From 2e6df2c9fa6029ebc4a8b944c3a736bd30c042b2 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 29 Jun 2026 14:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 29 14:20:03. --- .../20260629/20260629140004-Config.rsc | 3693 ++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 2 + .../20260629/20260629142001-Binary.backup | Bin 0 -> 363823 bytes MikroNUC/20260629/20260629142001-Config.rsc | 4941 +++++++++++++++++ .../20260629/20260629142001-Diff-Config.rsc | 133 + 5 files changed, 8769 insertions(+) create mode 100644 MikroMaster/20260629/20260629140004-Config.rsc create mode 100644 MikroMaster/tmp/Diff-Config.rsc create mode 100644 MikroNUC/20260629/20260629142001-Binary.backup create mode 100644 MikroNUC/20260629/20260629142001-Config.rsc create mode 100644 MikroNUC/history/20260629/20260629142001-Diff-Config.rsc diff --git a/MikroMaster/20260629/20260629140004-Config.rsc b/MikroMaster/20260629/20260629140004-Config.rsc new file mode 100644 index 0000000..50cad65 --- /dev/null +++ b/MikroMaster/20260629/20260629140004-Config.rsc @@ -0,0 +1,3693 @@ +# 2026-06-29 14:00:09 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/720/6faffeff\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 02:10:04 29.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +#error exporting "/system/routerboard/settings" (timeout) +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc new file mode 100644 index 0000000..e26460b --- /dev/null +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -0,0 +1,2 @@ +3634d3633 +< #error exporting "/system/routerboard/settings" (timeout) diff --git a/MikroNUC/20260629/20260629142001-Binary.backup b/MikroNUC/20260629/20260629142001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..3d4c17146eb3cf1ca2dc464822ee722bd162ed28 GIT binary patch literal 363823 zcmeEv2Ut_f_V4T@Ktho&sEDBnqJf>Bs3;v#nl!tZ3XwoC2_TAs*sx>oz4zX+9eZ!s zd+)tBc;DLDp(vi?{l9bXJ@5U^$G7*&X3Cm1Gi&{3t;wF^6?516k1|2#2q7)sKS!a} zsWh25LI^_$F_7Uytwx(vqs^+(o&+7u!4P6#jGq&bCsU#K&(SKK$>IaZdwE4gg)K?P zAcO)?G>3}N5)7H6Xbue_IzotoA%vNsa?Bi+BMg-@kO?ZMS5#C~Fi^Q0vO(o;v*R_Yl}w>C3NnK%oPrSgM$(O|(ID+@AaR6{8x5fh6wOIP z7)I2MA&e14K^Vi*5@8I~0xqTqbEBv=bc8htjOKtS7P ziWn54@h`Kxxuy&v8gC%0H@@+&H(spda|O79%aY1@3KmbvlhoRHeyxq?|2G>yxT^7k zw_%mTj1EH(+HVP+?_Y#L=T{qS=D}K(JXOJp3W}j4%%?vV&2d5Ha}ekTY$!r#I6`Oy zLTDsHXbeKA1RP(;$Sh5JG0Coak%l^F9cneh6Xx5kiG9$6=}$ zA{Y|HxHUnDVNFMf;UGtdK}ki3VQK^F$sV4igT_(A*G$Ma0HI#+L<>oEaM2^gkY^)A zFHs~AJXmgB8?)wDrT$UlpR4FAg zg-n?W8X43O=qC7pzH%q&HpFv-4x|`#Fwudejxvae(82B~ngcnFT?{EeZ4+aRNCCQ7 zo+iukm#I~XOnr(bORv&o>cED)t*EGoAgg>=QBe^@((eg9Wcchw2t|;rK$9?3PKSJ8 zdjcp3x!K{pl}b;akf_M8n8cLOq{z@FmDa(^P^U_sBF|RIgT5;Us;n%=7VnL-D~o|{ zt1N|XETzSF1puE=fFuK=-6-HQ8A$NwM?D_JQ#D zBn`HgP14X-0ZBt?=@snSGEpH@c?D4sqgpM>Y_(co$Utyk$r%kYT$K^}gYG_~S{_rWM3$bN zC9Ex%3FNwn8FDo)ua?U!Ly{>;RcHYssAY1!CR>&UqZ>Zq)$ZXanv;nT)(at|Lx>o` zpq|nJ9l(TFAVjB|A*6&aplLv3F|aJS^aR1NIb0r;tX9ZV^jcMFszR%S?=S(4fC=t^ zfxsAHfC3d(FyBB~!UsCuNJGaP(?G}1Cez%Zz;gl*Au#6V2tgGX z02VuhK*WSXGXoar2+^TKtq@{R>yVSw8vbJo3Jvrpa)1lWQRE1e8(b)Gfk6YRu`WVx z6f1KEC^*n^RJA6xav+&zC^9tKypn$lM_5gcuwUYcCRgdw|2_OrYVt$*HGUMbG|j)K z$EY>=q5cv-rdmaYMz5G%v&RrQhL9a16v+Q@4AE+GM5~3PIyn-#Mi)q2{j}LXj3^UD zhD4=?DFm}do2{X4Ia0q$~AHA7cg zBfxK@EdcBUih@BQV3W~g1JXyZm_Tf(o)my3LT+?bre2}VROl-Wo^iEfWI-#*HR@M4 z5D~0gKz>vMFvO4osj_ke%uIzUHBG9~GG&@fr7AUBD*-LYOq1xCvNTC%szTn3nWa`p zbPA?cq0>vWdZs>2!89zOn5s;sMk`lnnR*RVl9i>-BmSAG$YtsjdRWKlx*~+h5dysp zIvcY=h#1252w@HgfldPjhB+gI)i)@4bQ~ef6(Otk!YzWAkB36LPH2Jt~`TO%7ArYEu=w+e%Fh@ z)Qms?zOI0IsVA)stL0O~orX?ZBZHBCOIlC36HDsz11n92X_e_9raxE@FaQklZjKOr ziv^)7=yBl)MhfwND}?Ah9wP(>1|b^+2F4Z)403`?J>cpvTpA$6Fn2+S?(B?ELr5Kn z&K z#1Q?I8G*$a*e7`M87^Ni#4!Jg8CD11$a^`47=;yZ=|n*c&JK!U811AW`kWyc+C@S1 zVta)4Pz>4JsE7`7cBdNt??E;EAE4Tl<_LLF4e1&~IvPUWa7T#ZLp5*;CW$f>ya>f` zfsx1=2Gj_$z>)A}6kJAA5yNa8P~+jk!VsgSAGFaQ+JR$;;lRcW+)ji9gQ-=c4`7l} zOLqI)WlH&9D^nZ7>6EF^vq*>A-!EM1KTo){|IC23$yI3;YK2Z`6mE~dedN;qdBUas zXM}67%gdCdX*HRe>`M7|{oCbh^3Rj+e`xSpr)l)MEKQ|ikp3OA#j05{I@s2Ko_J0E zGsD*|OV*2(ou$@D;Mv$YjQKI%UJez$hbNlBVsuJJQ|L!u_UWLX-mK1HpOr5mF+1>|xV7LrD~oS>sQOd_7%07Y|LVfEYy zE_8(4%pqj$uh-`#;0;Kx2{^|Lp#)Q)z@JPZJQjre2v+ulKeo_|@LRh7gigqtH~P}7cA@UA*WR<-b7b17clI}4j4^Q2yL+Q2E!#YC zYI$ugor^+l2yxrAw~u;lp>W7 z(W1ZN2*Qq)9Mu>;rofR&6-N~BRw+SLX-FMpgTJwrpUgPF;8=zAI<+ZQUn?3#nPL!; zcI@N(JyX37h`NU^?3T5v5I8c6u8Ly9)bN)`B*sZ;3i_j4cB_N=Q6$?ePoRgGOqNqv>K&KO(;P4+$5(L+;5_2PF)0%5}4JnBcxuX zRw~E5NEHABnGPxt;-rN6s8WH3$!}1C_T=`BssJNsZHhCgG{6}QQ&yZlFF~D@RduWQZ+1sRI`)xIokbrnwuq``kbtZXlRSj~vlGpvWLPC}-(1 zq%4rI(G1k4Lyh|v=2|0z%_GW~V@-rX%iT;;vlTi$NVcj-U7AE&X<9-^$-+GZMRQ6m zz{$FuxI)>aslm2dAhgZG;BF<EXdWWYWN`1p}` zaO^^y13uv0H4d3rB26@h)ZL^z-WkLTK6x-VZdPI0T1}S1KU$-cX>uJ6+8!ffK*srM ziK02p5Tb{)5AF$JIb!DqY@RUI<3ZL9cMrqXKR1h*jJC3{=%%8ML2)o*%@Gx0hJ7r? zO>(_7I)8odUOmX%#@!6i8Y2z1z(|ArG}2%fjCA##5FjHCSsp~HjPxoD(!=Hz1lEZN z`-3GT1~4EY2;Cb(WDq@LV0GXtbcQh-1k`F|g9y_1*(jCSFtWBEvQcWu29bF~ZIqv7 zqt?tuA&hNhHtNr^(Q3&?tIS6GSvHeevYAw7GvOE{`9s@GYi5J#W@wh_&vKakEQcBN zDuHs0dnk>A4Tgk~hD1ghy52}b9vHQa5TdgNW~hvGxo>b!BkfR7MX!$y?g>LmrqE^p ztbift1%;DXErHzF0Yh*a3}0l3R81hC!>u<-12}p{0y;=40mew)u90cr-+Rcg73id^ zBn<$o4~$!ch)@oh9I5ocPc&yVLUX8yhC%|85=>ESKx9IEggFX{35eHd^vq6Sg9r%J z%upMIH_<=?E+kMIg!jC57hyf-P$?LNVv80~(&xQU=QGP_ z{ktm`jW5K_P3gWv+MEcWQK`5e+X82pQj=(=_LQUqwiRvxU(D@k&?>eKUI)HX?TKob zox*TeCo2vg7vo%<_;hx%;=xxAhszi9#hw4<@^Ww+Q!|1a3TA53bN~&xQ>BR3(yn6p zt(E(G_F9wnh2GF3_vP%XeJ#&KipSiGdLljZ3Eyg;|I9gbF#Fxpmf-+ZesMwO^aGyb=7;=dHffn;(n^5^ZZ} zjbRlu8kK^X;?}0rq=xqJ-2|s%SOwk?9@L@Lr8&$$)VTBLxlyP1vai!U4mDqu{3bTJ zx*Vyg2$xgv-chUf_G6uSmqc0d)+y;t=P!@$oiJ_sB z=WiU{ee)IyUa$N8dHI8H?7aGMFMr;`==I&77Cqnpu4w8Xl>14WN8^GcSg&V3yN_nN zEu7%p>{WS-VF=m4uz|r@3=z%2o6~?E@Vo2(fA9J+FvUkAlSp`637f-~a5!?2LM+5_B~K|8%akHMM~QPJLR=(~@a24gKrkF3cCABt1XR%* zAvdOkhjRo{2}hw6$b>QuF6ZGqp@Odv@FfB%_Vz7fa5Oxp~>J$TY>T2Y`zyQ=A z667b->ix1587X+BmR(Q9i>RydBFbcgmbIa`xS3oM9KLpLcF)6|#vW{oTbVL^hqM{; z!3x7nOb{-qsb?K=dxM^}G*$?LVb{Z*;IW0h&G+JAGjUggDt4;OQBz2unsEV}%{FLe zP|aL+wXgpP7K$+U>J7(C5VZ)iMtBisPAS4Lbi2hZTkZ8F3(n5(uqnGJ!}AtC zw>vSZ3&vm`!^SU;!8a#-2-&AX9cJDh<$i6bX&@TFIB}xEz+E?vx9Amq`@Hg?$@(1c zx?}pza-G=k`Q|qB>6g#1?qex7RTQ-C)~M9!eL*R}W6RT`{{K zcFwqywJXrdJ#S~kZSS6Mr*S_<(tC_3OWDwT(5|`5+D7$j zbuuYli=F4!&ceZE9 zpV=Pj^*Da=>8S0>m-BBoXs~zkx`5M3cq1@P9yDjXZei^SYK}iDNdM>z;j%XNcIKb2 zh0chLU-S0HD%!ieJoF`h*V45oX^o#_HNm%d13nEC#xMD9$g%^XRAnkd#rkRg?wwS zR|kA|1JC)lu0FaEk-u?+C*1^p%GzPED{NQX)}?QrOu_6{9x6UCg_knQyybyM=O#|f zxDK`x6hx)%+>;Pyw4J{vv_U<8r&E4U=-(6ipF5$e5D|~d6G?D|n8)MEgd&-gBj77= zzDUkjh{QaelqVPQlwyH^Bb9Rmaw&%|REor0o`lEa%7i#uz$Oq;ZHg8UQLXGgq>AAD z0;K9G?E#Rg!kVqC4ymXBsY2=ykcuurX!nn(iay7%RILWA{Eeu^pkN|6iBSph2|)>M zf;fBu2j}1+L2MSg7Nm8Ih8NKe;YHLnB+{~cx5Kn)GUaWbEpg2}j=fY?w{#Z&0i+ed zAr`@GoJ+2O4M+>;a>T|(aHn4adt97tKy!RNl8x9{KSiI*q8*!QO2|CXEly9`|wD=kDFtt&!Yo z)M#q~W6HyT&jSl0RC5gos|YK?i?IHYWK|4X^i*>ZyE*ZChMe{9aSsC=p3(Jy_n-k~{YQ?RKRy1zf#RpaeBUoG zlRAsEHW!io$tc~GWkUXvCIeJ6a!Ri|_bn+qa`Htg^&73TTivx4k6YikTJ-M8+fL&= ztUP@udPNtAKepL*rfxgCQ7XPZp{2nq_d5`y-W5}tQ(-~85e9R6=j z_gmBX|JHQ>A85KNY%UYw9KKSllnMAsxl$(POSv+MNG21C1VX7;!WRjpe2!2k7IMXW zp_nb?3Ajp`h|QJbQUQlA5fj+FHd{?#^V)2*0h`N|e5o84aHMI|~0`mG9GM_*?J55PvCj%t}1Zh=$G?@}h6cvyl)9Cd&xkRn7La_l6nox;c zo(KL;8j8%6`85TvXM~1HJSN?p3awtHRLLZI1v4mHpQh2O^m$CyuVHrijJ8Bz$?0K1 zb<9o&%&zvSHMRt9&{_a{vj`1~;EDyHf>n(xRwY-g2+ntY(Zk>u-H#VhRvOSchQ31q z_<(^m!7&+PqT8F1Qe)fWwt$Px?9Ho$$F7e%!$Wg>+iEgw22N8yHXHXh0BN6Jl_cRS z72{%@be4jzRLJIV*+vBa&*1W}yf3?YN$IaXcjA3$aM*eNhr-B?kK6~^FWS!x!CDM@ zb$@W=Z12bK2Q`S9v*AkCl!F{>tw}4hnCEXl$NG1|-5)Hkmz;jP(Cq7*y4i)|_I>Yt z;&0N&EFD#3e|J;srPP6+=j|Ns*t6ie#okTz988Wp-n)c0p+$H;$LbAIx*r;)$`FjS zb>4h-olB1mqR*6(C(d3AH@j}$>Pff!L-}9UG)-7APO56}Wg@8`I$&h8r6H3%ZmeiN zU|O9f`(2hk>gKv>)-2pyeBxDc;g@#Zj&Yt2mWFuoD9PT~*bObRd|PL(eK?~S>o>dX z)0Kpb9y50}d(d(DmXz?XC-ya)#Dh0;*2E(k<`Yr^%gCsghUyTbQ!5S#z1AV--U;d{{K2 z^x`A`Q&&1aKdB$7+aLshPyW2wuc__wk~Q9i zpB~Qc{75)^`Q01p^@E*e23+!t%^S-oX2DBLssE@%ET(Zh@KH_iGxe5E{|eZ0af&FPAJiHOx_)ak@m zsyiv%BYgt;n%_B6kRrZ!JA2#y9B1x{W-tAtR(@Ff;6&__ebd_}n(i;?caCm-+oim} z)0P$8-07s9ZNe!n<IKZ zZ)xuu0qD4>1}HWlDO1%)q1P}I6|%HU4Qy&s=$Hw9L4Ix!jRts=ox!X^Iq-UfN}S^Y zD2+^#sLj^t6>?^bLZ7SArvFlOdYDs18-QiQ*jKWu!!icIvX-ttg=ODIryCh~V39nq zNFG=rLEpi!T>!(j<3*JD1{g-Ah3>9y;~*m4zZwpUi(Tx{V`1<5 z=khWZMzyc^Q>hUUOvJ`H95x3Ra)q6ptT(2dnf&pBs>57oakrlGyaQOL6)o9q zMfqoFXWIEZWTvz*n|CZ)cje8h*n`REIxn6y?DL!DX=NTmI(eUDc$coo)DCpPwKs0g zdvxZOKD*uy-&uVf6KM@Dgosxr`Ru=4fBW0rcUOrbxyNz_&lZQBSupFh-N^PI^Y5|> z-mOS^Qg`-R*6D4>#s=p`c^xhhX|B9H_GPr|n&DYH{<#oiJSOoapKX$A#q_#KSllt_^JY1 z^qk{I%_=QK@%X#Hejn;V!u+ z9TvE3UBKQq!$(i$RdDMyUiipLzq!@q133@9C(T!0yS3_dP?sZ9k_YOt?hdJch8?uc ze<#bnbB-qFVa$L!t-Da&=h*F3cC>AKl)7(&uP zS^tvq`8~ORPwxNPLQF6Nuz|zLGCe@WeuekjE8^IC74ZkK=4yDv+}Ue6Elu zkts!7iBQgya5-|RP#}`=c(_PGK(5+!Y$fC}#UUh4z^0 zV#Ox}Rda}`G?`T{vG0J`Z4a zt_I7J5{%9;y1jXoAlVK?V3THMZ&6L2Y**aHfZ!Z!6)W2hZwCLT+Iv;DJ>NT+Op}rsk`HvKRovGYU!+~ z^3^7j_>DSr-du6wQ^4kCo8Bj0JM_S=dGxBN;hVco+pw7#aHPPUx2k`OG$j`L0E-Dv zn9l9-VZzP?VTmr}4QFq{iz~~@^)af0=_7lLzrOFF<&9gMRmaA+Xy1Ec>WJq7$>o-( zRMriw-*`1n=VpA!jQFezx!1qWLgm^f`J6$rq+$E4_KZ)&>)Ee3+fTUoNw?-|e%C8O z7wj%CjkLINv2ZwJyma(NvN zTpAkscItx;LubV`>X5jk)i=G&e{GzCald1*Ur7C^4KKYSI(??OjxTE*-ZpN)y6Zc8 zZ~mIiIC>FcP;E@rK*;@>@c;a_B3g;lGd zX+qwv&dZv%J(*Z|>*Dm?GheTxDv$mEO@Ht!R>P{6u)CFlp{`~5RwqAT{eq?{EOqvkL1@GF<(>AHXb6RG1-=@zkqGuO;z(f-q zCWe?XzVul7+-14l$T`!xFP_q~Q^tta^e=}_hpl#Yl$Y39>wNt7-}a38+VSbjw_)Y( z>!0|KK65EdVzOtlW=W2A%!rYK)w`@rPV^def03q&CKP*KTc9k8EkzO>ucg2fIxn=@s{`M=NdHpPahtsne#1y~d8b9$9{k-)o+u z_XL-dk~@vJYv!kVxpljLt)YcqT7wovtDg=`9b7i0y?*W1sfEKT3VPS;n%B06-?+e4 zQ9|ElhYv~*)#>&@(B;TYFE4Dvwfbf=a#8D3SI<2SDEqv<^|8U{H3dsqH?~qfyqi32 zBmeT=)HOrfF7=t^F}k9wclxb0v2VO?><|;=*%zP*VP=PLzq)q%;56 z`n%jm6CwQF~p^f4!sH7!f|ee_qk@v$D{veWNN^ z+-)nz^xc?MysA~blYu@LzaA>t-fgP;yZHMZ_ctnLhdeKCc;Ue4mLWYGE_S}&FQD!# z>8B$lOTH0~(lZs6j#98WMy&o@|Nlo!)o=a(TmS#o|G)MBe?|XSE$0+MF;^y*;vA)1 zB$2SW3JzPwWpg+piA*NNMQpZMz~f4VJh4n97KsHsDQtF-^8_-koF|jYImB|VHe6D< zoMYl_rCcEA;!2r>E0gfq5)oS}l?iybg3HIb969W2_%(bFE4tcO3gBR`zOn!hd$r{U z>13Cf{=Hk0xqrQy+a3M6J*?&e`Cni)XZYQ$1+kQKH!S78`-#`je>dCExaXE-*pO`4 z?p)Ij4W=tWZKf<`%j}C9}{m+yVoUuy|)tp zL>RJ0XD$q5BS8E;z_gXy-icp(MsR-*uzz)cRaqb|TOt<-cp{~Ujq})Ckxa-HDY;^W zgvaIJY%Z58<|?=nwn!$!IUKP-p%e>c9EnVFC%Kl*sZQ_T8C%xU0?Q*~1ZsMwTACt5lDD^%%_3HG*)yGV~e`cGV>J4uf zta&3B=8fC^G`xGkt&D^y>FVQ+EM(i8&;0T=4^5HiPc|+Jl)YJ}?OD%i>XEWK*~f%m zMhx52>6Nq~WqpbQ|G0Q_bWUg2obJ5c4<{v09lri$!GhyEu5#GYsA#abEXQO*_gg;WGo;-Z zf6Q4@wkBKjiq~`I-Pyy3G;V*t+35qU%!$ml; zEw^vJEi7=~hUVAl8~-JJdy9Q%^V-K8FL|44R_{>D@IF>pzx^E_WZWN&J5BT4XLFPG z;pXdtvSsEK!3~AaCft*EvSa3o&T?9b24qjteNG#*_UMU5`=5TE(f?%swXe)ro4)Qk zvS8P#$tG<}A3OU{N_HgnX1Mh_d%9o4OLf;Ql?0qJNA6z__C3mwhgq};9PpuEKIh$( zBOOQg^L<{@Nhkj#(0BKm`%Y=%S0Hv=>iZ>b#OT4Qw|}<%?)UUJZmRxwDy-kr|M&F& zuTB3dNXL;W*fJ?DRf^>trC7nnIbtzaDOGUTd^VpW<4QSlIWCh(+XknQpg3K0Pz)<1h{b0I zbNFF=To{TAtr5bP&|a|zxA1Q;=0P1(yV36XyLJUoKSy7tY}(Oyl;wc_!#^|ac-Nko zyc)LXc%aj(!zYUDzX&#~)lV87kJ=yUH9BKz_vMn^M~3!!^lgW2M)!5%=N%8V>%6{C z#$YSv>-W?*eb>kmg>ie`t~DIO=PuGtcys(@eEP0E%L4wGUR-#f-*}G;V;&bo=TnBS zs#xYLFH4IR3vYDm(To1LS^AiB+@0$d3?6JVd5Gm4{^&Y8qDqgi?5#ZCrE%Tq?+Uli zqOH65T;0C?!dK&bR=#>Jd)m+Q>x<~qQ-#U$Ku?zu0rLl5Z8>_gRk@=uXR%*t`unys zuayi9?yeI@?%KQKnOESR15&rcp~d-uBi zwKpyM=OOm4XI;xTCUh$cn7o#K)zsC?Y{jHU*sI+0-B$LZC`vYzb`QCfxM5nZ>y*HV zBNt11jrp`vao%di>YN8>zH~e&c-_g;w|+(W$GAnRAuqh%%9xU<8OgiGPCc~6?0NY6 zq!B4g=PJHA?LMCWBv*~fOyb>R-SfhDeMTtG%wF<3zaRJd`F!(h@f}J>H@*>j%CW`C zx_do3w{7>wZILY3@7~E_>vBBhS$zl0G&>kOtzq8MbL-dd3}_zuqCTgre*D8no!+k5 zacI_u4*7$x?0Bvov9R5?<;8QqjcsANwM@3)>By|^&sYt%oZD@(k{xlmzT+!~G zJK8r`P;&6ont1!0!PJpE&fR!-1(m#3J$LfHZt~*m1=Hkjnj=)>#x-k9L^X5?bq;{&dAkDR)|gSJ76m0SI-4HqxQ=zDh34(09&umk&(6Bvm{l@( zO$=l4q~mr&Us_Ij=e}t~dBJMG0kml;_N)Kc9s7yxYVo#yoxI6cre0m%cii!oXZzEH z53(P(yE8NW$mEUq#K$O9VB~iJ!LL`*@klju8P)wB(DMSv{|= z@2nnMF@D?g5&p@H0lX_&?f2}6WGrx8crWBm_PV17i~TZ}c%M0arV(b|pigPVVGq$K z&**z|d1*loPFMFmIx=Bd?jK$AWAfr0pVzStSnDfFT}k!sFnRu<*?H}w#|d^k$#`Kq zDvx#1L+6`6;LGyZkC$%r4IkR(M(oXY-9PoY6ExMX`Ob@s?dK~R2o&$cujl3Y^`5Y3 zuxrH5zHgH)1KRXSqP{q=^tKdpoLLyW<@}J@1A~@E%*b#xUEaewdvo-;m&fu1x3*ke z-R^eq(uRR5ivIW?x%|?o5ARpsdb4!o<0CUWz8vMGoz#AVJ*T1>?ev&=7O57ir@Wun zjs0|4r0)lpfy27{Mh;8YGSh6Qq$-yUd~xcl%ZhX~AnnNM;4_{6SeEmQ^J;S8u{TK} zbbn>*>HZ^lS6|KZCl@+a#q<(-YV38#4sy~iRU7dimtZTBj0cr)YVzfr=Q!^+woMC zURxI7*+BO#xyKV5JZaDh!O@&@d)DGDO~34Fb3%|XuE)`9?9s&`M^k7neOebT@V$F~ z^s2Hhjfb=;S@&V^VewK{GQujJ9#YUKf%NAgq8HXiT1hwrgD@~A<`Zf%QJ98b6U`&yK$ISFQQbKyo@>bKn@P&{DPw|>1pik&8H>uF1@nO2ooI$FuI)`*`h z{hlemX9`y7UHIQVQ^x#8y1$X`Z>0Mh>Ha@~bcvVV3WXAxT&Wa`xI&3kF5rqd0+~c8 z!*N_F5lKZ-wuE>swM4!g)@Whex7EYCj$Y#4+c)Ke>)Qb{ zrmuS5@EN;&|LoS92R@Hy*0Z=HYW(nHzjITMJdrkQyN18cXLH`Gyu~~34SV}|__^H0 zg$cTDBeUPWzcPN625)r1&-}hior7CWI)+oXb_?CU=RvDck;l(mPn1r)c6p#>{H@@W zH+KWp=A~C`-Cl;gy|x!APuHhR8nz+J#p%@c6-x_GEU1UaPdnYfv-H3d#X<3yip#?p zL-6dCtGZbpYwzmbPqBn?Xr1TvCFf@~xfyxiL7fpQEXp}@qcF=o)ZWQsM|-!|B14nc@^0F^ z7~c8iyMXgC@9vJZ3f$INmf763_*7h9*CuR}izg5JceoK$-}d>#sP|VsO9eNwHoh*o z)i0lw+{n|Tu}g_QaPDTulT&(qNXyHxReqyxkIq*S_5*+a8{Gs`JyC zEW0_EZ?($U^zL3)zk*FiM(-ahHQyY`+cY=y#OF&5oQiIXA3ZqJDkI^r>i$CRB(Dcg z+czI`IA-sphho`%#w_+^YN{xx%xgvK7SC^OTK_@D?sDRmSN64?@h`)kbp3Q}QsKb| zU9XPZ7BJw^@ZD>6$a>V_)6cnhcRu){OZyRalbJH}7lA=!O@ewPrN1)V%D zJaPIwde68~xMJ_d-Hjvn4h~G$sXo0~T<3t5#@aF9Tjcutir7r+W(!=$<(&(jAWWXM zk9(*7voCRwq)tI?bjC5;EF^Nw1WbQyKG-tN$Vbys?rw-}eooEG%1 zU2gcoA=zbHZk>8`E|}5(`2Mu*Db6>1X720bcZ;j+)pdQ=&K^O*bpt+(QO~+}aqi@l zkDo8!F`;(2Sv>#hn$qH>ANaQpUNPl(eYmM%%pY9Mi`D3C zSKA#HbZW^4=T-Upqy^tT-E2VZ(^B8pV#A>RCtW7)7=aJQE_-XXN9;Me>?X~+Q+V!p z$A>dpe3P}j=c7B>^IG7GF}Lip_vJ5Ne&9l%e#tSBZxe6EY{r)5PzSAOw(E}@o0#|Y z%Ebw7`)+ylcEpV6q*v|B{0i?JwU2n&ej~TJe5%jW=a(*3*ggq<#(k5KY2I+=tVz_e zI|t8HeDmoV^FopIVSDE$xr{EICi^$Zcf9@P%pZ|!=YHHX%fwY}CFs$w7yh7Ks&Cuv zVZ~9t^*&#`lx}w8MQHS+VKYJ^I|V%QeBw@(F6ct&>-&ymI_zkd_9;}FIeq%%sdrr}(uehu%`6(>(xE|_(;0En;|+zq-k(1sZ?pBv zp=a|O;N3LA9xGeXXD@KrbD<+REb4*7!VxdRzL5@#K4iSOSHT?AL$$gaWogKmk`2BG%g$w&G`KI$ zw5m7fn>An6lwNjVP~y3zc}bdfgRT3^V+xl|l&48uLz5;R*s;0p;@rqt3vxSmP~FLsd5o$ax0j$PkvIfX-3Txh*A*|y2) zm4#{JHXYpgXzFS+XVJ2--K#sC^q@GL8?FNL2X$D^zq8wFc+Rz@TQ%E6veJMH4cE6`cz)r6QN8cnQe-}J_B|?VI5oc@ zJgj}Ec1>(QeyRKFP<{I^H|{tIyAJv=tkL$O`1RZw?0cW4CyeDh+$;?kbbRlou6M?C z@aVXDXzTboL*EKg(nqsr|M9-4Rq1)#ZMsK$>h=2ELc{62->a)j{dJEIk2Jksp41`6 zyOU?J>GP|NR-U=kAf${tus^t$H{pC{Oxj1q<<#2rQmlx&E+2^}2%U;;7@#GTru|@q`CRpd6Z=AF1 zbmJy-+D^Y)_PoCpzx>Um11*N;f4n8S-?Qk@;Ki|?!A+QbA2(PT*RP&_!Jx&fmWtLN z+{iDu%3l1re5mWo=HZ8ZlcsF4Q*(9|zuMs6%}%gaANMFK=zW*g`Se;X=t$ zMd9`>?W_Xkjuv!D=zm-AXuEgP>csFXPl7Lo9=Ggf+3azu;Eey?l#sebrVl@@biQbc zZ0~AYTKfbv5)Abj>$FrJ?0PplV8fuEFWiT$e_znPC}OMV>7BYypR8c`JjzZES@d}M zxz^jdT{}Ec9gI>6?+Ue=aISrLe!X8=DlABy8b3Ziz1wTrUiu-6Pw%>3esB6e zS}HWN%d9)sF8=HG4l#2bM;>0beMI1dHXGu(-8=&oqy4t*Gy3X1;`P&)>f;Og~#rUi7DN3ho|92oprJ}yUSycY}I3vA<^bjj=X;K_Vd1%{g?~#E<``L z=H$qU5V5aZz4hq1%dXjJ)>kjAc@{j0(fy^Bt-7L#zn^pd+Uun+gp|mI-VKrp9}KmQ zNYZZ6xQ#orF#H}@`e#dp-&5xIl&SWX0^@$_|Ls$zYC|QT$CE2@o>0h9vXwZ8!;#6Q zY>pV`D+FRCE?`S}3a*gP74t>7NXp^JIBYJD!>TkLMh2s>v?cuH5V?{a3M~%ZVJb2lAmVP zXyWW^8%S0cE@A|SI@kP&;2*47{z06iEr9>})big;|8Msu9Y*J`bSMK(HYfV*@9j-H zvNu_ZOqn(>3*ON5&*)efN4m_6ES5}@k&&IL(yJ6Y<8jHx6S(2t14VNhAhZNS4Nx=( z4s3@p_QUY9Lgkn#LaCn@z)pw%V+b)~;b363$*Tkvv&8JKwqVqhlFRC)Iz=&j_K} z!9Sn}O?vBCoCul?ax=-1$ThkMGC#d4e}kVCLa9**pD4tPD1@KdA4PNMJy0fh%hLdQj;wTutkLuv#=hB&Wu5bXa*J9QWy9(?SbfPXvn~hIr#;e zK&j3@F}#Y%+D%Xo^H@~aF&52P6pMDhjYT(u<0`o@>wz$+gJ>!RDx&{MMZhxfNUOmk zQGd;*6CA)1_0W-Nl1!O0RZWh<=G8irRjo6LSMMW4bY=_kIVeLT4a34ngEBPIpbU*= z!a?@N=XMl$Zs-Aw=m8V5t>(~7WE3Sa6sn7o#))8YS(Q0^bW5(xNhbsZIVjL*Gkye% zFA(5uD?2){G=>m08XH$LlPy$7H#2AvDpUtwpb$$age|~Xe2xfjQB|#ZY-I@+M77mR zpj9uygdf4;3aYX~UmM%{V^)*zv+}Cd3Pa@QSxtY)%B!jsM%K@>n*ESfRMj~!HH=w* z>>N5|g+UL}g3b|ERSFa8=Q$bGbDD4>SZp?|I&#%Ad6q<bh!|90#G<#36)Mq7;w1VsFjUo3Q7Ti>jY(i+=Bi~n1?V+ntpGmY1GU0x z13vjAAYm}c@xmnM97bV+GGmfD%e1$Sm7tK(n8?jsjKiDl;Y9_+ybD0lKW3-Y%ueeN z7sRP8GZ+K8M$hi;pOG$Mk&82g- zgVm;i#WI24vVo-p5fBR_H`|UKo7eoS1M514-d~laXDL-`y+R9Rg5d&?2OqdQ)HEZ6 zeE~44<@;+j*?LuGDseY9rLZfR7w%m_V3+}6T4IRd8VlUmqjCmptY=WnFoVgUV+a+R zV~Bw)FvKt?gl&SMCYI40uZnU8V#37=Lru)1In0W3y1A=sdk_Y2FOkc&I%CJTBrAuG zhvg-Fz?iipjVKKv$Xo&PsenadV`A`OhR5aGX;Wf1OOL%F;9YGPT*6%%EuUtw$l6OrC}YUkd)iu;f>g)E&J zuF*1+vgB~qRRX~w!8NCOs#+tJsL5xMnL52htu~}-F&d|vHgQ8iHaZ(~3!K3we4~PHA9K#jF*;o|_ z;-t?lHdsY?g>x?T<_w~bA6yF~`j~(@5I?GgqY#6*gv1#Ap_e6@a%QkZmY$u()G0FM z%uG$S7dz`U%&=&QO6>=2VAX6x)zCF$XBmb=ScXKUCP%AdP;@Q-1e7EJyJFO}-!B+2 zgfJ>Xu)t+lfljFd`*yA9M#Wpl3>GwC8V&uJrP1njiKJm#Lr!P_*{ew!YBbV-%ZxPO zG9wMRY#o^%lr?A<_;}M0T7#lFpw_Js!azxb(Q!lwb3zDnMhKiH7}yvyRE`=Tgj~qw ze?w#l)G^5gGaZ#9FLEJ$!GIm_Pbu{sTfC!g_;7xYpbu z3Ha3@I|DQ zrT&B1H3fFf{*+y?rT>({U;As6TVpVg*n;s3^Nem>@c${trbYon zhyWT$0Tlu#Li@|KuzDmuR>o&Kg&t5{rFYTjSc5z1?IQ3Mc=d>%9)RMrfj2HxR8$ne z+y<3U!yjaD3mL)g2C_!DZ$Qx;S0dt2msC@vYQoG>Ir!xXm1Kbs1}Y7pS4Rq{FT|jN zmNoci>Oh^gWW|6l4X6k-5okRIss}%ls1KA2TpE%I+@KhDBBnq9Wq^j}jtIF~sudEQ zf@MHH3^*k!Gg}tgCM3>)Oc6o~Fdjy;V04kd9lQe|i*^)5Xhz_MK`2TJ6l5<`WM;9_ z)VUd~tTe5ZC70#&qQi5-wV_jK0#!1#CR+~Yd{Pl|YZ$Fc*J@&tLR!|6pcMoeY;+m= zEI(k!FGB&@K<68Qu|lUKd|v`EI^go^M#>%lvXKUlkC6srWTc^;MjDKfkp^RAq(@MI zCR}HPQ2`eh^bV6zy%Wq4qAT;&DpQ1!YS1YZ)|FGWBomaQ>z#5L;Xk=`}Y)1t6sRLiE$C|_Y`hYv+x0AvH#=38&>a7 z)9Qu$noikWz4ZUv4mGP@cr)wQ#OX!G&tDX74GU9+PNRmVhX{?<`5A?bO_T}B1AuB zMubr5Hr|NPPI8E^H~>;|0DT~LK!{#!Phc}5K0}}*qIy_BLRCa`utsxqdddG`@9knE z$+GmYoZVh%wzMs+Ev*a#YvEQfXN#O>CX;0Sl9M&d`fctstIA|m&#a0yv%$pUJ z?oVVS$*SpV;79ER}`B#bE^}qYAR_pJ=ZV12Z zw_2@V!r}&({`pqxkHts%Q|v4u8d|N^fBy5W)&{h~R;%^bK5Di8&ad#_|K3Nf)?fWc z{P*vC)N1`6m+VbsIQnwOW7pQLFWjq|E>N#m}|=?zNq@Uv2%fzx}P&pA{5sR7qJu z=Y@;=q}BTNKlva3K{{%+zWwKh|91MV)}MSE=);!kFMX@kn%%o#2l)}2NLnrPTh|so zzP7M2$_I8A3Ll1fZ8pBh4>J7uX7l4~QXqLd*((O__mgy#pm_KOwlMeRQCi@IiK_AB zuw04oMRvVEjMM5#UZ554?e^iz<0N}LD)I8;Ya54ok;H>z*&~}Y>o2}GwLQ~enhnj_ zaZ)4(Fn=9wk(0{X{eL$yZ2W77nR5>AK7C_Xo9B@eSqD#5R*H!vyEtn!A}M{58B&D1)Z zTXyr~YYVS8Cev!B`5Js>J}m~x8v>Dv6YRyH4l_Zl6krr2OeBVa4>a$KZKZ&&X>0K% z8Z+qb$ehJRmS#sL+Rr+T&wjQqAecV&vsVoEv!7i05UHVuG&{`E{J!nq^vw}(O0f`}SDHqUyiEqvDv_@G(d*Y6lej1ovmfbSUmBYF#ppc&vv66kqNPpq&g@5T z-b9;bpMk6a@Fn$S`*u($0@SGIBSqgiq_l%kTL3n>?|0~Y!QeSeM@fH?K&2_}ny6cp zgZ*AF0$pwlbK{uAAuadW(o}Ro*6=#k@WKijHt}%ClhmfFXpmOXMwORUVeD$6wM#Xy zT)40qCkW1UiW^W$rmKq;K&oyoIKQWSY1yzt1-FRYNqySvYK z4X=|X@_+a7wS}PXxn0)hmkJ zR^^+9Rv66@h^Fx3`xGcA*%AJ#9E!c5|_Jj;t=_~}JlmZmHQ9e6YAj4d35 zF(jPX9RhlQ>VqXj*sU#Q0SvrHAfw8QZCBlCK3tcWCHSf9miEQJ^b4xQ{*tf6uKHT+ z@W1)%q{V*uzx{R6VxjoM&+-S&D(o*ng7iMCy)jBM(|$G`zcGE&V@;XHf`+1A^p1)OE|L;ZPSU{%!?@U{*s)Jgf5}K& zdsXq~&8De$0jTSJFg!t%XbO$TMfK*LNk(M?X(jYaBj@RD6EJ9%=#)vc)*cncPC`O3uiO5lUQSddT8hjn$!(tpzHW!@QUQ=mNMG;So#F1*=6CnG z&^ygJ=6xZY_%Oa|EvG=cZfIs!9V${#2aApZ~T?U2Ei-OetAKJ zs6kh$-SvOWh5*@_^IbuYv(w#VoS!D9DyGS1O(2^u$;Iw(v~2~^-9$ZJg?hZPAZ_m^ z5R=@4G)(+gK5va#11cdgqvNWYlp8B6MP7Evrra&2fem4p96mqGlEOsv8D!#GdXg4p zwL4`_N6T!>zO#(k7+1k{4WZ|K(r)DSf>t4>@Pp+1^LR8(_Nu&q9*&B-726uWnhYQA ze)fci8h#8+9b5~%z`Z6QnL+z9!}LvrDT&NiUon?I$nz126Vs=Tgn=s&uD#oI6uC~E z&X|Q2cvbki;lw&p@P|2=rlTs&Iu&jv?vxl;pOhROfUoyNZ86=wDn`^~xq>?~I=}fC zmrO-wSXQi>L>-bmg5Gq^4gwy^X_1)ZZ9J$(=cYPNOOt0|8;g;Q zF=Jy!P!?h>*`S87A5e_0&wl=(*+`H539o{@VxHmYw zdu#2mw-(>&-Hqd0!&|p+-?nHDEGfYv?VGm$TWhGoL;IPMRAzZ*t#j#7#JIx~enylI zn&iE^_j&Kh%NLyk3bBY9K0i2_P|QRp&W4@oWT;@#rV{PcY&V#v9Gs-zXxUTiftq(r z+gqhtgF`h+TJE|I+k2#S(mVMZH(b9_`=YFa1~aD^7)y^+;bCiuME<~VCgr+alBHB; zc6bFd@__V+ETy)kxQ4pUq`{LZcxo$CRHVQz>+OdYqmVAJ^N|L`4iU=H#5iv4a|;HBX4|(76gv@ zA0&8;_PHtyh}W~Y5n=Ocg5TZ*s#th6848dAV^^lAEzT7$TEJg;N=YI}b$0Z%Z{w%s zIJ2TyCi9S+mK1-d1=+CR_$w<64Xc?~Dy`avui;|WDOXM~vzBL>1;=(Ze|YA_UMU;E zqh#>DYj27`zW;ya4U#?)@B6O2Chj|r#cYjPyOWh(<1n;6=y;+X#+S}nS{>)psxv4? z-wY2TLLqxr+v$%GNo{Y%<7b&b1U!D5mSF3470-FyxVRUHb9gm`c`S%o+BVu;+cXjL zj491?moZ|$j()swy(kCJhCavHm;K`V``H3?lO(J9aGog~SU3SMxsn5Iw%RtFGOrD9 zs{;+%ic@y2DHQ5n^8jGIQ!Mn%PknbB&4IuBUL+@wSF3NLuJK-Q6>K=ITZ-#&;{-F; zaWANjp`EF3TE|Y6%;k`>n{84pHrtbYln%}}+rvDoIz{r^)3iuBlcX4@2&c))&GslJ zjXN%?WVne9YiE#8vud-=Gqu@Hv(tE#4maB}JDcq;es#0tZAE_!lNi6_gM3P4xVe~| zj?9YTe}*~g#o4eQz85zubq3=j4{&ps*UFI?@im9f8oP9)pzxGQ#e;L76q?R`v*4(V zv?p&EM=NBr7$;>JA0_?8u7Qkf+tBXA-1LnChCwbZEp5V?jmc?38Wt(JwEO>pNoetF zBgAJGyQan{Xq4Z_|Cg3FZvo4j*1aSIwzRbLF`tt7@4v04kH4&@k4O1g277=RY`wTq zniuilBtA+?-}v#LMgNqHA1{9OcgXmG$PXAlezDp3@vqHk66TLjzP(^RX>>B%=MzlZ zSEL`zeZG=16z*1~CuTRFR!Q-EPiDI`#+LcX9B_W(mAUAlzODkZQCrDTS{+Xh5L~xX zCI@j@rE#{pzA{E^UX`A7a1bUb@=_uOOEUdnL^x;>n_*fcgDNl14g3k%ZJwq>Xgk`RN5L2O>D;Lpvd&XChHJ+$LoChshBZG`P-umhxrW?BLx zH>Q)LA|56kG=4+G(Z|GM>7ETDZ2+ika3_8AfUpiU*%`;# z$~eyAqojDR+6yXL%6Ob~#M#0A3El=cv#px46*AgE5kF^}gj6=KJ*9y-WTbQyz2V>k z^C*FD&*Y<_8OpMznPm@CxC5oB6l73)Uq>=SP&Q;@AO(SEvM1X$rV!ofuC6beVUgm6 zIm`?6oD}9PEs{}EmSpF--Fy1!PmP_B(!>Rk?F62d{E&#cOeS%GqdAdQg{g@cQP;dY zh9xL136Kc$c^020Yqo?rj!ScpB$*ker|B>mf|k>)%FU1}4JvJ`+~E41-yY=Sh@hkP z=yxX`L|s(1!@S?W(_LMIamg;aDpzX3pBO(?(S?7Q7t?XL;7-%ztjZ_ppgTF9e81|i z_112#t&_b~n{d3%D!;Ij zqOGHDyLAfsZu@iPRVS;9VK4MJA0~aG2y!XQ1BbLVrt9JiNkwtH;yPVXKsxSSCjg?G zO->@eBWLUdbGu>#ZaeR5(1Ml6~M+%?ZL6Pug8o69&~1w(IK(TZ05jpK8C z;RQ@6gb*ty$sj#UlVL#n*CXiggfBMhkhf;z-%yq1&#TI^wSz1Y(}}O6Jo}?R^94dL z5s3=jB#68Gw$?!CrTqbY2XIfSc30y;2L;v*b+h5%JfbKrlt{ zIomR9mEvNTxRf;5MMBFwn}q9#EyUgnYnbpYpI5L;v}XXb)=_9w?_(gfV|8FI#=Mgi zQy>pNI4nBnc&UeQc=t%~R@k0q@d&d~+t^vNjnb$fh>z3a>?0Y!`-|_19?Pl%zn^x3 zXuaqPmg5DIa{&%~3w`w26A}&NUz3fU|NVO39LA$kd}*L_Czgcn((FTwD>Z8h;x8Jy zR|f*eER)%z(P<$lelJrTwdTSquGaX~?Cab#VM|OP_**@Dr%7>;mq|a%bt?>J;C!~* z!z8QH>fEZOE2+GpupO*#3Ubg%1s|5Vs4)~R!UpLb@nO53cBk3%Y>>!O(b8~=Q={sx z)epSuAbKD@nuAeTncf}mAY`CYFDyq{IKOgzsgp%s8}^0}yjQq`mlnL>Ex|@mS<~FB zVzf6sJWSu3wxX1)FvPEl(If1QU^?ZPd|UHjQdDrgH*+Yd*fsb|dgw+gi1LN(l;+XK zL-K19tG8}V9|V-K5sB&>b)I3br6*Cry(^Mf1cnWhA~08zw$=q0_)U+Jp1&zUeLL*$*9^cu^_d06L}TM5sGbeU~OR&#|2Jr&92e zQ+$K>)~89c&5s`yqu>NXoQZ-6n?w|7JqiL((8kXec7SIVO!k*~D^m%qK1X^emv}Zi zHHk8tXVfz+_@N6jXd9YAQ+d5_R>P^(u(7>-oK(k{%Ct0RMV=iQID*W1J}vy&Eh+Yx zoqyI)v~%(jr<3dsRL1ynJb6NcBMX!VCz+a9BzQKd*^#!n1w`cpU<)?5T{?fm1&3*g zlqMV@2_{h+D;yJanq@J9U4kJNh^i*pzF5txBgW)Z2)0$|KLL+7LVtG(X1G~@Vff3?Rf z(>uRFDuyxb-7$$XYE-05JzN_L#2ONt=Z~s8o1%BjEQlSh@+uy6#>p5q(l=(stP>BW zB|}F?+?f2~8!ys29DU>X9R}9c)Z*hmKu;< z7-(DU(Uvds>fysPv?$pg8B~kjfLBD3zks~u)9zu5^+=npb(y>^)3Q>Mb|Y=O1>%Jy z*Twh6Z4dLLya9_utqY*;wP`CS0?P=QO2o()BfD(U17YVa2|RVKzz??%PB^zEtvoF4X4LrI(knSP}q&1e3Z!v6)Pl_AY`gv4m?`x0bQN zB@24#Rxocv5Nh;%G-L-p6l+#)IRdEzb=QS13`Y6jgeZivXuX;9u}X1d+1XEs6l+!s zs~gct76o87G_DSjhGkmQxw8U%N&5mH{AkmAMKMzW#a$tauLgDKKXHeh)m3jJ_-gg6 zjYez?YQqxXt%W9t-Mid^#Ydd#yAfx_a#LWgV5$LqF`^wN{&?cBQ19WpK_CqMHiu+ove@QSOLOp|Vj~{FehlEj@iH);k93X?x zs>b#c2`=!pK=ATWcRB|^e6YT|;Q65KF*t}!xMde1gjbslnr0TNP1{IMnZIl=<30&`$oBJ8~a&*-x*^k9=KygnpVe z(fw@u#wm`HWQj?TRg<>K%jAI0@-wr2V{EFlNQT{Rmwt?r7|XD`pS`4%8fWQfWDam{ zLNt$qWR#yRGx3nVS&ZY6QaWOhd-tuum8ROPbtU?X?);F4U%snO{?F4rf&7$ z!L9nQ|H{?es(wA_*D^8*8Qc)Vy&RX8uP8U;O1*P6SLzQr)yal=lxLNx^6B817ttuq zlIzYlp(gt)dO_SUc9VE`ZZ&kcZvifUhtZ!rseFz>9jb^VA^R;#j`Om@N*^YNX_gF4 zN;z~v$#N(WQCeyM*A^Vy+!15(5@)Nf5?5Hf3A~i_Gv!s?n~uxRakT4PcTBEJuJ60; zWK(5ZV4hlTXVR4xz<3`e2h$@_Pd8knFOYDDzfo&uK{q}1O1ugFfkj0*=q6`* zG42kN72Kw=^62q{S5Ldg)p)c(RXco+X9*puYB0)=j*xJhtOkfdD*G%Vm$^3{Sf34P z9GoVsQ{yUMad=&D5>&$FnqyZWd$o~Abnl0W?429<=swfou%}6u6!GX~F2_f0`~%8b zzq()a;lR+*L(Gq;seuflWXOK9-%cfoi(S{6%J^k|l4RRM6Wv|E*SmZB?)uuzjjgSx z>pvN;9v^?5*Ftd5gwmUX_TGf#EHm%}h*hV-1iQ7@9V4fukayPB6KOUG4bg zagoGBbiLlw4xqy8s5=A1v_ z2HBX(u6YV5N)wMp`5Bs`x@6_&z?0IH>3BM-;w;Ih<>a;=3Ik2mhl4v4`8(Ko*bqaxxeG zkxou;x|N=v9tUT?{i;vm(FjM(T-|t*cGF3Ec;3y6BdYiDwS@)E!Y;@1yXHk+mg&JL z;h5KQ1IqWoC|Ne6JUi+j_GQ^1)kvBhErZOGQ9i+;7&ihs4wgtl0~2w5;Mo#Alnw?`)GTn&3h^rt=jnQJ-YM4y#k%Gf zif(4T>Uh2I--0^){-Cr_cdPa8w##yw3?EZQCa+fzAG%|9z$07j46>--1Oc|sYy5Q% zFldcsw`5e`%7!fPDcEt@OzKm}XAPH8ktc^DJvut~IpRLz(nNVlB!14pxJ*9o9irIG zVw%|iC^C(ZWPiTL0PLWM>tfTi{V$tKUF=&HOkQ#s2SR#i;?p=Cfz)XC!}j`8Ku1I| z;&WHx!zw|DIN3ZG)1xdelG6OvVO|UpPA~LZ#3;iD5$!=4FiR{>{2PzX;`35E)c%&S zGt7vW=F>_#GX*}*~kYr^drCIgCe){33yUT2DDbrDsA^Svml1`TD?P+~~Te7$J zsrf;2J_}}fjMskmo&|Caz$h`dimt6XR8)yR4xN&Wp?7xp49lF(P-G|0g3%zn;n8$B z4?g(CdFrIS(zxFR*)z8wCWb=;j;HL9}V$}RgVQj$Lg$AjigMRotptAD|4H7@jix+ z^Skku&9|4cx1G0Y9k%0j^3$Xk#pjWEvkc4b2etWi^y9`x_xHQQl`fqMqGZK-a7A>2 zri8$=;7am_mruEi&*K7NxXV`d?PtT}l;m*VwB=9I>*{58 zIq{wplV2#=FkKfB7rP^8&ZCQIY4_DLI+^YwsAtg+LcS3BLg|Wq`57P|Njn&Y6caN8 z@Ep9JrNipjjN{@YDa?N40o{yq@`X_d=z=NJBOHA=ONjSiQ++O}l$~5=^PUQL@xO@= z7EW{ie%<#1i4p!5qNt$R!-D%4#URLjc3DS%^&hFZ_AkzuYeDnAvG(6Oz4rwYj^BEI zmrlJP&pM2?yZ(vXj{`dwOts+~7;69De|SYhEw5U@0p=nUUANQPwSY1+HrjtK$6c14 zgUALKK7N~4&wpU0mAIIA3>5lMi(I!h7IMPxPP5<04@`Rx_nM)&Z<#tw-y*RPy`tDF zc>x;W4%KnFVAtVc`u06I=hueM?+s24Eb>V0h~b_-E;g za%>|Ng9=ope$Y~AE(g^-P5E$D3Y(PqHPQr^p-v;bjT86DTB|97$N$>P} zD~GE$4}14+QTizbfQ!A{dTOF+c9P|1l$9p@N~tEIt!YK+8UPOTh)KR-{39{T=7=nq zfbHO%BRfzcua;3^b$w&Kx6xZSYir%!?Jkacks}Kug@R?>Tf%b&NeX3$Pl>_x=NWw* z7m{3(X7wg^MsD;l(?3d!t!$`K(WH^D5E+-#aoPQ%%xS2ujx}}YG31NSduZ{!V_2Wk}_PK&K# zaO~;?{rG1$o4R{AEfll1)1Uz%Hy+@E+q>4hHEyEPBb=0SV`{L+c_W^2lz88KOPd(! z=6qEy|U4STW!R)0OjF^`5WA{Yae@uoOE{5)l zN6I^CmOhHB1XiuRDjwrBjRLiULxQusXMlsA^ANyQ&#Q2n?Z#FOMnUhF1EkKcM#9v;U?;+qsZ(@~X9 zMt*bl+io%$#RDH}4@XIyfyX0ThTk0Ci;Cig$I|XWktT-$HXf&NZ$9^F;t5$@K1(SB zhK|;bYpn;Ewm?c=r?tq%~@_%h3OiQ8qbUKbR=nt^q zGDPmA8)sImNR zQYO{2DqQ(HCy!DewRA$ltG+wN1bQ#<^J(I<^;cQ?cI{E_FM(IZ=y5jS<*zV$S5bJ) z@mlySANZ00R!DVmd1ZZn64WwsVR_$C%`bDor#1f@d8MA@#k{)o{lWRGEX9z7aCKOp zBgs}=C41*t75g+*3rX-gbdnd`;VALP;J)poM;!I!)fATXG7o8cmlK2yH7AHy1Dgtp z;;FrRp6OdhT2F92!Kc%s1as^IMIT^U+B!YWLitzi6fVmvbxb-VhGfTB;X#o$ zt0~Q)Txw=`j+<=3AtaP*Ng(Nm{k}7D z9Bkbl2fO8+>VRc~`mvTPMHF0NJc3f2HdVe+gH_@``7o~>k!GLUg;*18$zcY~3a^>E z7u(!M=YAxEk`#t=OFz-bvR(QQrUDsw(N|vN|l7G8VEt*q11Ul+2n}DlMIFR_zfqTz{#v70%{R zXehwm385(%Fue5+laJg7WlbG5yurjc0=_EE-vt}WoVnX?2e8So{dfMzg>_t)6J|&v zACzqhBcEAVSMAbq6Pz5&50S*k+mRSPr$_FX;IN)7lCUuNGkb2rRv0gGv|yIq5c(Ix zDo8P%oXQp}TDoMR>uFT7qtamjzVUPN%W8_XeW8;lJ{d6mNS!7I6cq3%Hh3RQ3V&f9$ZLw7f5c;Ott8{vFGiz5 zR#Wn=TMB8{WHeCLd=OHRsvbZ+RDxwDFkEegF~e~yOKj?Np-nZ#N{A@0fp81_#>o-z zEyPLi0#(jI+>&IY8{qfM?eOqOa1=&}+!bH+s(xZtdDTj(pJiYk8xj$6A>$D~19UbK zi9_yXGR~u*#!4ZFbMg@!+G|_o!WCGxC;|Z8C;YkVZ>C_KrT_|v>AkoYH5)9GOL!Nn z9suSNJ|#*8FDFlseF&+#rqH-n&t$G=^AUp%&A>#@t6 z+zb*^4lH4L4HKoFIYXFnCU}F91}w46X#$CKhIGiRR=1IyYIu-=qN|X6E-j~<6>r2f z4jW7Z-F1{r#}V&2d5^_2bl+Z7$2^}=R|Ds@k$dXGY3$jJ7PqAeq|S|Wv`aVLH8-&s z0{V$rgA&R2=!KoB-tN|bG%q*!F`fBc;_^5LQZs(^BE1>x;KK}VLhMLi4m*D54mZ>V zPqpgSlCVl|4dgojeWq!8W}S8VhoA072(?l-U300ocW?W8zn4EoK=v2WYs>}RRcsHS za>7e;;$hDe8NJZ0vA*4H)v7sc^T-z4Ubmh5l6aPSp{!X@O??B0?JZpNR_S;6^Q{(4 zw-%*dstj6LK7(+OH#s5|e7|*F6ke-}QIGM=Z&wzQHXWv%k;WSuq;*aB;NkKAl_^Qr zrtQIC#Rh3JAp-qS79EiAHxkAHZ=<~C#D_cgkpUoa1{Z}i@KnvOT!=5raYh;GjEtV& zMoE6J4qtrW8Va|67BM`UV2$X)(*ZlZ!9%k9==<4h0ZUszT9YvM;b&>vV6Ng`JW1bJ zt5KJyNu%Bu+fE@sMmpH%e;riG!_I#XgmVPA=BDC$i;N;{-`BCpnZ zeWtmdKOgh!$||Fjxq=8;8uRM}k{g{_Q9r+q_9K=^wJD)X`6MDhMAzjlIW0HO`>)b+L)i;j7CWGi zq^5;Cf6z8(xHm=KsO>6mDt7@~Gt0Z}F@*Whu+_I?ckoS+*pKMmag1P_W<2&Gy~*Y@ z{NVPej@{UOp>6={8%Ju;ejMcoF~w8*1g&2+*eIwHxR2fDFz{!)*L9D$)jBn--`dhg zd`UPCHXQCVhX9zq3nPq@xt6t`G+-7sBI%sgZ8%Kg+O@=Rwn z(gB`XUVFovZKPoy=M7kva_4@Ojc{o63iJygq#CRYR84R)+nPfP|E1}4SP6cWf8!uaM5zE|^9+_r4TW)1R(5oubM` zFlOr#;LVpOo4agO@@ZenI6bKglYo!Uxm*xb zc)#9v-|MX{T|6ioaNzdJig(Fqo~TCZkw!xwppDM` zkTW**)i|4$8A$S$a)v3?mk(#kn8lV?_=rozvW~0c4WmT9_k{wmY{nw_g z1zB;;renTleXVES&}poGwDsWOqsLF4e!Be|Klp6t+4C3w=I-9hSD*jzN5A=3;)B63 zIXpT}zc?9HnqpC)e!c2z$W9Cx4lhXL&X zU?2eotObN+i$M;Xyb=Jw3{I!@d#1`SK-|r>dpGahzO#1k7THDFLZPGcPP`y+jEok? z$v_XmsC!4XV7gk|?I_x-st1do#|uK_w2w@Bav~1FiTZcl_oTWlDZT8Q(_@D?jnj1R z#~1m5f9#NtkJ+S~e19s92n{&1o1D}`Z8}wkudL1c&N6jBF5-LVel&>@icHMAZ=w`N zNg(I)_Jb^^-E`P*Xz`60Ce;+mUBUs%HwKLIqZEoX_2_vBan#1{3V6F zZVTXD6N$)e6QCS~!AyXmdwD)dp5wN8U6yU0m|z$FS&{)9bqO_;5ClT$@)61_&9tQ# z0an^35|uBwI0MJnL-JHU^@HSmnGv04ed*rKmDqIK0t0f0(rnhnJP)A;;7M{Gnf4Eo zbBjvEs#qn&ZPRRRjot-KGgiH-m<5e=AvA|J^7@#|3g+|=8_F!QM+p=bOqL>AK~X1{ zon`A1=DA#q_Q|gAe3T(nf?_W06Qe9ar5b4`@?3t520S9Nl+b2DV2g%zlYTG=Xa|c! zWsikHgh4P1NUfjclt;AIBk?dLri-X*hU)3gQBpk}JF;6THvcJv$h0Rrkl9AD%Ie9m7DsWpcx!Z2mHX#O+0lUE0kDCNIoV);iYz*D*&)g?h#wxtRqUdN>7nqU{w=*kWM0@N zlpI1Lc3e;BK8z2>NrcS^b>85Q#k|)t`2Xzvi3%bdXNGD(dpJYsihTeb9BPKOf2j#! zt?~RoFemRt3725Sl7bBf77c0wiKEu;wp$`^OvgoilCXE*f*V0NSG13-g8oY+<`; zuTcn)6`~SlC3IP%t7p@(M|3xJ@_Z6wVxj5e*?cw~L*J6PZbBQHiFy%_m@5|)J0`jb zAf%x3qWT2&myEQvR~2vG_|^&TLW8^fJ_N^plW2-!(~IhjPNOAl8n*~whcqqqD~;B8L6pc;O=;WM;s z7iVUtVwIH(0iJTJnlD+Y>)*S*N#_Ln_wH<(GtM^Nzqh{0hg16ZR#gsZYm3qT>VwzV zv9+nC&i(c(c+r?%(Vr;L8`Ci`pS(ZIk08H1wn@_(eNSvA_mQIsT#by^ZJANlR9LWC zRDEq0qaQDFUb3%9JN=3d(|m;^k4yXQD7d|`R=IB?sv`RkPqS%%mLD;$8tPC7ejQ1B ze^DKP6B*uNQ9pDf)Age(kiH4_>FXvld^_MsJ_^4eF>gO&Z^a{`gIP?S0VTi&1k{HF z=UQmOdk{D8ozt~m6-ThVDqy3^`To|q3;9)vtOAWonYfTzYTSh<-mze3erim1Kn?gZ zR66rGFN%mht=N`b4U*fWS(RkN1j)|nqB(m2(%p$hY*5;*ACP2PX8<(uQIL-1ut<{5 z@o?BFp_-UC=6mMu`rW&?dv`-0QtkfI;BL%8G3w~e_B1j&@)X>IdRcY4hL!jKeAj!h zArDB=A}1~7UU+jHmj=nSF&J|=ipyie!#S98>ND$Sj8fcd!yf@0vGRiUN?bpo1 z-Oo6+_<30+V@0)(Ocrn+d0lBnpXEM99;K&Arj0w3Ul5{V7tA-SUiP4+wAi^H#V6#)qH8kaW$a+~B;Xa_Fvr4{58@J+j4)+36|k4x2Sq$s zp!?d3+_VWlACl8{nv$-#uQo4_dxf)>Px3$1F8AsT+?(~k zn1idPh)COMI;zsFLs!+Xq8%-nuT4bvWzqJ`qFJ9SHqxxM@$*5tTLZ!nE$z!jJj6L9 zQ-!1w(j-#>tB_ly8wn2E>EDvg2gde%7 zuW=G)`Ap;7i=*pj;4{$;w+(An7D#=h{{<=|izv!~PuWmCb~=g6a&lb6WzvtLkhzB0 z0GhG${@f|(eq0wO(NA9YI``gu0uz?l3S}DV4Bt~FuDHi3E8NOC z&Fm6&^Dw(SS%ufg5OgLXY@T}HE6DI6Up^qKc$r{NrMgg^)l+yI_3d$bK??(T1*Ok6 zZtbhQG1-YLWZs=MIjapyl@-?D+-?S{%sezKdVu!Z+(ll57Y5t6bS(n^T!J&Y=h-^d zO+urep|4pZO=O*mhjOdwWm{x0Y@1_MSHb_ESqnjPM#;ka}iH>CF~%De$fc0=d?RgyyCq$Ns_0SDchIK2cbv{ z23Cz4mk_$~6tzXIhrDd*PoesFlzVA)3R2@5WXBdDI`<{Kt3HNao-lEM|4|t+E~5UhXWoei2tyQg~;-9jayUlIf=wYSq??8t;|j5D1Zt5dCX* zqI){CbcuwvXf6y>sZ`C&IbsF1D6{|wV2hJaF!}@r3g%Om z#a|S#cZLi%eaq4GGn7qctri=Bx3Hcsw|V|(_B6)c=hWDt`{AJVkgjPzNHZH|W!Z-<7>N;>hle)1RROuk8ez;Ucd&p+ART| z8ay&$nz_*72AK&Ch>Y2F(x-O;-(qrA%|%6L5VuaT zCR))`AJ$5!^Nm(vO6j8zPliwizF1V!uT_gH`UzGMN)w?W)U=2X_s zgzr$x0qb!JOHJqC#n6Cxmdf+h23m=BD9Qq9EZT*odQ6`~7?<_d(F~s_e*80^DWb^t zSy9C%Co#%t*F^U+SWm*s_7W0VgV*qAEuK`VW^rMgaTD87G0A2JZjXtHa1(VRf455f zhd)H`I55U&)B@MiKD9H%E*!^&WZblLz{LVe@Dk_SiBc5|7pl$`Kd-V>V$(RlNYyJ@ zqK(q0c8Dri)0|menKJb~qr;Nk!$N>l;KAm)v-Kmh+QY)GHBVDeO+>~KPpU?G2sAPgdub$+NIVo&o7}v~+Z0#4kXwV}d3@gn z1{bJg*B9G7>aR`oNQlv*#wt;%CDI|}Fi0TG2??BL-wt1}I)in4B5@AZ z?X1jIS!+0juNT9tjqOUf{iZNm>-&T8>UMNH^&5FCVyzq~8($t7or1d-e43i-#|tfByJkbj9JC&MIWgnySYH0gY|v{_2{?Nq5X*dk31sn$zq> z<_G9q#3tht)81J!t7cu%rA(J6{`~y>d>(u~Z#q`%(=i;*pU0bC#as1?pML6BB+BX; zv!>t)T;uUfsdZy+)k>A+OsU(((A{Q)JszW#7Y?JmO8jU+tMd86Na>WYv}SH1Vo=`= zhv3crn@>NjzZs9sdRVJ0&24kXo}JTB$Ob|9ntG-7LG0+cJsk4CpMJ{!j>r6OS!#B>vSLJ)dnr9u-0{Q|GwmEcxJA*G{ zqS+AS%DBF3)*XKeRI*vyBfy8HRe_#MVNUdmX!q!oKoRA*Iat8-FtvffR+f^?l0qhK zR}T!BgxyyUrIrpQfUCg~DQw8!kA(h;30d;A?KRxmS3t;M!zASm+%z&k?IsTStn3gA(kscbB>9m6k$qwkckm3l+O9@U} ze=mwd-;L1CQd<+D5oGh|jBd=UlNp&Qt=2HZ)8}gh7@qal3B%Jn_$~?UgC}C=@TDcw@i*> z?rfNrxc|)^TnK6rWJf`)E8RKFproa(zHE{#J{YChk)tZGCmINSO2{n#gin9sp^3y( zn@sN;@hv~l);uhdm_j1au*nYz9Sn}^xXrRGA}BSpOA|3GfbnoR2gTGxXB@xnz zEFexdh(|>d56@XO@Ca$nn1BRpt09nj28poxI=w;1T)M5ypiv>bV8$-t#2{T_3BKrH zB^{6nMTGjP{ovCdA*fD$^|=zZO=Bj3GRv}=1Qm0R059R&TR$SM%>=e;?wht66@=CE zkxBatcZ6!Dvz_f{LFMmVv9g%OVeJhr(5=glf9bTSAd&+VPr1Z1F^7TnvnKM8k05C2KFdBIcuTb-(C;;REvu1 zagK#t0g>yu#HlbF5mPf-w^uR0y(JJV3_XmH=Eh(R62`31&$f2o^h&?A1ykXi%usv?whQtlKf zKkQny<>9(*Y{MeOYV@2jWwr?rKob;U*p}@vXc>dxj_5AHY$!`GEIA-}7FCRMtDf}MqYIk!+RlT_!NYho zN^m|sAPuGgC5_*nrZ~^+N?4a1m-t~^P#!<8#AU8h;Z&0PRxkCIt^0LgM>>Tga({pL z$^L#9|12)Xqsejn)j?9lUloI|_V>F>c>mRG4g{#Aq0Q)74$hJe<-VlndwMISD9PHX zl_`SNx|+pwt~Xc_@Q_IYG5E~u+E=%+X}H36CJ8hMaz@E*6PBR_LxT99=j?4>g127e z2bHPk7^X#XGB26vP;QrxOvHIt*|qF@pG8lV`lP8Y#+4Z*aakFpF-#BBfzgKIQCgiZ znS$|CI^U9`Teoq6*y&s-7SPd`KX`Ov%f%_(I`1Ok4Hngr{Nph0r(58 zj)=LTDZIKVfs^UIU8VRJ_H9_!KnXGBogl8R4l@G5^t2<20HHmBYRnS(f{?^$SraT; z8MF=I^QDP?niP4oX(D0)_yb%3{}zKNK zslZOFomlb@H#>4|?3|Y&o>%gmO@_R7U_CE}iG=jkFjy-i#NCi9m5@{~jZF3g38N@% zThB5haXA6dxi8)E(Tv8Ftklg#HEUfm5`QB<;0wB)W-DK00-V02Ax_Q^Wp^lQ@bq$= zd;Z{=4C%~7c;pPm%XDy(R38Az1ruf!Z2tyw;}|mcNi4BGnI66!UR+45@-%5dEC|8W z(`<0ZND+?g9f&NK)hPeil|cnOa$uxvmrv57tfUtQ$Q34t8=#xwy(MH-Ugu`0(WNj^ zD>Xh4M~ay~q+~KUVg9GXo!xqX$YfvNh*O*g*Du$b8}+v*HT2dsUq;T>aQNYv-J<9r zZ*k~m;!@0tc?vjStf-h0u*BlT*Y?zA$0JLX!y*#rQ*h@#>_$tby)~5k^H4|b+U|{= zuZ4Kf%HJ|O_@&}Ny%+rMk*&gDe`Zj|Y&gNC- zW!vu2=FN!^@(fbR9XXxwusr9XBK;!XeKE&Wq@`kLnI(rztJa zPBV-&aeG8LJ5lFY3@H*8vnbKFFw6iJw-IBb0d2&dTule z!(1>6puZ{_5VeDhN)-wJ(p1NBrqBq)`y%PJ{V;ba=>@wQ!YzK*$EEWaf_J3e+oX{=$hwegxS59cva06Z}qb24HSTS83TT zY|iRW3tJZQ?5ZxSxWI{tF)c4Ft2`SdFcOFbtmbNPH1j=6RJbJqDWWFex?My7```2=jO0C6A*`70`L5!sad@?-%-L`P6Z>Daju_s+)$`RKvJ$uKa*w^b4I2WE%z-YkkL9mNOnU|L4~X#YuX|K5}RtvmZ$a{k-E zt`isI4jmyuk;iNMcc1J(=xGcPyiWNUC2N(>TMzf|-l=__PP~t|?Z-hpO0r>GxW4bL z@87-UeJ_R`#I|(~^0!{0JNtLnU7_Q+K#KoCk;KUR=apOEzk9D%F3pkAK8zGX_2^Z_ipZQxnUlT^2y}9 zLt%(^7VfR>KX9{flrWYaukGL4+P~*Ub&OsW+IxPh$LY~==QJNx@lnz#(<7aqdt3Wk zZcLOoG0l!TNp_ly@`(@R`u>(f3u4BKF<&GsbZ~S3fdga|7e`4aFXHSd=?v0hF!Gyv zvcKg>hKm--aJJmd{RcNK&cK5_gxuV}=jaLyl`cT(q}fSllF;awe(&Afzx%{Cf(SCN zk@fw1Zc@hi0f=jIoM%3;>-!HJf+o}Qc#`_fulti;4$`vB3tB#yoQL~&*KFVApvXs~ zuy;o<Rb{ zjtL9*6n+TbRXozeAU>gYdN(`0Rd4>b_8&a3xNe~MdWE}>_V2pMX{xZ=>#Tb{+q_OPY{%lb()zR$yGh3gg;56)fNEo>Ucci^wODAd*Nh0jYyv>AcPbC70 zH;eKPIwydx+T$nt5AI??W4`M`^GRO#^4N*Z2Bo1y z6SfyyF>5rOZV@=~z$f9RMz%XuuYsVsuzhO$P zMS7{)!()P?L&j$c10m}_p@X&)Qqv1)!tEdpdWXC;Z^Fb*UPV9_%*3lKeY^H3XS0eM z@J6Kp6Pi6w`y!d}*TZ^tRxD{7&x?{j=8N ze^&XQHU4Lv|GCNk+~R+3^FLOM(Gz`V?JmE+$NzBaYY+I>L;7c(U#|1Zb$Q7EtUu-= zR_IByHyN;7T;~?oxy5yEah=;-Pwij9ymb(brvwNrsM_S zk^-;X9B^%wHp4)(;J_pKDA094Y&xa3-uKM2 zgCr|C1upXAk8po69lyXOB(rI*@ZV>Wr^XW=GW?Yx5 zykwm*+w)RMifUN1U#8v-Nz>!o8c?CxpO@4S-CRN`yHaMPUCwz8weeKTeyM!GtOS=-9 zckwdsD?}P8AeWC=D(EP5^DCSAK(({b-ESVL)n6zpijWV{DgCdBymaQ8c0e=y-zoAu zArdC;q>o0!sRVgC$`9fZFH&455^#82;gMDkiZnS4-q$TLN)aM@=P59ezB%S-wX;PGFo`K_WVln??Tnu2d98}YSlk|J8LMiRy zH0$t}pZ5d=dSs2PVCDO~DV za)!S7!e24G7#IGgbGDtOxCUg3Z5J(J(FPdq?QpZkJ0wy8j`yG<>O4w|t!$`#C-_{iyEi>N zOv4+G)WjLon^`2mS0w8WUet+OklUyf&7NHgn$q(Xdj2Q)IOBy4zmid~W>*bL=z)j5 z^Q?+PGzbxu+nLav5{ihUrYSVhZk|`>Hy=m#{urq87YHXkQB6L5|Ar^;(grz0v23b> zHZjPBm``nv8dA2s*j5IYe8swA)H2~rPd{tm6W@r+=RPO{0}WtnNY@x;$(e-E$hjnj zLnX&d7!D4p2a#6!S(X%isV19|ezb7CC6N{jVn*0F zG2-pvg9OHAzStnOE1k>CEM+Y`^MT2TYwaeuB9n`F%7J`+l$@r6WQPyy=stT$FFUyZ zinIige?G;ydUJ`=Y!IM(8d;^_AdstHVjKsvj2xwqd|3DZ#9z5Q)-^Th|9|hS~L@WHK9($U^<==*Qt| zz!^7hl`~y(i;@Y9FKg8nNi&rmt@7p9+RhGNpuracq+uJq|W`?T26@EU5gkWGrGI|%AxB->Hm zATw23m8P`dY7CfwU$5cz(0F7&C;xL#slWZtH58&$vr zt}vKo6PI+ZGAXOXyYU8(gu@2rErD9+#qthTk{Z|~HN<4Cg>fcBxh8zKGsI+fI8>RX zeGro`xH*W+q%$pWLkNUC#aqg@Mq8DV(_+*qNzwAldR&U0*JfjoXQ#NgsVd^EM2Jd% zJiLYLYmO5+>okJD)(4sS0ksP#?AYp5=+mJ$TZD>oI=(Xb(S=1wZ9t?^Pv|sf-YnU9 ze_ViBPxqmL)iOv@FBfTHiXlON*qmPM*Ql8BGiSwqn0m&KrCj?*lW_@;kgHr*3Kpyi zd3{_S0nW&4kB8YN?M0UtH5$#QjTY?ynn=t3792OUxW&peF57jKbVckOXR-ypn!NwFwK8~|#JQ|&U-|U^F6Y;Rgt>-sbE$KryxM9*v_kqq*J3|mYZLs4Zq#oHS z;_(HOWQlo}oHdWgEfY_sKFbB%8KF9tX@!tq3ZW?KWZ#21ikJJK7##)>Tl(VFW=&oi z*F_hwH^PKPxwX@AyWaGOoVJ%2M$mW^oB^>o^^n=GwPdxJufEa|(75K6o29JAnP3LM z3UaMS5=kO4xOZ#!9~>j@w`(3}Fqq@?KvEj8*D5!FDx551Jhj;~5jNR<^x42YT4ckV zH)H&K1A}7Mv`PH2RJoZQ#bqnRQ{5UCi=RjetEFdFZ_4?iLJHr;IKt%b#Ce{Ef@cCwq^K**$9zjdzUw@4g(c0G7_^;i=eU}XZ6KiH^S;)S8`;NEvWM}}pE>aa@{%B*{z+ z#UWh9q|PRzGU?l(uZuvGnSGDW)j=$RqNeg)K;<3}B_KHw9{tVcUpyk+t>5GM9*DHb z5Qp#uT$4J(OlDG5EfYV17gv0NZrde`%;vFDKMO4S{^rvac)n+%UbhF6BPmhDf@XXi zcpOOtyq&lZTRR&F+?UKV10g$V&2kbzhBQc$(qH7kIH}+?IM1grHu^IdH{Ti_da zze)14Y0jZa)W|FHCdwQ#qHs?g#Sdv@za6JIyWf|%;0eH^t1)y;`YU{{-D=KaW7j5Y zMUs;3%3PLrE z{fD&a*J!fY?>p%c)0apuk!5{kfP zs>Wlpd)8a>#V@sX5fu>h;NW7Mt#Z)2XVaDGa67p7X|1HN8&5V}kF-I5nl)I^&6b^w zMvQtVyfo&)TL3~LblG>6_q|qS@zhbw);8Cr-==-rx$oiww>5y6pTNnAM+rppp4mpk zVp3K`gH_tscf1Xzt4t>lX{S!J#tV)TgQ_YVpT_A3_qojOSsJxoJa&RT$Y+Sv0WnuS z!83<8T@D~F~X zalSa{0%q(gU5=djs}r5f-koP>S63U8x_=CLhx4eIMcTDBONBfWT9Z&m;`oxBA{o** zDHktm3k&0ty-2;L048pr1*ODL_)kOL>vJcD5I)%8fSFBi#anw*g$Am&e26gu2y zCqGS!QGC7(e?w-9qyrHi6mjdr&5EU&;JmcpN6A5#HhDuFzY^)v$gQA5HDbJ}AE0(W z+s~xI4bS%Qr^EKRqk!j0-xqPb4;WKzF6prcyK6C=#%8iG(RVq$w@5ji2Rsc^7s+r) zlOonA>zd!Y+Oi_TH2AEIBKQ8ksSdCN2^>;#cFxx`VOCpsQ08Tm5DTZqtsS zL8Xy-B#l=GJf}y;guMGa>wVfn7xrpPdHo`@l9jrudp*7^9}`aQGp-g40x-=uM^IV$ z@wNAisl!%_FANtZV7Cwc?#GL;6FzDE%U-lT+qE>J41Nk>_JY~E=nOY~)(-|TTG#iQ zg-p0dSph2x-OCQM;iB+%BRhn+i@huJ6hINav|z&J;@01Xbu}aEmrZ$+P9|Q^k*4HY zpscL4^Go0Aw$Mh%eSD1^Zg4W2yjamu7nA$DMXoFs_252x*3 zQt`+hXQv=qa*?>rj~k9gKicr?+1hFyQTK<9#_YEhKa_8dj=uKkPdZV7tG9R;G}|45 zE$8;c8nAYE5!4VdbDOaMb9RsSghfM61sECW`varxSY$CYOss4!QX`k0(mAv`r!-L* zFrl*%DfeXF6dbSFH2cCC!q>Ku1|p?^4)Y{0LI^&bIEf_&{m;4HIMo#q{+C*^4F^R3^wk^2_eH-lsXP{>n+0h5f8iKU~|pXD)vX*}JyZm`5e1BG{Wrez;EQjy{^Z-g^HHlcZnb{#=YPA^`u0CO z`Bv+w)w=!*r#K69*lJz>vtBbvt7ZQ3&o5kC@S_`X)})U^$0ed8t!0Fl6OJtc4c&wI zWMzzlgg-fmPkvIA@vpD;y6g1cYOgz)BFNsJYK|@`x_NEk+Cq`%Rd<|C2i=2sa59}F z#kFr3u)C{Q226@>URwxsIA_2Wd46rdaUqJ_vn)tfTJssD_dcpJcP6wO%n5>Km&|2{ zQULR`JXj6q1emddr8rBR3&eOIJ^vJE*wFg5Yf9Qot{zQ9L@^sHD@9&*iP*Zubfp?k zR-#Q?i}M;>Q)S0>vlD0WQBwSRIs_>ZEP{8kG~i142n}7++yVM}^V+rdrQNpe)}zox z+ahe|uEZv-&erd?bT$4tU5#=PtE|LtVI}^(Klis%ti-SX=x?T2iT}R8694|7Ra=RF zMw&=kt?S=W#A@n?k9DX#S9F2!COAdwi=R_i{*uB%xBDg!^Q?-~EGc~M@K^3JOy4>9 zTLjbZ3QRxO%pLxGttoJb|L0pW7lS;jwx5{jG^vg$S)~8|g^5;sSo`$f3X*_XtriuZ z{?IRgj|(d#X^{eQ1xCw>0?!W_j_au%QS@25WuJ9to}!=nW7@n4-s&nZ)* z2c#4UKov+mSPrP68Z_Ga=Ev8Nltmz;LIISv3p+N3HmDB;gN7|#P4c3mrucVQqu$as z!2k@=WaF>H^oaD_A|7{;0=0kV_T3#*Bu8mk73Vm7!VDeDQ(vxjhxy#2un z(J$jFUInSKOlnQ64EhU7X@j^pNs>uY9ORWxX8*_Y|AI*WKmGemX8(bZ*+4lwX8R{#k26%CIO1ek3FLT!li62- zk=2oA81);qDL<~-u1;=Q9uMV5Bg{?ZEZWQR*l&RJ;VX@*8aHDI@2U0ExWJFAjs|JD z8o{RzwnhBfl=asCg&EF1&W9^oJDu$p%o+S8_doq#|1&MQ|NEE!7vk){Crj>I{*wFi zwFaO8*56_M{W~9p;kO@OTX6Rmiv9`B&<6%(SOd^))rNVT!6sqyLPKRtI#C9hlm;gX zu&EM8XTbRA3Ctgz76(gat=GHNS?jIc=5yTUd!$wTy6P79KfboW|IJ2! zEvqxQf2X^84{+K5F)v7Gna`(CBO)YtIGSkci~N90esG1N5!i+3B3~J`zZv&@xmPj3 z`1`P$>7}-N+dD6-WNeR+df|t%_3>baqa!WNv*$0(-s6|o&6D)4*@oBPjJGH8_qlkg{KS68yp~|C9J6F)ZL{!|$4%F&+8PesgaX<~GSO_scV23&v2RNtvyP$Iw z)i$?@>Ls4|Bfprhp48Mb05IDC%zYQR5Y~I;Y|GZ)bEyJmb)-nA5`h+#d5~97&Ll2J z)d!6e)3PYaOIrfQC{2D4GDetgDF3DDZPI^o(E^F-dHr~_Djm7xygfR_CVk|FQQa;E^2F!KJ-dzAvy1n9^vxme!h6 z*Y50Uv36J9mAyJFX??BM+SW`)5FptZ5w>}T}&~1BdZOK8n;d>B|6na`nnTiioU!+=(QXQw>2rYxT zt8m8f>Z@&rtDxXW z`bR7(QLjjTs@XKB=(Zz({1O_zBVa-0M5r=xb1`id@)-<^NKFljN)CGc_7dDlv4rPn z)!8y?0q0&VFHQN*lxhJr11YhHK2>u=vNc7DfgY;G8@4UiLu!v4E`l+L#YTLE%N1lV zeLRPjh9svj!5-dSX~)Z`6@d5j#WSsZm=n6^!68l0E|n`p397a|ZWq2*2aPSq-EOQ^R?3p?dw zO9JF@*$;_3oTK#P1SX3h5FPM?rH(K(gTi5ON_hydfD~mVNa~UdO4pxs;#?Mngnpn9 zuA~YqNnHEU(MX;wY%v*PfD;e+CNfY#WpezoLVchg!i>}e$A_R_>RqBIWYZ8j> z>i$g(%m}L$oV&m&e5WrCw~!rjfnipuFDbFMt`T_yC>)rM&Hl=xH^7M?7m0{ShcMER z&coGhqIhr2%*32&50pI3T7zT_E-GOb1gJ!ub&Of!q7EJR*3j}pz z9TjO4d=euzBq0Ir9**P*5s+{+@C0uI(idLCmUfz82RGyuuIPA@j;5AGySNKA=uK#i zfOix?BVVEH7atP+P>3{A;EbW<0x*ay&k1%9-GmP=Nh*+7j7JY!_;xy1n+zNMK;I&b zvRJR%uLx84XD6p-<#%ea+7el;edCVkxht|9ffaYU?b4&+dvsRX2(3DP}=xI6i3c|I#I2#U?PL45(I63D%bBqX~`TxLpgaL!cAC9|A} zq=OyY^R03jg5PmbEt^9)->mD@>{41tFU{J9PXt#a00N(_K7X+kC;=OjEwS)Z&P==9 zxPD%AkYUmC=irbrk`syFQ%rzVb;tJMU_kh0jb(1qh|3@y>FLQ*s-7UVia%+JRamuZ zpt9kG(PANqKNR99Up%WLVz@XS`FvD+Qs;{0ijts-X<->E!aJG8;6^ZOcrZ4^lSm2) z@mX1W!w&i3(m)q=iW*+pgCUd{MHmq%Aq>#ZvLMz)R%NgV7iau(sAsP%T$C7N7Ev1ZlO2pmH6TsY^n$OiM-j)z)(#cQ@UO;}k zIKwN!+XnXw4O;UwV45<^ZfGrsaUMmU)M=E7Lw4Nq7EZhk6HsiNQ&l=`0OBF?f70mg z38A_t-DpqT;MCNaTf#PAsdwmNxE_s{Rc{->I-m++J4Ra#7BFr{puda}3VhD6OW+)D z#Bu|l40eNm>a0`RAp~*}**SI7m0sp}CqLRDsVzchD{^#dr7)vL;JF10S#*;Ek0=^N z!S0C+2>?4}z;zvW7f-71;_JxOU<#^WJxqNgPS8O_QSTZX=#|0Y+>q|ru zg$4o~ORhdt{O<`Z>Iel^QmD+8<(fAq$97H4tU&~Te0jk1MJu0y;c;oI^IKqmblj|d5u(c+S7 zBm_VKvr_f(;3~*FA&7$Ao({ri*zJi-JMad}smmxASqB_qv`@&x-s5@-6CVQj!RlqG&@IsgizyGmb(XxJ#~#zzkb{7E+=`M*`Q6iT)wT zEa0NFcMx#OU=-+;gGf=U#4S%SL|xio*ocT)pnJ@4ntG9#c#e9Hd!xR^9(<$TV`4#s ziT(HzJhcjw27(pv&Rh#Zxhx}4%TwGuUNwup$6-erqhYz>&ekBI4l%!QHZ^51r1m7F za<6SslOmy;7(6LNnq+TsKRU$oQazFfBJI2j=OrFXIQ<2Zh36#M23*C_g?3vpydG5j+2JU|eD5o#zba0u?B zuH!pJr#$YvR``nI*u92OgNNPnfDK6(#Z$5SBfNG)`*j6Yyg@%_kOWj-60SCz=>}Mt zF+5LfNWC98UW7zq@_lFUp5_t@sbD!HU{UQtHIE0e3<34e~kpFQEN2JuO>!mG>SPYV9@!JpgV&u#GM z4)~LXKP^G;q^&9Y0R}GO#Bd6!JxKteu7@f6Q5p~GG7khM)}wg;gl)l1je*$#A5y=L zgRH>9IwFE(J?>K@aQUd%Yo0S)J&smaF=b2(u5=#(TJ$LeL|fw6v17D(h0Wuh^|52e zRN`A%5?|xGU>AgB!VLn$m822jY^gmc1JK|gH6mPC60K-S(kzG~o!zDOBplb8wQPu_ ziPQmz>LelgN2H@jb254>Fni+1C0kq3$buOL*spC6tYNN{ElpLG!$C9(Pg@*uYBUY; zc15!YI-@2v1w~mS@)ce+8eDjT0d|AJeM5G>#2~bV1oDt~L7LbSE`dA|*0$~Vps`7u z)#IJCqHVX`A+j_}#^=^-xXE4*ZI!RY-p}@_snDj!(0<;QID+&P5}6RpAs+x`9M$)N z>JXIn4FE%lZHaBzsj2N+JOYj6kZF(Crf)WjN-q@j7h2Lorp)IWD31{|*5a6T8aQOy zhb((u!@WqovSrWXHq&;V7dnwXFbL|^MtC`gUs7!pzo2=lh>9x~ukby*b7#*Eov{T> z4eb2mzS#Fxa!c(8)WI{DT9&tU?&!+$6pll}P5i=f2tY%^#CBqHLC}-vU*Uubu9I6K zry5@ra>1~K|Lv-5IOsJ7|vJ3*EhA3hpzIr8oEkN*!mghMxUMQ|bMCl+9 zsi0|D_@d!)-*I@^vGLSxa5a-JhXzTVeeTT6aAX4tx^0B?6`qpxMnu`pxAR;!%QJ+4 z74)86It6j05+aEyg><@vJUB5iDlBjmgi}@tj~YonndXUYbWDCqHz=@B-6D8a*|g#4 zh6aknHr(~p4mHR=>Z;TBsPO%5BZvi&@?v00!i4&eV_Y<+r>e%RIaL)|tuc6dTh(wq za|$!M4H@oy$yv0o%@cCO`Xz(_cyj$O4Lt#?cC^QaAmSn`t@iOdSsFWeSK@RbalDLA zS9xyx+L8(>0sY`41}^;(4)-7n8zaDc!%N{grTSxRNYB4B=WV=;CvZj30WR=phxQG0 zstP=|Fms;5%@EiZ0?9!}MV6q(KjkKab1be7h5M^`eiegIMsS=!V8B^n%o*&rc{dP(EEA&)n7kMII&xNlS(KRon z=$Z*VSx=DS_M(Q3LNv`K8wsAcvRA9EKzgbjP0*u?@R*`jQS7gsp;D#>bI=~jx#*Q) z?Q`HGrpACSc2J#Jwbu@@4ndQ=EeX|HaQgwjCZQUJN>MWtrswbCtuSWaLE(_d=RrHy z`_@_nb}2cq?|8n;!4nBW6bv!E1`eBoJ09gLcoTM0CG&Ue3OrGryC9!C`9Cdx&U8oI z0Er{M1?nxx6oCcWk~x~DZl*|2MKY(1Lkh8g0R&bKjCiSPIx}*_34nxjQ@{YA{XIPE zwXd~(A+2=S{iPzBT~Y7+<|2A8oz=2F1nlYWrL&se2lyyj zMN6GJ?c)h_Oog1WI4yCosVzx)+d_1rf*A3oI#&o$vbq#cNCubSboo2^gy?Pytc^EX zo5wBiSm7xU>^Nkf!`wpsx3s|yyW@&$LT(3&xgDoLhYj200VXWf4$f`q5s`OP2%fSQ zR-i3ski$GCT2eoLl^Aec4*ZfAF|&9=BpLp|vt{(-(x$4_XU@J8FA^&I+wm6wi$?kjDG_h`{#G9AjMj2yK&Kvlmh|Ior?LyC^Npp z2Zjs_>p$^9kbC-i(p{bDUKrh}5>vL)cuNJI>&|4mGWl%28!BFBPJ5Pb7SMi#%)Yah zKUbSh7oAFG+BBEU1t_KK1>8)*lJT}7$k*uATocat@;PGx4s$^g;hJlfIIb)AM7|9X z66!c*kEiyCSM33h7wkdC($qT?qz)xgv_Z;raV0|J1rXzE?@GXw3;&Z-ztyq0|1Waa zDAFIV$d$tAcQ56Zk!Sy}N-`cx=P9lr-e#s}(>#$YC3suOoH1%;AHsU!K|9nE z)jHEW*$G|3VsKmys+i3d@PCO8u2q+pID(oUw9=L4$u6E!Nr&5_WmUHTY8xf- z)8Jd+yI~f4;D9uZs5{M*-8{udY%cEUlBdjRT!E(q@5d3hc8ONtX0GsLV+$v7B%m=u z1q~QIX`bxiDL(3yt>TjGaK^88xaPFu_#JSFr(@Bze6yp9Wja6+>wvrsi;i3B@N8>l zro%IB&w|vx9j;Sx?C_8P0bm`qZhO-_*{jxIKll`Bt~VQYCY#ITcJ?+{25>+Ipc{64 zQ()3|UXMnWCv}%n2hxn?0lJm|Z7oc~F|#CwrxptG+PWqTh^QnD*{QLfz(_e8z)Jis z76sN+U4RFGZchV_Zr=_FI>RM)X!x&AaaCPs!79NJCDx(O+~bRINPXJGA!BR!!K;!m zi<}_aTWVHu9tgBn6$DqYY^!4EU3KuqIXIjzj=hWifEZ`W=5cGnfmIBry`Wf+1nE65xL2Dp+#9Fiw0ODO>guu?+lAJBgm(!*p{2Ha0YU)>5?MY<07 zCQl44kv$MFGNc^XPII{mhgn7FP9{@A~4~Skj{$0W|YAXK|u_E5WWiK zpAdSgaK1|IObV1Bo=TapAiQP6s$8gDVBG2rfH2&6Ad!OBl>w}`9u%x=K6rIRGM`|- z0J!GSaGz4d1wD4j&;`9mS*)%<`Jw@P4Imtut4t{$^xGZRuPj#AuY9o*78{;1ao3>Z zp16*wR9(OH{PA<;@St$nko5-R>Wv#$P_S-j!K;|12Tm=P9wRklLd;u9v$1A05;idh zatA!L9iOKpKel`k*ry{&uc0&c&1HKh;v4N(Y0GE_kO<>GV zK+dPS*g$Y^Ng=^_K_df!Z`#3CkHKb7K-PE!L+ejv=v5di1azN7B$4wMR-sQ@LoE|< zK-9>lRF;$2WeF5F6kMbUYRd$-mHKmLCA3QQ)5Qx50;ti<8{L%&pZYd{snxfkUz7>; zfuN$7>jHrShz53S2`NGx-=T%J*ymyY($~R+QuUAibf*1 z(JBWL#>};iB0y&viDEvh98A!VMi-A~Ot_VC6!ruHidxf{prHm-DK`B=7I{EKX)Yre zgoT%>z|HbY8dC+nC6Y#jYF!p{mL;rsE9pX^DQ~!lB_M zUQ2-v;zc;3b?s_aIn%Xmua(W1I5b#I(pxT*TIfnC%}GV-=yPo4hwwzKvZ2uy9~l=O zT8NHTuEx4Iuz?1ws_un8JveSVY%WG3>Se^eF6@%Bm?nma*_JgZVVdcT+8*VZWPShg z)Q>pwD(npjnYi=KQP3cBMX65l{K8A!Z_G4lAb&oFVN+1ZEjc^ zYR&+SG~m`K6!*Rg0P1h(-I9gtZ7-ZJo z&Nyz-6h*YB;=w5SZ0cT&o1ttI0vq?u8MbYL_7dcwh;@Fpa=HTB<5j~i&QX0hzXrLq zW5x^g>Ug4?gz%GG=eYC2opH?b;d-`X=&v~jk+><}bSuZ;05A;5L%)PzGt`GQ!-x8> z8W~Fu4Gxct@d}PY_>*uGE6?|cFFnF<0IciFPKY}%!LfpY^A^!3d;3()ir0V<7#ZqT{F~RmRZuQC_{X`OKkYmg99e@xo)l5Wg$}*VdqYyJ?^5UFXoabd{RxDq|aUrd{ zZ&+my9nb+gO~6S8Y?{V9nHYlGnSEf2;$pi!Yiq7I?1_*s%_Y`2y8L*bikJ;KVWV%eV4{ z1%Bn>;e8W>Bg5nHqqQ}lHOQ@rf}1dDm$*VE^e8AjWZ4$j@}O0X`vzVCNy|I5e_|Xi z**lV~D+D4>G8}nUCFarioa2J&AdBkPrE8Cg>k@L;zX&*r))1@@Fd6O9*z`DN_#duS zrcH=TlJCYwylYJtv&LvoN9Sh`S3#%rYp_v+TM>Yh9uP5vAgMG&3#RMAd0P?U=kby? zGh@19@ur0%Sgauxgr*ABn$M3ULH!%_G|C1-=ZT(lKAlU5f4dS#IdA2ZI1zdMY8vQF z=fVvj=TI~pKY)l6a=~+Zi0j%amhGVHwCdQV z?NgQ%BLIVnR5#%;aM2%vszX>yjzASzFd? zOZ4$nPN@D;Gl0URXr5sVv^uGa*ZVzA$YSe@z<#1c^2Hqsv>T2V^C}h;{C}`v;(&`APu5< z+=tC32dPtR0Lsm%U=yw#wL0A9Q(IFacY|e997#}E?Yk7jJg_ote85;V79gf3R2q*b z#SFo;JQ^a@a4|_Dgg!wf%?MHUoMZcoQc;T;JKe@sm zyO||xO2}n07}Xx}G2m<=fE|-^y@OkJwdR8;4S;qGRco+nTERB4@IZn}d8NFR1r5$< z0->)$gnkV91!A#K9R(v$Oh~aT$)7sp z3*cyRSPdX0Kea6CLF8M>vHg^37u}_*-?wDS>-qw86Yvh*d>iQ9%Z%>v4^7UkPr->c zDx!lUR0uPJ5a4N}rxZYj)=-c<0H+mH7`%{M1OuXgPz#1bK>nylalz{tKBN}Q3^j;B zv|*XCqGfC4<9Ki?P&RwH<#XFKOK_$XDBnC@En7v)hp-k*Y6aKl!l6?ed`NN};l63` z0v$2+soZD-4acd0aRU1oq_G}_aN?tUH}4Hxs5pCh=RhK(rdz3^CTO~zDRTa6OD5?% zj8fpBp}Py}+VSR`#Z)l%Q#1?H3b)-DUDbe*56EoDL053RYeh>Go%)iW-`z5uW+@ zlA_y~m8ST3;+vrk;Se@#{E9G~QitfGxEmO(m#f5vLMK(w!*0iOT>>Ebj{7 zMXX3$u(iNTbSE+8R3HoYxq6U=dsCj*hJri>{a2#MiTgIpQksl{5<$u9Xoxc%G`BD| zsqrGSCzDBISYY|1@gaP8;H82%axeo%!x4wVu<#w;h9w{%(ltGgECz@tq+A?<2?0rl z#4m{WLyR|k-zd((p1l_s61z|u!i{khy8ztZEJ4#yT{9^-Iuu~6=;s|bW=x(iN)^k# zqU2Nz%Z3p71WyP{gF`OX;8&42O*+970_k#6g$h|A;pUYULhDxNU{;zM!bK*^AlCt@ zW%z2ZQ(6)hNVrPB29snLGES-{ZIEq;t0nY31{I%F-=mJTg4OiSWe9=FUgbBsv&{(h^fMygNoppb87ym zYx17Z-R$rZGv}Euyrg#`V6Uz1NXCcLZFDRGM19%t{FI08E>KC~N=~P|VA->&lI;m2 z=9G0TJ5_a^SwMV<29>xWlRia;1b0J*r=V9MAnPU(!cjoin08zrbUFzy@mOBSBXOA< zGd?(u!rjQtFsY85f=>k@AF$trnz>kYDQ008T#X~LT)a)dw7`?g!>=6<{3CX&TW52- zI4NqN*hQe%76m7`paQj`61O9Fs^z~T^FfWfZNbWQYs zt>I1>?yTwKE)guJwn?NF5}S|XzKJ{Jg2+Xi@Qf!L7L`mnh$MsvjEre7SgvE^sU6B- z(WnWX&B8JCz-pt7O&CGM&xB;4jSsd~0P3y$rkk|g!<%lx-9uC~2L(K(dsO(!Wl*PJ zP?8si2NBkPz>m-w5IQ2Z;MiohDb1Q6n~c;w2L4Yl*F4kj0LLm`h-BHYy^da65m%Cy zTfwx;EHmjWBN-6mu7%6bg98#JbH=jG5-%H|L`3mK=i{b}+fTrF^yhFZQok?+Vz?;8 zd;t3lNL#2C*9!MDD3f8R5=U1Uqj736fO<~t;S1#Aq>kdC(Y-!SE}`Mutu`6RnRYcsi|; zLLfm}h@yo|iVLp+fi4WggplQp3aKER<%+Vs+|v5(L$SptCw82o^A;+9{Fh7w1wKIVbw? zxM_n@1)E23381*Rk^+|M;*|hOBw*7VLsS}u)8VP!S`{`^z&}U0LvmPU0b528leHbF z#}xlVVLtUxiFqH;#`0jH(bZ!QLMjw^CEx^-k(SgfX)=-`fJiyPU`_=g$Bm0O1O^ix zc^x&Z7+RpaU_7NzNnB$Qqu|w+4j!8mH=f|JIi;ky#-cc>C3gpdlH!z=)@sRIu!^P# zm9k5;8uI>X*+53_9^ok%xqGBHBLoQSsZN-cDri<{m9>#%nOeXgm2k`#1g~IPRQX)u zf_hHDXyE@KAO!vFHQ}};5$?v@H0Q1w05mg=rKSWSAmr;B>IYvEwbQsE^f>A5pi(U~ z0C1gf@D#$l)lk8sOwN^2jIfj@-hKo*Pw`_ap6Ff`A9^Iu{~89lIcw6$C|0l}7DM+NrqD8ruTI zF9aF9*Vqb1Hx_uZWQst?H8!)?Ff$iR=I>OHT2Vpox?CQn}#BIlNyVqbC#h4nI<}dDZC!p;B+y8om~wYi;F&qssOv znZAivQ%a`+Peu;};L#)q4h+P(+;2Ky`lGe!LAtm^2*AadLwZ3j5+9h__O7g(0&U+4Tt!FNR5V*;aIg$k*; zbozJ>mDSKA-SdLp$3|~;_bX|U`hEu_Wvp0s%{RFao#=|OY)D;q4HvFs6pAnE=Xe-H>M8J2xdo-KA_N`^BSzgcbV5x#0~6dfBkV^y1%u#( zpk>P&HWx=cp+_hlph8`>a)%7C;6^;U@|cdpfP2%$D`2&vBi=AX1Wh=5NzsY9Xu_gC zQC^RO-x!?CaUG+wq8c0rudJ_Ke%jP<@^J5D(qR&4BPTb*i?kf>%{q?3!u0SV`)v4AKaq^)gkX zIB(3F8Bq=osFRJ>7p^OJVWOSmV(V~<3e+^;S94uh;=ry6%o)u}A>B|Lq;>;Z+)dq~ zuEhkG7Y>u6Q^A0VXz4nqBkU=MMogj zZ;%T5xeqN7M7T*bZ)gt+%o~`6V5gz#eLOL2#`Bl3WeOc@IzV7g#dHg{gXgC-;|hAG zsMyCf3?%MwBqa<#iZUTS2^gY{Tt^R_RReaXSQtVMrf)UocLDR!N(%-WVP@>wTZ1r}az|&r9U{0fjhI`e*6q7>=@9{Ol z2FgDI@~#Y-xRxLZoA03Z7(z^hca*0LJ0VdlhZsVO4s?|WR1FoN{uHw*@M8;+iR(B- zS^FEvuFyJC(MBujaL1E8IA$fa+98p};Z{ps^9apGZX!Ou=@J8p#;z*hhjz#4P6>=v zfFqJp07lU*%}0gsAPq`}p&Sdbs90E^iefZa#i#%x32+UytYDY`LdTQ93#P2K6@hy{ z9SP-55ox7F*~U;TNRcKKxVpJd+7yH!Li$ATx6Yc6!J$z)YASAx5eN(CO&zfzEX+)V zZ=>C9%*tY$KIp!1x4X4q!A;-6dJ4&)M+PXVNbYE%Uj_l)L>LixDYfPa_fN-bqcMT* zXe`j^>W(AVmnYWK=!j#4{J6~2gaWG1dK@RlZKdcptA(jP09H%&z=!-=LTAj z#$Q*?euEVz^tIwN@DO*3GG<-Yis`_;wS*0rp%1pXB{ukQtBTN}I{36%G-{p+=K#pz z{NzrqPQD3OS%_Tmjz-*27NZQNFs*sagRut@7cd8q|ByRT9CnZKz6bWB3dV~9l$3}V zODMb!KuQ#)qiAtZYz;+ekuo+KWQ-~z)K6;@t}bUN$URfoIEqD-dUOv^T^bRPRTP+> zXbh4qLgah^7n=U^th>&ot;ae`cQ|n`h^N7;d<=-L@Glc-DMbhknDl%RV`>)7D43)_ z0G61LfkrF1A#swpm8u5>(O2Nj*GH^-_7%@;7rLLGCkbJcrIKBexP3H}W6Brd& zUZOBvLp$I=OCBJ&wjv?U(+INt5HD?%xohIVEQs z?4pU(BYdhNp9;}*;8>MY3?!}O_%Xt%p5q6iPpCzs$YeqE`HtrBRng61kECx_a|C~m z8-tR2F?!D_|JAbUi}&t~#oN7=W5DEUj!S@OMH;RHB`u`%m%4&>#eR3Oy3n z{E1`?ajl9-Vrjd_;nWk+?PwTJWv8ulEGazm5XYt7!Q~mAGs01uF#b-9bqKY9+Tx@g zT@Kf+x7V2m?(*nTx1gp7?0)cD?7E)LC5pWl5p|F%o58-<^*^{ViDt; zi_i|A!-lx))O^zw9y?OJ(4Ij-hSO8w&tk8B#&Ro*5Z5LX=Tmk!H7gtfa27Qc$fJUf zrEaC9l+xiLJ1K++wk3jX2(^JBOSuw7_Fg@Dcyxbic;Nbp)ZUSiiPS{@_|?0#d%fgh z$DR@3Njb9M{voYk*qaHarY68dNFd;Q##aR%xf^T^9i1_lT z3NcyO?N%r5^byGkonm<<4w23*WLhX0Do=)q8$Ob4=+(o+2)3w~L4r0z3N!e`K?yqp zv`79Wl_L?sMpCsleY07VQEh3S7#JHH8RKIDbi|${(DN~o1|rM| zR0w%zflLbKa_uD0{4@n|*W{1wAhtK29>1?wF>)qI`k3jXIv661qt{KOAzO?H%bK+ph#Y1{00d z>>v;9DMN^&B!s}nT&}T!MEPKEBTjcAM>Iy=qZ*~@DII~LB03E#DYQP(R>gEdyAkS7 zxDxpe(-c}cHcc@hSK>`v+H->1m5X96WZ1agCix{%`h-MLbVxCk0+)lK`P($LlQc`q z<_51gaB_th2&^+~A^@wAeu9wyk2dwtqXsun0hY?)2jY08Dv8wD^0E4qI97lR`JPD^ayVt1MwER!STy6~TEB z-`827qtWD*Z4>z!2)#uek&}_5@q-DJTc0pmguKe=Y7hj5E7TVXiByIJ?Yn3eXh4nr zoaL6#Xy`zX6p)pUY|^tzeA*8m9}XP_j^F@M4JwT&@}&+d1{`-N_z0#y#gt5m#_C*< z7nQ_ge9xAMyZ~ z_(%{NgL_d>B(mrvoy3TR`HwD8->h~@eW+fM7E}=_jyi#K+6t-dqZ5RQhwTi#fJfTz-@II_q2(Pk}Njok&qX4=@1Y{kdF-TtvmK27Erj4w6 z5J^2oZqgPOv?n)$NmVJye39Vep`EuN5tk^e_KGmsy!879ZradeD}`8*i+Iqajd?>5kOE?xWN>x?AtR7q27MO_(?u;jku_!>oy>=R*=q;6HKm#42PC z!2wueV=5A88LHL`g~Nr8P1+bvvb?n%LX#C@4>HS@8dEWx6nHDb5z$sdK*3f~rizrb z{}Y|xI7lfk!m-IB$qs3f!qbm?_>7aC3}=-+)X;w~Hs$cky-PYDm_7vokHuUh(9B3yJBsvJ)*G#P@+q z({2_XcfnK$R#7C8@EtxdWLV|*tRKohot=DB6FZNIF%=+4oK8KBZeb^w&lsC$Y|A&^ z{4=Y}*p`2M_-9rVJF(>z8yKrFwzd5h#5Ga#YA>5iGzvQY$UP`(=QibmDE(s9Sk*#Qvk^2K4dJYW}{5)^*Ij)K8J zcpF?1B2FMGKYaAu))93?3?db@+kr4UZuEFo;A)JvbCjpRy2liHfDZx_1TTg_v^yx5 zlz4(M1dz8|%AHFc>|3Jd?2# zkctkV0xr7f2#@e&biwN(hD9KWCBj!YF&nj}P@%pVtWCP$VD*q`FS`_&5wA7An+71u z@+7t^0#?HC5EIu90WNcbk9Tm$^W8_yf$~R`&Cb~-sr3R$t^Gr(D;MFs;vviPJ)K_P z^`ZYndhILx9O?CsiC#D8^m=BvJ`ir?5s>b&OIur9uLzftTx*mZyeC0vgTyv?xFuM0 z%921=Y8JRW!QH{F3dU9ei=r@)8Ot>n;l_5#(UU5}e4rJj6!ErVJI`mcy{UXQ-y=rC zcO%2O0{^Dn+8&YH6zWm7drytDLki)(-gIs!6q)n=s#nNlT*phx7BVHLn3-8j!8pVq z(iQN<2`d8F@W|CFgs1)zS;>?{4lqa)I|k<@0(Xyi0hbJj7vN8V1hVcDzm3e1NL{c~ zfdlZ{Z|C$*RhRGD19v(|5b5Y_ONh28g%AKdOXhLNI9M`|r^}u%tSu^`C=1R( zkJNmggX_waFhI?1pXtIKHAdMJ5-2eJ;f;kdH#o2uI`@R9Xr#7O#j|} z`vCq+Uu^r;YMS+STbj3=d7FO%N5(H-r{Ac9Gc6CcAgx>oA|^9 z9Coczf1pX`c^*Vizy}q~z@4H&=YZ+&bq%{Xr;SVkI<)M;{g!e}M|h#=*bAoXL*7E$ zgG3a4l~OlMdCokp$|Z9=3o=wT2QS1#b3h{eC_KPBBLG0+zbu!RwbRgX$ihEHHw?mB z%kM~}ppzhahuk0_(1{&tf%2rWNNPaPXix!Cl-H}aB`St(%t8|GrRdeDAu<(|jZ_R@ zB}F6Qh6?(Xs-R}sJ@%|&O%6cVt*;1rbydBXd6Md)ir__^Wk9NAm{3C?15E@p7qdw0 z;ix+9DdY20i_|IJAUeo*^KKo?@CoS>a3eT`P2kFaqlZj%DO|y)tjkc2jIBceco1r& zIS3o@v{5R8!){r6g0MRgKGfEh9OT=1aHaF{5lLu>10zPK>rrQU~w_q_PZ-F~i2ype_d%9XSEL(9J z^s-~;fS9}u@iVn2DVL$SU>5`mYZn7Z&s>n@Ry_o|)>Jw^=| zF9NN{32xfHyF@qulTbs~-Q_sDI!`e5DvXgvC|O;7*Re+#fz!Y+5alJ46a&jb&JPel zLhFVP@wMeKZWT~bgqGqX^KyqqX#g;;c>V&0 zC`|z`kr#ub3tg0=#PoREZFfYv85~{cS?)b>j2fi1C6xt)x`xK11M*i(^F43`DD0#*uLwyZD|Zd+cK-_pqC zs)^4jxvs)&^(At2zcF-?g7CE-3jt&$Q9+a7PcS5OwjG&x*!O&@e)m)UFSCTQ>ixFCU!QyPlGk3_cO-+s{ zHbE4vR8PsJg#!m_!DUOrfpl8}FkNGn(6Uqpu_(Bkq#x&wdQG=3?hgh?BM=1Y`7So8 z%Tv%P`fm0d8@RJ=@}sFeiK10<6YUy*4#%8Hb{)s~i7Ci#VFIDaM&&2;i0dtdF?Ajg z8p(#b_)6k_LSa`BmK;P5;7*>n=}0!U^XP54j?OzKC(|qW(Uy^=@^`d9Ycg2}Yqh|` z5D^(&WyC#_9)tVGc&8qosj7~b4Q~$CMX3LBz-R<$)1e6ggB6xhQdC5zW1PixG2kYXv)!NBQZPd580F~?%`BK-G#is!R;#^=*Nf_Z#4oDAQ z(YWPF?D{Auut#_@u#b70c(a>#=G%E2fGI5sw?pYL$P~`N2Zup+oyZPGKZ2o$;SIoR zONJzNYEM#BO6`%g+Icb%s5E1}W1$X8=tw*?Qn&V}ZaliZ02n5I6ecIrM=uX>uJeh& zxm+7Ni9w~w$+W

rU&|9U!V$->svgLevgQ+N)VI8tRu^G3E?wIF*q8E#;QUh?3BET zN=vnV1sqD@uGBlE2$5}|5P?*VbrNoQQw(h%@LB+qR1-svEP)aV7Kcv)!Yvx<-r|H8 zHXz5QC07)m#_I}*O+bdpI5oddHlskGW90Jq9Ic{ky|$$Ks_tKcPgEzCI*3%%8(2@L zQl8O}TqTeJ%ovZ=0MLOgd@7jA<7$Yz8b}C^2njqCLr}r*A+TuDkhpTaW*#Qng`WQg z!fn{;lT5nHvqc5*CzEu0eut#n5X`G3-W9@4$5U|B{5KNsO2NDa;%x}k-wpW+RS3Lh z9i$amc3)U?)*SbzVt5A)yHo~-H;tPx_9SgOKxl{y()y@EsNYld++RW; z{Hmmx?=)hvQE3JPtCME++tBjUSkA$Tg_US4nsOsPq?JhA<@KTe37ET5F0(8+ zBYN2CF}EQ@`hN*`R|@JU7Q>h_*j8Hjv&E}P8? zKWsZx3^kQX0TDx<#YSyHL%=jtE8+Uw1(AHJ2E+zS<0e4kJjEDjFGjQ>7z7*@RFthY z_g5FS8H9J`0Guqo$KvQ_wHO{lUMDN&Fx(EaIP8}R5QwDS3jMrhWf8pz2~#5 z?teU|YOkSkURKU^_N>0^PFcHa_46L@l9ltltM2)rnsirhzN@phw`)fVzwPMhTtjOL z3ccCh9oZe7J8~)fwlm+odYB$mP|5XVcV>Hcba&@d;_J??ovR1bK?SHBL`mg$cJ1g& z(bwLt+^S(Ws9?8ynrDw^v)NoWo9oKwa(SbxE5B#A%X9fX_-;owpU-BqJ9;{MW_r7N zyL(fwIiF~kc|CL5kHie_ffa?RPA;g--J zp&bBSoJ}dVew0`78kE$$xpWi`6tKA_DP=CyrHm2~5G$+8o5yav;$}E0@X6;0x$`QL zJ5BL&=N#xd)R@Uw%MUc!0s0=^7Va6ok<0j%YDNt=WmHN%U1{HN)3djVY%Va@z6H~t z3ns-)djYMTpdLuCN!)CK{62UNR=wn|HS&S){miM^8`UT6G zXb#X=yaJrSMUxAy4AWdTy)(TtozLXE_^jcZi^h_CmXrPDRX@|NRhl(16djs`)r~)IjAJI@7%0^Q>7L&IQ2b(l`?6yej8{Ly`tJ%_|4< zQZy~cL-6ZL^Wpx90opN8TR2BH-xPBk>Kw|d*!!KzxLI^fzcW9+RGD@TdHK$KcfL2jvom+gN*e|nWng&! z=*Zyk1T~$@raSR}xon}Ut5ag~A;%C&Uj^4zxGiW(=;MgJW3ZeRFqFP z*Gn7uu52ust|o{|PMF7LbiqaoDUzINqNtJ3k~78};nC@d*=J=LadU38P!$dq$Rgu& zPOV(x-kh^ofa-qD>!Y)-iRR`EcpR|26oF3FDtdP&6o3=44fS7lK#T=W+}g92eH`xS zg4Br#JnqPTqHN%cHK|D^>a3I6SGG*s*Y%UvPV7bf#GBuXcJX^ie6EWZpXVt#9W)1W z^p;J;bdMCmAIixYepon~pyKjhaB8?lg_kVIJyWU9c!}oL4E_S#g8kJ#d@Nq3D#mf4 zZsfArA?}qOzt1%)5@;wd;Xsvb`fx3KA<@hOnVE@-F@Z=Zv{FULZ&YzgW}i3bxIWaY zg3blpA9XJ!fp+H8xt<;ATs9jOL!!OrP@iH*rBZDD&X9Q48x~?c1oR@VVW@F2p-fcj z(!2uZ9@h>n1Po2wtxg@JA$Bd%j5#)O;;3K*+Fxqc0j+e#3RTdULZ;%>Y+nG)bBm{} z3WBUJV^piuEDk_1=HiU(M~?VZDqBcD7EYRMI-Aa=vf0kAkfyv+rOpr%dvP{nRb~Ma z%eNY6dI{3fmoG0T2DG3tf;ioOWeqOB@*(~kun2)(fzt096>ZV!ZAkNnET$nA3nT~j zLPp?BpxXn_5G^D)Vh4y_574rHd65z8aNrss1Vdg1odJe5&vcRU;Y&l>>8;sa5+H zUCTG?$&FVH&s%idQeV~d<_)*ITVE#9@L+EZiEq)IPSq^rHju-Xj&Vw@GNRxJC6iP- zvDo2Mz7e$7&nCwP5n=EY~~$c5liv-38O-!rtvb zK1<9k9p;yTsSI2K`2ZQo0WWI6BzyDeTrW^vSWypGkH~^L5dxW+>jem!`p6OO* z-D6CAuBU&S7-Lt__jTI$4UDlNdJeUx==)~v`Bv?DGxR`ZKD>^x>)B9#6Jz%>wwaw^ z&FnP{QpYf~E82r1+mexT_qd`lHi;LLO;^N{^bW8xf__@NEHmqZ8 z%X_vk7BuF0bJ&>Y%}qrc6M)+YEpA?}*-g;wk#n?WH!m(OraZ3A<=A$j}>&rnAA?h_V z*3vnCus`43Q&^hoIXr#!&Z`E8Z`r@|x`W2fD-UI_+Sz;H(EiHIp}aqLe9YWApY0r~ zj`#O%V65eA*E3)ccy2wL%jMRqOc_m#cO%n!cs=^I;K{Ia*+^!vYl(I>z2j>$J)bW_?GMMd-dC2`oPC4)<19WeZw!V;LmP<O(KSWBrb={^AeM?@avTgB?SgPH_9`_qjiKXV-<-yf@#|_TE>Q z+IzY#|Fa|6IqMVu^rD9!IyC%^3tl+$C&r<5xBui#d$&IS#cbOPZ+!P}-ZlU8WADG` zj%!}^fu8w?esk9+Ylq+TH_7{dR2VRxKYZ>_pZcP^|MDrX`2O2ooV)&xd)^$kFdNmv ztkV~!r`%uc86ThNzGcVpnadAczIS?fF?0Fl`|Y9Y_l;h=xNyAK-#;_6G-?=KxG)#s z1@lwW#{3nUF$k-(RlPa&3cc+)cW=3c3gPVPyXE4^R0&- zdHYZQ`nK2H{r=8>`epBjcmJVv<~PpG3|+i&!&fi*+xd&{`r@MKS;m!Cm*Z4X5acpzWrw}S^WHuzh*ao;A7e6 zv(w&n-9w*z=f>*yKQ!3+#hYIA+RvvR`||oTpZDGkTi*8f`M3YD`k(iXE}D}&uYYvm zHJ{nLa8oL^{tLg{^>1(ZTHD9AeP-!Vr}gmS12=D8IPWXp{mW;)@xxaqFZsLoZrpx* zqGkT;-}%J4x86VX%`5)(wjU3_>E4~a|8@1QkG7Zo>%PxkbKmd1`IW!<=ey>Hau>b# zJ*mB~J9ztZ-ud@ifBmfQtUK$OXA+qOioxk5JAMd)hcW#3hZ~0Sr!n??L31FT)-wkD z3aJf5$$D5+b~@1A8Sn?laeXsm+4n&+akTN^C%*qVwtM5#pSgbN|x+S-41 z>lvl{UOxKR=eKpHe)|0z?|E$S3mi19iKh_!uMr*{%rlOmkl4j_CfQ8r@gWH?Snr)`0Vw6J^G~wcf8=8 z*S&cCZ;#)%^ZOrsk= zs~>TCKljnE6fgKz<(k=7zU6(dOKAPQk;oq=_pSJnVj|{%#;XYt##vAXy{jG=IS9nYJ``+@G|N8WO8&5v!oj7Ct ztMC8(*bbmN!rG2i&CZQaE$=Q_Ue zm7jd*gKxN|_vT-`@}>Q~kG$iLzxpqqKJPcVP5<_lvmTlG*WMd%U2J;S?laRpul&UA zb6>jj*5B^?+k^jd=i+aikF~${`bV-Cf8$SH{fD*ZzLCHA8N(0kAG=~-<{zt_y>FP&d|QQJ=+yUG0Q z?6p6C+rmv}^G9~w_OTy5`qwREJ0JV;oo&DT#Rsb||Mi_Oz3nIcuReeJo`;RSe|q{a z2Cg{ylUwpTpZ~ex>!xm)_jf$?xo7`l<}2STJ@=dce$nyQU-aTX|Lmhz_Re&^;(~v8 z(M#_B=YRUdSFYJQK5mSD;JJ70+wiV;{`)UYlQH(}3-a&X`H4^OdFFU-{pBs!ezWo) zFZ{yWKlY~KpTDr}`pM z4?j6~->)8ieg1F1aLc>rZu`RZ$M1aEUEg@upWpte=UE-EJN-3hc68r;#punSp4`@S zUncj8S3UZ`ONVN=-SLLO=e)Ie;nTi*>GwYR1$MOe#t;A5uFdQ_n?C$yUbyplf6w30 zc1G(*A9&>8b1%BCc>7})cbxmvPrkAEfo}}HZDH`Q?!E`cQ2O9kXZvr>`mg(=PrYZu zn3PzUrp+XWstl4_$NBP0#w_Gd`8Ls_SdLpZFMP(2M0_ab_0$pSwxBql;yw{V8C=wwA8f^vKg znQmq$DKrQgu}wcyGI0krDR6FGHx)mZv2{86eja1%3iSO=jInMulwZdHXPX#%{yG@* zy7i2$JA<7-OA!2cIdIjhZD_lnv3Uw8la8!CF7#URB zGHClI+`Nlj0S#$WOI6IuwCTb+CKzL_G!yu@l?~;|_C-@F(Ztx+ZD5hWaIi6`28|W{ zic_kU&4Yy8vKd$~03Lh*@#S+^yiR%!i+C}8hsBiTzeYm*X)9w*Ku_l|)`VvDnT%~2K9{kx8QZ$?T%d*X;m-x|2Nn(1VJiZ? zR<)}Y+2`5RC;WRh5-kIF1FRGh`7Jf8IPaN0l!p~7QF-{c#D?+~WB0CO&7$U(=1VSV zk>4xx?;B}Df;<7G;a#&Syd-Q!{Jv&Rj&9vcnpn%0A#2`sh7a#MpRwGgAJ>jvGW7>Q z(ymi+Y;c&tAb}f3OQ{UZ>943S z7|I){3|JR$rMj@tpQ83*p-$3wkbxex12nyt%Ady=dnG*wS@|_84+Qi&>gy?tvHzgw zPi2gKl!tFSFvjkp@6Tk6 z{SAHRjIoc=99tM;?}nGed6HBHIS+jYR`3b{Dr4+Yt^I9)3p9qy7-RoQ;Q zV-Le57-QREEohvVGsa#*bMIh`)#!UlgJ+sCHbU)W7-OHH?|^eZAvok2WB1Z`U}X|+ zU5v3FXc%PyW4#3P9>&-|(wKW0FfUPN2V;!W7M!h#TZLdJ6ABqeviI`;V?_z_rhGLoqd3p^nE|HNo9be{)pPVk}>vr z`hI{h_8^r3mj4m@J_s~G-@zv<+q{}F_Fbxbh%xqZnhW@6KS||>8Dp0Lp#ba|V?d+u z83lYMIA6mU`y3DlV{D8u_GT(G&KT>X?-QV%P+x}`WACT$zxrhpV`mKIFGrtl8~(iv z|DMO#y=SrKu%SF~>2-{?OhBwpA(J^`6yf6N!O^3I9obw@N9^Nn`55jDH0@GhM^-+W zaUI)-N1fSh7C8U;`^LwvoSGOrJU%h7e`;iG@W9~kILPSDRQXbE6dNYonhCWw?jP8D z_<&yQSz57kj8et2uP~1rm1@~c7o7^!Id}h6{lf=Fruz2}4GvEY4D}Bl(i`Z}8rX;p zK&1;pl_0R;x{P1A4vPT7Tyg80(;O`julN!xIC;`=<_%g+{wwtG%V_ zc>b(wf*Y}A)98VNBjXc#PdoIoCBrwS4G*Ds+UUsm#DTGa@u~fLp~Be&@($TxzgF`! zkqfYqwZycC9G&nSf@ZBPpYo}H# zewf|3Gy=P!KUFn^wlu?lY6P6ck5cJ9U$CS+zC;a5sr@HnE%8G-O*z6?uXiRX+u1 zdnt?Uwr%Q(yf!Pf#3j^jDW`Hh0*02C>V(oFTp@*-*s6|Y`)O}ZmFJ0O2@~MNH~%iX zWi1zovB4t92^4ZYh{N)CiZRgUn?RQVt+R!(rUYY6psRq60#?FCQao|9uvP7+JcY3> zzdd>Kt@_n_!={!1ZNrE}34@E%1KHKn_7NcaIwo&A4Ee`8328LEKAq&hZ_7 zvr}{7_Vz_{nj6(>nG&8iSB+V-pc4M-J*16lwYg~c=BxwR@T#s;sug`}!Sa`yOXiGG zEBmRUYnDvgw~Vp}!>d?!0sl6`ezH|Gy+Sir%Ld=M2&#pg#}Kd;0U{QF+z^IcD)2p& z@kK2!{jS5U$nzCp7}Z%8&!~*(SBoAL6X9I3>-~ERT#6B@q}~B5*Oo5&T8fGSgaFvH zLYiQq1*crA2nfOl&V!MxC_A$O>NVn2*oHS(nSw~{0#D?-dn(gnDz1q!69rzg%cke0 zJm0BS%~CVR8+Sn$!O9r^T;Qi>4`Ggjb-@~=1&5)7W>nabEf`e`U&jFxrF21I3zmDb zVa$0T_3BrE^N_A1br!;O8ephMu$qDl#L3`L5md9N30)zR^HqXdP-VS_Nd@Dy#70%5 zt{K)^75#RlDD8qXspv1Nmct;ZpB!tstLh} zmFv;88%JGOG^epZ9HK_G4>fT~2RkIlgnFaiN5GFAa30a43S4Sg_`U%cz*F(8$I1Ia zWSy=vm2IFIoxY)w{j-j3)6}{RaNrZvu??dK22uatI&DlZP1j1Lr3U2=N6Q7OS`)j3 zRIkkx@~1SdO(L=oRI4T?m8Stxp00RijPlgP4#a9Y$+9Pur?O?&j*F0|j2g72+ypaO zyCh#1C&_==BqX`&REcqpfWvf*)5f%AdM*5*S+07#Xt?IA1@Rmp*^BesE1PDugU^^I z#F}{>ykr?w(TmJIjRJ%S+a^g4&yS9+ooCa@Kib! zXfr%ssTJqi`E1SfJdEIrs0p){KUbRuGco{Q@a+jv8We;=RKAi0j3?}DcLC1tEl=2k z`wMuEnJ5zwTYFH)#ROsk=Yr7JQ<3W%|A((Ju!8{ckr$l5u@NuWz%m*y*od|fFoQGp z_V2rTY+!t1YJdMkKPtt*6@iQChTVAtGx`U^d!hPSs`|c>;VTExpP?Git=CPNqEVbf ztNG09_aB(r*T3)Jz|_GJ;ZaakF4G3N0nW!kCz~dQM)wb*eXR-xoM`$K zen?h$ojIKXe@qFr(OQ*zPPqoz#zo!?uT}-AEfUu{MWc)ytyp$yaD%Ah8ndQUW4*>~ zD|XTvAW!H_4udwnCG$Y77SAfNi7bea)_r4Zt-1GvW&Q5GhdDw&WQ5 z0JuCa+#gkE(R62O z;S7Lp+K^E3fRm1J66{_mke~%=jDt=YS@vv*IS9BQZj-@M2eWv}!-`1Rg#eMTsGzn| zX(Fh-ZA4;ci!(_^*_w7uIDf7vb~8LO+@-K=elwXV zFON4mmeiixt<8EaN^ya{Gk;FrO^ z%~Zwo4PXkF5u@Ph;^oUS#hT|k70fr0g2L%i2L4IOI%#h%s0N233q0G~Eu0v2%wy+{ z0wk3|1|sHxV~UJIz!o57+J1rGPNQmV$xK^z2Hd{%#DZ&uT6k)PM`xW;!z)emqr2dq zQK|HBZWiYpo;VVk#!+=&0wA7N8;|e`e;tQAr^`I$9a4^Q*H}yoG=u|WG-Nb@Z#HbR zcIzE6Y=tw>_((_@sj)rx;<|lCW&T0TTKzWSQv&S+4|Mp}e5N?( z$^orilx&Jq+Wtf;ZF8;^A^Xr?JLq`6S)z+5c}m?#$*;9szh;#AkWrkoY%?Mca80o4jTM{HqeV5quw;0?IFLfMD;h+Z>cL(huDaERDXutzbaa`y@W@~;ftn3 zZNvv_$N9~1>eCex=bg3w@)CD!?pY9`)4|QMIcwO$ zU+bAgxR*-lTM>G|KGK$*(P#j6QERr`<<+-i#q<$@B6}zJCJG@e7{T!!xonqiAJk#E z)Ll-s*w}ajTOPJJ4n9#31Edw}jA(miLw?`H^w^a%ZWuW{Hns1{sfm%R2Zn*OpFVMT zczEEDcmS=QhOVcXvf-Lq=n2L;-iy(;_cpO-6J|ECiQ?EkR$WLJ%;qHOuaCB;)l(MS_zwmN9~kWAuA zDW4|Y1w=39_|t0QCFjPcBRg4%Pd6r?e9H*@A*5< z58YRE(EU(AH;{2QcLC!ptO!a3NLTPJ>ENtqh)Had4tJ)IQm|A;UZ z8T@Kg?q?C}<+>>+k~)#|WA0TQ<{ojayV7xtxpFL^N_*5M@I*uvg0sma5b~ZQDh*}` zvwd}XE=`~;ssd<`(VF=-P3y~SdO%%&G^AcMK zTC3h>HrJN#*<&Yhd3h0%LIVByeq3Q|Yxi+?{eFG@L3d-f)!l2>s-1eG0bqay9gQ1! zJK4ZSy;g5kJB?jrEJWAf#+9l0Zn9>pzS(GZvUOFXXz*saeN)tv_p72G)h_vR;9Ji^ zy9ZU`LBbW(TD4v8!lhJwhuM7d^=T-Bl*Y3|cJ9L-il)E@ zSIqZ9h1rL34rckK08kF7`MRjdjg`ewB^pre$!~sEWD7Ry2mRvD zp!!>)x^M?z%_Qb4PddhQN+TKYpMjg4x8BwsQ#)FDsU*21HX5;e$<0(wD>0YzpHx%2 zlj{GBPb!2Sc}n3w*=3IqmiEn%NlF2A9TSct3;0X68SF}krBnZm&EjWi35qp38-xmX zd5j3fiYEyFnU*bwSgsfVaq+c_hTsc$P{7F`X~5$|T9i#-nn7ZN(d35C<<;WYZV*lr zQsn?83W-$>~P*TZbi)E;BPU#e88Du(%hUr1% zP$0AuN>7ZPBL?AzOzJfw!3LS0#-nj#{iQ&*O3d&m{7bpA?qs2)Qaf?1U5CJ~Y_aP| z}HzZX)weh^jM{1aDJIYx zI;$OeJJt>@I(;GTN z({+8T#B_nPp+CE`+pHr_ZPmKXR()%?%FJ*re{?i5gXl;#(PK9kuQs1_?(gpG?X2x> zY}8u}y=4Uz3#BC+vidO!>g3_}ErxpVtC5F4(lQ#~l_#bgv1uucg&f%V5%9VW0sqMb zekm(fN?>3#20K}I=p#FE1k$Nvq2kpiCPP2YQ=rXAK*RA6*^TkY^-VjR6W87Hmiq`1 zic7@#D7#uNSL8Y<2n#r08k(L7z9Am4K^lRTx!y3)$PrgLOeFC4*d5R!@#_47fnUNj zBqJ|!!4QA22@Mw`0oEX=0CH@GkUNBWxYz<0NbiUQbmW>A+~pPlABsG=)_f5)kS6h9 z|H2WaHe?_OBl5waO>cr72l z1K*u)KQJxY9nrw?ZG%*nLRhS5Fdp_i({U-PbAWmrQX9;{LGj>tV>nMdCmg`yjYqg% zm2ybT{fGvrc?}2S2mqQuFn-g`+~mU`7(8X}@IPY!@H4)kgeU+3AJej8D+TxjheO*S zKjg*1Q33-7%lcXf2aUqdziylb0xl^LQt-c>t6jKU_)y`IF5A8Zv;?Sh+O>Gn?x~Xf zYwb>JcW1L(TZ^5DpqAdJc+&2H!LT?e)NZmq#FKUp+#y8a+pT(YtGZtAK5lgGcekKV z=>yfhUvIH9rP^#Ne46M1!ikE8rnx&y6A}>oEa|5tUim?Ua_nVjPB?7yMTwNQwuI;8 zbJv&y!yZ^QBfBIYRpudrYJ zC|g}#xVsAVueR#7Mmt?uo{tw$F%Dd+)ON@@B$?LBcCQPZ1waPW_*Tqo%yBd0_;3|# zlV|ja1IEUZyzhT~9PfJpZ(p;#?{_5m7ehBH%O%qtIUZh^P1-%sPh@K<2M6CP@vEHP zVlHr>mTlr)**V*VyR-93*O&0&`H%e@x?}%u@?)QmSseP?pq2*f@@Eb=S+mA))S75? z4r=9nKNynU*m2ptRz%HV+P0jxnX(2wFSl(c?at&{Wj6{*rsj-|9Z=CZm0^@P-b9cC z=9`-HQtFShc!&*Uj(!g3XLm_u5P*$ltYg#Aq3;??A!5X4>U>%`&GNV6SJlgF7L$`N zgA@g2JAvp4vnEMK4N^Rj@`_q2@iItJZ2HR}j-rd0z8R#*mN-oYS;>qPS6N6(aakzf z)H_4vaOaMZtd`G*h;Tj&T7#$a-^;zuoGi4ILx()ytXR#}!7zMQjUGOKRPS%>e7yVk z)8$V#M|TfCS;ITVSL<8VcBio(qXTqzgSuuIIaWx`z#6DW$~CZUb!o}-ZRVV0JE7$t z(BNnm@>XOk%Ohn1FDBrC_^x6%k?1LTuAoB_oCA}wTjc-#CKJTqHzA0DSs8@7`sa68 z0r-szT!Bp?81fn#t7!?gBCaLIWUS6E%vQ1!gNxfN*;fqDo;f|!GiCKx*n{)a{F^$O z{|?t8C&nx&zv2%7Zj@mZIK46GTiC|pX<&M$djxw;C>ShJq;-y=~Xd_spOEiWEtEdM86a|PcJQ(D+YcYQf{sWa>(@Re7S7k zmw=5tTQ>9zl6F3cj-^6HLsQd;Wt@nQI0FJ3rJ$5S6qK7Hgo729%^W5w%rWWV>jr@= zVjzwB$GLWM%*jSD*%w#JtH_YPTHmT~!<84LqKdDfsEbMgNkr0DK>s#(K!D#E-=)di zh89WRm;A;7wIV-ohI70p@Oe;qJn{J4UOu;UNL%F!Qr@~iSB)_k>PE>pG<%NgL`Tvh zLHyH$ymOGb%JPRJGjiCAlpconGwY~`nScGmi|4@DF-wL(sYQk4-Wmk9U5Bvn+`uoP zfH~$s{rKfA7=W?ZYy{vhj{#uSQFltPz&<+oUfJ2L)w}hbN6_FDeF4rJc3>V#2%f+w z158fxN6{Rdq+L+Xnj`5l8y|fWv1RCg!$hEzQyX(z1FnVl?_-$Npg@TT$hapV1~DMZVB(RJh7Bxx3^J^qdp%R2 zir^pSUaF~Hpp$5R&saJLCTN;kt$N{z&mgQ>v`uu3|Egf3?`y4Ie_61h# z2b3~L&Jy!&njz{%St`60Vhk$J0b!uA5c#xy-?eEFrVZ5M-jXK)JU*og9@Ug-ce1$I z9CV7`%fB+Kodj>wJv5J4h@=#%6<5kDV4KabjmdBs4B|Ta<3JMo16Gj37Zd7}0L)(@ zBenB#Hzo;Oh;nPWV%-Jwnu%E^8JLFKlU|1GTl@YC5P~$Nc=#Go3T~@Jsdpd%A!rB> z4-aP(ZYQYH-DtGx8@r!Ca%mW_XhA*9P6`;2l;8f_JUt#5)q?!?U-AOKs|F3c3aQ3$ zr0lp`*B*C8ooOOp8Re)GlQ=&@zotXz54ar0J5EWcvw1Z(SyDH{Be=N~p&dc2bNxdyG{GmzGd+vW5GNu} z$6-WlpMnPoB~Sg{EJ;%b)_saPs8;AY@{ps6;f*B-#R&_ZhtdLm3^G5@3K3?>!tCn+ zBK4@sxMBFl_Zc)TON7J%fTr{F^9FPSsOJAMZwSLmwhM@r|8uS+sj|{)fVkl}q~l@C z0>8rko#cRTO*1UY;ehqNg366pWO{w-MF5C%`+gWYm|*Y~_UHLA;@a7!aI8W@mt*`_a&2QBuWKp!cCWOqQ10BrXS z4i!2iD6X!e)M;8c1=q`37pQG|>eU0;dDP;!3T6OY zEd)?;OOZ3AaG~J$o>B`;iy~?PTR2Oqt_v6nX$L^8bwY^D0C&_BPDRUfnI|!rg%dE} z8JK|$F7oV-0v}uEkOn3Ok%ahs+yGjTU8(Nk_@di z_DKunklbPRNQ8RK&lBbv`Dk&3Q77>HJ}?8vA49AO7EBs(JLR){{MKR(h4}>6`CgIS z5pl`){Xkuh5MoU;m9k~J*4Slq)a>~OIrq*QMj4rU7KqMBBAu2tEddXWUx$=)#?V4> zW%X{wz^|B<7I(Msc4=wRz%N85Y?)PCT3Uh^OLLJmGB_UTUXShMYmJzpB}8x^&C_5P zk&^y9e=49^MRKIg|Iew|j!DdL#R#ZK3D9>UD(zuW6)ikSS+KWc0VR%syr}($d4j$O za0{uEfdY#Z$}FlQrceft^14>U7aDCG07l2azl_T4{Nn6V2|`Okz;9TKOZeveIo={5mV3+h!x0I53M3|0<{AJ^TX4xtK4sd{NK%0q)ik) zRg_=9-rC!}fB4*Kwkm^%M{9@f$4}~yXlLQm)n?Fd?HsO^SC{WDJbzqk_8TArzp>fq zY*p8~t=-*Df^T`H??kTIlWfa{0vzptRoBFfT~o$V;}|1C;oM?t=J#P`)N&Vr?@X40 zTY+>bSa&8Ih$td!$3zj)TfE(td?{<5|CB7M=+5{=&yQ7a>9Fb#I1|A-7HHK6RAQkF zLF5EOXnvbOz-c7K>9e}23!oE`2?&O91}I3d0jx_M(m8(KA|lkMb!dFv34~A-;F^O= z2Z#na%S7%#Z$vb-yS>v`+iS-jTVIIxU}s&mAv)F(@uL9^_+V#)9!F^*iw!97U(~b) z;7IR8A#!Hm)g#*yF%!EGeQa8&?D*Cxxto|NMoQA3UMZL7`6b)5XtPA7dE7?z5la6# z_8ikGO5~cVSqLB;H}8wlQP`-L$h4$z5)avH$%9QpA`0g5_WcuJ80Z#9DI{FKmrJ-N zG2E)q+D|TFKBgvMk6^|p?5{f;1A*tj5FTZ*Qyw$o0y)Fc=JLtkW05cmGfuMfw@Qz;$YRUO7@hs9+SA3fXVOz;AjgXN{+*=UPO6Mk|N%P_=RL& zJYKUpzw=Y1cXSj<#3JOK3zDRm0V)=saLs_yi3y3XC^>M#vFSRWGqpg<)*wxa*aD_l zuA%RN#RpI>?L7l?bHeW=GsRlVAu#zXi3q2`*DQDl*h*$M%9a!PtcDIV&q>g*5}C$3 zL2)t2P%eYDl1~8dR#+Jcxi;vN%9Lm+p-E?rRvm3C8$(_^ZExDxtm zy^C60PmQ*d=qc-|7T1xaX;SgC62qKhZeDZT=Qbu$m-z!QKLpwGWY4U)!{pu3e{~#T zn=IVZ@>t~g*gS&MJ|3p{!>G(cj(Pw~SbF_MZGuH($xDsO!tA2r6BUp4{3P*R9Z9^* z-J-;J1x;M{UDxdSaG7*K$wDE zw{-?gaL;3gp%X@?htl>PcC0G6^h~d~%|j)ckeuKD|Gj_{Yq7kq+T$Lr{D(R)nGMO zV~2dGb*;A6g$(Yg3Xt17W?{uyD$0u!8wSriNF=3%=mAjnGQ?ZpLH&5SW7`!uV3l@N z0bC6y`Q~MF(G;^l*_2J%+^W`Pp!p*`n;X#=<#mrL7hbj zzp$~?wH{C-ZoZl|$b-`!J(dPk|Q*jIDQY2HUpA#Q}t3#sBja+_~5mt@UO zt06U56iZfAv&m}Fiz1lA6fd6KXEpYjx^LHbY&{r=vRi5>&5K}PkD$iOrkYkApf0rA z7|G*SZLQnx?6#_#^={`$6Cr3yfNf<_70CEfVFxh}T3ds`C^giGq6zrd3uH=76@(Hs zvm%*NOA2K&xmhOV*bRp4oWz2)5J+N|=P(Jm6xBpA_E;o8oC0+~U=!-UXnrB|`0PpL)(XoMRoRT6FfLr)9x@ESms=SOUGI z005)1SYnQY*1!+!^6bKFxisptM`3w(ezu(2{xxkMMaecCnC>%r#D9zx2!HhK&<~iA z8hd$u{_Z61D3sH~^*SCf^Anw7=Ozso56qisN%OVH8bR&SSBU9q92!V=E4FwqU#hP45bsGd@?b>Hsf0^o~w+t zG)0J@PL;((vtNylX}gp?;cFcVC4<(83Rs+IRW)3VmM#IRngkl84rYT)x7)QG%{AX$ zyLW0e4*I)*YWx1nB7_Q4f{ggx+^Z#3%P?604KbX?Z_NoCB*)u#$1m*Of+nztIA@s? zD(LBD>5)6`JDxnGFY^bz7iLTXS$2~g?V2QgE;@u^gyl{nTYjAvlO9>jPh7?#7)I-YfP&S1qc`U#lcxJnlopz8%l({lJAJgCn)2U;u z$n<%}_QH(LdS#Szu<@-;Ag-hb>9s{9NfDpvmGa6mP@m;v^a#nT9MLNSD2{n0!ofr0 zj4a1rA%=YRHLi97co1#=TrS#NC?w28L|o)+)xFLxkL?f5U4Cj>&uA2#;8uEkDdD2Z zOGzgCWYd0-w*a4~WYp34F64>`M4Cj&e~X*#!>4JR#8q#`;o%3)k@{AfnOq`hwkvhJRisLj|yxmnxhQw!ZlT#d5IBJK#L(k z3E$;#8*rS>o^1zIghBNCA9B%eA`zwQU2*rBjkpE^@~?ed-`aYz(b(xW$352x2h?t3 zR_DC{J+`hqrLKFl?|3R^33KgZ68;EVu8f4Mm~%^0h`+;+I{4M#mEJ1rJ6eF@!$o=} z{&9Yk`o2yNFJfYe<^@h|=$vj54Y-L`>c|rHQ}=pI2>Y6o`G~&HrFIvUPexz98;A@U zWWtHEc!P=Xwj~{!rO#B0NY7qYz=$5x{8q_F$1x@hn6X75MoQTc;*)b7u zRdv(1(6r?v$YScuqOTGl@zrW=yRoxfZEQiym)KiH<#^2+fIH@pR_0Mj%F2VZDa#)z z<=ev}7Az54!aPd&m$3iXj;6*bZ&gQmCv$`hC6*zZ5q{4b=E$@L%v}PX9C95S z5c*O{sFk>LSBb|1bUe?8Oi91I^5vIbemMzwp-wDYxc$21#Tl@!Fbff}VTFmQ!Y?OC zp-{L{_~pdyLSdpNP`FySQz%@Wm?-@6D$(&!{{g>v z#YqWj{{V21spT-*!VeNga3JV#?n#O^;4TMcUC`YH;S4eR)U!Yq0<9fJSo0j3=C-ic z)ERL~2V<2`7zzy589L^p}J246P3Yvb>j5gbkos7vCV zz+7HWU}>UE0#6~cj>KjxmpN*%D-J119KrJORekXV`^9y0R#(Z7C0vN+}KdvW~@V45m-tCQaK6Y&tJw$&Arx^!S{NOjqT+Sd+aA? z6PUyc4i0QdK$!y1_}EH(uVR@uSyITm08Kd?0o?VcUmteLBNI>VzyJNbYupbCs?Fbp zBZ{}H-`TFV8r9lbw^iM#?QSPQ8QPw-d+K>}1yl{x8)9Y6nK)_pz*1OTPLdbf)s67z z^Rd6=4|gAT%*PL^M~^z~e&{YgS`D9I6hYpMz%<^gdiR&;HFd~M+C4RnJqtAshvD`0 z>iYe9x7KPrVy2$&*-khzBWpl|8O9RKgx+uz1?I?}36Db8?|XeU^OSaO|sg@Kj+12$tRWItsO)evgG*w#@Dsuz`RxC5x%a_~b43CRfp%Y5;#mS@)X)^4ZY?5cbwq zW35%+*=~2+JKN3f`tJ7j-cFL!1#G^~UqcQg%m+w1r1wY@FmXiv2$kZ4d0`Wnk1+cj;QF`!$!o83mU`>5JF^@t(A zu4pgbr<;(Nt+CVG>p)v57@TTwD*9fWUs~QqO0Zqu-fcbUZZ)LScBSCU%tpP4OgjbIkDNdaGXDf`#8`?QWlX=TD@Pd*3Ljf)s;)qP;R?%CNkPrrcHL%+jMJb!&&pI^P^85bSg*I=Esk$ z`r4!Nqx$nECUw`?lbmXO)x0Ws)+VQFNS(htk8ZZ>?RH~#=d34^YGcDpgkEbmYW4MM zt1D?B?72ewRGhj{VOVf$uL()TFy&#p@#*OiUd5?XZNRNZ)vX8hCy5h?tpk{l2wb0J zF@&$Sw;?~_9!nd0DI7*4TQ#4#vG4mI^@pb8g7Xc4C95GIoz+lnbZ$Z$vzjUb>{u1m z1n5G~M2NqEgHcaTR#vq(yRfu^X=K?jgsl)Or!p;keyquMr`qatwwQ(k=cwK@@S<0+ z_e3dGZ^BExCQ7lSnCo?x#8xxVeczYsB~D&ePF-OJRNoRn1!q~ORc+#VdNt;d)RFM? zb8(F)?XBI-olOA3D}s@dYKI9lVg`l4BC^&H;}sM#OxHF;;x6I`oEKyNj@1Slr?m~P zFZf8OFSuN|JHd>nCknq=KpD~|r4p0yOBe=rM1vAW4Z2q$r4ppn3QCq4QueR}1~B2h zG8mZ-OmG{cK`EqBiH%?Am(T{)Wzl6)uexK;0e}9k<)|u!-~81Nrf~ZWMTRy5$FzG! z1VK}z;5v`{e8np-Ac^WdpMm`KSt#9Usv4LX|I0wRc2NuAV?^%z|ddh zf&l06=Kbc}_EG!cR*6M%;-21$&!s*Jo@h6vqB_Y{Q-ANCo4HA149fno#^zUz*f<)E zj^;Qq-vHF(`i``+Osr<&HPe@AUx}mBI8jWU0*whIY{RDcrE4w{Vxf4IUmogXyPEY% zQ6A$&zGn&|0^_NspO09r_zx_WRky({k`jhjGc;A0F$l;w*c2g2kqJ{+Gw38F#rhef z64y#gG+-*nmK#h8rBo4H?ae9HgX}dE4-AqLA^5PQNN5m6T;y+6B@Mi{9RX`eb~*Vj z7G#rxw-Ey+10*p5A*M@tI_bNnDG#hYgdXOU z2qNyjzQGW@zu^1-4MVCho?1!oPcw!H-R5afL^)sZWI?O;)pP49P&+D)9lWf6?--+5 z)ergABd1n>wlSu`+I?&F(@!=*t9wPTmZ*8db}@sgs&_q|*{g`7`g<%;jyC6>J`BbC zI-6HH6vdoe8Q}T#NkyGL>4005%Wj26DK>oE9Z`?8S#;I*h*Fz$Xc*0s9iMEtW;mFE zzdkk(O#I_9?S($L0^q;a#;zLU z5t9Uf7$glpSVIAC_?*Vfb%B`!p=~?Zwd}myB~C#y;>ev`97(!E0T9C#!z;{oH@-Ar zIrvV82qG%yKjT>p;8$b+ZD=*Q@9MYGHUl)UeZ|E;&ky`}bin`b#=sB#2*BUMe=%dg z;W%_GjORo#-vG;>M+3C}+Y6~jBQ*D0bD|D+vjC&3Ofo$-{8@8sC(^3^u~>)mr8`eZ z7FP8XD2M9@c#u-bO|LA2+Z24|hhO2Q<7_byo3iKx_)>oRG<+c>R0Rd!3DyX}DptN*G!!qW7lP#REvC4*!Jy--sPU8#|3oZLM2vZQ`Zr zq}@|3&oiUZhe?>Ud+JSRrdBpYLaN3!B@`))Z)$yaXQQ#%tu^qV->BT>0JEnhjZ4DCcxb+`{lIg)J`EVQU^dUxKNPlsukZP(=6gD-S-Qxspb%gA z2n6j^p&Tga(6?zI!&i~W=MyKZOn&6O&%L^x7fk`545QQY_C!5d;!bfttlA7{Whma0tpN8BGjQ!(k;g{s?33W%mAq+MV zgaIi3b(NALPjb2_1{0X-SGo#;as7}EmC!<$@SjO1A@2)ef`Yy4_ydA%+DK)=niz+^CPfN!U*~! z*Nh-lm^^F1sRuJTTSpMKDYP)>7P9nM+YkDt$75b+nEY`_ahRzv*C)I8*mUR{@Rgv- z*j9q~K4B9O3)6xwTR1@63>{+~AVG~m2TP`i%F_Ho*}$(u+5<-XxBjGT0ALRTJ4Bm_ z+z_La1vNt0we|beoz41oox4!JzTMbq>}I_;E)5;e@m1r6EH9X+EZV8BqoD2cf+)CA^g z7K~#nPxNrQ{nBCQDj2-rmpNhvOmIf8LINDvW7IZj(LZ&vYgAw<_%`C1V}nF}FS$Q; zQJ~)($1arUKl-ZsD4`Asz#pAb-6iv64gK)>*oh(^F(sA?(O6cx@ELiifXA zeOKd$=f}ip9VY%6p1>w`5XnvRzcH{7i>RGwY% zRy;K#Z`{P|&_ru*XQ$q3ck4UVwXHhdCqV^O`6r#zz6CWfkxjk3zPtONfqo=VUUe_M zg@LW-Jm02sv)&52dESDWz-4qdcDJ}Y5!6#z4N2A@Ot!3_Bx^}=VD{ULAi-};vLsId zTEnas>n)CXFi*#y^Hx0e4f_IvIzQq0Ku36fkFx;YN*tc$u^&9!hphK9!a0e2-$f4I z@;wjq^^hcMG-8~)peCu4pUptgwaE7Lhriy^*;`4*Psv#y#EUd{y?l4oSX#cj5}(wX zllWAys>C`XSR)0RnfD4f86*WW9ECIRs+xZ0P{t(iAzH7Vd%pxoA(H?1@8s#~=L!%5 zRv`Hqb@g%FUlnOz@o3cZUjU<@*44-5A-1jP^CfHS<33b}QPO$1x!sHopWE{*d%pc-?ZMttb7P^7Vu@atAGfD!^p!bgb@_3Pm*~Nkn9S3K$4g-tjt=c;XK!QS z$oahe=&94{HT%!EH&!1qvX?R?2XL4|J7){Rlc<*(7dye2!gjs6zT0YdcUz6k#tu)a zQQg95I$R;HMzl+MSgKy?yzmFg9xLmmdZF`@8%oJj?Nr*&{Nx^mn8{134s*<_>_%;^ z`?%WZbZhmsJ#;DKMb$t%uQJg72xAUGf>gYlVTnhCW1yx77H*ss6Z}5x2QNCUOn-8I zNoiAf`SF4(1YS*y;W}%ah00Z$R%0mOC|=_Q+gn}m;Db|JDXyk}!s6eO#UIq4q)I0i z5r=()6<0&QGx<#A0u)%_YXX}i0u%5G>cAxzz}w$z*Sqbu3YaGr=iZIHb(LJjOv$ay zR<(Km;g-sf@bW4QTv}OPEMt^{H}CK6wd)V+^(MsSZ|rpHtw&XLRBF8Zw^3EZ;79zR z`VzN$yIyNlQIDeRhPr5S4Q_4MJFUigf^Xu(RN;d`^&8Bv| z3|R!3Z?)=M^=iA$ypcuvJ3cC^boEhZxDh>S*5>PudLScOU2on3TybpWC1TR7!BQb1A8qV!RLDJc@)8sS>v&cZ9_N3!tIbFuOdb+)OJF z%Z1zs0sw&-U%-8UhRDYim|d6*i=8bGC=f)_gyJ%Pa9o|x3Y?Kzhd)S4tbdu?U1(EQ zTtw5)ti+mccM-F>|3|Doe{`(VHOvdc{eL9~>_^9WVSbe^3bAzV_(^AMKpWn7A|~k5ObRI-bQdV=r75*SXU?zD_)w?O_)n&o4Grs8=ut!8 z9Y>Jv4Xz=cIkM4{@183rzz4SHYNiN(-JT=*Ng;_(6<~4p@ zIg5$NNpdXLJ|xUW_*$WIRK9_;$w ztdv*glPOd*`>EBQ7zDH{*k+ucC+i2zBlD&3G2!uYO3aVlxf58=VtzuotCi>tf+9bkofOp#qG8`uW9*cqo*afMWeV|8xCe=>N=$BNF6ZfV zPHKI&Js|S(L8>qFWXJsBNFX>BHYP{gZl|__jYUo|ImY8AC#IE35OtOb$*G(a!Y#3K znn|RjO#_o}Lh9pliLkskDOMWftIDaONl>`NVp(#NH>T1>fMDebVT6-!ppD?Sriv6HAYYQ@-z0^RBs zO6@<^UUH=_t0PjlvbzbXbh_|0DxHK))D1KnJv=;|8$?5yn?MONDEwmo22M_QU3Pf2O@6l1=Utbs$r`Sle))afh!BF|)W5(=K+ zt;9KdN+lH`lDS|U4MQA-9G&aFG%J;#Wz0 zfu)nIC$jXvJ(*{nr3M?AC`cY+90uq`1`~|$mJ}XBI6nNn(Jcj3 zjrDRFx((=82=p?e1Iq8kK#8pjsNC`oIamgMKQM;ZVK6EL zum9qhfJBht04~WV3YVCxnCc032^kF#QNJT0w&!?<4z+18aA<%dg{fbJft;UwmUNK% zHw2_c`$qyy;cw#7D1^8HB&42AM&ob*-ki?9fJ}%kfT?ds1K*>>$7F5KB7Z~<98+kw z$bR4tk>Em#ws8dU0>&Xgedr8FE+zLnohE7Sb)Y`5G6Z6((=f^aezboy8x9oHapi_J z0rb&+UMBkNq9TZI?0CwXWKHMQ4Vl0%)ODb=dL5mc)G51die%K~l6~$o2b&#+b zK&<~Y`0H1_6*1@`%I%&K&W}O*QXIX!tl@Y zV->h^T=|z@e);8FJS*bWLV^6gz$$E9;METPi^Vz`vv5Wt{V@-6B>su#0-%oLfy*=t ze9_0#!SRUqc@O3643c2`DfWaZsK4f%xO@?hk9x!k84>OGKKGXIuB;{z7YCm>tnznG zhm6zEq=8@g(T~Ier_)UX5{g>@_KW!U@TG5=0&|E?|1cMwE+D5ZO!cmaY>seJyuI73 z?>w%rwLa0Pey{o?>K)Qv@IsBtr)YoEm4)_KR!o?zVhXcs?d2{QEqCiXk6;S2tki@~ z6u>B*S-*k!uY!PdNv%k>k{C0&o)87LPZ9aHm~T9r~@5??Nz?y9>v8R_Q>GUkdWGFkM0l`0+fL zO_BnTx%YZfluy7SqW1jRcPI(?h`#^gl{_i@Y9favGyHzHy0x|YxLfUXs_XZ+>pPup zZTImGWV&M4CnGb6>|VkLhHVJ|{N-vhMn7Isb*;Hj-)lj!8(^*9UEgc9>O1Sq@R&8* zRt$e_dr`P3kilb`KNiKst-kMt$Pz< zq3v~cw;P+SYKOTFura7c;*%7uhp*S_8`Zt7PIs%yvNG|a>ZR9>`Z(}MbZ(6Xu7kB+ z6}7(Wd)yWni2u7iEZW~=(B+F{uNc}Yp^ zE)-zuKsag>Ii``<+0!nb-GZpTk*tWx zUwd(tNxPR6NdC>-o1lrpy4KJ1j)MNZDDXYU3g=*jN_MZJ5L3Pu=cl9<9VK1jnWEX2 z2r|mIkMT^Bl*Z1dJVXreOHfg!gZ4e@MIo?RHn2<-LQ3M4h~)&<*vUv33ccl>ieH`q zN};(Y2bp0v96z!K)Osc*4DeTH_b!5%{aC&Kps7etvZQ#V1lO}_oApB{P3?%I`6r?u@71Uom7FcbN1m^R06BN!M^}QBhaZ!!@F`hw}YKy=^P=xjj$@%r1o%@l|uXW+Y3O*ooh zbiXHRLreoqS=2R0PFG+L8yq$vDYI00Uqi8)y^jec_r3sPd7Pp@9j+_$g(yT`#g$Qz!cqp!okoY6d$5>uqd;ep}g(~;G?8-*f z-mu~2P(0m=WzpjfsqM5$6U?w;+$t_D7)uLtku@@GFBEx^O5*w0PCUOuYINTmyAjt; z`2p(&WW?f1c}1vvL_5jyA@)5>Hac76&~aVThwvVF2~R?}zYm>0F#i?}xHgSW-C-4lz+%7m(Wh^(JW}uJHNaDUssx zU1Rw!Of;`m*YT95LGK5W3e(l4yV&V8`SqyMLuG!!sLU_OJ~S7dcSsvTILD_S=nzfI zf*4saGl=%!co7ZuO^ZUv^N55rLN^RhG2&_lG=!aTJcvTdDm8Qj!>X50)TN}PxcXn<<`speMw zlkWOfwSn2KFG5rDbeepr(cgdj&oYfD{L0fSj!_3;ZnEBaZ|n4GFiKcM9ParKp9MI4 z{wSpl{i{5b74#vFo~BD*2=1MR1k9EE86E*1mv!JrKEFQzaPvLWWx7lry4c}>7DfRz zhe$whqr#yXM5Oa5oZ+tk8GHTV^@ufOY=Y|75^njCn}AmS^&mN|y?d*H`F-rB3(V%?%dl zs?m9(Q3+q}2j;%%nR6~eEKhNfj<6qB@x_eF2t?y2!Wl(N$FS2T{L z)gj$518Ta6z@tM{bn8vCv7$;+g(~J%6q-QS$0r~9MzE(O&Z&$c$RH;JwIV+thfXvgb`Ot>(8TLx zzH-Di!$HqC1DhN;;n;L}5aBerM?lUOYy1&#Eu30tWgMpF$;vTe<&hL-?0=5i9vx|( zFE1?_@P(3!SR|mbjNmFhhaqMTGRQO^ffBP2J~GT9GF>=-0Vau}CD~GF4d~FE9reTK zG3%PsQnqLq`J-+>FfH00(ZKO-rd0t@%3B-`ayY*f_gNwwDVeGS5M301?qUUv&{0zD zEAO#6V_A^rV)IELO1Uq^CB(f1fxfdTR z3dqSGIT|MlrhzY~Ls4}uCI*RCG~IE`D#aCMpN76C#I-Yb%Vb7y7zV4#uBm6yZO%ETMAwDx% z5!44j8Txp!XE1o|Oyq|%0IOnkVa^e#9=ee21<%4&J}P(>(EWgh z1Kd3&cQ-Dd13|ry3{nv;p32j1;Ez4q-`_XLaGy@KS{ssvLnV| z7E}BHQ;(e~LXsy|4r;8o>eWu2bRdi@X>5?4-43aL(r9LoMXOx1tM_tE;@Z7BrD$5^c%TJSOwZ_o2x?y0!FGP*klrJ0cf0>$g7@eag zzzjKgGG>S)JJrO^5XW+=vd#$Gbs(!7tbSrSr^~bWUt+4x2wOix4FGcN<>YB%QCP^6 zi$>O{i)cgI+tsbDlPfr*E+W`z%Y)|Q%4GxpPi!h{d_1zv6WUfs-fT6ttF0&G zLH!B&0H|V&ax(&z*dI3NLyP0q3-KYx_z!=B z|G|HbAuS9FRGQ+Ahgqmlr)pE?4h}~al9T!JhwA&pQh4KG-l!k|LaPJ2y(@;{jfXR8 z`yWDdnZ0_O&*Ovg44HOD(;v=|4=V7dHDv#ohkx|>KNe=lbidDDEMf)fStk4U(hQjn zqv?3OA1u$1>BwR)S7yjGT7!|^^kbL+eBCm5aqJ|Jh zN}}L%SCImh((Dq?fJwX%R_*ZdgMPyn=6UQh4%`G^4IgoJlwzadqv5XM!dRa+V@=>WQ%E8h;55 zL5h6F#dHIN6vvJYB}yf-$#mkRR7&nLA-_o1D^d@npdu4bGj9iuo%;?9@7I0T51`ke z-!tJDk6s$5F)15$Nq5QW*&V$QMBA~~C1D69Rm_-|!~MQS@J zcx7f++;;%lpHMSsM`jRh`(89C8mg!RD?J)?eBX_nQR)>gw6cdq*YTbKP<-|?xq`)! z=}{M-#)C@(#qrx7F96?kJ*~>Fn^az)H35gGPMc}gJM>BEwoZM?b?UVbABf2F& zDk%^jNfN{-T`DuwqJKbx0K$tPE+>E?Rk+v>9J}f3;Hn6eWMMvuUW616iw2or%shUP zBrfbzJjyI^dH`u61fL>5F*Wd01Z22Ro&ErTwipgGi(TCJ{fGiJ&u&%`ZAV)EAvBE; zpPq-HAW)!~X`2w(-?4?wtMpKOis5*e#Xg0cicc{d_^^^Xv`Z}!pu)gEyiZLV`&E)n zu}`Xek*QiaqY3k<%+FS4E2-HO*;NxvG(8i|!kuuilk-w}_?(i`!zVRWtPRJbAArFs z%oTzPq-Khxn3o=uU}vdj;{)^X;g|*hv#`ec67At`aWM$PCOOjcA~Q3HiyZ zk8OxUo9S*eBbT4}$PxjMnxg+K28mCa_KA-M!`LU&iN0+OT)`)AsxNh^1nhjXSbWbk z9~G|bF#2YxG;72^@lpwW`8SItmL~g&7b{7m|MV=GW^P(qSnLP>c(ev*+gVQqaO?{r zsF_C&mD4|rAW)s2$ZC&o_KC@~7^Y@kL`(hkvvr-J1Bd-mmb*_cS@Peh=8BOMp<1EX zM!OwS`Z1|dFsw!mN(xTmSuhqunS<;^>7Y0YD7YdDHc&DgMRs8-S-3@2OpnZr@KucH z5Yo59+9&tvlu8}+c*eVSg}cFNbm2&6T#FLxfM4^@Vv&&i)O&ot-m3E&Z1m(FnP!eu z)1sKQ*XCbtGCG76QxvYaZy^e+_6ooF0f!)_PywuJ&Fuk2lYX6 zNjaPe{zP(L*)mf4P!%D(f#;k<6dd56v^C;a{#xx^K>HNrv@E|FLoS=10=Y@7lftCJ zF%{vyF%5PQ90R)Y{KL}nAhF2B$meflN9pE94mfr|qvkhN% zQQvX<2w0azKD}R{f$>9j8}Jg17{P$^CTmsbtk7!s?xj4dVKo-gMB!{PSN^y6nLR7~ zYCH_|Zf@Vv8lDIKp=$={MSn&7XTrY~qfSeViP zEY)5d5mY=A-$P%Xkv|%{WnN^BqeUQE~ha5imO%h&r?5sOCjeLfcoK5%x?!7X=> zgJwi_+*EN1RU*@?%d5)7Jf<0iErTaYlc%Go-y%3viUz9<0$r6akls_ z-lYX*ujfR==X2~v$nJ8(LvVHeZmYVs*63_M6v;rl&8@x7#tzGKjy;R&(s`j!08ivg z1;{`*Q7Bx2l-!g2H>S52&EfNr2+z54kClMmxCHooi6%bd;S%9DE^u-9Jc@4fPX41J zYXW}b5|^MvDEt_HgZBczagobVq;wd9AHxJDde3?fd|!GGh}jy8N<`?yI-H;UFYCzv zf5^$d=va{d-4XS;K|2|a-N-57ZM)@zOIaA2ee@9v{AZMV6;!t$Hj##IKkRe_*-p_o z(Mg)d`5q_?bKRo*5Z=zf?}Y2KXf8o{PFPDF@mX5FI}aJo=M4ZF&Wn^t1s}0*@L^;8 zW(i_DE{IT?&7e;sgRq-#Q7+v)E1&0Qs`Q)fDdz_KGtpI7#y+2s&z?uhzYb}y3r~JFiyY#{ z%Yn`WULj?>of}$AWe6u5zJc5PbnMFEFcD*q`U86?b*C;&*uD zF4nl96pW8zY~s*AaKK_5{f)rDL^W zkFVVEaryMlq^xR!8tM2TzI;GV(p=EpmAfkje&usPr*S6*Kh4_9*cb(v5JAYPLKd?V zdLniK{OiYu$NrJlr|vt?$L0~_z6_`hZcFS(4g0~KoFB+nG(dj)UxGryfJ}F;BV#HB z&H==u*bjU!DnWEt2tnMUw(UgZFmR%XdJtftH4f8fo)RR9kJk_S{7(h8d1_A!wOGkh z4o8xJs^eBh2UjbVaw@G}4j~7)nK{d38GPUf5k7wVR0MRQ@Gkc!O@*}9L^}M4!w&pP z@@S46#!-E&g&id>7tGYL@P|jGQb6bid&^&(ACguzkVJ}twZajIkXUG(Y>-yH-61SK z4~HcfCh3{hvoS=ha6rsO37Jd4SSp}HKcc);nrbE>Ej?)k)WFTe>_bEwjL=cC0%}9* zR?`gu?xCi^eo}A^_Eq<$@aYxf{PhVZ6O*2=o8tMyiudRMH0>GkOl zJJUO?t5xBA5M5qEZ#9q|-)!yf?bO!y)>wMV+FG~sq=_=)jd-|2({Ulzy{N6Ws&50b zaIm!mhbveRXhRJlaB*pI0pw2207S;C%EbNF@`y2jj`Gc-rD^ac8%gGdN% zy_;-HM7Ps#3xov_>vCarb>Wx>^jq^#X@CzZ97dTzrIxw9-D&cytl4?0z?}M$L-@K3q6F zJWK|}{O@uj^k2wHA@N-)e!EUDFoUDm-Q1|$h1F6~@Kf#Ky&&6&$1VQ?bmS*^X@4{< zneNE(FhoNVSU0q7D2mx8vK#ZY%<^s=`M2n6&FkD1qAA zy|`&S>9c_bj(IO=-aT=w=(&w}NO|~#)pXGba+7jE>g#x52$|SMmM;?Pb`l(8b&Y1I zM3N+gpLX|D-)&79Ae(aKY^lS_v2uRJy?&R2i9oKO?zzq-o8N@T~XkbK^L`kcsVKc@Bf7MGa|zfDKfv%{|MF<^nt z;#K8al;M;Q4-b=68@tQnVpXVQNDiW6TbSMG}Fsla$2I|V=kEOqiE zjKIf|`FuT&tPAgToIONj!4eooYu29QZ~+ z*BqI{#-N#>yk`deQ0?az+J^ru`6(2CFVp_M8Aev0#g3IAiezrJTuw|JKB9PLHuyIF zh+=5mO4{qKMzho1Xl&Ji7?AgD-x|X;YZsR6JyDoB^y0#*6M~P!Y*3Qzo@UxVBtM<~ z;OVIU#nTb(f6;gLzZiM_FRU>9;%WGWWBFga7`k5^`uqF%HUD9Df#{2o6VQ+>l_4{y{tiBbNN524NOXbYRKJZXdia;Un7rAB(lLa+|{RccTaWn8E|7XVBoJ>?~ zh*y3P{cH|+)>qs0YU`7o%`S$H-fL|^$2@tfnyC35#KMr8!3(cH$AgceKOeO6rf8*I z?{peFo9%A1+PSYZB^lle1-NSi?lq+px^`f?&*%}lQHnTZ*VSHQ4)!J=Mu}lJM74+Z zUc&>Q|gGmXn3Q%^A#z!c2jWkduj0DKrl#StyeVDS;;0 zr3cg{hh_kQeMCl%$wJ}w%-JdyZY$SYtSbL8Ruo2uE zWMrxBaPx!AsiA*BM#JFdjhl5>!!=FYbgJ5C+tE9I5d zWP(Huw<(ZTpuWrjdLro%24td%1m5#2OgUPNRE)$zzev0!$7h!5i$B8(z&nXDY$YKC zd;-(4T+Xrr1)e<{`~m5@%)3P5`+w&eLtHGV$wn^DMZ*!0#H;Jo_51a1t%1setKrap zM!|g#gkhn~m>1;uBuX9EMw&gfU2S*jEkUhi+doj+zE~-j%P^3O&CLetiB2rHmo6u% z_GAHauK<<3%ww6xr1jN!aD4yX)6@5xvYaHsB4GUAIwoMeKB(h+x;wYH3x&$bX`f%l z|B;T+Z3sdqwpNh3Hauv8<%AOwli1W9zo5i5BkEa4WJt|$955R*$ku^|Y?kSX7Z6Ov z4=7%s+DNMM-r&OzOX%(AZXy_CGra=InIW+)?PCSTl%^-k(yqH9jGf=j8 zcAUm#D7q}b*bhSu?u(R4zyoUUl#7pJ$kT8Bs$mBC&3NQU@``WfT`EkY(o#^d%c19t zsDp8DZ*D(nKiukyv?)kNhi2fIb`P%bL=_S|_reoh~uoSbs?x!yN>rnqBxl82q1oq7w?We2fSaqmV?8Fn!8(D)lOpt<2xWSag^N@p5e~zP=Hq;p7%0Iu**p)Drm4rv{n6 zL_-%B7Rt-GoltnUmDnFOjoL+T%rfmxpfN?o$u#3sP+xm&H(kPj7A=amJ$(gw0rYILAmrA~TQ>fT=l_0YiY zLzS!8jkvlKJ*XIc5wxhdU|1Bs>WSf~SQu~H4J@n!hs4%Z%JX>p#)gpw2z7;ZYxFJb zq*ZTjJ?ZRbmT4((nUdAgE2SO_Fg4( zGT$lG}DF*gp5eV3d_kvzoepI`2{r;|G#U1N8P zd{Knd0f|e6DYqFyRvl?@o4Q2gH6e+mBI>QIMCgcuj)gSIPTJ@R% zISL!=kQb2%rBPhy3=NBxfk%8$e*%7qXJ=i-u0kVwtusi8YQ_4_BMk3nk1deK`DCC; zBdx&gy@elUWT7} zFKw9$Kv+{I3mN*O|s1AH;Yn=Tx2yo9FN)&;^NRSV# zAea-)D@kEbBCxzCjhJqnDB#OcGA=(eb|L$K_scj8KrRwso)&fzarUJQXb>*!$-ZJ4 zFMg*8f-enHcK14)yN#Vq0^B2M*ISS3t(O8d$c@4mB)b6qTLVyA^_(lRi`b~-vPOLjtjpY^t{BTv-Mja5A0{+_|(?X6BdyCDeto^Yq ziGs&92D!Tv;us_(jK#L;m$vIbA4s#c+hJM(KH+nbSdA_!c_gLPPU7uX=~O-MQSc>O zjkQ*_C9)RWA)SE}DoG&wHY8#M-qEq1eU+YLG20-0mQ*6cb_umD+#!L-iQtFen&>;n zanY(=gc{Q3soZ2_V1cXHXXv{@EXinGA>O*fJjLKwx|c=Q_?m z@oRQE zR|U_D7`WcqXKionhjqN4+SV!R#t#AD+U+bG3mc>u%aj?eOq$R;&bQnIQTI zh{z$rxg2OIpd&wozyL>zBFY9+Dt`pZa6R;cK_rd~p&I(`;-k?D9;=&aZ(0|H5nm3)>$s+BUFKjoE5e9fJ6{9p?Rq1bfJjWMz+PyhI~ z7BKIo*h~grh=KhxV&D~U863M&7^B~1{vc_RcY-7FzZaY2%@s-};R%sQX`hJp=fV-C z_A?q;gYgJV&Y;s-D?CuG^5)K5x1g$hO)v7ja2O@}f|a_S==|KsUezJ{ZwX{q=9fA~ z6kEBz89CvII*B0)%Fr5na9}#V?O4p+1oBN`!vy#!Zig}x8=>%JWbUdM6UyzG73ZBhQKkj(4JIm?)>-*PIj&4Z`Zc z!8$buM%;7lBhQKv`x3@40JOdsTiX63!UP-mO|Y79l?5Sw{`np&0Kaj8n=rOgWQ|y8 z8n{=~mBn;^rQK=XBrfr#F!~^)8#pFz^ zoN~@zjUS#L{nr5f)A{0`3zIX^sX%79QE|L6L|4O;5ef_f$WqC?3Pyq756mIjn#p&R zl@3XdMu(JoBs%m#4j+R38RQ=tLs04zeTn-{d7weRN;D(=v8}&AiknOv%UZrwOk5TA zG?zmqG#b07*o>9XYD_-K9Kb>?zmm4%f>1HaS&Li6+B*^b|H zku@@4>=KUS4%A{}n-`NHEX!5O^LGvW#&SC7#lm?^!})W;|McqwFQ9o6VUXZm%O!Yf zd>$5f1PIU-bQ7>W$yX>B#1~@vbMZ|^1>iR(FTmKp!^p(drO86!>QYP~F4$g}ef7%4 zLIGc~$Q0nToxNFBu7@LP4IskncnBlp&I2&%Df#C7WMW;%CA`7OgzP}jiB3EiQrl^h zHlExlJbTFtMMHA3>;<|F^v_50c|L?|ZWV_QFAe2Y8dSAViQ3X6M+QJ%$9u#YHU11wbq= zN>NrlJw3CH?dfiI_v~UR$!1K+Q4-0vmaes?h@`rTo1>2P!o^ zH}o7UfB*3_XHLnx)e1;otB!HTbwiO}C`XFLMIs1`>_k0<7LLd@#NEHW_#gJo-~7Ls z08&grqG0carWkz;o0A|4ZY(yu6&K!}!y-m7c=c3D$)Jq8l4g^fjyxw!WOyg!2A2TY zN6<5euP89wux*F9F_?5cJz(=f;7FFP@EI{x(5sMQKy%D>n0(Nr#&|tX9p@|)n?$UJ zZM@c|G97~0V5ZL|^b`qh&e9w7#Kdl0oFqx3mO(&@K{IrOlq#@)x-?y`(Syuqn;&#{ zcXd)1#Sn-5&kZg@$YXaqU^OZFb-GDiu|~!^#QTLE?0wmGFt`cn9{BEPEt&z`d4-r- zcEa}frDDeqUBjkJtU@4eEU z7dc;=U$&gcdfbi<Wb;&iEKALMN>RP4QzL!LX%=9b zv>KW{hE5!%ggpmv6d;fKR-_TJX2-dTB?zs-2}+K&tW0cG3ZY~3wf%14tY{iv-9&qD z{-NVu80B%U`Qh3_ho!BS2T*#LfW}ItN^J~#+~hp17h8aU@0uYUwg(c^eM`jom7dzl z7MdtXOU?GwPVJk{o))J?_zn-XqxiZ`z*@N$kmui#q(o?9mfv zdKPs=+u1u5Vo5VvvQ|;VEeaY@#LU?<$HnQ6G(fSvC|>3sC~}w;!}asu(5e{YO4G?q zj=C?Vkq)dE#Z>b(8%r9H&GXiyS-kaO$y-VMOa3|=97?$G!;}V%#9XK2(^@jT;HzYO zqLgAhERo3a)2rXYd7rNE$fSZ4dhphIcq2y0w3etI*XZw{Mx=^`R6>oqWWtybdnOl@ zbWqV7rR?H&PA@eaztoeBb^8N1zGBj`llFDU{!wH< z2w{b7snSq7C>j*oDF%2;Y5gNMR4jj=8!GTlOgNH@uwUOF-9U}jKariDS}evBTbdkRAm~XqboA%(O0Ffl6=e2MSMHBA->&+TUvQ8 z{j)t?C1I_dFBV{zz@h~s0S8`iSbpZz>;W}z5^j)bvIIkm5!vwMLDMO(*|bgDaI_*g zDW%sEw6)5H;o60k5tz22BTmys>1KO7T1^a!S{r+CmzE;g3%yxOJF}hQnz2%8LLQKS zj`-~VX@rs*sx^`LV59bP>C@rH;<9bxY6b(QmR>t#`jjF4yZiX~gtr<|U`XF9hMc}W zo&awop!K%?a5Z$i79VWBE(V(%n_>kXG0J^y%`_UpXs6*HtX0e7c^TIUt<&TcdG-`V z;-Xl6F@H)Xy!t}e$Y`u~N<_4+D6q{?{U*d{W8F@fkYjAqtNf2;G4R(U1M9saSs1>u zupuXm3RbgenP6nT6~{8d)k5SI;OG$^spKeu^Cag)QFFXqqslmPAn$uCR?zG?*xg7D zB~ogtghHSsZ4HcX^?)>yYyC14#~ZO)*FwKcvmUM~XP3&_r7)tYHC13t#gsk8!_(uH zsTw^J;~qxC^0-)n1EEshcz?hqiIl`d{k88j2!bS0k|_AE8#I?dvxF+UCq|;^mMiX; z`yXOiAMb=T;GF)(OtrGS0hSX0Xk2%_BpDgEdB%G@i}B8<8Bc&9dC%yxi?AWk;#}k|Bx>mVlgG5DF$y^dcSIJ*8o3>&4s##2w5${z?aoH5Oj2_@J zjFpF91?+*!yNG}Y{a1Q=$J6I*+ZgtmfY67Eq1A%U6HmsjU$#Rl@Z5rok&8;hMHsNd zMNdn-TP2oJ@DhNMw-=+uPP^_JwiB0qgG?UBVRH)7?KMn)jkbE5HE>)1pFF3^zi4F|wxD z#RW#N`^K@GtD}amuRHL|bgp7D@w|kwt5P1|k z*3=gjgE^^6B3Z2#Gh|nyn89k=cULlvt!ny@u7p=!^P8HQn!=S}Q%cnR`2R;bg>076 zfJE}=dQQi4>`j{W`D%Rl+&2Hz+_94xG3QC+B8nPbeGr;ELfmM%_qkW7Jd| zBOu4TGF8U15YD?mDBnvaJ$Ug|iC3(8ksK?8xYD3y#lpRx|K?&>nhw6aj_Cll_wKdR zy|K)VD-{jWB(7@Y=0)yYmdO2%P<~{U88SB?SVp5@M+ImObPK8@?=niBWszm1%-Yf$ z)iS2>*+NRTSAHaB6*91gw35;4V_gj=pYKUa8}}E-&s3*$pRrPTTv`br3VTggvdB@% zA5K%TJMg%1X*#4VJ?!I9yk4hCquxCT_En@s{JVd+mjk%#neJ?A`-&0pn|d2`-HPrC zYDmTDPL$$MtT!RObfFW+te+l7jsbC;UiYe&xIHE9R4UG*`{{{80TR4&%^aDVJ&{q- zq$au&7424;<$Pm{y3h2tmBo+jTvaV{M*DTi=F$DWv(e;l$j3963#*x%fCo?3aFi>uH* zecgovZM9;NOu|@!PI#S0`*s{Vee%SaqbH6?Z)}?`2wp0r``Tm+beB?n74n3-6TU0B zn~8-v^1~I^t7A3}1+ZPWBq@qc-IAojiGWU>oImsE>7(>hZ5F8KOu6k5qamej<*>^aTb!f&;NW7}`ir54AQhE;{ zhFNT+_(Iku!J!qaUZ5lV+}xc#evM>pO6INCW_F?p+W3_d2gKRN4v3%38o&OFoYxW3 zC3Q)WD_fDqO64hRPK;flqvWwtxumu% zayp|5G{!Ht>U+t+e(tsDQ?R^ZLN>yFwZGT2aFFTqhM^TNX!wB@hG5hT&)|KH`W4el zu?Haf8g+f{wKMeER-%qxUcUPpbi`B&q9kA`*WM|h`uLP~_xY2jkDNMvbbcOpvPoaJ z;sO=jOKh_2WHvd+71{JjKr-9SiQ04&TxE@NmMpUAvQe%jtmBL|V-oNi>r4VZCN%dP ztFl5tT6b`g4A&0x>#YjD(`ni6LGn4b;LSj!>>)O9w@@nx17kdQOn>7SZZ zCE~K1mPnG_Li{C?arb&L0-=O)4$a-#z)R$cd!zO7s;Rms!6o=3VHkMrnv4d;VnQ&aWo@kz&fraFDLdZbe^#}7BH z!zaTh>q`#zTYmH0%<0*gBZrb+h0#Lkfx0*NyWp>rd_pSdNlCH-fUn#Al-GPMiv(WF z0_SpanCySXsMqaFJqB+r)0~zmf5K=l1&^(iFTUZ)#>uhcb0-nQ51INJKrPM${u!*YpiH>R^$ntu&Wa0SaXr4g{#K;GY| zV|Nsc&nWdy@_-7zhXNSGv4V(SycnAfZxkb)9*J|VDB+%T3DzaL>B@vaw+e&bowxKiY6MZI_-K!I8Sb3MOeF?5RD4P!+ig=V&d4H$ys(+Tj4*2mc3FQ?Ci;)E&Y$%ppy1bC|r zC)I{ z)4JHrUZmAF#v~z-xW&aTC`PmS0TS2npdgDpTy_Vd6$SQQ(U>mvD#zSAW*IkXtlJk)FVafaPcHg zZlnjXuDq#1E}dPBVO`locse9b-)iWc`wxW;&7AHX?YVY*_jGh;Cp! zTxvSrif~1%^Vw0yzGMe6OQl#y7C+jsbT8{V4`t3$9&){fPG|*~G(B9?do{sxviJnk zZ3MMM*BQD>A>TzXaGikj3*@jPlVM8JIHIZTd85(5 zf-0Rq5uOfGB(5#FYi*ueojs*3w2Q3po~Vx*gc+iVt_inRmWID9`YTUOPfXPKQy#Ef zPh?+stq=p!qs}F=dvQZ#cV*uIu}r>SxCO*JCP~A$?-6#e2SftA;{@s=0jyXlJq+Kb1Q3|h za1%ujNyI&r7}C_BdpvTjDAT%_NOmV<%=Sae#3aNro2?y;u^eNp%=jPPSmePbq3w*Z z>lhpA!$lFfo!F=`j0Xzc5m--mtS~CztlW*NRNu0K1wZh7FEkvKJm%^} zba`YzbTcaBtpgmW{_@(|+D)Q*yl)~tx;%*RZR|2#h;c)l%X4gVb)gk_9Ur;-7-P4I z+<3!tFMtOqeR{=6EGniVZe@(Et*x=T$gG30%owY)xyqgVbR)Y1tr=i!XbreVGXWLb zgCDozA>jl;uv-`clYcj7gk>}oXcSO}1~v`jH~tQ5Z}=WY6QOUSfBLpDHuNkyX9_S9 zDUhjtaDYo7Mqoh`mAx>;7{h2_MCM`zb%4IUDC)rbi)^lPkg<1yIxgp^)i*FU_@gaI zdU+^kq19CE9U!;c85?=1MqB^$?XZ>KOMcnr?4`ha%5ofU1Mv zQKBmkTx6v4+&WjeZ|(BP?$T(`8TCES8FeG_5SCfOmUT)fZ>WT=>y%L0Pzl@CDPb&K z!XRU;;g`Q`NcOn#rNN>t*t#GzSk)IT;-dLy};Nv==oKm@ozJh`x;}puQN7u8T5S_wv=r+_O?pm zxgHdZl@^Y>tebfdU_d(Hoh)MbP+&J&R^f@66L6urelfTM2*sc!%Br))F$Z&`Q`HiN_Z;ZF6Mc&WuVr(*pO#>j2>lu3|qy+oxwY9%p z8)TPhsNGHiaJv}%h&mw%50;=%;Q!QUDSyA&2?EQFoYg$`zO}4I{`jhI1%-3@WjlyE zhLb<{=uH0pz*?^5OAkB%D!aB4h8P>^FI}pRRmTSTXL-Clz6ERl>($)H*vQRuwi$Rh zF`qx|1-{2mVC-USa0g$$P){QJDjj&+= zS|?V=cpGDAanr(b7mZ{c%K;a8y;g~PIBYDuFbSA?NAmiqZvltj?v=-8M-&~B1^FRU^42Wu?J z(A&DurL$srqv)DFa#Ua|gP}K9N{p;>ir_LkOoyO1u681savzySS@{RF!wiE(LhAMF zNb1AzFf~>y;a?Vh&WRD>@R8!_lXLmJM9gR@&naosnMwSwS3DX%I2Se}%#hK#0Rd-^ zh7EK#jGDE6!;aYD5^Wpcv^I_iRH^Dn2Sx% zRSh7Z9Iw-mNzfv*9T<@nn$4CBy$+%Lv{x})4Y8#K_2X~1_TJ6rDnHFJ_E$N^ev)G& z6shw0mg#sc+Z7q8(1sPcR#XVB2=~Z^vd{-a8oVFiX4SzP86yKYPOJ>xz!)s6gS#1{ z)d&0r=#53w=leWmEhv&gxr^!v8IBbQEquZA3GXT%G^oX+7}$>9Bl6?@95bx8W%s0L4QqSK@(?W`|3{xh7V0AY1Q*nNlp8Jx9ht#-87Xa4Z*Heu1$! zFvk8ZW9(Cmu{ZOSIg?-TPWX962)}0-WA`z}ex5P*9AoSqjIj!1>|Knpf6Z9#eT=c+ zV2r_LdW_1sOy^Ed!5+%k;E~;oy<3peLyQgn90~KwLjyA+@=?YH|7Ztevm)}h7#rI2 zxCnew1in$cKMNZ2L~*x?_g&(BH^zuQrf6~qjtOYAxL3UQiT5S(ejAE=i}-OrvTtSV zt>X7TLgeSjzRLgpz4rZCknI32+YB4^U&W7K!{gW0q~q=Qxr&EN*Cy0C#B3oE1{m1xO$HP!zr}6U%oH4eac1Ll&YoS!Z zfrrsH7PumNsYbJ*<48A$$0K;W9*>7j?4^SUnMOhGx&=)k-6S3pcvSJ&kH^p8 z@c>sRRfI>cQZX`umKBkfCFjk>y5pHk zn6cgpj1eaGs4tQ~&-Gm;Z?H}B2D=h(48N+pG1PxIC|OGC|1Dg>k}R<$Fxu-d#DD$? z#^jz06RSZT25rh2;G6RYi!PwTKhCD5t7RP0JsBa>DK=&KS2(A2}rh zf4XCJ;`p2O`lZ0}+R_wrPb&Nnk z2<^~rwS7PEF0B?@mTLuuVhPHpBB=xkBd`%iwVR5pp^(`=wn``+5Uk6$`PdCOAc>S> zi*;chvt+42kR}gA1*0KU}zg=WI1Z?Br8Mn+g7+p+u&p% zig1m{Z~Kbds0iwzt|Bmpbgif;wxbqs>541~azVz$vn47YIRZr==u8Az^{9}T_oC-y zMAOD~MY3$PU&gpG;{j3x+kP~W%8`g_8*VEWRY0=JrInTl4~!LAxrEpDd%%kbUImKK zw~;~cWNh-nhB*lWAlOVc4M5o|jDxor2{?fgMXsiQeT)j^P%UBgYMwC4N12TzRr@QjQB9U~LpX)i+ooFDlKC4p*0 zSZsVj$NC6M+E*Ypf@-ntJ7F;hm;It|#G@Ccy+O4YcpXTdBB%UfsE_`jBQ1#+`pu#d z#1U4ZUfMW96mB0-n?C_OM%u3^0c5AU7Pm;4L3JkZU3Q0lQskeO6pkyU?BmohP zg(;}xYNGm{%w*Oj9Pdjd9m!1UV4l*QI0c@lKDMf5_eE3h3k(<biK!H-eY+jD6KYS3Tp&=f{^DP}CK zGvmWJ9z3SC#q@kNv_fmrqMC*q8KH^=s|3|ztL+yqda>~j;zP?6Yd0ypr-#TC9OyAA zc<{y_-aE+r&G!_ix=Ju$A;M-EktJPgVEc(aNYM*Lr+Od-HD05M4)KNL1c?U+r?kJQJwkf1&yQbIHlq;&< zXe>91eqc52OR{>xGKGsh?lJ;%@4#z&syYlAp=&pr@wf#DLMw<&r6AFU$#y+lG=g}< z#Q+qx>rg5cs8CMBc3sl^?@-D4F)~%bok!Cd2JsSb*<;W9WF% zo3I;TJDIE^due{|5HEd!fAe`(F3<(xLEK5d)bJr#NbUJd*)JTHxpbR zhFt?B6yc~DkE6gSes}5P=$$Aqnm7k246_p107XS{JC(u|Se@c*v%sevkr$-$@6Aj@ zN=8(OthP_rX35%Mxa}@6FjjizkT4`b2&2F<+NxAYgYHrj8oR=PZ5D**B?%JMRDj1H3wK~Wlf%UvWqMv@VB!JjLUuK|FOOO|4qYN&R(yd95s;PDH1{4+eTF&U&v zuBzH(wc3+$yhg)N!wxhX9!0FI6iGN0jkpUTLgI+z$`;X%%9N19)blHqf@y$EWItdi z!yn$XPX1~1!=LemoE$_k`XK)>nEXhJi zqE4z*l3fw?gpp>g1O3|KvhAWdQ|kS!1fn)dlmXsL>i4{D~NE5pvnpbOT{jP zQP45z{yAB+gtU%je#3ROtQtIA?Mh@ad^m-}P0NYqfd(BfFp81q$KxLQhC=y#R22jQ zpm5iU?3Dcpg+L>>I%-k_-GRbe$|{0RQ7*N`#aO5fQsgm+ckzB~>s%#In?Po0aR>s)dNR?v{qeJMlq3a&TDKk2N zg0^kdt^kiN|R?uz2{$q|vCBs@8a=Y#I|& zC3DKEPMVfkpB|r>XqKwY@k(=gyjpG4r^@w;HCb(#W7X+O#TXl_Pg%x9Q0xTO-dcXI(QZtP?>&GhE*{9!K&}sZnU?Sf1@~YySHe- zXtUCyv5#LU@+M@b49j}TQ!{6dAH;TqWUBLCfD`RU>;Ux_5&1S=e_$Dr)j(*aRGBE0 zCJL45Gv!jPT&aysk4{fjC#S2^la)7caJ>*I$zMGW2s|%pB2d8Ju$#>VyMYh|{i{UM z$reScKH-uKdLcDv_-*srg759x_q#9{p5g(-cQiWUAn=XGN~^#Pxh+qSJ+|)di`p^9 z3#HN0Xt_`-jg1$m??xjd7;Qa6n@6w;zl}os@kO}7sv4x%NUjJa@HW|XwRAxT7#q2% zNXx;(^FL?Ya5qjI6$7J}8 z2Kyhu2*gA1^?5x}ASc$*i=pS@)LdSJt>uYW0VO2@s5=u9g@8tym1K7F>X=7RvFx=My=Cn51@rzMm!arHXG{p2av} z#dzm5iMb474~Ql~C;wUT{ZR^sOVGY|%bZH(DgWA+7guuMKj~7T0d6i8$^~XK`~q)AS+Dr*Kxb z54vZg)3CY>SWx3SzU#NGhOI2v&@ohC*X#&7L|}!Uvup)LqoJ?Hkkv^>HN9X3OLqZr z#YPq=piN+nglscvX$_=7p$(EMDjaGO!o_+4r+R@$0#b`?8)kxUwW!4AOb~$Cj*J6lC=%9Kv%&?xRMwmxIEXY zc&?gvV&h_}6k2jhmLt25V>(AvSjP2Rw_77k?c1SSpX$v5Yf{fpMuz`Mj#t#YAh_SI`NQzg%aer8#{o5g=51vQyh2P*=DbRtk-Jyqkl} zSS!gea1e$0exdGpQ3wa-1voO1Nb16`udlAb0IE<3GrZR|P@)THi!tBKjP}H4asVov zyo8G9L3i3JvV;U^g-eN~mNv+>9(oVv<|=Px?1esdGt<Mf=T6B#&S!H<(^|K_cq2bGkx;s_Wm za7!Y?r?hXlBaz|oLnFW8zC?b{Xy0&UBEzA6%I{h2`*H0X#srz>g!cV@?fZGg*xjP- zAJD>aEJ)`4koNsy?fZANZz%W@Z@;H~e_Z?ieeL@b+V>~n*F(VYq85(5@-qC>TKG%a z_siP%A8Oy9V~jQo;P3NV8^55b@Nj7)+xR6$_v+E#m$iDo!WaxX^!HV*eC*c;9pLY4 zTKcauMl^xHZ)oYisipsxmj2sfzd!!Iqox0@mi~{m^xxCce_u-v|0fcjA8P6UL`(mt zTKe+?=r206uZVrH`~QN-aW*;zmC`?m@B;{+N|XcVQA6eK@Pi2d zgYI%>5dI><4<^ca6ybl=9ey0)U+fN_Mfi`p%YPi<{~h78iSpqTXK123{RxCmA^eF% z`u8K;r1W>|g!DYZErh>+D~v_uM6M4Y_MYxqK8SF1+|UOS=|6<g3>;oi24Mg-X(H< z9G9fPic3WDNksjki24NKXDpHTMI`u>%)FmM)Srr|7b$Ngk@wR`0FyMKB@y)!qM+a) z>eGp+ml5@D(U4@WKSb0oiKv(1(<$!5uQH;x7?Qq9vacbxRym>0d^QUlu98#H+`hNvis< zAi;a|1lw%a??ef-d=-g)MJ7ss@Jcrbl_UsX(?NKJgRox*;p;jGlwd&EY7#(vLkHrO z1Q6fs24XA;#J6-HzR7{WC6Eda-`0Vk1pQtoN+aSsIt<@T!0=r}{U?E=Pi6JRA0x$| zi4@<>fZ=;c@aKAh{xC3IBiR|>N2+Q3D>P;N;XT9;QV(r~rYsiVz6yH}iBP8E8~~5x4%r2#tl< z(N0*fj4&!xMsczC=!)&wUNlOFb76Acb)Ew9XXo=rjgU;}sUYaTSc>F1v6X^syo|An z90+<}H@3W8(ca*L2$u}8ZR4qnWWi&3n=(-Hx+_z_q{;b)F}zQ<0Ho$_>CVafF( z&;_-MW(gWR`g&z*Pa|z~rM+AW+J0v_@5H=8G=TJd%sUZA(?&f)&T0+EHk91}IPm@M z9Y!!71lF<@gce_$puL1D8<5HOdZp*cm`?J^Nylxd`Z3+*p=66|7HGG%gzkR\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=/awg-proxy-go/config-client.json dst=/app/conf\ + ig.json list=awgcfg-client\ + \n\ + \n:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-amd\ + 64.tar.gz\"\ + \n/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-0034\ + -amd64.tar.gz\" dst-path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\" interface=a\ + wg-proxy-go-client hostname=awg-proxy-go-client root-dir=ram/awg-proxy-cli\ + ent logging=yes start-on-boot=yes workdir=/ name=\"awg-proxy-go-client\" m\ + ountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n /container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container +# start failed: layer /sata1/docker/layers/8223c70c099e85b0601ab69a5ae313476e545b84975ac4116265bfe4adfbe612/layer missing, need repull +add file=tmp/awgproxy-0.0.1-0034-amd64.tar.gz hostname=awg-proxy-go-client \ + interface=*106 layer-dir=/sata1/docker/layers logging=yes mountlists=\ + awgcfg-client name=awg-proxy-go-client root-dir=/ram/awg-proxy-client \ + start-on-boot=yes workdir=/ +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container mounts +add dst=/app/config.json list=awgcfg-client src=\ + /awg-proxy-go/config-client.json +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=2G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroMaster-1 +add bridge=Bridge-LAN interface=*105 +add bridge=Bridge-LAN interface=5G-MikroGig-1 +add bridge=*105 interface=*106 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=192.168.100.1/24 interface=*105 network=192.168.100.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260629/20260629142001-Diff-Config.rsc b/MikroNUC/history/20260629/20260629142001-Diff-Config.rsc new file mode 100644 index 0000000..8882c91 --- /dev/null +++ b/MikroNUC/history/20260629/20260629142001-Diff-Config.rsc @@ -0,0 +1,133 @@ +24a25,26 +> add name=br-awg +> add name=docker port-cost-mode=short +26a29,36 +> /interface veth +> add address=192.168.100.3/24 container-mac-address=5E:AB:F0:EA:47:2D dhcp=no \ +> gateway=192.168.100.1 gateway6="" mac-address=5E:AB:F0:EA:47:2C name=\ +> awg-proxy-go-client +> add address=10.9.9.2/24 container-mac-address=70:35:5E:FC:C3:B8 dhcp=no \ +> gateway=10.9.9.1 gateway6="" mac-address=70:35:5E:FC:C3:B7 name=veth-awg +> /interface wireguard +> add listen-port=52175 mtu=1420 name=wg-awg-client +31a42,47 +> /container +> # start failed: layer /sata1/8223c70c099e85b0601ab69a5ae313476e545b84975ac4116265bfe4adfbe612/layer missing, need repull +> add file=tmp/awgproxy-0.0.1-0034-amd64.tar.gz hostname=awg-proxy-go-client \ +> interface=awg-proxy-go-client layer-dir=/sata1 logging=yes mountlists=\ +> awgcfg-client name=awg-proxy-go-client root-dir=/ram/awg-proxy-client \ +> start-on-boot=yes workdir=/ +4687c4703,4706 +< \n:put \"Add ram disk tmpfs\"\ +--- +> \n:put \"C\D0\BE\D0\B7\D0\B4\D0\B0\D0\B5\D0\BC \D0\B4\D0\B8\D1\81\D0\BA \ +> \D0\B2 \D0\BE\D0\BF\D0\B5\D1\80\D0\B0\D1\82\D0\B8\D0\B2\D0\BA\D0\B5 \D0\B4\ +> \D0\BB\D1\8F \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D0\BE\ +> \D0\B2\"\ +4690c4709 +< \n:put \"veth and network:\"\ +--- +> \n:put \"veth \D0\B8 \D1\81\D0\B5\D1\82\D1\8C:\"\ +4703,4704c4722,4723 +< \n:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-amd\ +< 64.tar.gz\"\ +--- +> \n:put \"Download image, and save him to sata1/tmp/awgproxy0033-amd64.tar.\ +> gz\"\ +4717c4736,4742 +< \n:put \"Add user:\"\ +--- +> \n:put \"\D0\94\D0\BE\D0\B1\D0\B0\D0\B2\D0\BB\D1\8F\D0\B5\D0\BC \D0\BF\D0\ +> \BE\D0\BB\D1\8C\D0\B7\D0\BE\D0\B2\D0\B0\D1\82\D0\B5\D0\BB\D1\8F \D1\81 \D0\ +> \BF\D1\80\D0\B0\D0\B2\D0\B0\D0\BC\D0\B8 \D0\BD\D0\B0 \D1\87\D1\82\D0\B5\D0\ +> \BD\D0\B8\D0\B5 \D0\B8 \D0\B7\D0\B0\D0\BF\D0\B8\D1\81\D1\8C, \D0\BE\D0\B3\ +> \D1\80\D0\B0\D0\BD\D0\B8\D1\87\D0\B8\D0\B2\D0\B0\D0\B5\D0\BC \D0\B4\D0\BE\ +> \D1\81\D1\82\D1\83\D0\BF \D0\BF\D0\BE ip \D0\BA\D0\BE\D0\BD\D1\82\D0\B5\D0\ +> \B9\D0\BD\D0\B5\D1\80\D0\B0:\"\ +4721c4746,4749 +< \n:put \"Add forwarding port web-ui\"\ +--- +> \n:put \"\D0\94\D0\BE\D0\B1\D0\B0\D0\B2\D0\BB\D1\8F\D0\B5\D0\BC \D0\BF\D1\ +> \80\D0\BE\D0\B1\D1\80\D0\BE\D1\81 \D0\BF\D0\BE\D1\80\D1\82\D0\B0 \D0\B2\D0\ +> \B5\D0\B1-\D0\BC\D0\BE\D1\80\D0\B4\D1\8B \D0\BA \D0\BA\D0\BE\D0\BD\D1\82\ +> \D0\B5\D0\B9\D0\BD\D0\B5\D1\80\D1\83\"\ +4725c4753,4757 +< \n:put \"Add native WireGuard-server wg-awg, add address.\"\ +--- +> \n:put \"\D0\9D\D0\B0 \D1\80\D0\BE\D1\83\D1\82\D0\B5\D1\80\D0\B5 \D0\BF\D0\ +> \BE\D0\B4\D0\BD\D1\8F\D1\82\D1\8C \D0\BD\D0\B0\D1\82\D0\B8\D0\B2\D0\BD\D1\ +> \8B\D0\B9 WireGuard-\D1\81\D0\B5\D1\80\D0\B2\D0\B5\D1\80 wg-awg, \D0\BD\D0\ +> \B0\D1\81\D1\82\D1\80\D0\BE\D0\B8\D1\82\D1\8C \D0\B5\D0\BC\D1\83 \D0\B0\D0\ +> \B4\D1\80\D0\B5\D1\81.\"\ +4728a4761,4770 +> \n:put \"\D0\9F\D1\80\D0\BE\D0\B2\D0\B5\D1\80\D0\B8\D1\82\D1\8C \D0\B4\D0\ +> \BE\D1\81\D1\82\D1\83\D0\BF \D0\BA \D1\80\D0\BE\D1\83\D1\82\D0\B5\D1\80\D1\ +> \83 \D0\BF\D0\BE api: \D0\B2\D0\BA\D0\BB\D1\8E\D1\87\D0\B8\D1\82\D1\8C /ip\ +> /service www-ssl (HTTPS, \D0\BF\D0\BE\D1\80\D1\82 443) \D0\B8\D0\BB\D0\B8 \ +> www (HTTP, \D0\BF\D0\BE\D1\80\D1\82 80).\"\ +> \n:put \"\D0\B7\D0\B0\D0\B9\D1\82\D0\B8 \D0\B2 \D0\B2\D0\B5\D0\B1 \D0\BF\ +> \D0\B0\D0\BD\D0\B5\D0\BB\D1\8C \D1\83\D0\BF\D1\80\D0\B0\D0\B2\D0\BB\D0\B5\ +> \D0\BD\D0\B8\D1\8F \D0\B8 \D0\BD\D0\B0\D1\81\D1\82\D1\80\D0\BE\D0\B8\D1\82\ +> \D1\8C \D0\BF\D1\80\D0\BE\D0\BA\D1\81\D0\B8 \D0\BF\D0\BE http://your-route\ +> -address:8088/\"\ +4803,4808d4844 +< /container +< # start failed: layer /sata1/docker/layers/8223c70c099e85b0601ab69a5ae313476e545b84975ac4116265bfe4adfbe612/layer missing, need repull +< add file=tmp/awgproxy-0.0.1-0034-amd64.tar.gz hostname=awg-proxy-go-client \ +< interface=*106 layer-dir=/sata1/docker/layers logging=yes mountlists=\ +< awgcfg-client name=awg-proxy-go-client root-dir=/ram/awg-proxy-client \ +< start-on-boot=yes workdir=/ +4812a4849,4853 +> /container envs +> add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443 +> add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q +> add key=WEB_PASS list=awgui-env value=zoomzoomrulezz +> add key=WEB_USER list=awgui-env value=vados +4813a4855 +> add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +4815c4857 +< /awg-proxy-go/config-client.json +--- +> /sata1/awg-proxy-go/config-client.json +4819a4862 +> add bridge=Bridge-LAN interface=2G-MikroGig-1 +4821,4822d4863 +< add bridge=Bridge-LAN interface=5G-MikroMaster-1 +< add bridge=Bridge-LAN interface=*105 +4824c4865,4867 +< add bridge=*105 interface=*106 +--- +> add bridge=Bridge-LAN interface=5G-MikroMaster-1 +> add bridge=br-awg interface=veth-awg +> add bridge=docker interface=awg-proxy-go-client +4835a4879,4882 +> /interface wireguard peers +> add allowed-address=0.0.0.0/0 endpoint-address=172.19.77.106 endpoint-port=\ +> 51820 interface=*F3 name=peer19 persistent-keepalive=10s public-key=\ +> "o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +4838c4885,4887 +< add address=192.168.100.1/24 interface=*105 network=192.168.100.0 +--- +> add address=10.9.9.1/24 interface=br-awg network=10.9.9.0 +> add address=192.168.100.1/24 interface=docker network=192.168.100.0 +> add address=172.17.0.1/24 interface=wg-awg-client network=172.17.0.0 +4848a4898,4916 +> /ip firewall nat +> add action=masquerade chain=srcnat src-address=172.19.77.104/30 +> add action=masquerade chain=srcnat src-address=10.9.9.0/24 +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +> add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ +> to-addresses=10.9.9.2 to-ports=55055 +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +> add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ +> tcp to-addresses=10.9.9.2 to-ports=443 +> add action=masquerade chain=srcnat src-address=10.9.9.0/24 +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +> add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ +> to-addresses=10.9.9.2 to-ports=55055 +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +> add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ +> tcp to-addresses=10.9.9.2 to-ports=443 +> # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +> add action=dst-nat chain=dstnat dst-port=8089 in-interface=ether1 protocol=\ +> tcp to-addresses=192.168.100.3 to-ports=8088 -- 2.52.0