBW3{5!V$LIY|~-$T_H{9rz*DBjG5PyK|JDsl-zu$35hUh;0}Fq_v8_(>$S6 z74SYRS_m((lW{vPI->x(L2XaTC$3x&gl4vyOx zPO`AI972;tVh=LQ#TrvFoD_H~!V%F{LqNe+QKpKNwEr8O-#ADqFT%0OBFPSElETxE zd-!@z91#Krm_U+j#_%YSn%u~Tv=mXbuR(=2*$Oy}fx`!SIeaM*zI%-EX8-uxS@%-EWLedsq<6Fa)*y%g@^BNIW^DaRya{BAvGphG?U;=5t;^-SqNlXr@GVVw$BY39{Y`hotd@-; zScCFapI0=h=4FmMVovvgXqPYcy5&B*=#-%F6Lu5~2Etq5iV$%EQTgGc=eG8%BVrJ# zpxq9H*>R)CvjSIRw4DPy1=c;L&;xuBm>_sD1ftzUxunDsj3I!$-6BUCGQVhxEp>fB z_9eq@g^bh9QYSuvVdiL<897X74k$rI2@HbK)59|vI{~Ta04m_3i;i$VPevEK9%5Jo zl2{^qg%h(;YYG+Wo59+o3-(v{nD&B8ff@0d(MA__&4U$^Vk<{8dkh*LR&MWS*Jm1sl^*tZ`FQnI=!f%mYUqSS`LZ{bL z!}Wo1BaeV|4_?^3-t~%bDalnv$-#RPlr~6ggNIv!MW-wYbfsp2%M;vf+^S$~6|g7@ z1DUd1a}I87ryM=0GRy~BQA!bSDYo)_Hrt)bXY*ZRBz!9}oJ;X<+O2I9xlN%SWxMy( zNZX_k?&(hFHbapa->-UwOvZJ*v}_?$a*CO$xfF~;3?f|tU!1TafDI2_p+b1-FOii@ zN#p>7G_fOaP9kvkh!=3lfOrA^BuF6Z&hs0{9EsEgI~6zpzwt&+?^Jd9t~GF{g9MR| z&X$B|i&6*yz%!1kE;|q@v2g1aTo3%FEpV@+SvKZ-IEu4Z)>CL9NS7zc{nIHf=&KX;QYR{O(%CumNu%1)z>`Bm@Jmesp%Q((BX2$cBPH*aelFN}OEQP%a-x+d`|&0|aRG;2tJEK8l6ju{5ft!21v7A` zXwcbZ`rBQ@F3xBplYkB_dvL#{9MgVYC_476>H3hj(Don^MNg&F2~(aikEn9V9M6Ib zmCeBmG0_~52tNQ1@XiPTkoaGg%gfqn=s0BIAEO%vVXftNBvQ~x5WPcg5D@6Z4z)me z(pV%lAZRqG04d7rRa+7j!#1WN3HN;TYSa*!3d%+*hOd&Mk#Iu={Yq6(v+N#w*03fA zAnepv1iiYdUd%j6bx}p|qRuiPRWeMdA&`M40-B3iB=&GX9ru*+d8$R~6mJmi=UaKF z4rcg-bP2c-9Kt4WWx&xxCb|@^;8WIRC`ZQDCIH+IHPRe}4S3op6~SJ&EImQkod_Rl zX-W3;jXc@k3Y9$NlBh%aMibJf@dQkv!H5wL6)b75Px^f!fsav~LA2wR4Gg1XdU%_g zb-l@hH7EfevwYL-0p(k;n36Zkohk&ldhk76EgP1tI1PH)v2#F7-h%j<+Lo1&)I$uDD%d8Vkm8|OUm=OWOHoW+_@i}~NXUCtkB1(^hKm=0*5d>>ZQq?I9Dqrvq3iB) zoL!wKn0gh)NF$W2F1_p6qm005U>Jz0WXmk{ll{zl%mA+c*_kp zMY`!9p6y!bJ#dT~q_riL1&LmaaHruLanGgtlavY(Js`c0^98xAkn1-SxN3SG9WFcfZEUXb6?$mObu&vCh~!ff>=a&*5jbdiGa zwH^xrWF=8Sli*JZ(digx@nG+;^e{H$%T_f&E7?spXy<^S7Wu)t zIBvCevQi86EiOPMJ4L?KwPo>XfPgp`7*rBQcz^@a!&fwJc@n!m01E7Wo($|`-Xh*? zQ`Q_fWo`3IK=DH5l=_1FcbkbP6(9(h8$S}B@`?Up9F+kG}67r2`_9wj!jFhC_atX6%d<%43lwc zevfQMfk4N|h4DFBMcH~SN%d9TzXYGCPAqj0si-%wo{pzHqanFOAOn~&9;*SM16%lb zFqOyE5O+0@5F8N_cqoRTg5N`6(WD`9<$BFLOt!OK{{w{Eu+t}*bQfle3gS;D>301E zNw*=GmrA^ggqx11;Hdc@B;Lh>`2>i!Ayoe|dVa-`{+#iqO?KbRE z85rIqZo-h4Gw4Gj3TfGsv}psOAudSkp$egXkJoc=34QQOl4icsh{;B!84RpWn$>SZ z%THrD2PYO5qpfJljrfr2(W9huNK864T}%dq1Ab2=8~74s?GgAM55nY&^Bow=QUDD^ zu>hzEN%~wjz>dWTo&c*Nm>aN{&vI=G^6?rF8!U~R0FCoFW1zhl(S~3Ua8yuHw%XiZTGVC`-j$bIxQmaEnp!0T z!cLU|VaD8a%Cu+oNU)b*bLk<7*nA~LfH6G+EQr`#O;sV{Yt^a@-H>OxaCpcIXbwtM zUFXO=bi)su^F6)$c1`T*A06u(6u0R0Bnq9K+0M?yx+OL;(l;i`9Qy#Q7*gm>0Cb0d$sC4pIvhQqd8Uk1S;oc44g;0F{F%sr=@SO&uxv+TD>`GVJ;l?6yww?2&9X zo6BZ%9r;`?Z*+9zw{3NKF24=mZOZ2J*=%-GS9{k~cSm<;cfQNam)bivW%HY|*=z@t z?bx>T5h!?Xb$NS!+gASs+E7s5>Xvw}3x<+Ek+CS~ZuPfqb&EWoJ%Pb=N?e8sZCZK* zqkSV+^^Hsn@7*pNayt8`ca(FPU0p{e%Uy@MyE{Z$^D2@%P4RN)4Cp%4n911spJ}oK z^gX;S+%tS5m+>prj2dprsFb=o(!SxQr>_^;Twty}v!*{2Op2TKELuB3J&<1GxY+{v zeefKtddXeK@lz$sr5=M9WoH_$5a^jVJ?_m^Ql53a+0!vV$DJKJ1!u(JtuFgS(jx(H z;WGA(>6;U()r5d^*J=spGc-8oQ*-8I%_0Cd!BLF2-X#G1@^1+Mzn1{KG9JL|j5*l~ z$o2BFWA zu%aQSiZd=OOoEp@xO>5$2`?ZOgCgtJi81BU@*WphzhF5N>jE?uuK*`-(d0ra!!(yo zZ%%Jc=QH^ZK5h8soG~w-!y1ugbaLkfgy)^UA@z6iv(V5d1pQe6V+{z$=D# zUCqQiuZprDm~?8&DvBQDt_HUaAG;~e7?$1RxkY&3xkZeCH$6}Gn}vQ2yso7uXkK>Q zndZZe>qDHy99|B#cjqwg=xFDcXai{Jt=Q)Ema%UazjAN?4qmY;R?(erU2sGtAWk1L zJorx0DfiS$Re?{A>-RtpG$z0?DCj$KqZr$PD(NU^<=gX}`R@GY_S|)gZ5V8nzQLWtL;Zte)O0SJZpZ&}*+NH0 zyTs%@jvIa?%sT7S7CmpYwzS0n=kJlyl&^_eY=g#m+i@3zPWqXo}HDcJ$ZlT$cVZ5 zaJGG*I@;T_g0c0dyPg39!XtgzTrRg<9U^XGEC=JtJ{88Y8bv9wa@wEi$49scaFdL z@+-f6=FJ;U+5U>(p7zc4H%!0ld2P?y@cOYWcm36?rdBn5=k8yf@x#n5uYUR7J#U}5 z>+-qpR&)2S`TJjd`Tn;Ydj5yL{n1S?{p!`9SabEguYSi%?)yZ=`u4`|H~j8W{_NH} zc7N$Bull>Q{_*eT+Wz_vAARvn%Qt=VcYk|!d*Wa3ZyQ*3l-pO_<^Jql9p_&8{(M)< z`(IsZ?drJr-TSjM)~EjMMGrl&XYjFeUO4p{W6!c1fAz-gYj1lo+wj6?z4uS=IsDs$ zA9~wOSH9}QU56j|(=DH_?S11vB|rI#LZ5Nl;F-UE>Wgmuho`*!r*D68?&_P~_U5>S zS*aFgnZ7Vx<=$e~=;&1Eb(@Y%UA*h!?URFZnTs#pX%AezWB97M*(1f?-l?hiVZ-Ra zg*gZB-kq2<4qvLtNm!k=>do<2=yfl6?6KKze)2%;si$3+oNjqz^LL-ucJ8&m`hc zlf8|d^qzeWeEMB0t3Ul{fBRRiebL{4G4<%zmY@3k_pey<_Alq(@$>3`-8npGj&HvD zk=fUNZu{)Dsnqf>{eH`Tyy06d_iXsw{3A~D-nsh@t)4yW8$bGoOYXS)isS|V^8S?@ zZ%nK|{M{dZYS~*qIq|(q|NVwv4!-fu&E5Zf#g>n^mj3(RFI;)=U%mO2fBN<&dtsGU)6?Ux(HqUr zJbmChb3<==aNjweaZ&59pF2MOmB%*Te&{zh-|*ni53l>`#b5Z~&z{=&|8 z9n+a@ue<*%NzT94Kl%0UbH8!&`L8jqT>ZkX&wYRIGd`GFd&ynNOYNVZ`s4pR|LDV$ zn>)6?;w7Iw^6f8f`rM1}xco!&U;fPvR_8x0|KM+Ksr=2|_oTo3p!>_dJD+n;&&@CW z;=>>7f5GQc_Z*xnkG=PdLtW4K^}%27_*3Bx?>uAUc+EYy=cilSAFBM}g%9=aczEA= zZ$Iasc0J|pe}CY8ceg(GCI5ZkXzy>o+&THp53JnwrgzjfKX&(>Z#eVb>wo-$3t#xV zueM#1e$&gJ_wH*hYd!Du=lE~BE%WZbKJ(4r`>WTy=JO-(yRZM&rcb}&?f-l#u|=|6 zEPMK7lJ!3aMS(H=_vb4H@+UENo8XI}O)O^&-X`rl9e>B`@IqSo=F!=1U}vadhq@S~Tfntt$ycYfjQbMMM@y?gnV zmk#c|>VET@r{A&e9sR%D{p{tRAO7n7n_lp)eJ@`A=Og!S{^>^^{>6j;aO=ADnV0mx z@x1T+Xw4(Hz4YnFChk}{Gxz3M-5 zx7=>rk$L0?FWa@|O+R`4>g{j1`QeLOu6f39`)7VL^^~*j{`0BDKYw7y-GeL7ow(xZ zKU}t=xisRpHtl}SKcAcb}J$Dt}(s|cg{^8%Bv18@2N4%q_EPwSUzj*O)Ui+~>{=;mq_2K*jpBvt~>Yev} z{rjK(@t@y5J^0d3Zx{})X$+W*>Weey%==AZuC-KT!z|NGL9 ze)g5qez^U@M{hm)m20;gT=~h_2mbMA=RNp^HLaZ&+`Fsom*>~s_EYcnkpsECx2`yU z*Y{Q*H9mS@`@<9c-G5GO{`BW>z2)Ew_TKcHhc3>qe&_W+ERJ3KC-2br)@|%%jNQt9 z*q+;2`}*_)zh3#Zx0!cbvZ1s1wOrd{-}u!>Kk|kvyAS>Dl`rY-e)yfQ_~v&$d)A+F ztN!B~r#(FN@7>S3ey-^~TTe}Qz4B8x&V2R4>;JstpLc)f=D9yP_q6`~)emQ%_SkD) z{kOH}-ND~{{@{H(M=srw`Pb@&7wr5+$LC)8$?v`W-WN6hrfc}j?=5@P?>_T4pZF6F z;*rh0PkUe2^gA#3PW!iB)bi^`uQk6gebsN@K6~xy{NXJ(-1Cb^KEHls^P|7Kx#jo2 z`$+X=f4uo6H~gyi)n`w>?IC0Pn@;{+-=)WXbzOe*Z4VCao4Dq%zv-#ZJN;iX-}p)C zdEfi-c}HG<-itr*g-0&yo@#&jIbVO#?YDmW-#+z?E7y*W8p9uc-Yq*;yysm%{=I23 z#-4pn{{5Rj_1SID9L+7ic>Pu1tNiB+zx0lK-Z=Q%7q+}?_Q*RveBSTA{H4;T-u56%xsyD#&T`|kVxf4pzYn;v=Z2S2g@^an3~=)pY~H@)EgpWC0@l^Z#F%k=td z9{%xj{*>*#+55-m|9HpRzq)Gwe-nVprtFwFHg4@6Qte0Q=;NMR@@7Is{uWI>j zWd@Y~XV2gN(5;_;(WBQKyY4@qKJvGpp1JoA54}GB&tJOky)!p_>FOglzx0;J-t&PQ zKl6O6?R6)=_SCk{TQ40x^x5$ZP4{MUFMrh|_q}AGcEe3?=zs28i|0Q5M;HF&<6mM2 zx}SCTySJ=nKU{V9*LdOP=YN^Mq2-k3kKgz3?&qDiuXy95Pis5#*Pp(l_~FO;-#**_ zkGH-J#!&jmH>Z2A&-$`>U>9e(H^%{pgjKUwg^V&;Lx~@{VtH zf9f8vc;?E*;?y*l?^{V(l=c;HKlvS$MOZrc0H2f3j~+XA>`cbk*^DtLb22_(2e#BOTf6)u_=B3|Y4B|&JGyq+8N+NnJ01R!7u9Y41aOyfBC6|!-(FJs%cqwSx;2J)~G42uI`Z32^EZf*`-?Nd_f-AAhi z|K5icj@|lHK($p>?C$<&Cz3P+0)svwN0n9 zV{4bKV#n65J&PSXm&VK(J9cc{1s6=NW5;M`8yc}qKT|Ss0{{%4GZ@Ji6+L@ZU74shJ%ekHE68pSDaF?A2bWnmPLRyO8vkFe7jLDyu+X2O_F8By`9RR z#Ta`fJqKC&Eh-NL^g8P6DU7lIq~}j%jD4Ky0!RD=eLs&eb|bX|!9AQ7ZEc z#@GvhS2D)VXN+}I`3o3hx6t=zGRFRizH`RdJv7JljIsB^OX569DubMdz5^?GIRKS0 zcA?h(2EYXx!$pj-|Dy7Ma^I)#t&FjUU=ob6jj$Fp&Wjmix6|C)7-Kd1p3>l%W{eF{ zI~m5<1~iN zFgAJ)GUfY(pIaDXH&HvFSN(?C=>gcm!ZOCTF~)|eol6*FX=>+E#@JuccQ72L>HBt= z3$?QY@RGjogf^)RaMWK=o0l=hUQge5F~;tvGQjdbM&J8^2IxEZ&}ExfFvfmFb@wpF zUPf~PfBL7X{2*iOA|MoiJ!1@L6h6a%&jjZy8DkFuaWKY47-MgyGNX*K9{N58+6ncw zmofGs`u>OCH!*g~K>lL%!MEVwi}3GRjNN$}doCNu1D9UL*!nTpsxD+Q`;8*pd)hyI zps*>M>uQUA+$kT!l~<-+Ds0NiCsVFt`|zkeo6Q2}KYPdM$Ym2_BYQ{3`gTqXjr8y8 z9~=c4y_zatsEuO9m|HWU*2JHsedEc;UPh*7DQ&2-VJK%FypUfw&n zYiOc(=Rp79MBhMf{~o=8F0Fx;*Z@>ICsYac<@ODY>|AO+*b5x&9q7~RZPofao4{BH zos%yc85$hx8{9ducO*30jauzBRmbzET@zfr>sJl$+C4NnruVc-FIzHvW76;tiYE;Z zjgIXa=^LHcxg9E;P9SfS4fbj^PZFtoD`qa=4jrALD(g_GYhsJm#9E^?YubLz#okX* z4FGsz``2Oglvq^jf}yM%-n)HI|Bfh(Ko&~;jgEd@utTbYsza-?rr(~jY|EdAE>7D% zwDX#Y(f()kP3-9(=tuajk;}DNs}(=YPFxy+-O!(^8bVu|VL&wk&SG*D07ZD98aNXP z_6*cJ(rh6A5M%34%0L>=OvNl&#)AwjK6Z5dnF{!2XF7%Nwo&oZ8(8Ga_3BVq$=73@mD{?9Y%?T~o8=3^(JHbn*I%*oRkyK_0a zk`3gSquv76fY|C|>$B4{MK^6Z8P7EAisP2e`CMlvG!_Z0vH^)w^|c(0Z8CTKCgrkf zZ3f_O660)Qhu9<}3rH1tf*Vyo1xM2;3FC$h>WRGdB{k0_)UGS1a$N$3mX~UW(qcP0 zg^7f!j%E94Z$_2piFFbtz=;q2CA($o&ku^onkQ_eut` z2XYa6+<;)5S+mS1VOt#XU{+@w-{FUxnhTc?&zY0ls8-9AuXkP5m^KS4U!~qd+Nf67 z6%F5qHoPw{`|U`69y?eA>JSYL@WSDn+>~E;M*u+fm&YrU58td=ZnHHs{R(g%(siWHLYPhi3>67hQ;>l;*cK{+ zY8Ex2D`axMN^lFRtk*E9V4RlNsEX7z!@BBXl~OqiP%sNT0UDH6)Ts8MCNAki!HAXfZrqsTF5h`EXKb1jN=J)NwI^n83LJL61kS zcl7>v0hY)fhz(R(+#_` z2xjz88dAGK_0v@K9Ycec^`k#SHK1Fst1?BSID=O6saNmZHL;_2$L_v~-9y5opsHM? z4RQq>?|@ELjSUR%>__`r6%07hN(MfAFdD_I6dzgv8s71^6qtTcm&T_muf*Y=OK))~ z>fLg`QoWeooSlJ?-Ar1bRK_iq9Xn`cmG~WIh40#cRwn)nUTk4#k{#K^cE_^94T1hW zZMddCGi^HVw22}N7E5D>3PvZ+3zx_7!qH`t7Yh84tZ<(>nF4=INnT&>IprE8%N57I zy;>Edw#d8a6pb=+G;yD{=R2-3ZAvxPYs|J{C#^9qYAN2(0UOFQ{aQ6-=14pbF|5Ub z8Cge+s*&P~9)O&Bkj#iVY3~HB^u*AVDjTMe9zi|otssaVAP{_3$LRp|3*p{lm>(D^ zi06e!`+lWbP>n+=fyae7WXAzS^s>#HHg786AE}o$P>V2d`-&$JgF+k(dE$GQH{yv5 z_E_%3Ew?*YF!0g>Cs>y;{bHtQluGl8;@9C%IGQ#E3Jnxnk@4KwXaUdiO-==Uf*rpE( zlVwkbn1g@|;x-v9buf#kJgkV6T?h~fiwbHhmF6>mCI!Hs$n!X=#R@UB8=<&OSuocn zwLw=M9qo9Sg(ir`J-LCzyaYEd8-nSWMJmTFw$l5FR)Gl;vuoNtXd4QE<3LA z(LyA4dd8?$Gex6pO}Zu=pHvjP8Xg($d{{QWnaq@z#hWQt#FEp7I4xJ}QS&G9CfU4dT&`!*95(>H)ATttk5t9wH)$`os!?^N)( zbP5WmOBwhlCF`WUnV?$5DVYVH?d}v#j5_AAc~b#$A|L}1^T07hMj>DekTPw*z;C2c zHLuT1T6PB9zVyU`TQS!2)D(}-I-`bHn&bzzz%_YN>EYZg&Nw`=KQxU4D&03Ao>m)A zpb38+hbvRdJmu|Cj&awROA9otd8SK4Mg#beVVlM457%@G%~TA}H*o_ActU89DQCe+ z1Vfl{=D=nz7L3W_Vyje~67TBjSX}XV@Ms`W#A}Lki&fLDSe^&>R)GF1oq%T9ld5DR znCp!iWt7H(`aRjml!Y?Fc+z=P^nwa&ev?nrW|^_b`0;u9r@+O85i_3 zxu?1!m)|siC3g0YUI9Hp2~hD=iOyUe_uiKe^bN=Yf!f%_q%yZIQ?k6ns4FNLvsOJ4 zQbuZQ&wECX8@vAJ?uNh@NU=(L8+lcpuw;0?IFLfMD;h+Z>cL(huDaER6k$tUllFeo=5c!zGzC+N_=qQIKMhheY#ZQJai_p ze!%cu>j*EFEz<@MMp39jRoAK*u2r7rj?Fy_LUh`=SvIE)Tli}|vk2F!D19qJ571$Co;m3 z8C8)HSrL&yq18jK$wb-mi%W{9jG~by%4~Je^dXtVl~zV_B~g;eOh0R;4;^dL2S20_ z8Y%s0Y16Xz+&$bQ!UI=V@9avQ-Ij@p@Y~;e{@(L<+<#ds20+X98Nv2uF1?>9sJ1IN zo;3Da-Sy3Gr}3b+3zYqOXK#16w#^14{8X>CBVF=fn zkE`8kvndP-)%TL8I$65E%@3z*s4+=diCx0$>7-cyM}(=!;8&w^KZ{r|*G)N*)QOxQ zbEkBed&ITwO2;wg%CUed?NOV+6A=^x&L)#U#Ac4DG?*dG_SNaRG=Z|H3ZOwoYv$WD ztuM3b0d@V+kb2Qo$MQXPS&q4Lb44zV5+I_(5#H-d(JQ{<1tTM82zN~}jFw!#@6V1r zFr(5~GX2Q&yCCO*=>B6vKz)+N$i@;hMyn!F$|}YO85MynhGYXqV31(r(V2zQ010Zj?M>#vvc@rhVjW$4=zz_!Cr1=C;8sZmd65&8^ zy?h``(;p;h*DmMrrPmAdiad6?Jd6JUIk~mo*xlHxce>S$jaIGAY_2Wev&T;2^710& zG=mD?k1K3%Hy(G_@7LBJbT=EV?p|}F+NmWP00vml(YS%PlMQUvHfpVEr`|xuLUavo zT$!5hCTq58TlID)TURxT25*+zH$^>pzbg7s?UFACzV$4$dr&1FBwRtQRok^LTuRk; znawv}pSm(gX*@ebeiw8~u!eKc+M8kkacj+L=RWMAXbNm_#e6SRn2kxi(mT~pVCd_6 ztrkQhY}Fp_)!LoJN~R-cnn}!8o^*`q zltwb(KLa;8Z@sNOrgpXRQb}@2Y&2r`lAEcVR$?yaKdG+jPOASiKB*9Tz|FpZ503<}n-_NzGn?%u3VAvg0pMevS>-2`s&~#njDluK)Z0OJKHkviW zsqKw!vsK$}RGAsB<&Ta=W)K~zCVK4V;??Gp&i%&j-tOAo=4P$M&|6keu~1sFA*&yw zpiUlc-(si-zZ!Y?BQ2xxU3p^45u296Sjd5$9|5oH5b&Q|;Fq#ur33~>W3ZEThd#0s zM=; zmxdUT3x#B@z{*^27--~(s~jd0_t6jKU_)y`IF5A8Zv;?Sh+O>Gn?x~XfYwb>}vAfmXSc{#ApqAdJ zc+&2H!LT?e)NZmq#FKUp+#y8a+pSu2ySiTMKCXA}cekNW=>yfhUu&^5rP^#Ne46M1 z!oP}!rnx&y6XIw8Ea|5tUim?Ua_nVjPB?7yMTwNQwuR^9bJv&y!yZ^QBfBIYRp#%a z!lq&@EiTN9l0ONp0Uet6SbhOmx9hRclj>E~a(o-yAVAe9TU}nby9)KETD6UOJ6&0x zj~7re4qU3#cE~v-nbym8uM3<7KnB$KR?KV6aWmuia20ElXY`2!#>SGo?|*$9?|T7n zU$eaLcO>~2LpLhRCDR=_9$uJD+C9)uWNRu12j464tDN3qE^wcgZQ@{H3K1hVQ|HslX_mhgzp7qdvzVNG8KfvE+X+NZm^DcN$Vz6UxXMCOipxR)r`{PVhdXzSWVL)gM1=EM z&>B3Q|6cBO=47Fz96IFrR>f+r4u;{gYV`2=qgsD+_v6OnPnSR08r?nkWDV~aU#)Fd z+nxG)j1JJ<4eFX<Yv|X1>iR>a0NDnV2E;PY(q=1 z6>%*wCS!GWVYZT;7+lC9nL$l|&PIM$K62w0}NSg$SS1f-xG9!n* zNa-0PVFRRsSq_fk#u0-Z$jd&bg1 zKrx7j4Eo%@8Tr9nKu3P)M1CM0Lz!|N3{;@fyP8VeR8ndT_=BWA;IDA9|J!=9ua7M@ zE6KhbWc(N3-qLXFMh>vOuq;#Y>+_?+ZR}|A5h91IZMp9X@;m5WvTF1 zh%u-<2ZVvfLgdr-eb=Tzm^M(0drO`K@c5J}cvMrS-O1u+bI>V%FaOG{b`rcz_s~3I zA(B$4R$M8sfNeIzHYUSmFo^5uj{`~U4_HACUreY^0x*AtjMVPS-IyeBAUSS4KJN z#3as-(68wb`U5V9@eWmVMvMeLoMW_lVJ7TDne|RIpk&AY+;Lr#Z2Du*MipI(nd3cx z5tSllDW>AO8??mvCl&>9fXfgkFCLao+jNTQ!W{=*&pFXi*B^1-5wCox1+1wt_V6~y zqc*wYk3jWkx>!wnSORF@13t_gr@ZV63K2vmN0V29VfUo#a zhe0fqD;0QJfu{^4+0&H+PJt*e-Ir~ z_$I=s56FiWg%F^dk^O*tQOw{-DI{TDej~)l|0E zcgP2A?gLBKF%sE0U{_ZxQyW}meMrKiFrvc@GC+r=&>E)jL5N@{1$+IGHK5irNCO)p ztIcsI_Bi0{2FdP#9s$_y8yqThNKjl|MXib8i2>|8 zU&rzSY;zDn(EeMwmR?CW!-Qkio13lrR<%>>wmR)*;@aWze&9gfae1zs?ArvP7(tf2 z$qX>&coQ-5T;^BMfIXMudxYPDyfB3V{>BFloI!#Qy~ghm;5RNH`B1pO26pu+w?K#A zxY$LQSdo`_#!J9&T;i3-wAbpa=au;ugwp0^7{{xR_xJ;0pV)KFXSC;<*0XRx%|I-I z5k_E7#3&M5+Vf-fn>x(?L&5d3)&**to_h5_b|1C)t%4Zjs%ld9Z&iK7OER?9*e5NNLvn}NBN6H`KTnuz zwEX_sM$l!RSdp)+3uQg(ZmJq>xG!L1;@?`%ze=49^MRKIg|Iew| zj!DdL#R#ZK3D9>UD(zuW6)ikSS+KWc0VR%syr}($d4j$Oa0{uffdY$^*DR_dro0A^ z@|sq}7aDCG07l2azl_T4{Nn6V2|`Okz;9TKOZeveIo={5mV3+h!x0I53M3|0<{AJ^TX4xtK4sd{NK%0q)ik)Rg_=9-r8&2KYZ>qTb04X zqqRf#<0rL8w6pN(YBT7!b`RIetIKy6okIK7?5wLcM8`TJel(x~AM9+<<0vg;u>l4Ci<;H|9O<1XM9vJndSqK7W?~nj zk4+1e9p5@7cM~(kNJ;wBE9LS$zhs*hZI;M1kK3p|Lg_!po?|*iiCj}P3ju`V=6x|b z3LEtjnU)kz;vsu2d9Z0nM8Q1XzJCG?1Kr{%g@o((atYTYhFcX{`^hED$8=?5w;k)` zUg`Vhp?Rd5O@nO(I;CBITw80`JGFFSNw6jrf`tKcP|l8pC{D11u3zK0789WhaR}BW zP~$Cu%!BgG1=|ZnbXNI_9s9Ny3ci2`K*HZxUXlhK;5?nZ>HeOiUL$`vq;!t0MuK$V z`kbG1y{#i%zavN&HZDllwxa3V*lj0VYTyDdW(bf!H*LseV?jt&)cZk=eaDR`I2>ll zoCr*xn5e=*oNy7q9Syi*BPK;s#UYsAWV|rGo=BvU90sNd%C0$E7sMt*6* zSXw|X-S$+@pFIcWUU_~8qGl7!;ks{HOweHBKzS8z16LPS=>mHqV3kNZ+imgzTs;gy zO$31!AsGO*KjZ_sgR;hgv9h!PeKJWxLvc$mc*LK3ODug2bg$yoJs5>-bpv>WMyqpg zg_nmRVA`M0ilvfmh66NtD9(@~_@x$^CrE~;ipiD4$_zaco_*{^4o?Lv)q|G^n2dHI z*dy)w;+VS!)qqqc+Ix3v6Fe~XTJ_Eoo}y2fWJBYZ`+>P{dgfh)W0RG?ovkc#%881S zx=qBvs$Z4tDQi6@aWMgt;RV3a7DSXBhg-df@}49`ybJLQ$-a2JW_5n&r%3PUD3XXp z$U7G#NihRdEI#3y0f~_biLWR*aKf?aI-fJOK+4u2O^Vn8rdY0_?}5b!P%iB~19Nl2 z?<6zDTFW6Y`74PCr@_}OcnH`^W;e=~6Zx!$4l~b5(6ADj#ydfAG00FZgSC=R0Pj|@ z6@Y^4FJU88=t0~&%8dejxuE7Zj6LArUfX^+D@XUtfyLB zN0O#V#m`C%bB?)r&2gXGm_%LX55W8oWXqF1v*HeucSrx#afEHMa8Ju)k>_Lc2u}NW znBotkG7CBC0W4wZ^%u1X7L6q@H7X0Ui;7QFJlgY<#CLTh@iKRd65|y#aou-av**KQ z(g7tyGkAv1pwtEmCLExJqS}&${WK{Q4WIdvNpJrS)C2UiIm9qVM`ii)$Y9D7N(_{< zDe+rL8wK~5E&)zfiP~D4hog>wDEw{-?gaL;3gp%X@?htl>< zcv6ZVouAPB8W5Uv@{YeQ2u-3BL2mB*LmFq{fIzq+uyZmQK(cbuP?Npmi9CGo>kcRg z-O05&KBSY998B&9FaXw|pfU0eiz$ zSwg;2ViNFH_zy4F_2}X3kvVi(g;>55X)gU*D~Dw`zwNk@VYq6j{Z)ZAs+-N$W?MR&}e^?L28B z1YH$iTUk^EGQL#ULCk}0tifQE8frw*1pMm-GNq;pLW!DLkxZ#2g)*7kER%BV219mE zV!>JnB(ckLn1o!4YN8l>ERr8y1$97R1`d@aU*!$PZ-jHq$n`;0Jbjc44+$ z8ui(uusl0ITTX5NnzoOkWE&1l_ZdCnKgJ4#KYDiP2h2!~y*xjE_Z^)e`Sv9iR*Nly z;Opu*TW0SIwv57935<3VzB?>YJ?PxfrYN2MF~tY6PEtwgS=1@5W=+q4@f}1SAZ1yU zyU~JKicH6&BEJ)#Gn~g7bsLM*tk~Omek96BUYRyn332$rYOpb7SZB6|oKa0={{>!*zh#uo;J?}!2{cF@%m$fmw>NS$*L-*F-l^3%= zq`;z}9#V#fvMEH#V*&QSGux%?w1YgN%$4c+mglvkF4`Ya!#M@U}fh+Y{$am*_b4jvL`WI6r{G32waakUe`gJ|>T za?$2OAz>yW;v!$G?sXbGwm&p?`Kf6=qfvB%Tj}wogo`RKC7JA#P5VLK0(`zIqmIUR zAy-5o(j-d$Tik3Pel;k02FFo8UWNA+Q#e0neou#)f0<(@?@%CSwOJ=^B^5YYweOn; zKB8OX2LaeKL;-A3kj6D7RPx7c55=!yD1yAC>h>+n&;g~y^by24Pi_V$y_`fj&5?zv7lpmrOxI`0MOv32Dsb={+V$5Sy& zm}?)C@JHBkWh7k1oLibg{2hMO!LJ6d^j2Bl(EuQNA!IzwY#W%GWzn}KxD`u6Hb)H8%%_^E$PrKh4#}c zqVpC@peU$)- zr>Yw}_1&FneH&W7#NH|@$7|LA+%bo=GLK49Rvx5HS^h{V-yR;ZV2Rig=261G#O8m#MH5`9xPxn~ z1ALg|Xf`nN)5BS9^PD)Vw2Y`c2Er-z-evmMN z13`y#Pg1l2cR48Qg6=K|XNcLSo&~ZHXzeh6u)R!qG) z*Y7(?dpWkIDtD$?Z+xvGx=F+}__E<$8-K@);BaCEx^$8v%X`M8Vcl=h{jcQ^T?dAXq@Nz%jY! z#)j%PV;#bZz)~8J%1ID^{xVi-?zOfJzSnbXY%hn{V?Q~Yz$9L9a9~RU$`p9U$5!Hd z70bNIl0x1EXv*0L;I2RY`mj?TnRs&l{qN^p<9<+3ZT>DCQM_IK&Q7&euWqb$Th-l- z#!eEHq3ub#r=B-gK-ECKAy(F$iIa8@EQQ78Bzdt@-3*UDANx!Gu<^KKK7LR=demw6 zLwEVnYWT#PxJ5iwQ}>mHNX!6Q64&3SYROhwI@OZG zCA*+pu#2baMcuf`Wn_`AZmbCv`l*{acG`k9In{vF+<({P=AjwEYa8`;v)Wm|Uu$(S z)?ghcdQ}!vlkv%0?k%pOIn@CEjI!=G1?01%2O#XN?fP1)w!72rws&`$-Sx)K&fadl z^W@Y^1(Ev%sz@u}*W+d%*Q%ZSwbo9xdFm#At~7b=hjUBhhwMKX?{_o}ciZdtYa4sp z$kCo^Q6SNv81yxkLAGn!He*1y8(ZCav-_ypI`xPlzpiL6-lv<8n619s-0MJFC>We- za4PyD5M)QI(zAPMmD=R0GpPqfi*0 zs)>d&psPFy-5fJ~x!$T(w_)KoTaBGlue@sae(RIcrZ8B7zhJgEMXUE~)r~XIP<7>! zG?d$JoQaI~m1&dR^)}sJ+H}_Z>ip=F2c621we|5MtG4#2{HXT4iAmix_9UlTUp22v zp0&xT8dB#k&!d~|TDx6u?4I>RQf+LQiO_59`bKTN+UiOg2z##3J{6}fR2UZA+G|2m zF-&>bu77%ZgjaFuR2y*XQFZ%4?MdPUV(S1VBm&nbSq$N+_73DH++%5DFNMQsWUJ;g zH}-x1qyErzTyVYtuw*p^q_Y~Tjm}MIV^&i|fE}x%ngCtsnF#SWa4_o0$;ztMW*3%L zFpVr5hOiZ4P>j5*F-6n6mz}ClGthn zy6^jPy~N4O%Bd^Nfa+TUsNgK?w5m-!Pp4uINgWAKKNr_{(%x=t?QQ`OUJ;CxR69(d z5i=+R7Lm1v7_Xp^VY;>%5_b_l;Jg_7cdRzhIIV4ReZfaMeZl3z-3ewqJyH100?Lp! zDV3OnU&1i3BN~)2YS6t3DU~3lR#39ckg|s*Fn|f~mBGk#V1nBi4N4)6N^JZ>zl1iZ zE{iUcdet3!4*2tTEk{);{N}HIFooN1C^EDeIHuh*DrlB8Y4?7jHAnh2Swk>G@gFGy z^aru7<>SI!&++D%eeg85RALKAN?#Gh@^XJUg?t_$RH(D{Qi0;FqnebZZ6X=SM^H#oQ3-19ppl>F*m( z>Q-W|-oxpn`Y|G(|GMI~PJ8vcuQIbT0YO561&0127X&zmH}5y+c8=N)w@WOF6ZiC1 zd@l7-@I<>Q71c?un)-Y9+{{f9V^H>wH8#I$#KzHRbTr3_`39gK*LS3qWnwiGubI9~ z`$`<0#))F;RnV9~!ZvK0U%KWZAr^{P`Q@QLwyRmM6y-5aYKEo?GX?<}2b&@!DKcRSYX+T!q*yQHKs-%JUwj*FI$u1|~#e!^7@HS$gWPl__AjEVjPbYoX zGzDV0*dRqkj1~?qnJawIDkk8MARq&B&8-pwhAdnXM z*+HGo5cD)yK(d-vreoz=RXoyikR){k;sR(e02yFrNeZn=R-dmJW8#^u>xxKZFSurd z`0N6hut$P3Pe1Q$D-3q}C5S8OXN)TD`+i~+!iJXgOaYEK5)fYuC@p21tC$RlYbbM8 zNWe_|N8TEJLnVkr>u;z;QtQqk^jAtH2$9+gp}{pE7&1oyVJ$C&Oj%l3eP?cTl5|E0 zkvQ25fAI|>rH<5Zj$3vmtlXTOii!P|AGah%5ut}UC4z{%uWv8}?=SfNf5VU}jHg!8 z`_qgeLbrJu6j9C>JXz4Hef8XW3e=8@V+Swm-#f-=R`o-E^~l+%J=+}9VC}xO`spWI zpw+!1SWDErVY`^YRMoql&g@mhQT;s@C`X%fPalTjeVxs#9ExI2t_<+}`lO;xpLD=2 z%4N4gqZAuHHb&GVZ5Ca%J)+bm9U4ZnWY;H~t{Dzy;IEI(0~7yvOnadZt^oM2wXy4l z11CxcP?z21E1Ezd;8@JPUzSgh+fywdQl_+9muwJUYs4f0AO=ap57tn?8$PEob6sHO zKxo?zb}hRvcZpMwj5u;97e|urPyobm#qbKV-Hk5|SPs6^A%cj?`OkP31Nhb0e;Zm& z?z{S}w9NnwY+rHl&+`NS9UbuhyD{)XKLYT#@n6gsa5xSf3*$La%s0UD=g|PI|Mo)a z(Fo1`)|{xr-7LW9Dw9l)4S&`g+ljQQe=OGFeCf^;l7&@01lz;5G$c z`QcZ%={Q>q#HK7d0lw5;%FY0qaBxBt`72lQY`$JWi&=5u`u*6{P&iZaSXFbQJ{)jx zs=U(N0&_g*V$$xZcYfD*sO^|62@T$rrh^$w+P$AD*SnQciF%fAJ6`|Z^j>FkWg2eS ztP+M6i|D=Sb@2dFslz{^|2JaC(E4t@v$58#wzlxnbkgprmgkw#=))vT+CBBAGgB)Y zA|X}dni7f>#&>nSvAbE{>TcBW%AMcs$TRmMTG;_1Iys`j4Y3VqYJFTvF&ST721bo3 z9Cu+6{$tls(Z>AUr3cw7C;+EiI@gc8J)Oj`FWDQbH>HkVjNho-HVuygm&WwqQ2T)ISuqfv@lRspfk+s#&_ouAmTK`3MBDyQYOHoRIvsea{Sn8PYO=`pl5V0S!V* zgBh~tjnLICz}7zozZH0aEr-lcE+m~t8*BK!v$L^=4Gw8!0w&MMLXG;yIu>eF$I*by z&z7;IIgSR@iyVvRMDc7{r5X5#t||Iv9(8Hw7DpHjKk`Lt#Cv zghuC~Qu8syA06Y!HPc>L;7f z3c^Qnx{{jmRfmucW}k-K4UGL`s_;wl_Jq2l-w+0y2*LoA|GG*^ktaD_6oUy&^($S4 zz_@-$he~LnOZd;ElaTiYi}(Y-8unaoF7bVNYB|tnCMV)8jF(Gfe(Cq&Un}nCp|>du%%N4fsk>Wo#?Kd!Migh=plEmn|G1ZibGr z4v?V6po1k-L}h7yp={vSA?*Pp{#$=iHUO}PfgPgFL~e-D$$}ao?ArSM>h4x;r^a0< zU*DMl-}eap$8p91_qM*;pvK>=W41qHYdc|duhKa8El69aO0M1ICHFTBXd!)UPa^4;~UNU$pZ%5B)2^cUGFiK)B3^jqdng!$7$`d`DZohQcxe5j^_+^fm z0TZ0jtB?Q(_87HITJ%qy>>3qV3ciha=GY)n-%IXKT@>gy$FU0~`j5WqK1!%V0`Nzt zRCmcdSwla3K6awWM@)&OLNt~Ya^p>HKt=FfEP~zE9%XLN}EycrEq`s;6;rTIfT8D{$h9|Iz+ZWha zW1}HEVlm0i!%l|`X&9P)N_v6+jHcry#EqmCz*q@#La6%RxO4)m8{vXW&-)TP8d;-2Dngsc}&;!54)!4dq+daLJDDk z_$&Ss*8-x$pN$|)iRHUs9;&V=(YFVz#rvm%B|v)#=7{?LG#B+RViZfE#)~5uy}!G% z+pXimS~10CV{J`XyB| z_E=dj)eD`M+*C@QYNyhE<|p?k#7tgNb(mvbWj8j~x{s^%PIsfWwudfdyr>#z=T!#U zA7RWPNRWzmGc56la17M+z`~8QVuIg?{oqBXmFZ8;FDY#bFF#&Tg}|xA7_PI%S*Tp4 zX*Grdj^Z_5u)W;{4?Z}xmEvmpCoKLgS^PomNvd>W5pmczSaCJbsm- zYd@$r(Ww1VtySN|7zMl))vx?iBrP!+4IZiMb#Zxt1=ml^BZW_D1v!sf>O7KQruyzq zAPjJ)Z_U!GFqT}}ls7tG4$vQqBT)|Kdu%YLSk5yaHX46*J`@$P^E}cuMdhfc*r=0> z=O`1rC-M@TBL~u_i+rn?f10C53H+|co)aAjd?9shMUo&=Ei*O^T^q0_^qC~xct1jGkE;z!rI#W*1oyn?W{N4~pb+obUTISj&B51p|-l}zg2r3AwZn2#FO$7P&UbEIpojQp_Jose8S~_~L-Lwx6 z&Ca|z|0w*l-Ch{39zEJRTwZNJx39;obgRvJx6^n~!&H5InqUzmK;~5z6VLXCrsD~h z^;@z&Qs%s|V_oR*rmT=6$Z9wMS^hOy{v?DH0dQY^TwA-}XgtsnFe#H=KDR*wsFdJp z=TcHJ#dsgQc@zmHQYCIl?g)zk7C=L-6k_Sz@srNjfHuq(`=6a{sw?2be|}%{(@gbTT^v7EMNH7A znG{kw=q^y!OH*ov&YWMP@u5zm@t<5}HZ-hXp+^mUcN{^wH@Job(-~Lf`L=y)3|E-& zZ*Eh=J-Rar4V;N<_R`moC%JGV@ziA76=n@Nn%DSsDr6lz8y1C+9xk(LZ*oB8X%K16KmxwiS<~2A6 z%{lcNoTS^phBErI)X~lCXs({*9Iq!{*aM!yZ1Lc7Vx_z?pG={m*-x$Z#2}zu!8YUk zJXt?z9+@wNj|q>LQ(}JX&Yi$|CYLkkU-m-kF!c008dY%Fq$$uS-`IWetNf~d1hNKWOX5N?T;(@Y{IZ5o(-6H*_aON8aUNwLx( zUsX;OO@hKD7R!>G96#ovAdqzt^@PBxteO5jqMb0Cl>%p`omgZwP84=|-Lz7*Lv?cLfZ zo%QX;-bNRrTE{4;2vX|MWz9FzHB%}lRjYWFCqbz(Uh$dGik(EIQ7gty6zEpBP-_3N_L3`gSsjtWmEBE9rPGD4 zQRyUXqHdts=;7hv+#njt+yqLHLE#tsH<-Fc;}?73JU%l2Kho0VcuGpErx^2xCV-4UPBr*+|bu~`{7gB2+P_jSv z(77^1y$3{=B;mk>Fm^NOdTI9jz>J&&iuvMZ&=7m*2Q+QUAxM47{u)D7GCw6yq3F#z zRPBf2Fq2KD@REIHPC5Tvc!Wj2U=mgaKx73b{4Jfs2gz7r#p43oM;vJ&~pV?a4grEH&7`L_zWp z<1j!kGMHd|x1{h8!tvqn9e3q3k>j)UJ>{VEE#L0Vu^+`$`W5!%{Dki8w3Ufv5 zRh*Q&ehFe3%Y!i*m=TG_fd>YPN4UultCcujJ6~J z?FQ8D!g?m}AV1-T{_v}@n$_o{zpVnKO#^D9iEb&NYOI&b&}~4!LZFu!9Z-HR21;yQ zK;^c7$iXu3`++$e!VME#KhXo~MI}3M4yXrKv@Umc&fGV#_EJ{-iWRLeyamYPg>!*W zyC^z1tgNh*!G>QRVi`D0>>k&o!)bR6AkLqCH2~(sjv>&6xpwF(5uA*3$=yP_j+Y#B zUbKG{lfjz@CPY)W2DAjv1<{;hDj~Jx6&hJshQX*1y#9-00un)n1GprgC|qK$VyY+D zC1f-}ME#D0*q-AZI@G4Yz@Y(-6sCR=26BG#S<*r3-w==*?H>s+g};eQqY&Z-kdS&d z8I8jMcyl`Y0x}`G0H(ej4SbIhACt8`i~JEea7>}yBKv_qM1l(`+Qt#Y3mAt0^`SEy zxs=@Rbeg2O*Ma)L$`FXDPQxez_|g8+Y&cL%$CVq_1kgwOd70?5i;5tc_Tj{p0N9Oh z_;81Gh_O&EFR8p;1}#$H#@s(8_+guHRTP66*FnN&0I~kp;ICixR>Yu(DAzb8$_YAu zY>w! =)?=tTR_|=>PITE}s){*yluTLX(gyEm($0~5;xbiQ*{PN4Ucvi%zLV^6g zz$$E9;MFevi^Vz`vv5Wt{V@-6B>su#0-%oLfy*=te9_0#!SRUqc@O3643c2`DfWaZ zsK4f%xO@?hk9x!k84>OGKKGXIuB;{z7YCm>tnznGhm6zEq=8@g(T~Ier_)UX5{g>@ z_KW!U@TG5=0&|E?|1cMwE+D5ZO!cmaY>seJyxnNlb|2T)TAyfCzf=B*dWWb1L1u#ly)^8v_xlV5`9!q@EY6OnI zzy%KY)!?-_J_`kLZo(RTAWzGu&uA3Uz?Hp~_Q$TPh#qpd=STE89isoo9MR)>3S2kE z33o_)JS#-#??;DbK#5KF9go^1Fm1;t0kx=eka5{m3|zDGQ_ewbUO60I)hTrd2x3?RQyVXvox_*DBw%h4$G#>9lrYm-RGBSh6?j?L+*p>jm zU#>P|^y4K}*P08py%rR^0oMB6^}SZBw!6*@k6E*A#qf6~eC|3CHRk5#-hV~|kGiv? zz<)}usB1gH`-r}F53~idkYHGof0{R{`cTByx;G&f+FqxzQ{QS;JIr-}jX^aMpQLC# ze0`&~S>4<2bhoQ4D-$oOUV7cAjRSu~=hkT8I#}yfQ45SeK5gu(ov0T2mz!n~l{VIJ zW$L@_PIY&^Ce4(y3(hv`I@pJ7wW^P*9hM!Cmz2crLII`@#O_U8Eukx#8;@Myv=via z{s4$E6n{5ad^GO4j>WE#V;Xs#J?-MzEr{wH$%>f#wHH^Jw0lW`SWaM#os5K`&|BWA_~jX(6qFPN?i zME9M|&NhTV>)Kw}Wnl{(ufOBlOo2FZ2EI$xgrf;Y_j{r?#5BN^MO|~`bOrXX!C@1U zGE0^BH59Aa`^rl>iYXUj3jGZP}f}=9s0qu(xGEhQnksN>st`3D|Od9a!RmE zvmT8UBFIhRp}00e;*UHZV|jt?{f{LVs@(UoD;rgN!-khb@pLPeMUOjVW4BG3V1^ar zR&i;;SX!8itdU`Rp~#C=63@qW;`tr2LHEtE8*%NFAFysfMl7zBSA@z(w393!V&Ai5 zv$IVO9oHp&2=9TH@Fax$`_SnF^Ka3BYt!h}JB+0*k>cXwg0Z-WLzT_%d7z4-UPPh+ zB|Qp}7@U2sNNcjqAtq|;0-4`P&>p6w51Yds2lfEltC=3_gaf*5345EBs$<_@WgwcUW&>cKRG zM`Zx<^IqWCefo0&{PFl;__i1Fz$`Efa2z4wz#qFdL{trF1hbtsT~~A@MwX$BMxxjq zvf+eg&!r*pq7ktGM@e|(SxmVapY+f?*oJ_Hm6DbZ+SW#!m-hqtWVh2yt&JCry3k@5 zSO36t4KiJ3!%UricgQ9L?V~~Hgt##rHeikTJy^_x4SkR6RK{RY0-iRGE3Dc}WLoH3 zXk>BRW?kmo8Q@X(b{@%6jsiTVelIsV-9%xeNJ2Y(9~Ul)m|d=A`C~7d9l7+yY;-VZ zxu!FO0(}}Wb+>r(3~p*bGj4_vB~C;JG(a`})#i5XlkWO7DfRzhe$whqr#yXM5Oa5oZ+tk8GHT< zUVP~Hz~srMnC&2a(6L=t4mqYhRnDwK+WWedsW6HYRH^#7I8ZThcIIs~qJN61oL-n; zESC-Tov%Q}1u;@)&jORV<}^pjka%H`mx^^)g?AoIo|9^}4m^FU$s`B*BBFr@)D0tQ z0qgv)|H**E81s;JEzjgBl`a(^udmPvOP%h!TbnGqY}Q{56pejGxZALZ)YnD zm9VI&DuiDd4Nc3!C?;tW?~C5P-BaU%C}pMTuV@@gt3$eB2Gn#Bfk%g^=+>KNV?~vu z3RTRjC^Uhtk54$}`mgf`Xk7qmGf>669v2sWmCvPd?Pa?cn<7lcwlV*hUGrY~2iH;r z_YMy^c=-yW$nXmk8HI++9*rP=7DNucP|zo=Rzw3nR`F|8=4UbXqS%csEm{A8RNt^2 zn)CKyqimz+QVLf}B?!?Apmv$Rf!H6}^Win6AwP`z0p(YK`}S8*`Yh_ilKrcYDIoP4xMN~>>eH$p^4YYeC3F3hJ&7O1~xfx!m;V{Ai`;K zkAR#n*7zgfS~#`P$~a8Tla*t{$|EVv*#8{2Jv!1nUtU@=;0q-cu}DB=8NpS24nxcw zWRPh-0wrc4d}NqIWV&$v0!$J`OR}ZV8qlFRJL-qeW7ajNrEJkK@<-i%U|O_0qJiVv zOsfK*l(#q>r)gJCyxKBopL&Mz$wQ7Gh4m@`2gc4Jei19_obUNsg@NU)qG-D0fCYn5y{n6O$V zAC&lj(Oa0oS2%k#%!LIpKQuxQ9Ur72v^nH;)xXtt6p)iWax_j9Oaos|hob6SObimO zXu9K=Rf;RjJ`H_Oh-+u=mdT9ZFbsrC+iC{B`CRbikwDI$Cc=v*5S)QpCb;Nr4(GSY z7AhfJvCHDQ_$4;&jr$1=t!+{;u>r{5H{DRkZL-QPjW%8XaIW6mtbf9b=d{nq+64$V zkeu<3#f!)p(ym7j6C;paHQjOF@lXtRJO_w!dIlp_!XQYd#I(dO+2FD%j1PlV`X0N5 z)ixGBce@}-8%U>kBk<7f8T?RE9zwi&&0|z6*aoOkBu^s-B!2nK__A>^S-j-GX1^cM zz8O)2L}q`+a?LQD2?MJ;G_4ssjPUosH9dT2hWN~6MNl6AW$+KE1Y3Yl@Q=tE?Ym|_ zoWbC+Gm#(80IZ7Dg*iu{dgwy77d#7B`KaJkK=%V04siFB+}*f*4g~c+GDtSxoT*Og(n45|TWza!_NvRjYPt zqyu4ONqv*-HaevCNxj`^C;BHJ@DZ@nvrpC_&S3|O@9u4HiyI44o>2V|;@zYsNEQ@(7(|7B|0VRVj~05jy|$(SLI>{JssLmbPg$~q%# z*MY2Vu=*E}{)-?^L(9Pp;sMx`<$> zEf1QHlUv2KOHs0<3RAtKh=%FCPzxZcpQ58MGKZtC3*NRSi}m{vrP8yr5Q3EM$_?lKUkh2(~-qquFQ~W$}6s7 zi|l#j?hKh8+x#C;YB+v@gP4am0lpDKoX47>Uy4SHSY`nR4W92V^h-WifI2pBZ2?Q$ zqo8CBBi6wp&TMqBtc-FI<^<150cg>&okcdcgXPkGVD{M~m`xBK@P?qHe!xmEv86j$ zE?L3RNL_&?(O(JDnqfOjuuM!Z$^MP2C0GF*OuYU}I1Oms^Su{p>&tP!{wNBu zwH166`X#=TD=@hO$D{l;ZiCYgSZ^!Pv>%T4mE~B47Q#{BM6?u)ENpcZS}|Xg=9kz% z+3N5vRN~4uB6skADE*zVvRM^VAC^?=OYo!7;4+1{8N(ENRo#$Iu zna5s32WBDwqOt&0LQ9lcfPwB?(*i9TyO@z{yT0Bbh%RKK0aWXLeRnH`$6KxHZilpM z+qL!149A}tve(?Gc4{+Zqqbe^)Sx|;Um<{9C{~NcPTLA24Tc+p2i$G zj|874vI4-Z3>UmuE%=nUVpIsvLh|8@h`i3xh#Ep1DT#v5T}291O0!Em119l8Shd5) z5BhamnCG$2IB*kuHGIU?QHqU*kA}O34|8VzIP^VW?d8niBQEp|QcN)4;_4GVAlPMV zhM^1Bb_OZh?8;58LfFA)nJxu6KnO+3CJBl2xIGd}Kh4EMDP8(Ozw0CxYu|TmkS(TV zA+{~bJsKfQOQq~Ckrh$RbE16A1XbuHo=lF=nge+MN(>4`)ARfYZ~MZcp}ZiZ2-Y7( zgM1bjhL5buKE>YHaih9dG)P4twfGbzFsIt)bzyai1}X9x7t;+8QXD%rlqi+R7SoB7 zQYpF1g#031uSh+Rf{IK$&Ac5rcJ4bcykGZSKY(6?e$RwcbslKlJkb5hhnYbZK_v>M zt8yvH4@lLeK@?_7i#f+ii{xy6p{(}L;=h#{7OCx^;FXzOao+)Ge?rZm9hpJ2<9pGd zXsDtNtn_Hm@qIUPMyXf0(8?YbUB`O{K=Ikne}nRx9{{dAXwz6lm>kco)(9LG|XemKzLx+qXEd&zH7&J zD)N&W4c4>9VdM`rgTc3^>+}Jair^!dSp?Pqb=?MPy7j}xLITRL8D*!$M>8@)ijEhK zs0BzbsAck_sZ|`BqmkqF(|{sA>iQ(+9&rJM|4YmR8k;5k|c;vx>RPUMgM>X0fZMp zTuuN(s&KI%ICj(5!Br6`$-;aRy$C5D77a4Ln0fpnNnF^cc$8V-^Z?RC2tGxAVrt;0 z2*_}sI{g6vZ802X7Q49b`w<0dp53e>+K#mRLueWyK0OaXL7+e}(>5WnzheuVSLvbn z6vOc_i+u_?6`x`_@L?r&XqQ?dK!t&Sc%Pa!_NyeDVxLs`B2%?;Mib^ynV+r9R#LMm zva2STXnH1^g*)M3C+DT|@Hr)=hfiv%SR0NCECwjXoLwJv5G>du~NzkR8b^#5(L6^lAjjeL!ku6^3xnZ+pi-hRMm|& z#9?GNiogoE;~^du>3wA%T_s$ikr|jn8qq)p6Y`T+AKMUzHq+f`MlL_`ktG5iHAVkf z3=*F-?GqmjhOtkk6MfqnxPnjKRA1^+3E25&vG|^8J}O+=Tn| zF-*<8h?e^6XX`pc2M+tCEO(z?vgE&0%@rdjLbXD%jdnYv^kcF?!LS-NC@DCJXTewu zWe&0vrGw%qpx}xq*g(l}6xoHTWZ@Q7F+DOf!dEe(LrC8aYoFYwQz~`P;~DST748P7 z(S;+OaV<)$1Afgri$y~6Q}6NpTC2uuu+fuyWSTirO_S>GhT7V8{XvaP$7pL&hf zMy*BGo+zbKi;L2#<&JGyb%6!bvhPLL>``RUI;anlOUmI)@F$Y{%9fGRhpGtS4Ls)@ zqTm4kq^%LZ^4DtT0@|k_r)Bxg7;@S46v$0tofIY&j;RRujcKrh;26-A=O31q2Z=>4 zMm~QdJ4!b({sZA@!21%Gq)q;B=11&!Hhn<@!orjWV5#=vh@j$`_#XQ5jQr8qH3MP> z0RaQixqzBh^fbhM1ewcv23{fHFVjcoE;L5Pct{6k;6T>q=A#xS#GRGBhvN~jO(E&| z(SUUPAONSXPGABwGQXKU78j<@h8WJ0IygJ=UP2O5bLi4AbdOk%ZQnD4V1~3z8-KSQ z_6sf)Es76`zrRo6*u)r2E{!OkIC_-%`)t&FO+wbJ=Y!J)3}1`{9GJ!<4A0~Q)FvMs zQeyky_hP#4hqGzRTE5=DidZzF@AJ7(@PV_74sN-795f@c#rbjHB3N#o6M!c$XHKy`B>dpU<%yA-l^B55d*> zyRGWlTD`OLP$UEGHn;b->boq@Irc27OXr0`0X&f}6(9rMM4@m6QgTo7-6Ye zB0T5HJyrsK;}YQWC7Sq*hf9RtxWL8X^C-H_JNb`_tO@vyOI(5yq3~n)4c-g<#zihe zku`SZzpNww{~;&;qGLh+8zbs*gLX0;yOC4E z+jh$bm$EQ4`{*MU_|GW!DyZ%}Y$6TadD!U)vYn!FqLVa@^F2@)=DJ1qA-tV|-wD@e z(OiP^oUoQU;MpFNM1e;v|Z7oPlV7CFStmjj&%yh6%$J2$kL$`DSzREN}m z@;ydb;5Q~4(joN>A^HMjUSL+Qus_dFEAHxO#qaRQU953IDHtEc*uOp{o);LU`c}kEZK3+fQ^FI~X=BYg`)M6!1IUGp>s*YP39bBzc%Bi$^IfNYG zX67uDW$=L`MELmaQxVXK!n@p`G!@cX6Y20H4m@9zBen?u?KoThm)(S@;LSmtDvO!w4c89R|JRFu_n51V~&&Ck3!T~WCC1frE zW2t}+{fP2XX{wokwDhDEPy;s;vkwt%FhWPk3aAaKTTM3vxQChs`$@qeyb)`NV3u*y zWYsi_jm0yrTX2W1M7~Z@!xeDk!!L8>U;_%90UyO5Z4fc%Ast%-z0A!fOTa))@T?kp zpc^QG)8&ZT2}UNak;B07rFw7v=)LmNd(ZmgPdC>#j&|>^Kl!}=X?V2S8;%>!{rZCz zU3He%@2^-}%MaI^pFZ8OD=&IGi}R^{!Y0)9ceAcBXe&SF6JLAiBJS-fAE_zS(N* z?QX2^t+Di!8*AOplP1cHH{#(AO~-{;_oBAis=f`#!ok)O9IjwNpba&Iz{RD-1&}*6 z0}vUnk^_L`&SC(`70XURIQl1BfZ&6og~ZyulUW1d%bK0TS%x8!(kF+ZuEJ&Nnm`X= zAzn+4qWz%0o9(`(%;DQ%=o)i#&d?mq(iiB54k976^=`5)5#3I|Ef5w!tjmSf)rDgk z&~ME{r2#&ua2RCmSYl=k3r0Zw>2>r zk{Ljj3(z+GVU@AC6lCjjD z`4Iey^~Ym55rrj4@&KZf+*kx+RfUc4F=^M8Py!ok_u{7Uq|XK#IOe^edH2MzqUSc^ zA?4u{R?|f%$W6)tsjuUKA!K43S-wcD+evVY)is)-5=oK}e%jqreYZ7bfNaW@v!xCz z(;ASYdvLPh2w?d$MKIn&Jd^x#`t8s*3Fpj-O~QF{j~_RAz4F+oIA8tYazag<|LQ6W zE0G2o5d{g~F@TU=%?{5Bm?&kno3$AASoi&vFzQHE1KJUmQNZR{?Oi&deL zkvA-!0ZW0bDhb4rDNcN$T)8Wvrvl@B>=XbEu++(uFajS-=JWM9vM#*WarO|A1xsKU ztyz1HlQ$(UOWqPGU8pQB_<`Uh*Ckl?b;MWwA_r`&PUvp#*8-r$k@}3#=L$#k@XdC{s zdj7fv%XyeVnE)r zeQONYtX){L_e5dl(2EPJP6$2@vq4F=dzxwgkoKiij^%&xV(5Nx=6yUB6 zxYv|Y=-PqlKBGtIMk(TuT~~XJIoO+g7$t_?5Y-;qdkqhKmP3e_h^t%|RX|I?xLyi(Iq6<*jtl98ph!_5yer=osg`9U=tnx1Wt zv+Ntz%p8Wig_H^`@3<02OU^-_nmgZ0>^OCluas9-lL-{UY&_9G_XHFa8WG0PiHqu$6=m@Ci)EayiQi6nOS*@CT&pGVc15~tRy>-THjjXEk1roy5BjDq_f2*W~|F)zsRNt8OSjWqk} zPPN^swFI@6ZT~=N`(mYBF2g`BHn-}iCpxj*Ub>v5+LHyyy#iGBGLK~%lh#+`!SVfj zPfy=(%5stji-7Te>zIJ?`k;>Q>F(U(E)*&!r+t1I|3^APwHyC zrB!Ttp`lX%m<9oO=F|WnI`JUJHG=^D@nRB9&Oq7X*>M_|q3E&zV?PWvxGz#F0S~CX zQ!YM^Ay2>gtA-imH{+2b$t%8@cd0OqN=re-E{C2oq7KHry}9$G{cyW0(xxC89h!k- z+C8|!6IDp?;Pdt8i?vVv^~Jr>YPqpE+TC|n7VP_bz1ni4atMTrw@_#D)%P3pX^ zvid@AFXp7)tz1IGcudAB?he<3amU}=34M(zDi>VfzC!Dw}Ous6SB-GdopyANuZR7KSK4bs$*VBr?Z$d_ zJ25}C@P)n3IuyMQMMb_Fb%H7+O`q}zjYr8v95G6Du`Z9J{gq*F5y!c))`g%_?Hb+_ ziQ-_UBY^ldUc5W@9PobaS`H2yYBsjFtDSlSFGxh)S*7l!;ZgV;MW-8Be0R6Deq4Fc z26S+3V=akb9IPN_u^8JG%zWKrDZyYw8+$v=SSZugh;x*^DoVE>)SKOQ8zn+fLk(d) zRhhqwvFI=l;^mFC`1(eahLc;2=u{{VQ%m4GpBiNP5)EBkSST;!c0%DsE3rRn8nuhw zm}T0Tf`YBuX8jWtigJs#8|x2}yRPn>7?RitAPM3gO}tZwJK4v0-Bb0Q>Q=40U0+kj zpxz=~HKWM12A~vyw!ghot#4zpxNdD{t+vtKsder*7!~BJqTaRMI`YRKr7qcSViVx^ z+^ueGARj8K&MOOgr43}MRPR8yN}cqq)V;q9>Y;((hbmLpjkvlKJ*XIc5wxhdU|1Bs zYKh^fSQu~H4J@n!hs4%Z%JX>p#)gpw2z7;ZYxFJbq*ZHfKj}0w%e0iYOv!5Ll~Rv| z7_Z*Io;us@?xR|(zWJovtetuhbU>ya2^W?auYYZ)`boD{YwvA$FmIyR3^iroB~UdY z>3OT!sz0iBYN(cLKWTSrJKc?X`+*9f;Km{_?>g4(GT$lG}DF*gp5eV3d_kvzoepI`2{r;|G#U1N8Pd{Knd0f|e6DYqFyRvl?@o4Q2g zH6e+mBI>QIMCgcuj)gJEETeS@Xaun9rAul2kN~5^Y85$NX1CRKi z_5}PA&(6AvU4=&WT4#_F)rz&xPh zHb@beX65O6EO8h_P#ySeta0|&AizCyC{Y9sBSAi}f?!TGuOx*%iNNxnG-A4OqJS?) z$+-N?*oEu^-Y?@Y0J%tjd0N;>#MzfJph38>C;N(Jy!f3W2);B(Y3y~j8ui^R0^B2M z*IJKit(O8d$c@4mB)b6qTLVyA^_(lRi`b~-v zPOLjtjpY^t{BTv-Mja5A0{+_|(?X6BdyCDeto^YqiGs&92D!Tv;us_(jK#L;m$vIb zA4s#+=rFASpYXXztVS1=Jd)CCC-L^HbgG{BDEN}?`dX{n5?KrGkj}sfl_ZdT8xk=B z@90?1zDm!rm~D_gODd6JyM)>n?vTLaMDRm!P4u1PxM)=_LJev2RBkddu)q}d8TxJz zOEMZ)h_~)APcitFt`KqR!Ue4;^QIJKpnXLOxd{J0zXdI5I*8zJeQ;Fnh@W zxoKCyX%oH~f@3_6{)!UNSRZ|=-> z3#!`J^djF2hf$(0SgGrY&d-hPRUNYbmOyr8eyL+bv6btakrR%nlNh3)46U&T2d3lO zj>X(fAm0==On{H#b|^Ek5ei>M=B|n{p&XBEgo6XBx}GZLBw#D)Sd=52I&8sJWq3L5 z!Xi45G}@q1J=^(1;z(6QBy;5EQ^LA!yB4k9t;*m1~1EOH_Wv^idd=Sn4MXv4H zB;Kir`x(XLD>mgi@~mj!cqf{MiE`?F%}MdlAgm4?tXJp2h7KCg+D)j>2v@J7?cmSWXn4F1~Q_lIR_~H4{e+|$-oiF~mFgX*Q z3S@>G6~`MxbTvE~p}-)3ES1cwU=;ZMz#O8jnS4iC>5%kjbV#X3qC+3#@FCcrLH?mJ z1f@>Vm$>hg2O9LNL^IMK+xiQnxXHw^tmRw9#8qKWb2(H(qp^F6%~%Po#^jUC0W8!4 z?3YuKl8D0*LpZ)j5SJ2JSy)*#@JkIKG(QiX?f5+xStA3+F5x)tKrJ@5c`*sXvRtJ+ zf7ifoET@BBES$$QoIe-*Prpv^0-7fg1_|D^T!N>@=V5_IfB;=VHv!v|e1&pBd?BVk z7vE%50Dfcg0*w7Tj7&@|O%@7MOEH1CV0&Tq)hibZ1$_1Yw)gE}b|hDQbw{rmJ$6^S z-k0~`JK8ts&h75|9`D#Yl13|ecOMYA6m5pwYY2m}?&<4i`xYuMopTT7VoU z&Zx?ikDOR4FR_`MEuIJ24dh|65=1`kD_WyvJ1(!&UJvhxy2B_&Ao7co5Xp+2FcVgX z;*=?0XUDYHWwJ50v1~m#R^cIBt+*TI`}u`cezK7_TTLs^mJi+_u4)SeLCj;Fi4_kt zDa_1BlP&<#1X^bmvHXEXt!>P*2UJSsdw>oU>IQ>2=+W|n$IhHNCGS?NApLBk#u;}I zi}XS`QYV9eW=VQVic^}KdznD z7m8^8dj+j?;F8Mc%dw9UpuBFcQur^%wayr$;k{S7^J31Imey!5p^y2=!SbU4Q)`_H zaGv6j9bfh+nrhhLoe z*F?aWYL31%=+}sbk^4I~N$zrppJJ#0QZ7g9AK@-gCO^EVaEMmLdR3-I`n1=rKs8A{O&`Nf9OVXkUcnhuc_yTZ zM#P#P=PI@!v<7D=IhC>sv1L`_p3nF8M+av`)A$-C+Iz|m9}D87jC0MenSJ=M)Yb9; zmL4jgnqgS8HQ2bxb=o+#00G}M&t%v!NX+*wBhF8bl~%T~g@V-7?8#YbzvAp^aax31 zcqohF>xU8d6<6WD;`Afg`vnjl1Di?MQ!%zQlU2F_5Vxw@ z2oUpU&m0q{JMtAu^+oA6_pU0hvtqcN{BKBAgm9thWFbf0pVG(>+KXzg`I?R;Uy*C) ztw)P^>phaUviO($bv8Pbap8w04H}8H&M;(q$?$@&lJSL7j`6TXBH`zEzlHNYUEq;P z1u2Z-t;^w!F+!oXMD@5ve{&jkqD`=@Y-yS zpcH(hX|Oa6nTFBP6&ZEmCF!dy-*R*@zMb3@-)_b&tvr|h(Xp=aN@Ms%^GUmA4|~bF z9eH$s<q~ntWYQk zc;y9$mFG_#Kd9DC!VNN8EJ4v?Cq6uRu;o+0FKTvXPk-wKk67E-gj27sj)ec4j-rH8sO%$^#OR5#RiejZh|rYE5K(uvz`N z^yzR@bUR%Qy>}38hH?!o7Tc!duNKP^2FaQ_jQ$Pk=WPu>H23@kZPWmic7! z88O+ENSjo6#0>YfHSc-R%+L$xW*cU`EaQeTJuV2~3h7254m7mUnJai|?{ zRFa?qN00DGC1(koCwWqUTIB7TQOc2nCBmK2GiTdrs?_us{~KHizpfOGom3&l!v z6D%hxpmE&|l4NAuwKLvhMU3}Up7BH#B=6Z{xG#3?9&==MX6eWwOpU>SDt7c}*b9U) z-N-JNY>+7EDw#`S=qmY3X44F&ubRaKjMP>w$7OAB8GC@sFjpRa39tt$A0Yxp=sz^p zJD$E~+d*J!0z#jv#&j7nPr4YpVa<_?@Pz30d~IcTlgyw+$^+CRKA5hPiTMUacKhl@ai-O~b19$DO+nc@#U&sxJlxYf_a&vf6CQkRypw z2AkEsN0Mo5HLL$IlJLrVe(iR%2Wm0LOAb&LHQo0 z(t{UYm3W;xRpwYB#+3%kG#%V`^1u18D^&-dxQyxmy7$q&(*x<4n-(e>q>Z?$k=H)t zE*1^BzaxYnS!BVOTaKvhRs5s^$${O1+LLz~WzVum7&*1J^hULYWqk1B~1mXmg!0fxeH%atN>RO1h)sni{K+PFL&vMgit z;}E>=(?+B5JqY$yq{aC6f!*UAz}-M}XH$FD?TFvh>#^%rbXQPQDo%Hzl!juz3F)N^ zoiyh1>2c&3HBQs(Uez+Ur{tYVrCD@8J!vSa1g~84M;4EtC@83<4PBXn_Nz?t*mJgq z`qeDA$x93>d@G~^*T-2`w)6C)6 zxnn2Ko@Ty((p)-bat`69jy^uW^ccp{Y*lsSr~c;l@YKrVTv~+g>FX{WXq&B8nMxQt z&>64OXy4wWr%#?ZvvA^w^u~70fZ(ME!-E&u#gj6=2g!HWGhU)~mPfS+(_@Sp^ z$n4(K{?jfIfV-S9r(OAmnSJu|3}zgZozLER8TU%qmL8qY?pL-eb{yLS|3X!vsM@!E zeHD=+Z@v)Jo$1slt2k>mG-ud4imrWLJW(_+esVkaN2Dq*C&s6^DUqB4*^W|zfe^dE zEcGDqDZjm3%zR~kfK$-?`oHXysp-N;@ujK3H!+7&hhIvbn>)oIotZp0*F|iG$xU(x z+D4}#W;s3!j!bic{TqHchXpd)g-l#ATMh@%NJC{_W&&&izX2koL0F@vOW zdM?Zr#W9k}vRBH8!qV}-I5UqQ2jZUc5=^Bb=*R}7qq-_DKl-b*MWgzhCEbtQQ=SjQ zF=$dF`kbT`<&>x*BG~{w$NZJ50`(zz?y@7e%Ayaxo62%e`6!NU3bIgeGQ;wm#l8F% zT|ScU`7tsNTvupGGxUDBafDT9gox#M!-mAvSCrdsnjv-A>Ui0iiwKB|8 zJd7m#aI^fv4EFTV!wY4P#;ZvX>ZDy>^KGWM5?7UBx^bdlJ*FeNDs4{d`GesFzTaHs zOjr>Wa_xjJ2hm3AMU5>F?IE_ZLeEa9bV;LcFbU)_MiM(qSHv+(tlBD^4~kk~kS^xm zv&Xe#W0)I2ndw0?gfJqU<5bBYjf^5!)*{smvkl|K)D=1)*9_B8CX1ZTSOFU2o6F7t zreJ^a<>^zfykbH!O@3tOxMkra(bo-A>p|p&5shOoYJq3)3D3D=dO7T&5)+=Iuf6ug zL7!&I80Y1C!ed8F+eG!n&c5|jQ9R*ieqFg15Z2H(J_YyASjJ049@DrC=1pI=K+)JcEDix{S!AUY) zJIt@Qs)W7avOkz(KIhI2m=(%7>83&7&u?5K1ft*ls9cX4GtHTLr3=Tmf{@1ewMoST zMOgay%*QWne7;Ht9;b@N=l>;6>!}ju5DhbC+z*{vsY!D-*f*|IC-xJuyl`N*ky}tG zcvr84D_lT~y$rGl&0?q(_vk!uO})v_=#LDg9w*FH6iXc#juCvu4eo{B1~a1y%UK@r zHLFmYi3hjMj){{@oQ>!7l$pfFQy?oVw+L(Fw2^ju##JI9GtO|Qe`-;ci7ReeCP{G% z@yjIR?)6dxLMSz^meRQtDyJ7Fg?{R~akJ7C$y{cg@mhcVvxlCRHqUZYpR$+fAUU{B z9oIKg?I%gY4hL&4D+@*(4#!on_J?^*s z=EeEb$LEh6%6b(>3#A9@@zuW${yLdYNL70#B+&@f*Y$qNYrd96R$j{j=W=qI-1)ri zIR1q(led;>QOi_5VfR;~*R7l9pMAnRSv$6P!VR3|=KT4i(XpQK{L{k8Ji8@CQViOv zfzz*$-V_GMP5T;5+!0sMuH4+OWk{#W>lpb!e|85uX3Mc6UgsFCcr%__TI^;aY$G0W z0rK6dTn&o6{lFXcwEd%fJdX&5<`UU%%4egRe+^D>6*_RG5^&r^zSDDH9R=kxpx((m zpu+E=sEpmCQNk}?OjUHHfaKz(I`Y;$oIF~t6Zu6r zWJQh__;A%)pyNe!ArK?C@@~(kkK{);r@&G$j9gkiL6h|$S}iZ82A^34HitFdf=#Xnv|Gn#%ky5}AIyqs0EN=h>$2ChK<6xOD~f2M#hKFwv#iv*4WPDckGS@?A=ib>XPS}}jTn-f7rNhfziEt&shvm)5vT)D^ zVK(cat5SXdl9w^dpN!9?^DYr*vN&^=V|C1`L7-fp&}Q?4r5-6-hl?k1aw9*9jpWTu za{26H4jaiP!t=>7edTLM2kE`&qEc$U8cD3?xIAQJ!8}!%0}(|TT)QwipUy@y$Vq85 zkBrG@!GtuD8iCN{({UR7EKlV}PF6<2Sn&ToUzN+bRn6$&p(T(m-HiqxSw_Y?AeM;% z;$qfRRM=fEGk)CEn8#9%>lCd%d>NV_?X(0}tS~EyN#MN389GrCyP`p!TrsE|)_C?0$-F$y`zzy!};Jl~&IOYa8|eTAx)V!WDS+ z`0(Yefj_5|c!vn{XI&Wt33Y;Cbtc>>S1KpOU-Mx&lLV`DF!#U%xnQZzn|t5^U88sC zr2t2!?|p7)Z@?`1{4m^rNiudYR3$ZK-7b;f+9jvcMUvBxiQNVZqK^tz7w8R{yOHIRGc4U!q z3oqzV_CJ37$%R8FPd=8>eN6WJHO6A8(t!}HxzfGK7sjo*z)E^pCsj6N(S1lEB)ej1;lI2Tonja=X-%j9-(xc`38Qnm6xZ3Rn z>%tYS&Swif|AHT-ER|y+34X?-x|emGhYD9I4-bNK!+B#4y*m*jfPUtXz%G-Bq81Dsak=cI&Z8nFT$Ir=}}x1SFN z<)zwqvJ~Z{W*^eoP2teXQ!{`5v)XrtZh80^%H@%=R0t3`38Mp>3-+)>pC!P6*@2rV z_K-w8Mu=gO8f1@0wu&;Xiy6u8BZT;2OkFHOsM}rMO9&|uLQKMccw>_XMnZcCA=eW! zHGzvFO8a1_u^SHn-5b&8hBQtpI4gIPf*Mj9oeQHN3}U+n*t-cKZxFEY#vvWR-bF}h zJ1(KXwG?lDqC|G$S_<4vF*!xZ)b`!twu(In-irq+vAaab)LyvMo!CamjJFQ;K=BtZUApuNQ9RzSV0?6O65%_@MRp;^jcKl+=erx{mZM-8BKHI#f?C<7+u!4pHjiQ#Z4WnWFjo)GI4d26PBIHf<&%_QwrrwOsX`_ye z6qu@hau*+g2&)z(QP~Sqgb>UIcH*vBCBXrMMXMRuJ3wx)BxL&GS!ViQ?#IjJ1I#bmqQ4pi&(K~kSckLWBPX9aap2YacHevE z(Iq9a`{5EHI4`hW5Cw3}kpW`giJ_hi2*9OQ zjVG`vF_H%^GV*zDTeR-Kba8sWF%u1E!XW6)3=-xctPsMs%Rn$U1!4PTAXuA%u;Vfi zYIz8ggpgsl9N8Y{d;IPa_{aM$vS?igobKiq-^f8_AN~Z5+F@7`A`I)yi-eFl0RTvU zRDAC$rThX{`mYw@|LfAFOOJ@}LnY*0v_4D73xxbOd;S)q_s&k!&rO$a@ow2s1imByt5#7ABuc$nN}X3KLK98JQ%bFVDQd@5jBBF z*2{yyl|ldkWGE%kww^t}?r>pNA~2w`0(UCwB=wcWwO3|M*Sy*M8(X-+$Mif7jnVGI-|ju0Ov0 z?{E9!dw+1-7wdoX)_os&{@cF#CqMiPuX+Cae!X%3_x#LL=5x=ZNbcRMvaht($nG_EL{`dI|(6Q64l+MeS=gV7imzSoE?wfl#*wVTzFHoyLVm ztx=ogpJv^xZ-XhpXE0RGqCFQn);hfg?oYE^Tc~dP+N^7@MSMV;kRSu@cY^=)_*+u z_h_xp;@_Atri<~veFXo96#iQ?wIWt7qR{!nr;ZB@TO7kL0T_itQ!=%r(djGJVLX<0 z^64y#pw>*SrVzBBjeIX$BIK7Ykt{>+7(tiLisoj~b^OSJz*Yf6UmKJZS!Ryl3Oh`% z!FXKlLo(%!GLJIzOUz&mlSO9K+o>aI0@FjgHf!L&BK$llW`x5>s;5sbmdg?`Ge((H z(luvh!~f;Lqv4Z_aW}z&8?DN%!iyG9$vnsxbx9r5E;W`)4#JFQ{YnmN<3BJiUP z6Gc5upzlCm3sD5fyiKpJ-cK1s?#0>>WU_-b8;S?ulBp!}JTRr> zY8!X}${^qFwXKE$c}M$G!PUaH)KR*=pAkpyCQ__+a!L8tur zzioR^ckY0ut-NU6KnQ`V_AWw7cN0>271Pi$?cDyUhp`~%3m91Qc@)ZB_QMKZMD*jt zm%-4Kr@<9m6&d*+mC-E)6OtVOpFQjfSSoQ}Z0|V;OWI&TjOcPv77fYZIi8OdW z#I>}OHxa`0={Nv0c_SfE)K2avgl%TvZ&ck|aYJr4DoX)K7Ro(dH)S|BG_>$@LCEl~ z;z5I2JitJA^aCP4-ao*lqPIFbv+UAmc&_m;?RvS{5ZxZ;(BkX_^=Q`YYz zq=d`FU%@$Iio6P}P{w1LkjaaerU=vCL#bc75z71;*w3faXQW8Muh z?It{!#$VMrqCI;Z`Pel&@B+mHpm<2-YItBs^W#CFHn>{3$}FZh1@uJ|O~MFWw&o4Fv++?c#lxc;AgVVuC1| zoPwVNHe1{y-uH_41@V3pz`arY@gTBqC*<42-`|YLk1_o!|NRH;`=cP+UAVh5_M9KV zA3uu6kEun+Tk+=x9s`!`1qQ>@K>RGyuGwA?zZ=Qkg~v}LjBQW90I#yjZuOrb@(qYw z#@6e%;7}dg+;^ zGmEo^!M_ikUBWjsREA;H@x8co^bBs@#dnw1Tb)LuR%w}Sr&4z{ywa79lh&+i@5LfG6Q&Ze5P-5LehUk$^dlld+h#v$0NaAq5GM zD;w>G!#?fH?4$83)b1rKu=?&Hvnx4%7IX_3~Nw1v6=M~+C*2Rai$)JZCtbuW5OMs$7Lek5U|{W4~dG9GG*U_VTnxg43OzCBn@ zhbkah< zitq!3kgtgEd$ct7YH98xgnYM1gR017__NypUy5NrT_UCbBvzo<->?XoeBVurD_B;% z@217o2ML+F8D}3nNtK~_tX?yn(UsMg3!-llmTN}gYi~X z50`B-{%VP^e=n9u=@wxf`28hP!uoiUTrB-?iIl#wjg_;32ugru!PNdg z6My{qHZpnre<9>A#2dxmf+oO>Wa@s@;Q*_H7bgQd`3hOIcYsYuzC`b0) z%Y)1NWF6Q_SE~l}SuoEM2Cq{$>kO?89df+v*&8%!g;9_MYUGu1{OaqhJRpZ07Mes< zO)=mOj9u}%pSUX(+wE28Ac_1`mXQPB+J&AysIDb6R3%ENYFdU$1M}ZE3dRc}v7&%WY)pum9&Z0@LD) zQ#buJV!wvRH@1<<-lvGNzJ<5Gn~%(vvdEzVX>7$zH@JaS{PQT zICL#A#U_hjEtEIasc_79VQAw@7MYX>g;m>Dx>$5l7=~4d1j4hdOpQq}48s5(XZayP z8G{KHnfQq!8H&nKRVYg~WsVW<@T0TA_*?|N{5)9%5CmCcDi_#3Jzr5n4+Pk8H zB73l`faGdAbe2Q5w3CJ0k*$bmEOgYvfhI$~sxTS7fMd+Lq?oz2rU{5WC{RWd=c*?X zr|SOVzUbjD%H~0dsT`_9zaRHA>(3k% zk)Z2Vl76V9{X!^C94XO0hY=3NO~uH<_&ALRk7;djgHXx*Sk7rtU3-w&v5Ez&M2+fl zKdhV&(p?FRo?51K*_Fe4UUtvb13f0iM7;6C8zZbdlaT8w!GM(nR(v8$zSPJMGkuVw z7Z#oCfn2?j1U?{T0R<59OedPgMh|B>Tnl?@uoAt)qIw>$n@(v0n=C#vAmlT0PDr~! z(2WAjL0?<-vEprS&8vnH?fMsF@eIo>T%6^R5l{+7K|fH% zVakXHez%*>Tc|-yqr_D!H)hG*cj6U0N(Bx~Kylx}YFAYitLC`xNcw(C6pQy$eE<1v z+};|eEKoEcv$IO_gc9ucxI!M5K|5a`_k!dNFjLyYbm@t|y0mx*mPtDomyVrWTtI{1 zwM3~JfZI4;sf3ZgW+yZ=d9x}9?rQ9JGh83XBNHT6=t(!7M}blNJ)$T;?5d{x^F$7bM~QllURJFVpfiV{FQkiL63NY(R~75f2q zG9t%@dY*U?1d1EMpX*7eRRA-WgyOnts)gXFg4KY=>L=0!}_X!A2eSmZn7eL2zH&2Bw(W z{z~jyP7?BFa#)kcsREOlA1t%?x-xgnsxVzQbI?P|Wi5 zwJdqN3$W&n7lF$c;Wjhrhuyg9+F{(c2W*_dwQCX*1td`>D^!wQ73IWtZLYzBDG2F+IhtV0Vp$a0D`WJ{9W0_1w0P+7!Adu-!D65| zMKz+XGDkwSoFwYTm3ZigQ^&G!Oo7Yk+8dq3AO@Z@j9CxLluTib#__0_DiK)5IEmca zm3bhlAdiz&LmK(vimpgUzluoPTcc5e+fr3l2v{oiT%1Hhm))}|LCcytus^Z~11+mo zA1-!fGT9-VU*bmjO!Gj4y&$ryNf4&<9{Prb^7W_!1Oi~;1Dg0b#W;XKBBw*OsDbRj z!k3l07M-H54iFarqBKBWK%{st+^}es33=gq@+gT{Y^%|nHJp0gvCM|)wc1v*WjoET z<+hrZ(ROPNHQUX0yIb!#mSfmmui0)`cBfIRbuHJWre(Sf1*mDcZNqTgR?F_#-KO0& zS~a(A)m_Kwcpb|&o33fqyH>sCy0xy^G`eorq^8?xJ6)&YxC)SKH5!!Gnx5r&jaIkQ zbWn1w*>PH3yX87gqi(nBcGm#Rx>L7m?QYYq8?M=Iw3=N*0cu%w&vUzu*{rpUR=3e; zTZUDud9|k5>e!v8-L2Iu7ZA)=je3nnx7%%-v_(C;)wNoV0%Y6NsWt1aRX1(3>2*D~ zZF*j_+itbZmfNJBO|6z^HI1g(p2$1)N$qaeX?EI_wmQvrt<`ec4Xf=KPOI7KHk++FwY_$S)>;aXV>@2Ww5UgE!)u$4 zS!;D0Hf@_HET87Y&30)+6~KW)$82`b=y|0+jTs5NEvIR9>RkY^I_omnt+pX1{j_rC*+io;k zZllp`xQ0htX1#7V-KOo)NSh3oVH~eHM`bys9iT(jfT^7J+EtbO~ZC+&27>y-xWDQAi{Ro!Q=ru z8S!csa+EzA>}jy@Cz<0YX+gXD?z^YOG5Bd2)?fX%ClQACUY7GQ_Iw?C-ph`tOc8s1 zdFWT@VC_C8Pwgx*3$zyqd4?79G<(7o$&G}RaGLsNLP|JBkL@Pdl^w%bSV9PvjaU!C z_6Bw|Z{+rAr3VNpeH$UFrFkdVn69w6j7q=^Wb zeA`Wg#Dq+3yAvTN@puA{(|Ev=>5*Ei)~tEWPOD?MwYp(jb*Ev}>#pT?THSiB?lx(y zOR3i|YM#|J4bL^(Zl~KYJ-2Q)oAho%%I}?eQbo8ulrajOL@KzPt(e>=YT6D9Kq_QC&j{6SjyQwxWf zPsO>0VHnw9xO<&r#%#M@}rwnKSIagY6miUz*_5GiQ#S zJaP8Kp|eMiE}ULCGH2!xdLayA>YWOrBv$=bE+44ZYt_UJ5%eaG`*QgJYg2XT<$~LW zO3HdkWH|7+?a*EZY7i~YKxkAVL_EWMEX}wPwG--rtSrN7R*YuF=$x_4*;;+J(V4O8 z?Pt?AjfLV-C2a!ICUW$AmkwfzN^T~3MAz7L>PYUix-RWdt793iXLw$xQFoek$EjHk z1evZ=bM1!F^)^upZUh9N>fs_wt)lpU`u(?Qiaq+oVt8`f;2Hq&XF&8AT^JDea6 z1g!7ay;=;@2cjTIx+&Ei@ceG~obMq-jYKbzNSb!70Jv4rbOhj5Mbr_1TNPDD0B%)e z9Ravi(RBpiRz=tmfLj%1M*wbBq#XgcRnc|?;8sQ45rA72bw>bhRpcE3xK+`21mIRh z;OxYmY=mrpXVwof8$NfxX-TtNf2H>QcBsxyu>kJzhw0Mb9&L9zLEzx=ZOp(NDkp8e znMv%39e2UGfgMcj+lenW=)w*dYK>{89Nx*a<;g*I-wTJuJ^7{J_QSh}h)WA+CzjJc znXLdcB1%%I(!pA6!0l0qkXfNm!A0xR6_{JX{s;egB`$d5cPC5FFTR0U3Gy$a`s@fp z7bgfH`$5P z7at3%msRQXgW(`yDjg_>7X?1?miHU|XRIx-EP-37>0Lr!3TH^S$zJUb=<~i^74LQC z+k4VpUuIh`46WHhvzqL8h(hsx2U)agB~r3VWO^qDZ_WfGz8|*C8%xm9Rg354ki2TN~RDLgL-&m^3@Hgy2{h1NgRO|0bWUBOy z6#Y3yeWOU%Mmiipyn%j>Z=xX2tpeluF#tdw*{VWN7Tr-rzw2m%eVZ#6y;V6)7Cozq z{={Elk-v$ew<^)eqF=3wc5dbe<*tbEt;&9~=!aF&9~I66uUPa}r9@fuoGSX)dcUwq zgl|z5DvN%NDjG_6{I1yQtxBG<=+|C-(OZ>KWzmnQqQ6BP&Aei(w<^ubqUTl74{o;T zt;)T!=tHXLZx6UF#T8q?MgNhv$suK{QnxI6K^47l zaFeaxs(dbsKB|h|G+%F3lIM01gAleMATJy-zz;~5-_RT1%Y9?ZqwIWdorzwson{_S zOJmbaAk7Eik#qt(-`>!pBj$71L>`8NuunZ-+0SB!Qw5ILW?%<1qH)k$qfyoN^g}Al z=1oR*gJ>Nmnj$7lZsyzu&=2!#W*MeV96{=0p&m1nP~q65)r_@AckQ*vzU`_#PzY^W zRK{mTE-qt$gT)B)^@p+VW(@?=NAg(ZP%%V?~RXNXyXfJldO5au~vY>~WPm63! ze{4)NHU{mJHG%19T2aJQ=rSDXR}x#95Wo&3m&hN8RFUT21H1USbP|}J3?!aQ*0z)WMOpDiY*jobJ><%a=+?7g;2;(jh7~6Wk{H*-R^TpP62S<5L*2F?=9dbE zFai!nCQ5Vx^Sr`+yr4a)kuEAKT2xGSa^15a*VI|w{_FZ1}%j4Ig=rqP&N@WX&6zX4BvgFZ1` z;)k(Ze&a3E;5>``hDoygen3kPJ3$#<)xMz>mEq7g$#3YD-fDqW1mE+V`)(-MOg42efdw5R%~^(!yWVzCWye|El&4Js*xM;rHuW8-GI+;c;<< zY~ybd!ul1zPiWw5tk3Uj>Hk1W|A$)or*1hn3BaOcA%hM;UzIk4D{&s96~$p|OhH0ch7D ziz=O68NyCBL$x+_hfL3E#m)fV!ooA9KY$|26TEblg%$A-iuln?5iGol@E=F`L$U}K zZXo=fqv36Y!)0t*RhItM2tSDMb_Ncv=$JA`!{-qGOQUe+5&i*$&t>2|itt|>4L^qP zkB^2QNBEaV;Xj7(zd-o$41C-bFx4DQe*)ocgg>51{|$yc^-@xT$w#(*G>N??w2#GvV(+_`e#3^K%G)JHp?SA&j2~VO%e0FB|nf zMBON&em;}y{fPS4BC3>$`b9*Y5|sA-Ow=zU>g^)e`*9UL?8z9B{0gGJS490X!%r=f z_X9}q2Zeb*h^RjlQ6FG=txVnzApwlz7+Nw>FCq#84x&DkiTW_2zDG19n+wP8C%;cb zeHeF%sfK(EcRm!km#r!1(sp5xtD)k8vV^h6I^e>~A1;MaAw~7%=bsnGXIq z(wt{$4(J8{CaaTZ$*+jAC5{>NPawtjixj`fi@#4V{*y@X1A2lT{vaGC8MOQs68(@& zl&Qj}Myp_DtMF;P3ZLRtctEehXY?wt1iOT;CR2&u)+_O;OeH=$T8Ub=5}(s6@mXGp z`}InEUatg8urnAYc|`nhJ|b{a1mb4;J;s?;^z?i4hPt}I^;Uz_w_n_sh|#EH&q9gKzPu|)B&8Q>hL9qoc8m>NI3(=`U5|_ zr?`LFsqK)Ih50{JXjovt6AFHKe=ASNMg}%3f8YR1G+o9qkeOjzp>~{9teG$hyqR^s z=Lg9Q^I3}h+v}cU0p+txmM7_-SZFas3XzUl`}q_DQFKmDNFzu=8rLYhbGctv>o` ziQI{5cFdlgBt54&n~>{HtQ$lFn7og5C&JjWQIC+TTD#}lN^bxhgyHD\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/tmp username=amsternl +/container envs +add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443 +add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q +add key=WEB_PASS list=awgui-env value=zoomzoomrulezz +add key=WEB_USER list=awgui-env value=vados +/container mounts +add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=2G-MikroGig-1 +add bridge=Bridge-LAN interface=2G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroGig-1 +add bridge=Bridge-LAN interface=5G-MikroMaster-1 +add bridge=br-awg interface=veth-awg +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.19.77.106 endpoint-port=\ + 51820 interface=*F3 name=peer19 persistent-keepalive=10s public-key=\ + "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=10.9.9.1/24 interface=br-awg network=10.9.9.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.19.77.104/30 +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260629/20260629084001-Diff-Config.rsc b/MikroNUC/history/20260629/20260629084001-Diff-Config.rsc new file mode 100644 index 0000000..f3aca98 --- /dev/null +++ b/MikroNUC/history/20260629/20260629084001-Diff-Config.rsc @@ -0,0 +1,70 @@ +25c25 +< add name=br-awg +--- +> add name=bridge2 +27a28,30 +> /caps-man interface +> add disabled=no mac-address=00:00:00:00:00:00 master-interface=none name=cap1 \ +> radio-mac=00:00:00:00:00:00 radio-name="" +29,30c32,38 +< add address=10.9.9.2/24 container-mac-address=70:35:5E:FC:C3:B8 dhcp=no \ +< gateway=10.9.9.1 gateway6="" mac-address=70:35:5E:FC:C3:B7 name=veth-awg +--- +> add address=172.19.77.106/30 container-mac-address=5E:0C:7C:E8:98:12 dhcp=no \ +> gateway=172.19.77.105 gateway6="" mac-address=5E:0C:7C:E8:98:11 name=\ +> veth-AWG-VDSina +> add address=10.9.9.2/24 container-mac-address=7E:39:0C:32:E5:06 dhcp=no \ +> gateway=10.9.9.1 gateway6="" mac-address=7E:39:0C:32:E5:05 name=veth-awg +> /interface wireguard +> add listen-port=13822 mtu=1420 name=wg-AWG-VDSina +36,40d43 +< /container +< add envlists=awgui-env file=sata1/tmp/awg2-webui.tar hostname=awg2-webui \ +< interface=veth-awg layer-dir=/sata1/docker/awg2-webu logging=yes name=\ +< awg2-webui root-dir=/sata1/awg2-webui shm-size=4096.0KiB start-on-boot=\ +< yes +4751c4754 +< add disabled=no interface=Bridge-LAN +--- +> add disabled=no forbid=yes interface=Bridge-LAN +4766,4770d4768 +< /container envs +< add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443 +< add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q +< add key=WEB_PASS list=awgui-env value=zoomzoomrulezz +< add key=WEB_USER list=awgui-env value=vados +4776,4781c4774,4775 +< add bridge=Bridge-LAN interface=ether1 +< add bridge=Bridge-LAN interface=2G-MikroGig-1 +< add bridge=Bridge-LAN interface=2G-MikroMaster-1 +< add bridge=Bridge-LAN interface=5G-MikroGig-1 +< add bridge=Bridge-LAN interface=5G-MikroMaster-1 +< add bridge=br-awg interface=veth-awg +--- +> add bridge=*FE interface=veth-awg +> add bridge=bridge2 interface=ether1 +4795,4796c4789,4790 +< 51820 interface=*F3 name=peer19 persistent-keepalive=10s public-key=\ +< "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +--- +> 51820 interface=wg-AWG-VDSina name=peer19 persistent-keepalive=10s \ +> public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +4799c4793 +< add address=10.9.9.1/24 interface=br-awg network=10.9.9.0 +--- +> add address=10.9.9.1/24 interface=*FE network=10.9.9.0 +4813c4807 +< # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +--- +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge2) +4816,4823c4810 +< # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +< add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ +< tcp to-addresses=10.9.9.2 to-ports=443 +< add action=masquerade chain=srcnat src-address=10.9.9.0/24 +< # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +< add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ +< to-addresses=10.9.9.2 to-ports=55055 +< # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +--- +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (bridge2) -- 2.52.0