From 3e80fce4b3d82795d89d297374f8e7b7a3a2cfe3 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 30 Jun 2026 23:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 30 23:20:03. --- .../20260630/20260630230002-Config.rsc | 3692 ++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 4 + .../20260630/20260630232001-Binary.backup | Bin 0 -> 366004 bytes MikroNUC/20260630/20260630232001-Config.rsc | 4981 +++++++++++++++++ .../20260630/20260630232001-Diff-Config.rsc | 50 + 5 files changed, 8727 insertions(+) create mode 100644 MikroMaster/20260630/20260630230002-Config.rsc create mode 100644 MikroMaster/tmp/Diff-Config.rsc create mode 100644 MikroNUC/20260630/20260630232001-Binary.backup create mode 100644 MikroNUC/20260630/20260630232001-Config.rsc create mode 100644 MikroNUC/history/20260630/20260630232001-Diff-Config.rsc diff --git a/MikroMaster/20260630/20260630230002-Config.rsc b/MikroMaster/20260630/20260630230002-Config.rsc new file mode 100644 index 0000000..aa82f14 --- /dev/null +++ b/MikroMaster/20260630/20260630230002-Config.rsc @@ -0,0 +1,3692 @@ +# 2026-06-30 23:00:08 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2442/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5260/20-Ceee/ac/DP(18dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/727/203f86a6\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:05 29.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc new file mode 100644 index 0000000..604a75f --- /dev/null +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -0,0 +1,4 @@ +2681c2681 +< doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ +--- +> doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ diff --git a/MikroNUC/20260630/20260630232001-Binary.backup b/MikroNUC/20260630/20260630232001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..1ff0c7bc18537535d36c3f4d04d20ee2f7a6c1e9 GIT binary patch literal 366004 zcmeEv2UrtJ7xrutAfY$KilGUXz@{fEN=K9?%`T=wqy&=yq9}+B8)EOh_uj#B?Y&{| zy<_i6{^x8qfQnx4|J?h1_y0fl(cP0}X7#oV7|3u?tI;OaXtQdxJ3&WqFoYNwIzR zj$omJ4uzUPG6zEyHR?>ADm}?3Q<{|FBU2_>l67rCJ{YboPz1*cRbUQ~51xTFL={b( zs@;Ugn8_7NNoK09I&DGLPOivO$rReQWZ`LK;S_|>7m{vVjRt9N1BoMq8es_SB-1eA zK1okAK`0GHaFP**5j#;~+R7z4G0lPSVnD5+{X!kYL+a6m+Igwdh=M^wbX zoM?!F)utf^szXBzle#oSZ;l~Eqan7b;V}=XmE@Od52L`tFbcxxYF8SvL>T?EUazlw zq^UxetkAG+5$0kq6UZfEzL3un3dB+tk0%k~2y?Mh;w^;y7JPXNwxR`J*+Rr))OZ&- z9~8l{q@hBDUQ-cm$Qs>%=9hE;YmI&@8_za=!jPXPvvU#+v52WV9CBn2znKa!3xuK`#Drva*% zgFt6s!w^Cv5JDpnLZc8uV-P~c2q6VRSTaJG3L(@BLAOSj8X=T{5Hdp*L|a3f_eBWx zM+h5$5Xy(K4=NxZL6;!#?aN)kd0Q(I754sb68G*K%2Oow~}5$X+h zG>}vaCmlizc_u>iVg*832+?QA5Xwe~UWOyo2O;_cDndC3(fO8S-|7e1a-o!g2oXwW z5ZoC|{uqJ~BY!AD3=<`)97eVXxj<)jad7tvi;N473GojMZqmZtDdkg1*8LQJzu}(Ij6Dv%jQD%BiRcC4%$BaCt;UP0S-WWbxRu zDwVUX8vCI8fc=mfR2(Ba>1)mnea;+JU}i9|fzxOcgdS57y$B~7&!u^!zdAiRCN?u9 zOcRn3**;Fo@5JSV>10_UnNjQ%Rl9gqQim>5F~4(au%qXLG9M(S?3(oh5kjHgtq z&}12{&bJBRzAR0Wu2M>53YjtqOeEL^Fcxrt0dXa1FfNTrOGPmlMWUHV<6!8Ygi&-w z5gf>A99xhA>?kp~i4M z{l6&&9$8t89o`3LR~7@~rLq*dv6PnI6aaie0hYjrg}YbVsMxqj|A^pfS(DXTUAiPq z0nL-7QDj%Q)lQe)KHc3NW1tblbg(Pi;A;hcV0|P~6Xctgn=@kqpgGa+yG`O9SadecT6NRZlWYlcYrkd~@WVo78~Cx^y{V;p&f@dj234rq8I4GnKh z0}Vf$Ommw8_X&WC07aQ21dqS~LE0k(A|@<}8L&V{hz<>Eg%E>kO%75U_=_D_5-?oI z5l%2hQ7xcc;6#BFbQ-WpwGncmSeY}xvVeJ^rmB-FJCbRdB2BHyDgH+|!oKDR`z4NO za+NmapW%n{H9wSJ<3}M&R{t|CM*W%}>M!wQs!^n=b&AKJJQczVMD8I%$lpp7Taa>~_>W}jP@89O3z_6rM z8FtejU?NsUtK^%2owYSHz0BhDUd27OTbK5sFISUY7JASPFJdu zGBpy=g3M%zmMKe?q$erl&6ydg3W-+1)F`w%iAKlNB`cVQ87)(l&QxpU3Jp`IW=b+L zQgeturYo|UT7?cK*4l0eVRD2(Z-dUpY!M>5umeJvBSN6lK!IU(5W?yilsr0y5ax^! z)(9aC;0?f?CJ13o5yDuYf(d(ykeHa9Bh(Th1Zo>R2dxo8Z4g3!2x0yRVPISUue3u5 zwMU5XBt#>G;b1V>2r-=b2+^qsQ3Ry=6(Yni6M^6f^Uwt$I-ZG8SMr(+e^HTWsTV-} z6!<|y2qqWuG*T(UBm*X)YJ})_Jc!8*!w+U0&M?`ap0F{vFHRCy8aicz3`Y7jX0W+% zC43y`23492(<;+J41cg5U;r58)f^%E77IdE(4#{D;T!&Lg%G{xBZR=fAY_Zcz}SI- zK~8Y03tSz7Q+{*QtY0LrCq1&~Zq80ur7i@*@fpWOo=LMyn%m#}=WZaAiUl zHRNdq$(zF|1|CQr9jej6)##vVbYL|)pc)-T7&b|IM74Y2)#$KlblYmQS2fzR8tq<< zcB@8PlP;UynTkw>E+<2w?L&^_IMO2n%A-3;!^kqypdfmZ_W}KNBk7NNy5bGRD_DD26g04Mc7y>!X{7= z8jB%@$v6zrADJNZ2GG}A3^6$GfO?N1`bjeai!-nfaOWeOK4FMq{uwjO4!)4r3Jfvw z^>FG;K@3hQ#n6p*P!N62Pz>#)AbOz#Lc1x3Y%Wwp2RXY^4S#o|8vYJYZAuG-JgA0r zjUgQkAy2p>MDd~;I0chL83yi~LO4NBQII%FqXypxc z^nrTd7-BfGF$1>~A;A!8Rqq3sWYm(~|8|*D{%2)sOL+Uz6*?B_0sZ@hOa1o=m-e6O zu(sJMjUrW{)f$D{^Kb9Dw11y)ss9<_I%sp!Wyud zoi;;VsTibxhitKGmW&Rz_1`C6lmATjwa<|CW@ToiswHxxc98!a5~fs_Fd&xySqVFW zgyrh&^y)H}{T(u{j>m}L*}qT5X8)O9?4V9h&0!@=H1ceTM!_O*ck16RVgT6xJ`tP# zXGGi}Ei+Z8GKiM-kE1mr#{Tb<^*1vN^M7cDVMT&qmNre2N_fdK)EZr4s#=y}jNast z(_xrM8tDpxj^Hqf1rGI51jiX>&yCrt|nLXi;&G#Vu)-DhzazPE?rgkOX3m2{#I?sWzg1XAf>huDR|y+#BM2oIY* z+^KZ4!8D$65a#ll3@x;h!9Qp?!1)9Zfdd>=R>-iD0&-KT|7Z*>8)V5!RVS$`U4Y=S zf&;EB(gg_X7l;TzB@;v}2o|n@m(CEvHEnMhIl_m{TG59kwwF-?f z`c*_e6@+7?ASYcJ+VvtSTG@FT8j-Q5v77tsCxzMtG17wTAf%>wDXd?C2&KJP^Dj*)NhmR(E0dQ(f)_&3S%!M5NwWZPcq zKSbwW%RYB;Z0O)7399A55F-s3N|Z{7Xwjc>bOEcz(O2Ea6gV=e;)vqeI?(G@{XzDFzW~#y+~&E6HQOs7KJk?is7{fg`hsswgH54Iha_ zVjPslATV4Z25VxBQ4j-$7>kSmasf{2~0;3vMMAWU+N)?y~sRE!Q(?JD7oRlyhRVvUh_zgwtK{ClBVv z#VR;cqs~zHM5whgb#^U-w#SGVka4_Pq6kiNgy?(b1@?ll9IIku5O04 zm@XEPY3*de5zR!M{G*}Anjis}_5!wLZE&y?c_mjjI`;Hbxq3fsqFLX{5m} z80qROAwWhPvOI`X8R=CRq=yxi2&@yaa0M(G(SZR8LFnEPB7^7|1G9#o&=|&S5K#Ln z8$^)4%|@xrhLKPEE*qtWY!I0@JdN_BY}Bu_Q3zvOnT`6RY_uA((JHgiew59mhHNI4 z*-SVFNq$#1)339^a5GfP^hY_&ew4!uT9rUK#@Mg1vq6_I(vZkVL(>~+$OFB$5khp< zpfr_{-hUymmyvdh3aX^bBZGQDmy#(oX#gvr3wl7|Bvy+h7j{4woCe(&86s5^$op{V zL(%|_o|1qLl1hLvlDDg58u;^WGHeAp=?X~$!0HSA79k>(LncQm9q<#uDMDxt712D*+$IVUYO^3EU?n|Rmac{N-&M>9M z(@Y&G@v&?x+yZ`>JJ6t3Y+KwKeo`HX$1pnw z@18PSy0YlD?0DqP3H5FGEo!syS9J?ne)BgL_1L_Hg4gYFZ(i<@>pQNz-@~7`Fk*d= zCk5sE-V{vzgK{r^a}h2$jP-u%wd+W_%fbns&0kcs9FCAJbQ|cLg%HskvN;*(fxnyn z|M#XJ14DciLN0y^HczRPN#uMfj&t}zE*r-MGKqx8m9RN%35O#WDa1k?SMronu}mrA zbCftoBE&@!317|^2m~V#V%ONEN5UieAmqZ7@NkYmD&Z)U0+~?8!R0)hCsgni0=`5b z=8Ev%fa*wvr-l`Ipf6HkjaqzcEW@BAX{3_0Mp3>&sw7pQLZf4brOO;pRJ?C?cDA=% zm86m>G&*mYI;|dP(8^SyscNYtl}S7x(Ek@S>h9QJ(5U%qJL{4_!xHa5R4^!@RF}IM zl&a)wrHaAQZ9iDLO{h~0)Ty(P0|Nu_{6K$inMUWGp-4-_E4A!;DqcWcjTcZR8?>w~ zz2%LB;((B~b2ED#>OA&9JKV~Y(R66rq3^6P%)|uYlCSk_E!@GNXDy8n1i`TD;!bee z!ol`i@vxb=vq2R*Rp$6wNT8Z=0h`S>Xl78&Tz0je{|OcfFxTo8$4n5l0JA}O0cK7q zz%X>H&II54!LzsdB9|SmS^oT{bo5&>|egQ?R@&BbF2GWicJ-H?YcKA zaeBXeN4eK|U0&ZlQ#%hyPVeT%X}>da*Mlx;w=;HT+wS~~y&ZCKNsw(P&eF^}XHU)B z5qitB*XwEA_hIy&Bg+yuv>3c|?y`2_{ac@iN=(h_F{iz7?5r!U_tK6#)+_3Dq~h3m zN4e91u1#ifcD^kCc*Y{2Z24w?&LzvTXYU7|-9EZgn~n7!gn7-&xWuMieYdXm%W(5Z zvn5a4`S#eDH@|q#YEKFkL)d&7F8Rjx4E>qypWCa?276^}Op z)8t00gV)ZlIl@0{6{ z@#1XJ?bz2vvX5;RU*4d+E>)g8mF_?KC2QlO>~^zfcDmK9^DaNPr!236;MO^D;~G!7 zk>7TS@Y(ZoIX!D%Tk*j9So(?}Cy`IsrJKR6n{E}vo@fzm`p)~o-i~3Z5|=t>X)F7* zYThD0W%1+HwHzN_7`}U}DD~FZ)De35)@+ZC_^$fy^KV{xcs(?C;|6!S3I2ptYOynT zXY|&kuO3gq>{lKv+&_hvINH3`{)cBLPE5N7wi6UYrS04u8*H?lzX!BIJ%6K9eh=v1 z1Nz@PpsNrOkINHDaD|x1{~nUo{oD{#I@&R2-UJf4&%7x9#0fq)~Ga|CiJhc8r$ z#9W?)$K%R`I9tFb5K&Ev77$U5e;`m2F5*fRIA0*fc^sZV%9gN&e1SwJ=8MH_nUE&| zl=LHeoq>?ccV-@-)K`#zgjCZk{#Hm8%J~II)l1qFAeG*Rt*s8Jr~s(~tqDj)mmsw3 zdsIcAW0KYPh zS-vSXZI(cJ-FHiLbGM_4g>r~VFdOHRb6^9~!nqu=aT475m%ttuXB!Y* zQ=@E*+BcNLj0=xt#>DzF4FY0_1h=N8i~>qZVzKsh<|dBOc9m;~U3_Ba3Zc)_%0y^*P(sPNFJqysgj0$&GIJS1!*Cny5XvLjSD0`H0SeH&?7{ zVe_i(=kqDT-Lfm!Le56TkhWD z537PNAxoC0jz21m3CJAxe%i+#J=U#}+-=loYaV0D1K*E>@Gy0te%xyR z)YNH=_&elAI0-yxwQ)yNdNWhZ#Keq>RZ9xC{+}t@*ee@fk{Bn;ujf5 zye6wA=jy)f`q;Q%?DCbz6koQ@Fr6{te3!ssPb0z;5?Aitx6y>@-T9Qh-J3a0FRYok z@{o7Cmgg70RTnn-jJI(gynWB+e&fxWuO60?#eIt6W7c(^b!Y3zSJ&^`R9t<(cdM;t zAcK~8V)86+PG-@GX`N1YWDgKx1J^0jn$%mXWTc%+FMhrCqYvh|uUmo~yV!r&5>f2z zk=;Ymy6yKIJg{uQs8RE$$K2mv_(Yi7^wabBE+UQX1>|rdTzh$$kiVqKK-G+_l52JP z6_*`8@hpk@h1SKT_FDa;HrKBdym|b(^Efvv_ofp)!Vk|Kd#`Nsieb9-FVf~uz5L;9 z>0rOvW>WxyfGTLL#|4S>CQsG3D^#R5>l zs>T(ok}Fmy=NrH1A@Gat!wV=Y4QL%h-=F||;GnO;F&Sc_JD8DDV>{q>fQ!u>%&UaQ zu7}rwo8}I7)nwQloTlDvHtu5p(q6wRNy1ku#>F`4ECpYwkj>$;jR^kV!R4QMUv~DE z(qDY+%zIb=P@Vbj^20hkbRFcdXdg2WYdQGEy&++~%S+2>caGxNnA`rZA&-=vFNI=aB&&Zag?se?Yw+cBb6ue@s( zdp6Z|G&%fe&l1{%mLa(ut5-v)BdWq^b@cCX#wV14lJq8aT=A`id3lHiGr-Ow_lX`A%54`vi%{b!ebxE!0-bLP(G_d6}$k{I&&_}==|R*c7C z>~5-%^*2HdU>`zx--YfVZdpCHR~5=@F>Q#MZIaifXKzbQ{L`7cCtR|*_Dv@xpz74i z-E+=r^~LzB39qgr{Z3yZYOdN_x0^(e*17Tr)Y zf9?~$^4;3|$D@|)o!&0abYEWovviwV4JrmWZCTOdZCUMgfeg!tw~JFYOdYH^+_&)7 zt)Ly<-aTsYhKMveJs{Su5|Kvv40yekfU3WT`QNFGeh>5C!~DNC%&Tx3kI&}eQZ9!l zR7k}#nMlT$@|3t-DCKi;FpuZbZTatLYADa zhDA*ZEi=~J-`fSE(Ex8U)0kB#2R@HbiE|nNN+XlRX)?7sg`63w&}FMNDZdn*9`2-X z3$ScB`*KEgSjGTY*2?*Zu;cQo&Y0znPe<&%oC+-1hEF7GFE-zzYREN4hlo|oSL~NYHVRLXHSJ=hL ziX#RHM*jS-^Y>?3`Sz#&^EKQ4cz(!n*qanA@@Bf9*|s##?s@OJvetJw&>?a80?s1I zuubVULr>$B$?wmrI?k;l?%qqDvmficq7}QHDEBn&bbGG{%*2*v^NvPnFTYw9bs*tv zm&KEYe|)t(xy)^7XU`K1&yp4Cnn4Y4&Gj4e9-h9b%dA`4bXLDwakTp91H~)jz4qOz zxBd05JF7%t+@o1TW{ZPQFPQbxepH9|xp!E3Z&oBeu04A#>(sWRV*|3oJq{I%)R&(h z{Z!;UxpV8YJtOa#cs&ivacIA-?PZ@2nls|V6^$4`Dw6UsYg>o^|Yqncn^FzGF|f7nj@`EDXtf_Z>E? zAymC+$x7GbnD3(bdg;lwGe`E&tmzYU`$~h=j4y6&KbAJ#yEUG+(RTi5&ubP1vXkZ4 zEQLA#U0v6$ndaYZQO1q3li5ey&Y&Bq2|hPfR#q36?Q|I!ebIE`68%Ks$z>I{*1ws` z3LZS-ZUE!Fj^guf_=TwtOFYX$M{lzVX^?%waY2Kv3)p*Sc>cRf5MVURZC&d_?N+5X#ncCZ|}WT_(`L=LoW)0OHv$9{*hlU=(b z)V&*;Hf2q6x*?7$X?rHibLKRb>7qkV#HW{Eo;}UNlfrMZ)^Fnd4-aO<7uF3qx0&~5 zz;W@ki=r1D-bFPB@CDk!=qCgXVgz5m2lr2v^)D%(--G-2;Qp@-?kdQ|m+?hBfk@8h zEBPV?Pb^djd0erGBj-r@IL^kU0y$g2=L&fenNq}+2<1Epmm`-71tJ-bhl>;h zRzfaQ975s*?E0}ShEVjMm~?<*KSl-w?urh7YGsI0n~=UROBCxHsmNxwQ)sk`94i#= zYoM5cDqW5fit>$1RxsmZgJa@i;$!2Ckje|t7I7D#77+!75pVE`eTB>ZJcylNSJ|F$ zh@I9O9AdVHkK>pF^1AE!L*!*#Y+Wsa-K>%&R!ppaHHVl=onGY<`v!>JGQkT>uHgmL z{bckS`;vx#o`1N*lKLfbYd)1#-S}CWAben9HCPrOYjlRu9n7l)$#x_Hn=~^Ai)!*@ zJL3%u2(DI*Vr6^d&EfA<2an2{{7kq2(AYT6sqP~a;cT|3(nt31VYPtr{klU6tUIKb zQwk^;%C}cI39R>ArmsJ_qN7#T(_@}z!dFHQlH6Lxj9{?jj4Q{7&pztA^vT;3yRW=B zv-Vs+p_g5=&`aX|B`xZ1NL*Cff98Byz^1I1OItP@`~H^tY#3W6 zm0!-AZ~CIJPOoCuRwWe<&xbkodwZu*QQ4gi`|XlK=pBv>b&P9M!mSvPIzwN3W}VUw zMf^pJl?OFRmtB-=%cl3C?uu^l;OO%!C9}dSR+~)XH|p4Bv;O!8-_6Z8y^Xti@VgdMTMVr}3n&Ysw3mzP!OB2@=c zM)e$jZSMig>o+;8j*f5Hq0hvmk>$P#6_zJeHuY^@c{EPproBrK{iqGRJHUFOa&41b z&R|*m@V!>M$H(Dy9afy_FI@b%dy71BaPMyB3@YU;nhL{@Pvb3b&Rlw38pNV}xA@ z>r^jqoZw!Ean`RI_iqs4RC4G^VB?cJ{S*C`1_iyIdcWhaS<#I;#w}_6MJMxF8?9j6 z>lEM}STB6TbC1x@A8F3x%NmEYiypY{+KxV(KPT0?d8p%HXB*kMhth55663ueb=&Vn zr+J9CST|exGJJ9avo=;SZ=OE$DX^)+s#VZ5HfLv-WzE{1h|9luVfwC_FV|6(N4|rm z-}x1*VO2|5-Achwx3XNT6YsG8{!$$ z1h1!!T42I?S)XI0cMYDtKP7V8D3_>tMe)+HuT-@zloa0HyUgOtvn3DP$2T=)rp5PZ zQnx%2@7CVkE?)0GExkw6X5|(Uv-93zq6v-@1I-wpdM+(*u-tysoM}B4PwCY;ZDbqz zr-P@0SJ$Z}FSfVQdU@}=){(79@vJf^~`2u zqc$h6oPFY3_HlcgqeITA^Omx%Z>79@GkMxZ{-r%hYlgL3>NU%)NZ-vf<>s2GS7znN zyR7rDBQgFHAH5DeUoQ8L&mG;FGV!W(<{w+jyLjmaFPy%)_<*I^^*6%>I?g$--D}oZ z+?Wx*r@^_;w^bWMLk9ZHD_DL;7L>7fw4TM?wsK6rjTwcjTGu_{=XK%p!Q$=Rr@Fq0 zxz}l5qe6CId11rz`-@ry_G-Ae&b9u&wO>d-94=n+g>aOf)>k@8!R8pT`fvUJA2C(G z_5W}E|6Bk6*8l$%{a-bmQwYUenOKT*lyZ?o!saSCY#Eo$;fN$MnG_eX*iFY^hWx;Nc1` zALnx9u&UwL@IB1vYMv>8gT4C90zB;1rXQq}U1Iw8E=lJ8`D|`i#K#UWoAcv;g4vwm zy;%!lD(7mL%6;>S*N@+uZD?F`%Q7rTHmq_8<$g1N3#8x$ls0$)wvU{@nZzfQyzH@n z&)>7a=IrudP4$;R|M54hLb=4GjEloOj05j^!NLXj!6$$ICs_EwE4x=0U)(-oi^V64 zJeSkYckIx<;&!iB!h3XW|MZfR6W=~RdeUN>q-%$e0kc@M%Zp@|PEX7--kcch?Kfz~ zgEszYEmxjd;MiHvXC^hU+}0sgb8S`O;<+gs1CJ+Nann;9%)iz8SK|CbtKs|gm)kD* zFn8aDRRaH`b~2T;NlE+t)mw|2jBo{ojaHVtOl@P|?i5SB$DA=)`?^pts?c-$y~5Ga zLl(Aj<}9_30owS;T(=wpiqj1GLA$h zRwxBRE?bTh7O19?Q_TYL`Fy@WDpPX!P%NLzmvJRLTq);Eq&&Wm^W%43Lb-qGotLY> zy0Wegit>%sNi<58B31rXfY-3dt~odqs}d01tjeSK_pP$C{OhaiSe0!3rDb+EA-;PR zFQAZSsfJ~CW4`ty{^Bw_58Tb*Lu^pV*jEB2SKM)M+~7)VQkCpa#QNt;?*4Tg|5=cz z^yzNu=eJ`%Q`V}x&Te~gX3nj7o2in7I(tGloj>f$_Z}YjZmw$jwGs8cI51~y2+QU) zN%*q$$*8NYA2nAzC6mkFb{YI6z3$fG&94mZdRF%-C2`;Ig|;!nL*id=$!u^h?@rvR z_V4309VvC+JN54T*xAcWw{K?K9jO~$FIe+RF3cIX>q$tDyqjsU;nLN|8d=D;x0w0q za}Js!(Vb{q;3s>vPSdNd)zrgf)|p3zpGFSf-T8$yFL8aM0)M}Fb3|4b=d2#QT@NND zOdYZQdESC!rB^uY+_5KaB-*`CSr*pq)YJ*5=G~TcWn^tkklt*sYdEQ_aT%S~`Q#L9 z>wDKe?|IUw_(hdh?K?NwkC)%&T5=jKzKG}T?Vmhfx@7M0|VztoU`3 zS>1!JLi$=^{r7dcpLTBu?ljGPuk8)myBja_%9fey0~!jSPPi-YY|qRVo#C_=4a}UR z{g^yv?UCb+_C5JHW59_4YhReLHhtcCc)`w-lTF%{JgVbGDK3rc!*J<+=2ZWN7i+Is zD)BvOj$A(<=y!x654LFOH}GBmT+W**hdUMZZ(3g5Su6h_(Dm?``$lQvohPofwCShl zkwrsPuYb1u?)UIFE~@?~71rxaitu&9G6L?as^u^5GnXvwpc3SirIXgTq+eR`2?h^N$XZZI&xXwuiJ8P9sCp^ z{P_~S-L?@weh1m`VMF-XEj@2l#aC}KSOLbWEir6ZLpgyE{Y;&ss?+f8NBC}58oZ25 zd?1(jZq^UpZEyXW9@h8amr}d59_z&Aoes9|vc7NH5G&@(x71ht*2v<7(R*C3HXO?5F49bRb?ih; z%Ff-(eE*nUn7_aOc(?Oo9_2;kQbw%OFKa3~Ca zZ!pq#{-7(ZiZ)wS)DmVb_AW_z+ivF7;$Z`hS=Zz$;zcrk9nv~1@oexZjil=L3+VWr}n)r{3y_fLQ7bU^U3vt`qI`il3_ zi&R6OdAyb}CE+s?c8;BTaEn=a$lLgliA(1yzBuhVmist66_uI9xJJ3=1oQfiRGgl@ ziuixR@BIsE?PFcN}2M;^HUQ>E-*1L|mLoSz=r;c3Me%tcGxnIV%G~HSzTkvF5 zMvteg`diNKGFizE+OM=Y79%;YI*;RO#94Z!V+am#T6n&ub>n zKA$&D_@X}Cs;Dk>!g{R(CTwm8aePoHl0G_$Mu z*bBOb``*8wvb%p+y2{quHsI2JG*sf99q-+Hv8Bdx))I#itry>MPt~?|oVUn7p3%kh zV5fDg%PrNfFZPW7On-XD_4=&hA!{NTizgkkANJgG(i_)JBP;S&dk>^dOLSQM$F8Uk zY-fwt^{jIyU!HnpdB1VTTAdj{6W-5!)c*F&l*5xZ;u9aCAeGag7M~_+-&)VSt2q97 z>a!E{)#9|HW(7lM#AyUMT*naIrdb1MOY&_w!&b#8)7rkUJRB*JhPrHd%pG(Ved%4R z-XwnVKF?!i4N6D)I?)m?Y-aVkvc5~|SpE2I?aXyY z4itK)FY!Em>U1N_ynf#j{UJBe2lt4(b9u@Bj!swhK0G{OS@s{@awBu1Yn5Bu_^xd# zN?J+v>^OP;;MqAHBE|_yAE!OD8=b?t;HGVwJMh!;sP`AI_X`=;_IlKf_B}rIz3o5M zzQv9UjP2+2^#zJI;+OMsy!%X8G{iY{N59tzmcDKK##5i|UwTW5)tZ?fu;tv)*@OI- zhR#THHeKG+CUbMd+2==d1UI)_S>66tz|w|(DvIvdAKCnp@ON)l-+Z-n)T6^QJ3Sxm zq?y!Vg9At3oOWu=Jc}fY)l=Ti>&||%EUf9f27`w8Xc{&=MZ-+Co06nlHt5;O&ka_j zpn=JUPX(Or{KvAar<@m)^N+rY53F!Hb+r4W70ziU=Ob&?5B>vn3g{NF zf^@t9dv5Sg(rew0jxG#sGxi%ujk{KUK+5t*+7D)ELRfWVcqxi)^eu{TE}Mr7yZlla ze+HVi#6)*$zUk5Ck#F!$<2{GDgcg{NI(L5&&33uV`pHM%4a;d4RqO3jJKlMRCT>C# zui9MKh1bpPK4&a$br!c=J0;pX_Ho??uX;6{pZxgXkb~RS_n@3n_LjE}@)DoYS@Cb_Q(xAG} zFLZh>HaCAeeYc}C?a5)?n?djVU3B&h-e9t@caz#`Jen zVsCp01go$=y0XvP3^~1z`{r`1>(@)X`m9>>uD<9_AFIu$o-5mrTh)KNg`arftS|lh zycau7+SbdCm@}=asC2ZFd#w?#Ed3rSzefsI>0S6=A1PygBi-Lf_czl0jdcH?K)S?7 zZ-qjMOs-UlMO>joDi?4?9Dz(Cl;Jool!&AvDO*B(mRh3Va{0JYDrAckVx>U9QLwo( zv4m>~ZPkRND*Yg~Y<@78kMnVnh$rNRh}lFa>j%DqE8jXWU>hIfm%bTv*rnCVxMk0G zUJPra7Xy42R^YRsSAOgJ2R;i&BOl*8EbPv3ZoAAiow?d`%N2_)9#O){d(wJxx2AM) zq%~R?{blv=ZbeI6`!r2F?)-Y-jOnY&8$M-M?3>+2ec$WR%(@o0MU5Z4?|*jc;m6YE z?bh(ud2P;lk+XQm-QlkvjX0aVI6qd~eN^V_x0lDSQsa%zdz;^DV0~cAiCQ7lt=)sR z@4nx9bl9=e*W#oTuU;Bt8FMor@zovQwK*yJt=r3xr^ogJ<*9m*w&dKbCO5+FIi{us z2@A3gU(e5Q4RUaDEA3!^yQMArk5=2)s4twmimf3xd!kFndacj)Ak9Y%h(G`;_-!LUOX z(=~prU+xL26L))iSy)iQTHX!YXCt~if8%>D^39#GR({*M$kJOl7oLpn=iG#Ca^b`w zpN`l4>)Dk*2!DI|qf~G`W8=%>oBeZH360#{8aF7``OV#2>%^4a?~-#eZykDfWnP~n zXKNolbM)wl&nA?&sei1lMa?UqFBZO=9-kdHb@GL_V_rVB+Mms{$?G?gv4lBngsM!~ z&EvY;xtv`R$CpjJPqsTW?_`%JGgdI7#@jSE==jHr z^_>cCi67oS-8wDykm}w-?j(=)K)D=8oOp zFC1{^TIu+yrIKCu=64OWUC`O>{9~t&MZ3q1#ua-u?rI#iXNX^lR`uc4V(a}@YMWZV zU&7YkQ$(fPG+*F6F6V5(1YyFgz1-XNo_>n{pjx#{eTrExX;;wA%>#<}_RY5Arxb>* zV_Nmtu;I05@EYs(>+BDwq)S#De&1zA!tAKid(UuszZ`WidFm{^N258%iyIG0%{gLW z(slHmy1RmW*In*u-f~1J1IL8lgPsIw|}uQcz=ha2^&eOu}JS!@_Q;6#Io zr6chn*dE;b*&YDCmyM5ra{)<<)$Y+Z9ciX!($!2uzJlUs7ZmnCdPX7_M zcJBM#vrL>*tpq*$_r~wHPioq3dvIZR)4CroTud>${wyfs;qV!OVV!*+x<7WMN*8tv z;H)bP^XhY8`s2+hESsb$drDrr9yoV=__e)<(;Z9OCw~Z%rca+fdFq`8`jp|lWity# zHt1Nt%;~f^{?Uf~-fz#Hmbcw{`QX#}_3`fN0JoK`>9ZF&?mpiM92RxKVNnY&z`l?U zi@s;@+9OA<@&9H%`%BJ-KXX_#VmHL=6M<^W8rA2YdMi$=yA1oHNHNO~@!70J7sC$nBomh50stFEUte~oNiTj&KDcLsu{g(|KPZ@OLOAY?T6S5kVob(nUeZN?pZa>8^bS62FI(o~0AcQ zwx*hMVtDX4n@`NP7p5QVXUAKo^j!CB&BU+1qF9s7{id}E?}c-l+}k^6J=r@l$n!!+ z>D<|F+veE!+m@9-bjA5LD--ORoLZTmJZ{s09S^6jHmf6A7QAb9#}jT8$FqaCEIj3W z^KjrS?=P1MR}4+KdhPMBhxThZcu%h5jx(;CwPOE{%lWr=S&hiLx^%00n@CpTd%ofN zHVe-!Trj%N?VF19r*)bhku{u}n->z?p>z8tcJDvcesQp#!>8-ForK*6zZ>3YdqK>4 z?hN+b57T4Eavp4!`VKy}XH&P^V>-HZT0N{yjP}_Uu327PKxoXSYrJaChC_ zA6u$9UG{l&Yfx|9qeG)i?^VQijP&g6UT9i=rP0dM7n{7lRh#-?VDy;?W(k!(e!A#q z-izPE=J&Aqfz$7Qeb^XW8NV^`Zw&k!1OLXr|8@*axH9-SmnRk|c}lii!WBzpGJ%lK z=CEaQTqzaFL|idf$(C{?Tsf}56*7rHDpv|5Y_^0e!zEHV$MD*JO}GnO88zZ9_#&pQ z&_9UF#n}Q;fG8jU=MnCW8gX%7vu_q>{1xAZ{a^QO*arGXvv?v=2;W~6%=QlmtlVd( z7EBlH@B-`uIbCRFIydQd(~57G4E`rG&bjqQa!cWgC>SUhl zu`F|8`^J-t*+&-*XccRdd#-WT&Qpz>%xO3MPFeW?D}KeRi~Cy+%YA=Sbgx&z!6A#I z+yk00`#q|^GP-|V-Gaf3S1lE-Kd_OXcZI$9W5qD%=Pg1GHI1LL$v%~{v+%_RpYHa8 zJt`j${gwysZ#}=c`9e#@Y{&D(OBMOsx3stNom(X68av>Y;Nf=9_|xA#l;7wfjn#MA(kn15H%a#;_@Nr$o>LUQZ=%2Z)N z($tvoxhdUW()Q2~T6}oZ?b2J*|EsA&bNlq#bM0e3Z|@j6x7Mgb%eIg7o6vSc47aio0eu|WcZN# zM8kgda2zL>G{6SK7fE_C74AoHY7sj^IuK`9gys-C+G9$DP!d8Y1tFA<5Q5#WGGQZX zgisFbbcztlN5qbz@R?UM93eCUAv6*p*lZAuCO3i~LvHpC8^OZ{@V*Eke}qr~GVGbm zAvcuflUE^mZ2|9Twt`b@V*7W!z72WxgZ=tCV1^BTA^bt?0B_iHn%EN99CA64oh>;K5SDSl~cN#-MUT|sxCt{O#Z=i@ho{2rbQ%#E zFaE#Xnsn%$ztW%#*x8(Dv%j}B?a9_;Dbi({oDBFv)4!u(p&x0}(=u2xby`|xx=N=~ zXpP$?8+YJ_YfluxsgKYS4An;w9N4fO`q+2f%L-LsrU=18X<}Dw8%RiO^j-_7s@>R4 z5OOii$dsn4WJH&DG;ScSRcNvl8Xt|C5Rw3Rd1V-)#L)&J)P~q+x&osiVgq(M{2fDx z5d|B&Te*7$hKB`5#wAAh2R0$fhHW&>WvMDfx-KzIBCGw)qYO_<)GBmPQBYyVjmu$A zX-{(ez#h+yNgDQqb|Gol4%(O=wsbbqAORyyueK?>7Y6quI2b~OplJ+W|1#|D4vd;c zv-vnb-SfL7l&ZSGD{i`Ql~TcO{9Q6?Wio~&O{-IAf)rUU-=(5erlLit;u5}R$fPoX zX__iERiXJliD^|5!;`*GVpf$TNurS?DZDE=0olSv>h#Jac5-!^M3v6cDkK_NGE1w_ z!M@kTuJUB3FtikOI*?lvvIU@|5Rz6C_aivaLQpye{lXIZg+a4|gz0V7T3w_hO%Y;9 zh(SUMB+Q0{4tO7&>)A0XrhRBkRD852-Ur7kd9?qU$5fS82aT@E$WW_Op|1jCO-W|p z+7v}_ED$QBAaiHuN#@SZ2MM+;D|Nj&Y*h=DgmSV|WfEDcJ6VpnS_O?XC^9?pK5XJG zMiCryRDtY^5yPBPOmsC0wHVP0^?E(67}3`dgQJ3hnHM7lW&%~E7Zb+e2N~BIGBWxQ zVu4)91XU0^k;rIAG@(JILUAzOfpM8K$+#!GUp2-3ZI!WQ5xK1YPNta_|@RAmVk#AB!F`>ZD4X603TDs+(_ zXEpsUE3fLQ(6fG=)$F^hqN>J$p<&GWedEv}D|C907Br5q>Y*^8ew>q0J*NpLl*MMl ztRp*BCeM)Ql4Z&yqwY6aV$l6YD;q{w=m<{bfCc4*@)3gyj9B#1vVtT!Nwh?l42G(D zDoSN4x-kj#%j2}l@BvcE9NF^5r@pv;)0&NA(zWyLCF zG$wK}7vu0{d-zZRG46a(#P``LUuUOvjP~c$lo^bHT&-jG@kvXOu*k`o(Gt}onS^US zgWfjGY0Qb?K!Q@Tt`dnvrc5$|KW{QCT)}G7z+#!eyKG=7K?KCa$i=QxrxsuTvxa${ zLg%B((6N-NRGmTtWrE=XkOv1`9ltgsgna=ps^R-+)R{U}dJ=IZ=9w5m`Q6C8RD|*q zNO~PYs2d0mGoVdN3^AOefHMbF!GJ~f42l_MFduX%#2iBmWPu@uIU#rx3^lQg;CSdO z7>EfcD-1O;kKi!%6?AiF=MD)df>T3DzyhSSiQu^EE9guNp+@=&1_O$-F%-vyA{cO> z3K#1Lb-GHY*0B6LhH^TFg1A9G61iNXHQM@CWR+~l2`n5S4r7-qMF_PbO*Rc7U{4RN zp@%7HW1_2LhTG;8!xbb2QZ)ddfNFVHI3lVELi9$2*bG-F!3IiL;fP??3s++ap9x_B z>IS4?>+2Q2|x;X<;2?iL5N;04)vO}%4vSfukGgYC1+JY@vPu3bb*+!D~ zK?uzxX#f;3^@oFv5V}CpNmR&7@Pm0{h6x)R+BOZQ-M|d1H$wF1DHwPfNR$96K5Wg1n6j@gf? z$xLVZN06Ur3RI^nRY@(sz8R94E^Eo`uSCej#y^4;s~|U+4NlM6_&v*nzk!1x`m*8v zy?}d5;NH7t?p>?64@_3bQkWrX4KqGN4jXgD5*!j-b6O;&s-==t@?KcFRwqeKHKc3F zbT_2@`Yv!=8@MG(`RZ>of0b#Unwe(S#B_)xMZpZvsN_ioLA!k|Xde)Bnp*DTAHfQX zmJ;a*9&Nt4IpTZf7|tNh#wtG$Cw*?A!Gy#2rfcXAc5#YSMUqC6#tclB=$HX&9W=Yk zkGY8pWd*2p1TR)3FNRwes&R6ki;xe7==thaz1VPV!64fB{?%ZjjR{N!!LAxO3N(mI zNc7R~T3M1VX9h@QDVZ5ets-5{OjlR?3bjtn433bfQoW%Ltgq`()pZToS%&TqoF-AF zlD)N-e?$#`1V|?VBWN@X-_C9@gfJ>XFdJuBfl9K5MaEWiqm{5WgV`6@aYH+1s5Lt6 z4AP3OAqO!DEqtn?pK|`fD8fj!Re>t%pBOY_$j;Q|1`Unzb;)1VAt}e z>{|WP>{|aiyOzMN)lb<4`1y}^1^}qPsC2D>UF)B+YxhsHYya!)S_8W_KV{e9pJvzb z*V(lJc5Q#kZY?9b>;68g_LXL+{p;-78vUO?<=Dx{F+@zEf)wy{$rKu$k4yv3G~xhI zLfq3TbTG-S47M2K3~(i#|Ae0bf*iz~SOBeT;R7^!y*>}D{{La`?P4Rzvh=W=ncm%= z()R93yDMA9tZ*wTXN#O>CX;0SlASfnVpVl>r&(1lR`u+vSTh^U43g2zjL40MB#YBs zZAkKiypmV4AxnC&VZkuqwE?eScwzX(fM4`t!-fpM`OPq3ze;+LEiAAyzVmZ`A|pvw zO|Jz3P85on5%=fZbI&>V+;h%77s^6l9%m~#R3KQP|44eo-#=>Yto}uE!2WqrU_@#8 z#+BBez)eZY%AaYqz5!(id&A%QCKQ|2x4#8Fj?LA-fIk1Mbc`)F@4KL*Kp*;c>o4Hc z*uQ~q-@$*sCIzmdnTTAhWH-Rx^~$fdT33I5l*DDy;l0(jacN#Q9X$AC>nTYAsDTO8 zQ&l|GVvN5qmI4<)_-2cACP4FTQlY+yhJJaFWRuR(=ycqf92NVW;o#(V-^X*Z^pk)nD65kBj{Ai>;3u3fzOw^_R+VHR%GJ?l?g;XoI?oPs);90k@tD z?q3P+VJOn?Fo5fKsJr?d8D6%<%Oz{xf0Ye_5J+=f;1{pU|K68~@(V{=NU+Z~dp8(4X@g zU;4#=N|(9m=YqzugDR3TAHh>QAR~w}=^scF`1=R!DgJA;>i)quTYrw7f8hVCVq&|h z&&J39)e}6!U+gCTEbl1ahr0lhZ|i3fo3V}niPrnrw*7po_5MHlIf^KG|Cg?}NIDJS zZvGYQp?(GOVE8Mo*86|$muc5V?rPdMQTH%Wp(_fO2!>Nuag`1*oXc1&!K5s|O00kX z_BUFse~7&)!c@M|YW+Nz8&djPt=1o74~g&=*sicNv|6qI_*<>kI`)gLR_m|5*J}NP zU*+%r&U>xaU;QWi{rBE$wSFJM10gW)aR>}Pf8)JY>vISg^z~k=HIXvE|6Z%rmwx}| zd#%<}m>3Z%^Iog~!TCF22Fs)YWzkILNx&<7xTCG2PuhsgFe24YFEA4+c`DW`MUfEgw zPU~O%{cp7XjG$}1O3Dg5V?_TPw_5N2v;X#gNk^^L`@b;!%jq{-fAT(12?Gw+=~+t& z>{aifiKNvszjNi<2Uo7GkMe=FdBMGFUYhmK^Zg88Uu}GFMG7RZC%eVK{eF~=5)==g zz)j$uJV*;XFi|z09F)ru-iVFuhjCgx$_upOJ>5Qdew1VnMizNVB0iJxYqi0OqfvP4eG+w#M&8=GCGZ=KU}1XxL!)Sv)fJ_LdKmN{xLq zep@GbJrVpYh%xZ9c+|NUq1R}U%3ga}1CAO4>evv9qJ-07GK$a4YRSValS=Sw>J3ba zG^@Pf_0bx@Kr^+@=9b;~;L5d^>yv3U(|irSGM^TMLeP=}cyRthi*5+)Ku z!3&!Ag|<>a*R-|xB8?ezcW6%IB1^MF6YXW4#?M~1Cm@(U^|M@kov0KTBUY~KzFMS!{xe5B|zhm>|OY74*y_x%Q)Uo-d| zq@$$2K%mkTcTLnS%E4Z*7lAIX1CT=}Y@)yoZNPJ_e(%AkS7W68z~g9tbJL7ZwF&0a{g*BBqdOf@_+ zSSox~Vr;y*xK$BwDwY)cWie=ABijSm=nXC2H37esk0+y~O0HsjA6zkD$a$Ept?@L5 znPojal+hSPGPOC6&7p8BpHso}h#7^6%^A!*V>WqM6p#S1bWm3TQ~?~XmMueE9e2L4_Jt>TVrMc46;Wcqsj|ySKVnoT$h9;{w>mCu?c`z_is0=us;J8b_F`@AH3&QzG9j|nfNRz z%*%CJ8!Rhe*9FanhI*0|WtwNNOtcVTfL6hi2DXmkEK5d^-mDwDhEdNwe~OiJYg$(M zn45t#_a2JMX^iUFSObhK2JIEbu6r35l?B|iQTUb7rK7z{>wqo&FdKSJt%XfJo{srt zHXWPxjqv5Oq?#5O#0O|CJunL|*GEZa+K;E>SEg@ztSQr2&`{Ki-cV7&MN$IFNjf-Y z7#G?UR{J69FB)lUw<=z}+A#Gl0Cl|&h9_teO`-9)s9wD>$*4@QS_%Eq$a#9(1Podw zI%N{AwMRvIUZFQ1Tv;y&2c~UtK_hgVlaLV1%eFtM7Za6<79+Dl>$WcgU$(<`sQ^eO zq_4N^&Tx0D^Sk>@=$+;q^L{Oy_(m3ghV;l7)Z#ODYS$qq4BK(vg*IJ4-8xB=KeAfA)X;9?8bP{m=d?$wnAOC|;*o zHvVd3gOHV{zjRF&QG>2hyX*ge4FR$<=WEm+W+%^*aek7Rs+cAlwFTLHK>fJg z&62`I^crO1T6&ZgW%X>zl8)GH(>}9;*%(*Bb&W;Od!^mT<7--lgu)M!v(MtuG}*24 z0(v+q>Q-!X{9-cPdiLof9%}e9Fm-S($O8A6fMfyfuNkIqB1}nSzWkD<{C=K~XgM)` z>PQ5*65;Bb4M&k{B6o;8Xe1rp>H1Yj|Ct;WahdcZ z+WjuPYbLXkjhCrK-_e}+BeVN%eOuGv9&RXHsZle~@x z)#%JrM`>yDENo*Tk}*b$CM`{Ql%Hl@ncZMWKqn7HE0~wQy$Xki@=Qic*Dn3`!$_9v z`W!LPlOmts^h6)cE_uLkCK%e2M2?AcyqtkTfKREZKc<{HHhOIYw^nJO1!!{ zyp!C$-Rm9PIM}~CIJk3j^`N&J-|pRs0!jU!zX-=m_Rhidw1{k?xW{VJNp#S6*auRe>|ZGtxlW`JJZQf!J;zCTV*%`3Gp3Li9>ImN(OdXfqs zww6eoAq;0yuG^)xl*-HwuV6tQkRFkx)V37YP}i9>crpb~Z54`&6xe0G{m?=b(gk)t z(twy;qD7NWtI4$LW5Z+OvU37CYF>5jMZ>s?dG{rshWWCSv0mkaVsv0$vN2P7;n(KX z46;E3v*Xk_KYv9F!c_ei5~@o3TwM%E*7I^Bi_MD(etQ$B%fgGvP=E{sy9z~ZaqjY> z1$@R+N|J?CXGb6VHhyBq8IIyLnTOoOQv9A6vVr0FEh`KS+{~OxT-)$AWM-Xml>{@q zJS!|XlC=57V=vNE#Q;7^25-xIQ-lrw|C~2S`b4~M%Xv-GcbjAF8AOCa_N=zkAF(90J&woEGQkq?@O4^3tXnRg^SF_@uaV^N zYKZW-CT3~dXmf4TM9ed$G|yeei2W-1(Y32ZIe<3w8IA?+72n^>u0c0RvZ@c~nZg0a z31rEo9B8xEw&9d{X?R;5XwY^!W!IWQq3$&g0M{Q8Ij#YM}O{&F4dyt__$3>M4H?U#t4DxAKZM1o&Hri=+5|7g1Mq6fQqus@?ZkD{R z=*uvP@jKqnr$mMu3(3jIEF1na%uz4ShW+rlxLK()7$13n8^gR-j+PN$bNDPCZP2pa zrw+K6;Oqx1ZrOCa@0wj)T$F+{%>lKPzS!O~)5myQ$^ zo-(O;aPE~t)46A^IVvOV$s5MuGTAJ~Nm<5+Nq?bhutv7+L6U>q^o;_BK`t&XZorw1 z$!S6wn3P=F{eQ_MwD6S?;xh|fQxg<4%J1X<#l?-A!19K5FA0GyE-rq+hsOTv_to_A z7uEFfAV1Au4={txr`JpKG#(tshe_!hKmMcWpOf+9>34pQj30;sf$`(p&Bl*^ZBCOg ze|-4UT3JjiGRj;8wvv|BEd{kW{sI9pj;9wSb#N{>4@BbXF*3=m9SVA-2aOl+QQ?sV|noTRb2zC29JW6}_+vq{pYI1)qucgFGS zPMQ8B>96*7OgYM{ei4taTciCjEljk`fhU7_QjX)SGZ6}dBFKhN3|r{Vkkd0gu;W}J z?<`Ag91_Z42S^Xhv;;=3PbY^(JWM)h{JJbhA6!{ZvnnYL;z6=}njWOuHEl7adp3x) z0id?Qo%GQI!aC4oXB=nC<2Z{Clj5yvU(=$#b?z zNM-ZVQyNG@MoLG~D-J#|4-)wHOg7?9GqBq_)*=ey#A`F-%Io}}E@CosH>B8p^$3zIvh|?@7E-Gm0 zhzDgvc~?l;gyU^i`GH+2+B)jC<5SRg+n+11I$2!|d!fhqFzFLTkV{!Ua7bHYx-w@- zDvH}>*XgnX(s9o^0TA76avb>`Ib$z`+a()t+j(Du7OXrZw~)fD3lU7jUGpR}vANN^ zv4qo{F!aV1akS!Z9G~G0GcchLi&!~H2I)bX3-st zg9JO%iLawP{-dA!9HEzpN`-C`#9h9xH4u7fe?TAk!|#OKu0Q~=2D*+j)6^ecvR1B2 z?YjO3aq!})v#1dptcauPRz5i^(!-<5EDRRSYOi;*v)Ws|#rr+O(fhxlK9+mz4?;bW zKBbjRODcgOpza1mhRI1fNIIawC8kGiC)_d8hOHK1N{U2^3lCVb21CF~OI8NjS{ z6dKjr7)b3{9heI-?_|Xk$iokgrq4Od?jaoBJz97xY)`XzgxRQV?5x>FX;cuzhxc*P znvCE5g||eH6;*-XPdh=hUUUh|@ikiK0vz}j`smX~v^0=^O*VG^`>TC(5RXdnrGd`f zvLtkuX76HLsaaDHf6>srIuJN!nam!IP76WtTbbghH5XQKxyCPNU+1O?TVeviclGR@ zB*lJSCjBhetuTav^Vx0>ldMXsGpm*^r}BitcEH~h8M^gwzv2cxhu{cOC0kbz3QupDLK{K|D!CyTr`> zHTWhybfaZN`C{#q=F!F$`87$@TeqeU0?OEkMD>k2&#>3hBj=tqUyDDJAZ4!e=%>c* zPy`z0$V4iIcr+XrMUCl<%?J)^3jRe~g5oIv23eH}Z*_}fooHZp1m5eW)<3rAf_mEGKKPXN&;=Q^4b7mbyxKP_;Z$na*ls>fsv}HgTAI@$ z&khY7LFO!<7XIv(6no6hKWix3Iew1QNp=S+V|+fIJfgvo1io$oxe%9N^d)39l0n*R?-yr;ApLGZ**~n1OW7B2t?Lz?e6N z&PVlEdcARJ#_{X^N{>aRcYc9X3}f2Q#!?nR6){xjde^lMs6uo0+LF{mq zSMjJbPR6j2zB0>Zjbt#f3>_VDWAcY@yh!VC^o`?p7+76h4KaXE9Si)7bw%kv^kQul z2|KNU1hRacO_YKT;&hY@*Li_?SQI)Q2bd~8)D0wz(gm6c&#G zraKv4^~8X3c`%p3IE-mx8+@2|vE3ti7uiXP82MskmrZ)G*m*30PhBeThueoFoZFIC zo)(#soK*IBWky=?OY4#%iNVzZd*hr*+=+=O?P$$)8R7MFc*fC-k7@Q0bJsc(LQeA3 zKZ;?G(!dr@V^F38SD!}!ItN5(V*Daf6YbN;*2(f9u?^D+0isGTv$0qb0D=UQxuMR+Yp2rJsAzzfe*!+m0ONL>OkFfp$mgiJ~$={p`3lM z=De&@99eeu6C%Z$)xzpVbdp5@m<^4qL!@Du)^zTy0AJ9)zz09t@E%djR6uc;h~le3 z9r{n)VP|#K+X%i|J!_*88-v=g1bAzq31asywqWrQr}}QhS+U#{m`j*yKwnJgA@pR0 z5>Q2|h+ayk8C8w5J5L!@B>4rg3o1MJ&pNaTX3YTIT!{S;ip%1@R_k98%!g3VVBC`j zo5LYtlxAZ6^auyYuxM3d`-&DW$hBbM<)iL&4uIrfeRsk0LEB?U5Sef*E2u@c8&<2N~_Y}klHagYXVRxQTLF1_s_N-3u)7qr}j$s znRXvUWw8~rBXpLB&}ImxVqjrX-qj4Uq+^LRq1bj_(|kx-JU_`Eo*=L5LL?Ko)+;ym zGRWoVvQx4bwLK%t9z-a&Af^UwdbOct$#^?|zW1UZvq^=zxJ=_p%+?Zv^=&V+T9RFu zDDce$?PEnWHV?0lMRvUi8d=Ktrdl0`l?Oqyk$Q8m9C5cL9N!%*WqtZOov;V{Bp&tG zdN_>GNiZ}0woH-GPqQYvmu+7^!BLVdF$r?`(l&XC9MD;QYPPSBO_dhOu-om@k5LkX z4ZC~Ub4saknvO5I(}l8HS&S(l!xXr_~S_uGY391IwSUYIkndn z`-!*XW98BoQQ#=j9WK%9vc_KIbNmOts-Dw7?|Dvr70Gv?{-^)VA5)Om|JMKK6y$}J zK5(Q4seX|Z+HXJ;Mf=a-R{aaVdO5eMUl01Vj7&lX*Trxz$ED>h%FVb^Z(q)p`a@22 zvTh#aS!JqxIyhn`8l_os)%hmWWPeF7h#SVUBp#kw4IS=VfXnY;^e0a$pJPymDk4e9 zev6XhysW_K!{i{%lA%c{V>c*S4kaQ=OAX-Kf`gkoVk}S~J&l(^Id+ zT)^=J13?J7?z4=0fw6;LwWs{ zNPZ#KsxakrfEiD&ca?u`5`6wUGyOC6bBkbwqgSUen>Q zkCQAZ;?eV5j*r^-2b8sbb-(D=z|he{%#Wz4!5T!V*ZtJuol4TAyRJ2H`t$ra$+m|k zy0dn-cjwlfwbdKzo0}i6{dl-?bnw};)ty_Dk2en={NUDKIyrih-1yDAx3jZ+a_SFK zn?ee9wA5MY_112!t*rI#_HM038|GScK+a9HHi2_{#us~tZ-Dw24JuGf0n0aSP$b!UK>oU?ptj$#}n&PBF>>fv_6neob` z!_q8(M5!PAyt)Vs=LMz0ARANJH6H_t(!`@teu}23E?N0G@T4?lI-ZWII7{+rIXdgk z;+zpxK9}BUq4iLNb+?X0es*(Z^~Q}mt9N?0`N2x>&h5Lm?%Y|WAUNpb*HHE5>fIZ+ zZ{A+JLD*>SUxpDa#G}z-Kxv9qKS$N$)I{%d2^`tVM|tst4*F>k z2mgZvv4`8(Ko$@9-bNSxkxou-I8M(`j)Jq_e$_|uXoMqXu5LU@yXho7IP2!cA=Uff z%C&2H=Yt%}@0zE1S*H7=gkxUIbtvEaqh!g9^6apK*q0@PR3mA2xCAmwM)?GXV%!Mm zI9MVH4NS!KfoE3)TfS#WmYmM@tg9;?1{AyeQ^FXiX3BN8o#!xft)4c$qI57=Ma?x1 zS|ND_;yhU^&N}7VpjgxVLeY(^R~@Yt{!>tg-yf6~>Tadp-F8_{li@?k$mI13;zM^V z4tQiMok14$n;^jUd6nPJ0S2w{+Aa4tY-U4V@G01F$xP}~$Y%|gP?0BxB0V}f_c`J| z;?hKUNhE&8!MIF5?ir%k%tD&k04Oqz(8~T~mjT#85!c0rY5Q+B7Q5KDTr+veWgH0U zfr(GzbOchP-4EOAO934b#fZ;cjt{B?A>w57Tu2YIyhuv(I|q3&NI1RF?~tGjKZs}# z%0O6xIq^3hoyKRSbg2C;VP}|;EX}8tbjV@(f+N#uZnm*GlV`lu1j-yaJxES)@?|?4 zjHbh6`>9F;B{v?ConFGOn-HI&JOng10(wNMBojSN%Hz1WNy{IR(xc~3^&${^V~vB6 zVR#m2!+iXJGBm>N7((b$Iz{C{HCbO?=35+HiVDsJ6-cWf8x)Q^TRxxDKCu)fK7dJ0&B4cYh<1}~ct6dsjjah`?iTNvQRlyR+lcgVeyIj6n)kAXjYbH}HA=QP*#m7L zJuq3$`_frdk3XgCqXIXkh#xTIh&#+NZMe_OJ<`-%BMayAQQd4$J)_nrlE4!|few~F#s9V)6sFNaP^#?U)E ze1>ICXDG50XTfL?-tb^LoChDh@<&e?Ml=qou$-rEiFWdFN6&W*B^MFY%D5=vGq}My zJrRjIuZJy`O7=A$7VvFdTn(6Kse zRijlV&d$t$l9jp5yLcbNkMq0nmd&@9v$vhMY8|%Yb@G#>7{zCid9?(~?mM;lRrI6A zM)&r*!{siW3Zi7idT>Q_f~JJPv*1edhUXu17oWui!f=-^G0<8~cIDYz!Uzhkg_`i- zbr&r7Lo~JXV{sAnKr6OZ9|dGH&Ur@d{D$6A>6Jo@1W%YY_KY_AuJs5r_INhT zDB8=0$qB8)ebbh&q}SEUJmbWBQcQlKWW#iwM_lZVoH>s!rln^u9@EKm7ePIXeh~7x z$QMdi?90yp`AFKqD5RK}8Gz^D^)ww;M`j!s$4O!KA`j?hoRcq%LO`#XGCjo6htq^) z4>r|jl1kaF%WU4$1z!Ab;)8|LoZnydy+C4wzlkU+X!fw+{)!j`+0QO~^jH6hnrnY$ z##{@U_l>px*2&$^k#PLxlRI?k1v%GYtbOL6$o(L&bHP*_K7pb3|Nh69G}JQJ0uBfl zq3F7u*75?%%-CrEKRNEQp54Fg3YhxiN{IhBHoB6(J z@8T9k6!$Gt2kC1h7NSQKdnFG*1KgoHF0WZWJV;-^h2;Dya+%X>T!k=-d4~^NCtQM) z@Yts$Wo7`zfeePX&cHuSSCnHLsTg!YW$Fhlh30Zl&BrMpu1aB(GQUom;1bk{WI)EM zz-uK3QC-WhHK$~UBO~eUUT^te<;Fqp?oCQRr2ufT=bIm!Xqp{o`6*?k3ExtxiD+|L zQMv|z13hAruN(hJ%#t}I3npOOKjX*_l*p?kR9IPCU+b;+*39Z^w|A?H<6h**!bqWD zS@)L6oI#R8+2K=SaQ%5kA18$*m!w&_ft`^XJ~Y?RXB;KoJKxeKM!Gp~)eh&qX6uEQQJ00e80fu%zMcJf?!DlhU|<&@%DZNE z(+oyTEBUc|qU=8=!wnZh_r@dTois}y#8m>T)@~J#ahgVf+Cd_N`b+SO7%jw0TpG`} zL#nm+TYWvQ)lc(7as>(059pXAu{dre74MZRzFm^vOP+hsA?^E|S05+U)9L;;#^M_K zIH@*^!gW_`s{YPZ6jcvLl@v3>MAbSlM$ipj?LSLSQq7GlGfdBSlOl~rk1794t-1Zr zl428Pu%NXtL$2_IS2KJ+`@+=-fWJRYM?*}xSL4|eI2IKI1^emoA@Z|TaW(akKbRIp zl8LX;k+bWBm({=>6bvkw2UqRMXgGt>#_UcCpJ$x%#`1Ae@rxN$KP(6FBzcq<&yvH3 zue~Z;M=_H4CdJNlRHc)V-<*B-ESZerfseJVQ4(j6@yM3pH;3n8w^FdH!YD~#S%6kc=83!ml#eK-owTxU?-g{K@%bfFS)qh7`sYiJ+ zuP(j6fA%6vF(e^e9oA<^vK3d!?papFK26m^61)!G$_wdmnD}FG?{?Bdj(YNHipYAN zhqV2S6NC*lCx}-An+l5JsXcp==~G8qk8nM~C)2|ObL;~}FJM{PJWR4`xAGf9S;}PR zSMUsnBs4+%9su5J&1KR27PywUN5!|5H=ZnVL)gv`WKn$<`yjf9&jP|F;aShgAFio3 zoKtpVX-TVb?GUdE_NwbJ?oDm6a4+U87p_3K__*hBZN-)VE3AtaP*Ng(Nm{k}1B9Bj=V2fOK=>VRc~`mvTPMHF0NJc3f2HdVe}gH_@``7o~> zk!GLUxmXiy$zcY~3a^>E7uwuL=Uya(k`#t=OF_e17N@mR~ zm6pyotM&*QuFvXhg|j&n8Vay?LTCyG43FPo@{#+Xtf`}hH<%blz*nXDyI@0^Gk1IK z05%!6|I8n`h>ojr!VF2|gR)Iwe-N!g!IR1+(IY(7zB?L5k_*M7CJb;suPZr%}m{N~ckM@k7{=Ls^`!C|a~4Nsdj4 z)fOi=-EAiBs8}!oG|L=uD>mTz#?P%^R#U9)3*CC+lL6C@)M*kxK>?3qgXh7d@Eewa z%v0?ABN>BhB^k$lF&YiBnv!qbQb@bDMgwKd2O$-y>H*Y4C15jw;c^_t0>^Qd*wpDl zn`#P9h$ydtNDKVN$q~pc#7QuNs^lPPNo%7U;78_Gcz7f@3L`}BiZ6IoKQt@MwNmP* z8JH)AWC=M}@Q9oNI-7{ZA@`y+&ZD5lN}+^v>mwwz*S4+;mk`yW2mo}S@aOX1Ou;%$ z0Td9^TS+f!HeizrWEZO*0OkTYB}xUeledt)3#q!};`10P6kdF%8-N7G2G%3jmP(ff z+Y>0+of@kbn8WHJ!vs=srUg471;R7Dp>q*@!Nd?I?JM74Jo5%-8kU59d2x2mlooUF z%=5rh=0VkDEel`!CM@qwXb^Meuen7+kfeHJy(aDtYkM3{<{fm(i$P%Sa*tvBz&&iu zR&H6zrHRYSDy<=-*riLSe37HwcJ4)@=vir_bw!V+w4X9U|}i;-E-W58OCcjx40 z5Y+Jaw@dGhCsu4dcA1l#L1M~*C9u~pQRkVt1phs_v4f^BHwDa9$d@r!Jhvp5171 zTdF|n+(<{y=%%~oCKf_KKQyaQBKaP@urt-$9S=zJa)Te!ncpQYk8>b3<3}&jo52oV z%-|-(j`ZcQ<9F_GLtXGxt8Og`tMt}Dz5~z~nx<#gSf}6m#F6gdedjORaUXl|Jd#1?fg>H@Y?QW}9&0(8Iw$S#v?c9^Zv(yV^&4Oy` z8#rulA=6u>-{H@&g^ftBO%i@XT*l7)hHBQ_e`^ z4Gj`s6Fzu&{J#n%>DshC80@k^+DwQ*Ka@oWB=U_G<3P4iUUQPeoqNatkT`>jLK=9g z=2tGnm*pg*jC5v=p5I1Eey|XkQHe0~b7LeAo znEUYaYTID0;$FO!zOh!LE>Dw2y)U$#LV%2P*6kiGHjTTfPSdIfl!clWhFa@Pi2;Ru zC9a{UH}xp(knSycwbtu1&Gr2Gm|s`8j8f(bB7`;O*9lf`bY_?O`E|4(u|%p(30=x7 zSpsC~y0|5$MQIC{uIkL8T2(qfr&nTb6~LjCm|sgMzH^WkZ0M<8-)S!Ji%J*Z6r}PP0-)gW?P$h65yUk(X z&vuXN9&xL6YFNLurH}ZW02CXZ8MU)z;|VR@*?2;h;@~a2vP{DUThLqAD5=6cL#(1X zu!~@l^u>ba@_1?5Zp0?~BroYMoyeVZ;rQbq0Z8p8MbV%a+8AQzUWBa_{J~g24JBf+ zIZBav#_taYL8$1Q+FgV*Q#)O4i>X znnMbI({wtl1V7oGAuA`M$efAm-WR-fzg8fnu{kg{;9i!05BamJU?UOKnMH!Hkj~gL zOyfHDwiH#++x}D#vVjv)& zdDJYh&!_;zSGBy&w$CQKU+ug1_0|^8ACwI^@us%k#HB`M0St9Y-fGSpOoMjlk7ZWH zyI?erR3r6BqoEJbM(18A8JqfQoJ}hXBza3YBNXcF!q%qzIESU0Pgv;62R8~xRwjgS`JTzKJ&H;Yd1vq67ez~GDq=tUnoP3EOp zFS21-6=sxVht*O4rDO<{H}2lLy?Xa1 z*+tnxp`-IoydZFlj21`9Ko7yFdq=fkx?0@rDB3Hk2aBJ_3qs_yk4$=UA`Zcc`n~RZ zQr(u6UiQuDu|u53X}b60^L*bwcF4!aY|>4>Kb1y=2AtVVPU@jHohrjy*5-X@nYter z@V;{|n#2f2CgI&TQ3|6ZkaKbSL6*~QI_x*J_(}|uY6|5p;Q-|u14j8_3PqZF^gM(( zYGZc=yj?KL^q5K)ujgh`!xwCPABXZu;zHUi%KgIapbT>%5an3M+gHtW!0)!%R-nDg zL)z-^xT~F=6!C0j!z8Po zC6tRkl~{Eo?+?lw(3&eDBx6V91&l)Zu~UFWOh>I{ z40ag{ZN}O6;Ig5WlX4BW1@NwkWXWw4pd5t3LV%%rel|&-;I?^X%QjC;unYe*$pDVJ zgc?c+0-<#I2xU$)ZRtgTm9~jQ2-$`C3+F&FlUQCLu^M%sxymmi}6A6c@L z&}Knki-vWRzB34D2h5>skA*=NgJ2erT0hGvk7%t&l3_|r=TX%R)zh7$qP#jH~h$z2= zcQB4DoGQ}k&=!(kc?LH766vDaek<~-r~%~c@s6b z5#mM-?=~Hz7wq8HmVDTc$ahQ1UdPL*+&@dojs^@5fDLra$p-sVWYLMs4pELl{O~ZY zVi!G39||Ap-_%P)=7nuS$sr_S$MuNr!+2+$MA(c_=MDZ?%zG_^|4-kas30P7W~c_V zhclF}*gMd{fo53ySDFx38_y2}bMjV{Z~;~KiwYz5$`>bw5mBnhL?^M|_ zE4NhX;tm;vU?mUKN>P%u67MxR9thYG8#M4H{&d#37U*r)MC(ELr4+3-gKsY+<`;uTlt*T|_0yO6amiSC6M-kLYgbICeakdrWe&K zokmOAG;RqlBVf>~Y$HJWwf3k;&npCLkh)m8Y#<9Xw036ZkYk>%@YFLd_35K^Hk1~+ z0TkTrBxM;NCjJ)D&YS2~F12#N;qI}X!Vg|6lk-EKC{Fb3OMvFY&27NF=pXbCsfD_> zqqp)=;B8L6pc;O=;We~u7iVUtVuh6p0iJTJnlD(X>)*Y#LFWYfcW-Z)Q_eQtzq_`< zhg14@S9BfH))u0@mHRKTV{21OoqO#S$f7YlqOT~>8`Ci`pS(ZK53zoEVw0vd`bcah z_mHCrQjLt)ZJANlRCr;tsQSt*L_b>KykuXJcKRh9ruh;_9vAo8QE+=>t#aQ)R7Lh7 zo@UejG(TiqHPoRF{5q2M{=7N>Co;UlqJHQ|rt3#JklqRQ>Fov!d^_MsUW&Y+W!}ET z-ik*=2eX(u14@7m2&fMU&b82l_aJWGJEv>CDvn^8D`2C_`To|qjQpZRR)I!VCMl$r z8h7D|cP!YMpBj@LPy_xNDxGFz`$F(~cU z4@fetGXR?SC`iY0P$Ws`XgKVYP)*D$^O3o;cIVEm-ks2gRJ*@4xEpg&j5>O=J&lZx zJO%flUR0f~Vdecl-}N4B$OBTe$Vp4N7v3Djr9m=n48|Oc;_}GwaQ3I1`po(nqZIer z@TDCI?~U@)jB*Tm`!%!m>{CuHepXh=SW)dGlNUITye>7Pk8__Q57Uz*)5e|2F9=bw z>p#fvZEq_5I&RRt^!>R?+FyR@&}}YTz4`WB(aUPYbK%{&j_38>Tq_nFmTge;%&gYB z^X^!}$!~W>Z`h61q&$B154(HfgOj~`^{>m)Wo1>@MAs>Er%kV{Cz!1*&A(+yeIb^*X7?zc zj)u51B0u)9=gc>&UiP4+wAi^9#mD5wqH8-L z1DSt5i^F&R(~@fVv*fQBH5ff=M7_S>kaW$a+~B;Xl_Hevyx4loD=*F<{2)1_UF~j_ z7cghLk)%kBPPXCBy=d#P9HF<1)jZ-J9K~ry$M2iTIz?9gK|Y?0k}6p;AwqLZ*|m}6nf z`*Dd&Mwl|23fRl;gCZU*(0%PiZrX&O56NjeO-WbWTbq~1J;GVbM|mOndPpy-iv|^A zluscW8oogszx=hCZpwh{aErQ!t45krLK4&h22%6Mxu)r!YQhs{;Yq?fhQR*p+kP*$ z^dh>jPdCu8q4+3?he^>nNR!d9zwiY%Y%{1dZG>gK@f-vT;_MG+8ZZJg%Eav*|M8Z)n)<2+Vb!o2C-VHMb5nes zlLjMsWSLfZaduU0{?>L`geBi1K-=rTL9#ZytJ9Ubro~Ospm&*Q{5pC~2`7*-iw+3T(&2q$zBpU-#OIB zik%X0%xr`3Y4dtelOp_)oBA3jVOGvG&b>IgehN7gU3c5CW@UlYNBS>N8F`7K4EU4{ z)f1CJtIAw)fIj5OrQ8y2>?8z#;Muwm>31Rcp17AUg5BcH&S;fl)dn(n1 z>Y|>)+o*3((hFJ`z)L87wsC7;<&DWsTp{!BtjSqzP^zr32IqD&P-W(!VZj5m-{vmz zBD^rzKBa3B_~#;=(LK-BscsS){S1B08fhZ)I5%SqslN0dU~W#c3t^7&B%2lKCJMX~Dp%QIirvH=d%lp!JZKE&T~pACGb`tWH5{T!ZY`0z~JY zgtzs%1S=@EHL@**(m>ZYw+BS-);f|o_y^3aj=mMPgWJoU1=mmGs!9s)?6*U;3|=z* z)IzP=T2bS@QXB#yvJs+x$xd`nXO=FJ&=$>wVM?|3=@ggC6fqANYHJ3Tsaky%7Ai-g zpcaJ|00C@q@(D(tz(B!#Dzf;E0`|s`;ihjTn!bjz$)eR_Bk&g1^W`?rAI+Y|*!z+i zJ9IxBw9X!(Ur%_(#gX|LRCv)uY2@Pjm?;@?9~mkb5)!|&Yqkn239M)Pxs1YJg9&B~VWExxzb8%8 z*wqEby)N@B^!_wI4fhD#iVfjqnw8(}ZL7stDfE0iS)qskc%{B)R(d@&k7lJ~zvQY} zXj6q{6!c1voO(WUIm;*l~%Dk7eKnEeLu}?n3WYDwqVo^>>T)51|$HKys6Ju z#0fYO$1h)*PQ8E)aJ5?kd}{E>h-v0Rha1*RNI+!Fu9H4J3*;7)t7zVn2l> zIKq~6d0C_pPar>U3_7J6C~u-=J@sL&ggW176{eIv3h`tJW#ElPCH-2lxT2pB72#?k zG=!Q~Zb;D%#|>Ymo8Fwt+L_25YB>-+PGPC(9Lx+2nCDe_zS=;XXosRAkjA22SgObL zIfQXpkB?^LJjvsq`b-f;zRxaIY;qE#oOVrgFN5_~c-dZJMb_Xoe6$u%s#LSMu+6xM z?dUSeW(RJMiHUF%bs~SaO7e$aL~l4S#%R<6*U~<y>v{bx|=Ua>I7hkqjcqttj0IfWHoAy7x&Tt@QL zNy{cP13gz+myOI(T$G3s>Arlm*Iros@_QeC|BE+!dzzfsQ|bQ{c#~BmhCvuh)+h3N zfWa4{y*=9fGbM^?7q910E71c_uS%{4ihZbQ-s>pGizh#rFTBV~@5fJBnq`bqmU#bt zJ-({0Jkbg*y&?;0JSwpz2;`lMYo_jNDv@0^=w;79LGPQ0j3eHv8tEa>$VBX=kw_x( zP*81h^CquTT=7C~4UXsWeH$2Dppso(X!EGQGSQC~zJwt9l7=B6MhhCNM5Pu$rR(esb@Xii;)!0n#cA-s8bndM#y6MJ^GvE0Q!9J%oDL!*VHnSuBA(#p!x%F^1>jip-_UR#{|U62UT==JM3OZMYpQp9J| zY&x1ACX+#xpCp6L#}DssK70CX^S56-e(~vxj~_nWdj90Ihg;Dlhif`3SYuXIJthcf zY&-W>Ry|3&V;0&w&>U8sW-n`gfZhdcGCnlzokg=^))ZYTba~>>&d$!}!PoPqW2HVF z!{PjSyx~>6S+DrXCw@hute!Ee3ZB3<9?z6oGv;QkR9ViHx@8RAZARGRG1~RQVU)SV zj~28lpT8I>of4K-%?(5h>a*bxve|#~$tU$Ex=ySPA~ zYg7QOk_XItAg~41?gnRUc09R!_qghOffd5Sx{5prD|Dg-9CnvE%r`*sc`Qo=4bCST z2N96qmP~LwZ<_VK&A^P~*ZmdT`4{Gb6fMRkcBT!*OXB1Fx&;kIi0Ae~W# z9;AgRfu2E@2QCN^RPwXg18H=tJlr2cz50FKL|xOChK1IJS<<3z3D^FmPg-xJSQA=j z`|ozUFm?`LuSrUZDNJ6cWi{)3u^hwuWWO(K?xv`29Z0Z#Q`ezO-d%RjK{+}W(t6c3 z@9;7Uk(+-3sdhy*_?_op+?m=1O@@Cnasza;6Vn9d0iB_g=>LaBp{sub0W$@J;>YQR z;sJkqhPy0%fe)CpR5k^)g@<+G(t-hXX~91|@`4Cp>XN=JdEv}}rLH;tmS~uk#}|wSs2V(0kzcyi!ei8iLNzKW>ie?Fc(!r8=SOtQb~mZQAtSJW6BTk=%| zy{tjj^!kiP>Uct3}RjB&S3^6Ep7EBlVtJ!D9sKX zRY5$_KAfSl&f)nT+?QIW*MGgb{eLYgxsAi>&d2&A4tBCNhnZ_qK9 zZmTe8R0z+Ru?r+INS8!{zjUyY4#rSfJnP%Xa zeBAc59^WBD2pYrYl#<-oC=Ve{2KZ@?wN@MhjrEn7eXEOeSXmJub$jrbW9{u)Fn|nQ z38)n*TCWOcf62MO#F6I^{>t4*BDHNChp!5GfJr%Y>@;xa3UIS8g3Kj*AQ4tf6Vg6O zW3p!2z#e5MXEoIO+iO9eYEf}L&asdyAaXsII2C3iVroX~_6p{=w+MoTp@$LD+!(Au zBA6BW+1BovUg@`X%~UvNd72l;C7tO3I+8dul&z**GNZIgig;x5OiyfaQop05OiF)x zYJJ)8a3A?%N|C_?m~1$!ROey7k4e+Y2@=@BEAOng=8JHJ@(nf)H|xX1#aB~ONQ$u5 z#*{f`%?xjh@e?&FtJ;dhlYY)K<_x({%Et)Lr;3+yI;tp3D61kG2&*T!I2hL5Eh!BK z!8L*v_66FCQJ=i1icr!?xl^S4u)J!^!*$!(hDD0i=s9D`Y!e`WCMd$NE!$(zG6uoP zIr;`g?g5NNNe3bl(OrPqP?lg=bU^Sd z>N3u)daJh{UC^Z0b{=F7w&Kw!!TI!nG?)gIG=6uQ;ykk}VO?@u;)iiTdHlQ*7r9DB zQc3Dtz0_N_?pJ{w=@gF0y}jXwdwX5{Sy+filcV^{{iKS&ECyfh?R6LN{L9%K2vA8w zo6+MOk|iC=eMwJt^;SwzlC@L2rU+K+Y8KPE-e5(*V@(o>A!lCJ-nxxV!xgqONuWWH zGfHlounZ*_D~SJk&fexZWb1i;P?>s;VOk(3^P-6k7;PvXrPbM@DHuPcLp}uqShV3toOy~i61iI0Me7Ui%$tvS=8Eus z`Wed4hu*z!PAL=8)Z8u13Jtazh#k6TYatRo(Eg|=zHy*Uy->!;H}-&ozcD~I4N6iW zIp^9vvk-k2kA`$l!`HS0@ENU+h`FID%-xj0$@E^YQ2Yz~Hmqo%gqZS75LZ`+8G#Ub z+7U&7(4IgwW{G@3NMf|42^Q@dw2j5*3lse$De`E;L?i<61yTTii$N41^>V$nx6J~2 z>*8A%9qS1cmZ`b~veZvA3TLyIEAwDpErn;H1u=0&X(gA3cZU28+cjY^%1r(@nAMUg<9F=2dh(Tq#+8B&4r~ z!CDz1?uJ~cgrs_DWU?nn7)4>*dX^c9%L#zaJ?V~*W;CW`rEbovS?iLK_?!7YU(oF| zTX`cB;PfR8adL(zyF*cfrM z5{dQ6^ziNQ;zD9orb!E8K?tUvW`jFMig0A_KxDaaqx`X)K?OW=V5Dr9kJ6&7q!$Os zB_@a)pqt`77P2a@b2HTFQiP~oHQo_NikUuE$z*WM@=u35yY&E($-cf3r#KI;Z>}~s z>TgeK=&ftMjGWEk@ZB-HNzp?dbLeK`Ld=SJ3OHb_=rSc>iN%Sp?WxUfPv;_Jdx(qb+YDkjo0plFZM#RCHzz{KGe{+OwiQHK|Qj`EgOip0d((*1xW`%q-74XTl`@Aq`K_G@4czqF0J4?%P_KS`|?V z`rOW{q&SI32Bs3GKkqTlAL!Dv<9HJpvhlhOOh06>Ci)@feX6`sHLA@g8&z(r* zM}Y0$iDtnt!S57j0Op2tnU)=6b5?(1Y+>YCt}d&%z=?@5u@~4X&jtyM1Y!ZJxf&eJ zd}N6Vw?rVt6n0iaWa2lcaY}I&ID~@;d_L+*HZOZSKp@(~tzME1{ad|Ap=}7cunSbJ zJiNIE$xp*(R*}yoFVaI?e$v}8<#hk^WKi|nD;s9a*@gS<)eSRBv*UhyZNrr5D9NgR z`-Y(%7@M)Q(}y^1!$&?g44;CL10Zc=OfHJxfXFN?s-z322IEz?i!8wYJ3R>_dCzqb z*2jpiTzZg}gSZ%CzcS}4HSHWJB^z7s+-v(yE|R@;PRYH9Y)XE4vH&8YBdDWv?A(aE zXXE{RbpPx{mJaeE=Mhub6fts*g>x%XGm0B^3I-3k+4AA*s)+doi$i&C7DSbf;{A9q zEu((4_o%mb_tDr~H(XwaV+wt-U+9 zYp$iH8 z9v*d0@=+BZCY>@p)cLu)xwq-YM2QpA?68w$C&?(E_&~1hZ923dW~>v3 zKt^$Km~`?Y&JL5#AT0(Xzo|!in~r3-XpszO%iY+!f5YMoGRQ;7jlH{$t{_n90+ddg z9d{-PjgIN}?v1@Wk8C4|AoCho+q>%~Wt{JWxF$z=<^#L7ci$msGA)lLso(sXKk4Nl zEz7(h_QB+A?cG_meV2nGAC1D^9ley}bd;QRCUH^Ws+rC~Jn*2{yt#MZ5xJDbAHOJi zyt8+I)Ah)0o~9Wh!l+5cQk7?iQ?L2EclLZxCUJ2*O1x2cGha@UWN_5kk4K|C_YtwW zx9N?hvJ|@cVDGM*Z3%#?lb~1ND6JBtF+4fzaQZ`^#kL?2u#~-7GHqX`vHl}MZ6`iV z>3}bJ=iT;%E<_3-li}VzE2;Wsa(!(G=p?7*WI=vNd{x>Gqck*scQw*jc5i>SpqT1tcK(^IPg8Ijc0RNixdeBl zyYUkoBL?LE8zb=>;_5c8~_WLmrw} zVPYq*A|MN9;zgFeUVV_WS;Y-_z0wORJ*|btLlC_vMh`QnJ8sT+km@h=YB{tk;=~W< zw)5KWTb!BS%k~O$buYTM*Z%IWUtd`K-iJ%;8z1%Weg8LJ?(Mz$(eHfm<(sec9KA@2 z>3(UxFwu8=n{YsWxA%bltoHcN3jbNuOm{BTVkG5~82xrkl#q}dw`*iEi;lk42%Iybq_EiQ7Ki`?cSx4FpehgP)w zDdiDRvZly9*ep4I2hQYDGYZh;&-xP7iOiNOm*)waXViy0neIcFNJ;f2%;5)4P(Ymp z0<0zSYvU$bh0&)HA7{i%CGO- zl2`~2yKEE#ZXf49YJI#G$%t;i%ro=s`4;JcTc14R8&L#SGI+hdbIYMTWO< z=yLaY1|eQianYrGTs(rhT%`;-nknz9SB4`vK`6R{kbM@tG0d{A%p{l(-o9%XiAKc* zjnVPL;K}T9!OL9^z^Xwq;8E99a(28EKD;bGQIlsi96 z2C`Z!r;4T6`7*l5g z{*#%@3CvB&A~7qV<|iSSb<9nh=Ywd-ERKT!92YB>2b&K6^iGG%`AeNA;)nAln1$!O zF|mR|%aJc~8v(|ZVRXD$lc6WW28itfe3YM>>BJozRVf#&eKi`~MVfa_j6nx!EoE{B zcxHdyEl~KW9(Ur0pTz|=B0;I@+SA8~fkBff;}3YwUI0f@G2~?&VKn){L77y2+t}b} znjQ1m)wR{zx9$*jye#cXXx_!kyswbeNCCNc#8N>=p_^aX%m=ESh3;PSNUi=tSy6<1 zh)(IhCi2pmYuW+L$bYBE^Mpv4xLbWR8ctV`k4O1_JYpurbs~X;#}yuFb-zfHgW!4H z5~CC$OYc0Th})3mb|HFECPioSFv+TQvxDqeReH?#onTKlEe1*FUUZTaWtwM@c$`?w ze;F48*enOtwBRKDo~uwwyEyq}LY7$||4@C{XnsQj_Pt@Vz+J4FS{Pm1Sy{!S5nshZ zh;MQWGHwLHPzGwoAw~+9dYqi1Z@%zX3@^rozv-N9XDO}$nPS^TEG*gp!@V7D*0^W6 zFJ|l6r;mb}WISx;*?|P92XD7=qiveah2M1|*N zlb)z1pT2*?lXq!@oS|4URY98=iQ&+dV4fDkXlaXGBd2Kg=bzc8F8&=39iWGBA#*} zZyzKl=^)wR!#cXp9@4`O?!O`}0V0gV5E&e5+~1(E>6owu0L%M9PJTWpEeLIFp-E!5 zX9Wh%lQhc-H-nAp6$uHt%mQGQ0E_g&X)zK)cv09;A5jS02wu)RQVJEO%Jb1OUCDHb zTg9x3ZQe%7mRrS0am}aIWLov7Wl}WhKvrJ~PPaOo1YG^FD6kC!R!IqFErm#wX56|y zXfw>N4<(b?h(uo0zlweoas$q|d0ftP$t_AIFutr+TO`d?dbG-yUu!!%Kqk)itaOGo znn2~m8p4D2=#eEkK4AMeITg|lMAT6-oZ{FfIeHvy^4Jf-M8>z1B&)tc`rUm(qu)K- zhTvS=+o#(r92OiT+HM^c+MQrSfl`EsxD5K6t!^p+-ckV^$ zVU`zUd#jtY!jXBK!fjN65V*u(mP}mIxyq!h67R+vd?Xw;FmDOeIxkjsu#(guCaEDN zYb}g387ej5yPY8>yThT%yxIpb`GTAMxJ)|J0yl(Uk*9b|+16;QQgT|1IwdJuepydS z(dVUEALQ8y?ro}yI4cpN(jO0R;`*ASM9w;m;IH*TW_dvE0t!2}Iu-hK=*a=ntFIi~SlEGycrs*mqOU z_+u&8erYl;;UnZK*Ofv9t3qBMmq&mz>$NAtY?Jn)%kvryXmzGp-Y(2(-0+1cZ1@R? z)QYceQ4UCiTUeY*;Zta^fLgV}mnb^Np0r!UG9Wi$&QUomE;!8qcG>T$S$xg9h3KtB z0VIbty+XupICh?-Sy~>=c;KiKEW&olEEMFcx}J-wks9QgP~M11D3fLQ!U z5xb;}7tPPJ|KY=9gldEgJZx3qWKo>zU3`x>dN*d)Q@b=cGaP>`YiaWhauS+YO>;U= zQU-MBa$-)$0twb%$teJ56UiH=Pr7Jg68$e z6C7X5%0>1VN=&4{al5maol97oL)c=gqePi}9B0#bG&=jf**#7t;$f3p&#$vu(uZzv z-K3fB1D&OIh9G>}V8=s9J+f8A$6uHvOU&csw0T61O}sVraW3G_EUI&bRtWip5Q?Hs z_C1)RnB51(=pcaD(id}^HF;@V7hS;K2osocbEo5Wz3Cx2Z7(j2pz$a;17dONA+uj= z$!alQeyJm%am_0?OIeLG!2*C4Y7^ZWH-HzkV(hCb*bdH zND_ROA3VHzq6rSLGJ(k-V$<2_7_p7q%{o`kC zy{#oTvL8pu9>yQOF8Sn?z;gLD0f?oo{hXoG%+zHOPz+Huug=$q1G~D&r*Zg@1v+x_ z8qEW&3yKGsT~5hAic7PfB$TEJ9lfDi5IuAsd*|+Fi9mKLw)KtE6sN9pG z1SBWIqwj3~#Ya|m>-TuF3nFbY#36hE*QCw}lbKXiOC(R=#T8$m+ja?)**sS2XMsiE z-+a0PPj*ez>-J!BBqfSO(2S1*A4d{_Y$qwi*3Je3_gChbfsh@wW;qEULmDJW=`ZWS zIH}+?ILoInH7Er4djL-#SF4oQr?Yur5apXf*r^n59+r4 zzGQ4Cc9b4FSnb1?`L4E}E%1%IUnhClH0MwyYUCAp6J-t%x0=Ij?Am0lNK&$0TFUZ{{OUU~iX9Om3^_@AMC!4#8?b30ToD}i z&#FYGTPtkWchHn}Sle=gBH5qV*pW0*dubaEiGeo?xFFp*xGhMb?$7pek<7H0@uc*t z84Cc-dtk6&o7tRwSV*E5)T1p~aHgL=4Yj_)^@|I3k%Sd!m@1Pu4z6qJMn745LolBU4Rw3t1v!j| zPe@AUi(;A?iyZ`fq=y^GTHzi7WgC3XK#gi{2wueF+l;}oAsB!RX>}yJeY!-Th}-&} zT5!GK6o0GWK$}^gL!64%VB}=7A2w%6aV`{yI;wJpeg;xs-bP&`@j%JYAaTKHm=xN# zTGnKxVCtD^P6qx_12q1?H6X>+-=a;wMw89H-$@UdzGU^16`HGknja!froLj|gj&R4 zOppRi%b1j&k@!K&B=uROgiByERpVo`d)8a>mtSh_JSrgQA;HBsTjij4&!#KW;dXFu z(^^SkH{RNGHPQzCY1UvtH(Pc#8Zqjf@Y0wEj{$^4=(6uB?|ZEZ^VCty);8Cr-==-q zx#!{ow>5y6KY^1KA0-gYduAIEi%D4(4OVGi-|;q>t}>lKq@6m=8Z#Uv231u!K8e#2 z?sJ*lvovbG_}B^dAfF*t2gF?U1fMyy;cA~V1R=mClJO{-fbx)?e0xf7kt-koP>SGkQz-9LuB!+BK9 z0`1zGSA{$iT9Z&mlK7IGA{o*2A76Mc`_kpl|FRdY&vq@1 zD1)CuguP(4zI2A0KI;d=GFsR7nirXHkFpF=7P^-mW<#d%b|X84xbwX$^Atc?e2HN~ zc5(doZe7hR^-HEaPA3yD=txs?U8Ah5wDU_}>$cEF$bE2y9Byzjo4i=oV$3bBn4D&m z$$gSNMA)H;LIj&H!VTa2U7&e`vysx88kwVqCrNQ;9>iy6H>nhahuKM5s9Rj0;Wj{$dpL+yoS83J zx_b&A711~grX1a3Ekq)CSR3VAhv|YrXr1N_R!_>&+~-@raU=IlvTp{-1fY$=0;cJvHgAo8DQopcGzk5#2+`YyGLq%r%4TZ}G^SCZt6X-sGY_ zMk_3EjD4|15`T~~@dJHCVp*-y?H+or%?Y*3Zbi3#DkWS>Gx^}kw_AU5^_Qewt5N*^ zw{}*))A|>G{~N78*W$Tbr)avZX<6mt_gjC`s#>kqajW(I-~8jv&quA+`+w)V_dowe z>rdYQz4uzJajW(1Z~bno_5MFT{zmJt)w=pKCpZgp&}v=%GhQ=Et7ZP;x2|2e=0`W; ztVth-j!Q>FVHt6OJtc4c-0tczKM2gg@SokAGa0@o%j3x@+`rrPrNI5oB*qHAfc| z-MDh?%C#cTtL`|P4!ZmC;CMPoiYs3;V0Tt74VV<&xNrMnE%clZAu!Spu-rf)V&hhMBU1qty_zaeum$g^tuk%>-{>WGp> z`p=)5Xr%|>x0%o;ZRQ&jdegV9^woEH6Qa~=FNso7=C&_fu=ig7wVO%Ar@frXA z_=jN!_ltCRm;gTh)_L%RGBtWYN|69mfz*R#pBkz`qpfdza0N+O1TrcVKxwG%TzBGM1O+Zd@J}$P4yXy-kiL-84(j?M%y1Ur9BOlYE^qF1wx6LXF5G!Nbu+Q=jMiWb%V6 z6pg?xL>KwWsQt~j=gYl}0mk2l)l4t7-P`V2StVn8gwzW^l&y~kGaMahX&yg$Zgw9& zziJ+(ugx~R2B*A5kx^PBKuve`Y=V^i%3HzD-SR(*j}yZS9Buervooe6AKI^PFRn+U z83s8lJhRGD_^vzt{Qt7|Ch(CQ)xmga@0IThYz|X98m~ud&1hzH?art z_1a#owXKgSc1PBDeeM8{e z{eJJ&tLo~W9vy3&wNX@di9EcvCpODuCIW{eW^`_2*I{237Z+hJqz0HuG3~9V@b(8FO3v~s<${NQhOD#a zw?9MH`69tOw|tH>rgP7;LM;IA3_k(R`RbO{b51dmIKFwvGx;PXPKE8+;=JLD6K)uf zDqJSG&>kGo0Maq+60+$!uG#bZ;hIE0 z8}T!rbdH-g4j%Y`oLOAXoKWxbsB`$CS2U{TRgODu&JBi>^nfp8@Py_0;ZZ)WNgHL- zqU*po^1|aC?z=uT)Zw9#@bBXTR(LXv09T&~Qs5t4XccM_QXWY(cpTFmX&D1U-Qn|4 z&Sna=CD}%TABHKvquh;+1B!9Qf)LXKcCd5W02e9$mg!uIYL(kW>Lr@^!+kMbJ&CAg zFo607z}>gp7D7kXt8ZED_pGRZDIF;xml6Uke7?`|K{=zi9H~CYI5AlkiVD)EfH6#y z9|{>mNXL}Fjc0e`e{|6Tis?rEXt+up1e#T_B(vQD3z8t z=FZZ}@V=Tq@3@w~#M69#e(gE6G!C8$Wp5y>p%jy4D~SAAE3)d-S4*WmlyoCvtOg9< zP{LIl>EJ_{E~z&MVTqk89)c9pB-V&Mc~LK$#Rq4A)z<8n))OEpc?+MEatKFr!ne;j zKE~BZv?Cb+)(fcI6d(Ug%0a1ZPl=DJ7oc}~FYe83huc~f&C;}p=JI+k>)Ll&K2KMC zU6#+oMF2roR4rL0(vtWzMAaiaIox+W&+?QSfwpQq&2#!u%wRW&n#CibLwpbK3^s`6 zCy0QcfXxs_qBol2D%!M=qzoi_BO@@9Hi06LB!u;G!Ze0Pc&@9#Jg(qf`aIx6x9z1; z$sxGmdkBvddRj=CiVsv@q*{+s9jD$1ErYqMaK`ZL4GY4&=fri6@__$olOK`Q)f1y5 zpstln&vY%L4B1#A2U+jUo?}Cxan0-%Ll(9VRTH>5G$50%3L0HQR(fTs(nh^y_ok9C znDpL+I1^jXo>ix*r1+ZNn-Ca2ZI#q2C^(Y-5sOOHE0UjTHp3~p?Fb;hgof`3SWr0; zs!ZHmOk0I~2E!s!Q-h+CLtdY~1b0#_;W=7$wv1Z9xmU|e)4nsUT0qS}N-UyJ)!eXb zO_5@thidVLspWb|@0G(vFb1*Mh_7(Dg6yT2=g`uS

H+aD^tMBOol;%eyMAcp0?< z@ZR2drj-wK0-7Bu>l)KX8Wb=`>90=<3`GTQb?opeNUy9H1Kh4J23{R-9_S@~^F&O8 zlk;E`4VCIb1cD{BylLO5T19OM^>%4tr+sWmfE+ISA#sOulzyDRWDx|S1AeH~7KUa} zI1ElH4*?dCqO1f-U6MiR`jbwa%fgV*4-~@HRDmUlYd<;~$&-aGCPNHx;sM`81}dmb zj$c-&5A;Krk(%JxkpHtxc8B-~#w!=OmnWVXVlLvN_yz?ohnO!I5paOYc6_TS@{|b9 zQ_n&Ij!f-_3=sVW&Y*|g=;yFXy^w27La|ldzlnhvVYPyD7dVCQ^v2;9vO_K~%qsOJ zCDzt8B5weN1JkkDUwQNfI1%I`5fSMSMjFz2xVlXg?~R$AoHy;kvS%XG6Illc8D}lm z^QRHRfYG5lFqJr9mdoP&Q!2J#h9|Z`P&d|5kv736F=|5+65#IPNS+V@2}c7@@Dz}~ z@EUGwr3toiLtf#Ejwk78+LmY)ccBKo39S+Ejsj@pE0q1>L!uuFkwyxfF_c^Y29f1C z!S11(@WCZX1rm$#=;1cLgU;0^!$v>Qw@9Nb*6a2wLz*TanQ){4EL*3N^+y%q6H)=8 z4uLE(&)_VRBv_g>1lmbV(W*zuQz=X0vn(NwIEzSft5{dDq6wa;8lGn@VBB0CvLq(|hDSbdgiwG^nVl6R26tMERmqd*^w>m9{*qVt3RBP4ZIV*gK zyH5CqZ_4!h!H3>rpp3i+L*9Os2EifkyDbMGptW1ux-K=Z^_K8V`U^Fe-66CN!w=nvM6x5U*JtGs)he zHLnApdBQB#e3>1rH3R{iK`D(?3TRP7$Tq`uu8?Q-M#dC@_JMa!RuL&iu>Bz{+z0IBMZ?Zd%< z@XZ>_+@ukgK|0dY6Qxu=PHGi@!W65pYSlnx!waLuLK1%{#8JL@R!78eaXj+*sP?4J z70VSRK@-!$GE{_jGK;~DV%G3rY=|e36cXaIy7opK^223-F6tCDytD^HC^3pKB2YpY z7Tw?#pJlnX&I&{p_XawJB&fRMI#Fc<7DC^=I4#>jC|mVw^thN0|Ci%=W20v^3^8u~ zqPBs?($&{`+#*IvE`&+*gwIonakFSz3y|1BT2q8pwojHb#?cjh)LKI{7*>uY*(zH~ z8TFKiyOk$^xjQwVt5-ag5NXoMPzzo_e!DosE5TDk144t=JPnwp%(5F=%VC^HktcN; zW#W(>x4eZDZ^Hx>8|PG&P8)!Di2R>0x_exx?g=;A6E`?Db>^0^4Or?Ox)`oU<7L&` z2CxpOLfDScR)YnM+Y#t1V}t^qH|!EP#~ZQSz$b&<;Ga6{ly(S#Tts$G-E^gwIo`pK zwn=J>(AlaSomwf(s1bN>!9o_@q`@PKMp3YPB0~be4jFV^$KB17>bv+ldJUL@Dp(Iw z--r`*5K+`~nxQq5Ei#_y()xHJ{b;v50)U5chCVMMie5~?n4xf@CkNp~p#~tZsL?wJ zF?wwzH!1`W$wO4p;LOSW;kM&~jfC|jB8fr+0gfeCA1eO$gch}h0xKz0=Bjedo0ns| zwr18K0zkgpZ~F2TU=zlZ$ane#;mj8#gn%dz`F^bC&Y7}yv|(Kj(dy`rA-1B0&%*Gy zG}ZYnFhDwPRzGqINUBRTC5IFpO%NC(-vqlI$iHPpZBx8Yrf>-rh~BFmdMN`~#6$9$ zL~F$RAL`gumZvCkRpykzi(o-^iyOV$FwhFYrk&GnaJ?fr0pWhpmK z>LLOf-l1DG%Dk^!4tq^W4MN;IXxhrJB^MiC$bCq$EUOM^Nle$HA6Ox1!r(5I>b93_ zr@wWXrc?+31~vy<0&;XxOQSoSR7|wEq#6kUP{6EIeLT1d@=ge%V7I4@@ELY{BGV4M z!E)*{%0<=zhZyY>^04=~p2Eb30RGq`9`I_`is{cgrQWLJ`BFfN&&nYX`W}W4k#Mkq z0lH&5M0wH#6A{Z0JB3RcLR%o}>FNR;0`ZIMpWd4s3OUnIO9%=D{6^nhUETh9u(Msi z@zWBtm6xxqMv?|r%Aeor)F%dW=Nqk{nyi~#h+{BOtSy(ulqSPYY&yo;` zOm!5jj~8>zin9=jlE%oh282rB2`O#Zk))#lY*GlI$JW+$CHe)KdLd9m=0j#E46Rnf;k2R($K+nb!#q^6PQGlm4q~PUc>S>1a^us|zNyznaI28JWyg(FfC?i$U zFL1_Dr~`M&l@XX>%g;hewCG6S`Z3Wz1epa~l=cn+P8o~>y>bvKYL&R<35KXk8w?u} zQ44gB8BS9#5);o+?{RO`x7dSk)O$=Uh%m7qTY{$+VbVab0^XTxK`57H1ZsJjnc z27mU3w;IGJ(E_iofIn&Y(+huYhd;N$pF7}B2L5addM9m7*$*&q5hsRINbgMo2z5P7 z*^knAP?vciFtHxR`zLG*ZfXq74)~Dzbpm7s7S<6FBw;Ynk_k5m3|EpygtMjhq6|QT zgVcy{VM(;2B}ua&igb3D-kWe-YtFJEk|t6IAgYsu# z7+}A)L2w##rEF=csvHiYQFz+oh*P6!h_|bnMbH^FsVOMR8j-K?s?p%W8w{`;67Cza z^CbqMEhLbKybIFAmT(E=iLkb9#|Mo~;;bI;q!mrwc8AE)EE%6$v*9LtJ+xK65_>;8 zrl&)j9>W7Xl{kX*6cU*b%po5DWgOM_g6a^I_6-0-iEW8(*y-sVT08=cq8YqtuG}hvnbs9Km+6OKBxQ2U?dS%N#j@wK-cwXp4`oJKlR~z9K z9DYf)QT&4DsUj+_SiHjb@{V2IJ9WkuFg39APxxZrTgff8A5aI+U}{;O>e$(ty<$ik9a&E?y|EMMUW!5UHSPS@@#iao=%x*|G7|ZE!V{FNX$6oqg`i z&T?b}3c4vm`U+1=dLyE2DX@zvUggh`gIVLP{6ok`O z36B~{KAGW(?Q~3jS~n=LP~9SUR@t=S=!OQ0#CF{E)DAVsKI*E|_NegvZ6}BYk@8|- zO2UNtkYijlXQr#hoH<<;S*UzaE3i1kYd0r157UmAJ> z*6e7H4MD_3R$A?2cd|5g@~+0|LgIKCpRV%U_NI~wDFOZ9BnB@15f1kt3mYTAe8WrQ zIi>nzY)H?)H|K4=chj1VEJUSzd_ok-yrr?4l`{TaY9Mo5NfqC5SRU8lrDh zY~srLRz;LeOk-LINPItIa%aYK%BBw&H^ebOns$I22p06|VS`(x|L>HoJj`Tx#OF#a7>#3hj+=1v9QJ80FqvCGI%4l0-Z> zyPZ-gbnAE6AcJnqQ-#XNqD0b@7G8x7XmrC%=!dqC>-VSCRHeZ$>*1>5`qTs9v^E|{ zF({jJuAy4L1NOTy3yDs_jT~);&&#Ia`P^T0xaYgT0;J0gGO%L=vKH-!lZ%l}a;|z= zk=CGb&{B4{iWy4gc1wcnP3CvQWxdCHlO5`)QL>q3D`PJy}nX;`Wk;jY2fdr5g#JxU$!%tw4IJ z9Zk@qitw1CR#EJ)ouyKy26NCJ%DL#3VeNC^Bc{fHE_PC#Ikndgu?|6#Je7oM+i?2< zzb2s?hDuR0lcwkI<}EO0-$CJ!$mc;j*ZbC51a>Jou<&Cp9lIf)JNZ8?f8KOQ-2jOrz6I(n$P|GEQpp@mQ#Vtjry`kC#vz4R zzyJa(2S&V9HJw>G;siiKx+!1)(EeVY^;%E2eIc!MkZH$`)Tm;|c^0rvN+~U4DptSF z#4BN)QQMI4P2!Wp9!k%>S1frXiQH6DRO}Ujs!#>gDryr50r5FlELue1eHdLApa?P* zdXE`g@a7_VFP+u0J_PLP@1?Vv-Us+7T188pI_>2NbWDYuu{bSpuqlhKd4LH^wSse7dPL+M6@sUn4lB@>Gss~c6D_G9ze)_cE(dmgOb?81rNopiG~QBy z=epXno$dK-z6&ZIHfKD`Hw$P#LT2AN%b%~!WQtCuea1AG%mpZ=>jm6Q!;DcT@q zy0{V{@&br)t#>70%7y>Qso&~Y-2X3fPgA5nR*@@((eGc%EhEqVUzKE1ib>MfcH8Bn z!II^xe71Th_JFxCWY0Q7cClP5nL}f`>WUSH=w=q4=qYK*Y4P2JZ@50BDddT4N1-!U z$oE8xz@b3As!3d~)PvV6)!kgPD#4I}wt>M)MFK^oa?qme;Dh=(w&~^vg@o>;Y#Hiq<@{06+VUa#^GvmKTHwjl`daq#Tg-3he5t z;TjdwH(d`aRON;;f!su0U#lvUjVsBM(QPlIoP?}1tDg#*$wqOJ^2cJVYHwYj*bOP(^P zaRr_dydOv0+9g_no4LZ1jV+wSk$}bs6*ORUXLz!kr}>yuwu(!#!&$%D=9)8(_x2vbYGJpdz0Nse=n*x(|@Om_|JgK{s+K^@}574y)Xlr2-j@czK zJhf1e*VZ**Ktv@O$WD#*1V+l)09N96u_&;n>H<6fbZZ81bjJ=r&{;0AL&JY{imU26 z3swn+D6tNG<{n>!L+Udo4jEg+4_=joS>y!S-cqxQ$ALg=RY7nS%eE?p-c=i4oQK2t z;@G?B4~TKLY@V=YtTLn}#LIS3y|!+}%g3?D!4pQMT81GQbArrKV1O$*#36a2vXmB} z04pVw{sH}GAw5iHWx)MZ^wq7RRix{HZ}P4L z`f^EfD*_WP3F)i|Y(^RU5ER7l2jQzw{t2O{3g@fT&ZIyI;;EDg3&LAAtjdMj1;(x3 z00_g42NEf0T^Yc7>p{V~=7U#9B=ZUO3xI1L4fiQUT+m~u3|-KBl*Q`$lP?;u*8swi zxyqFCLBCyb{mNo>{mK`sVX@&E6L$?d?vCr2O4apC&mTKi4i5^K4Owq6uAaDY1qJJd z7QBjCdf?Pz=`m6>Cd9mjG#hJHBViMBAh*Fo+wpl?@?*;vfqgoX1iMa(gU98|oj1kR zZm}CNVK-EOJ>Xjr7aM5W32;ey)da@;1mwKZ#Rh_VO9~0b3mO>+eA5oDdJHyu0kwyG7`DJMnjQIQx8X4#aLu3!NP@M zyV}vn)uqu8?^)wuWFrbiPH!v%uV^HK8?A95Vazv}je`jq(&*x`j0v|g zj>4WmKvAbPCTOSuRf9-x5h9LbWcBIm;5(Mbu6> zZDyd#CU*%0Wkpp%-E}Lvle9!XapBPL60fB|2k{~t(Ykgur=029w%6)rOdJ}lCh0Ag zNiB4xl;)%&b@Vy5@Pl|FR@u;Ki;qqS4=qGTD_3LP8`wYtR#o>xpB@~y9WfUp5%n_S zUKe&rSxghd#B9qNlrYV7yV@S*?aBK7<*6TWsX=896C;`xP_y3Z~J za6yWa??=m}$P8m@=*owhEKpTk+3ni{fb?=oHauz6ZVb!jUEDK^j$P7|N8<&$9Inj`OGC{WppgdLx(g-cE+noJ;D_4ITN{R;EgCmL zad;Ynh$yVbE-&#ZZ6T%tVry{NJj_!Rl1XPhZbh~P2P0M;g+qzm(va&ZEpBQ}R}I&< zz(oTVptc_hR(gE6pT=%dDghv-j}lFSN+go)6cv9YcT3 zF^I%X`=(nt1_yv)Kpy%f1e>8gtXV$XclGFaW_W01bevak6vCf`n^<|iSA6LfeiLxD zbZ0s{Gdb=Zx2jdMBnAPIEwGt1>p+tRx6MV<SwMd1V`5{VXO6RLtM9J>Mvo zNA2>`81yd(C~=vLd0{)qi=-3z?o75b(~;G@z(sk%9Nc28E+|-BT+C>jXL!L}x@0c2 zL(LWnY@wiBk5^rD);giaHZeTL6Z?(_?71L3!!#z?KE|zH8Kj>`LJe|kdA;-#92 z$W2)WGkgqUrc7R(H;c!4*_ji|S8-fO>+Ty?*+U0(z)llzk^!5h@lGX%;dW-1b3F?_2iiEKOJ(^P^lWRhX{p(baRqW$Q7fYd4QV{y#;Sex8uCDej)A>=>S2G_+G zO&SZl*9h!bo5Xy9>LKihvJG(J82RN}_`(9e>d;94zf&?)n!2N6{LB^#LZMJsO{xzzqK*waSbMaY^#s_^5ZC>0;Ix?djO@xkFXZDg7F3 z)ZkVG;G_pc3?WD=4bg(>dT`!Wg!p;9WX;Z+u2{So;RqIMNCly(Lbc}eBS}#IhCGe3 zfzWxPJCo1k65`*^#8J*$I3-R*UcZ(GIx@L%1IRfP4aW~4;)Gl<-JFWL6X7unrkm$U z5rx>o@i1>uBvhyvH#_3Gwu)st=sK-BwrTs6CB+E9pd!^xI1F6$hoR~)){-MoMHWm5 z(+YGc&~HnQpW{agc#}~Q3M4WKrEY-{k;D?cJe?D&ztjw%ur%Yve8i}aP#Q33E6cIA zYEP7NF$PI1MtxvnuOp~RK<%TEY9+_dtC3IIB|R{rzz)g7RE%f zeh~o@Ij|}kz06a}5II;-WMKUAx0G_|%NN&k!$qpay)&`_OG*9@j+2kN~iVZ-y85L~8wW3ys+k9$kO5|>^ zY>FcZ3afpWf|v(Zri~96i^c-P)Pzdo@uZj`n3hLFgc>d;NrccRsH7Po%H9(w20ehf zCMj2Y49Xf$b|9zYyrJk<^cXMv)$1o#_+vM7WK9XVOa`OcBR&S4Ed;P*Qm(gg%dXaZ z5Tyaoj-hG|R!s}oCKet@P${pJm$IP28BHMcRjAO*pgr{4Bs||uz>Xhr2K}`nXlRBe zB*Oc|gjARO@}Sz~pdzYK!FGM6=J~LhXK>IbG1U}NCaQ3%X=$d_H9n<{YAwxYrtBfK zQzI?-4!@i>9LYwyJQxY^F0DVF2$zI{IAQ^aWE6{p1q#AgA)0^U9n|uKrEe@*zq~xcTMLmdoD>=5GHtnLjRP}q8 zOnF^jfNlcbp_^|5y?dF_J@%o=x%DbI(MCmdaD)nBW)K2AZS<4^$j}-Jk_X_lfC_^b za*JR<6cB2`a0tjB^(ZcQ9m9vzVws@^F^D!SGgh^1EqnqGP6f(l54U`7n`Q~llmg|O zC#q$uX!#Ja3qYzGfl<(m^ zfeRI9FYg>kw5#b>s;CK?u4jsz|JssC`VONMIB4kZg1UCRd1o;ljD3Y>VOrs~8>6cl zF!BMJ4LRrvj(4qUiK0`Vw@T)ULzbK@27`z*sqsOe1O&TEX%%oUiNJM}1S1a^hQZ60 z@0ZcSrqCJScL!^W=&!zs0iE=mrt zJqPqZ%hObXIu@~#NRsYE;Z0lySYmls0WV@j+Jc=9yhL{rQ&s|5xX-nNEZm#&yfzf% zG3dVBrPOF9l)+440a}FwkXU?hlW3I`&LwB>oOU#^Sy6}?TiGaOS>PWi}r`zaQ z1c>^w;rVF~-CdxP!j+s(dBL*h(k0syM$C$JEIVCwojE{!hz6CoA(K8uh6Hy*hNqxc zAt37}5yDYG*O+l!A9OkiFY#Dj$Rlx?8?!z*j>6r@%`mBstiY#&kPq1JLd{&Px)igp z3$DfySuUOuFfH)p^6+bg1OJHK>ekuZZcd6CD0UI(rJ~>j7gV5Dv>?kuS&Abphs}o&(XCTA#~>LQId!! z#Ku%8Nl?(P04b82yj^WM^b%7Q3cqLCej7$Wg5%1v`7s^8k4fxS_#}y5M;N{*L=-yV zA+qViTOMyE%7Us$h$3dStv3QeSh>0qVK$?Wqn^uZ^iL}$0}cwIh9wyRlLbk@%Z`Kg zH|nJkS_;8|CL`4((uQ-p1yD2!43i(yp0GXuD_ZzfmJR-CvuNSYz>ERW;f{?=md1|g zQwOwOov~4CJ6WoHDsQlC)DUnXYsR3H}AVRPcpH10XvH zM?hFXoJ7><<%w(t|EICLdYq7~AK^@GN?f3rVX*A9v4F*gF$BlLXLygD9&+eJg}rEN zyCO!5(aVFzcnpSLH9k7L(oD2I9_Q(_ND6@jX(5UhGAS;+1_Zh=3==|@H!7rpaF#D7 z*f+-3Enm>_Fx}45vKT_aAHlZCv8lKLu9AZQGQ~{qG?7Q1WS0>kF#rz*h#;s%z!HI` z{aA5_GX?x}ggYdMRTi*i1Tk6LfqG2wKNRLu50#kr0c|V~78+eW_8_D}fmZ@f zAQ@>%&5|Y~DFTR;6Ab255OUnOctcXYLx(mir3YEk)7BLE5ZRy~#IdS6& z9-C82ifb&2lUj0jFeoWbS!u17%mu4xicl%LM5`h1ua*t8%iSY91tWKl^k#$rfj!kp zvr+}k3azpfNtWpa3{nZld_nLErbU&{B`&Dv6pRM`4+28a&ps1wTN2@JJf%5z)c~NG z87ws|2mv8q*H9n$lBk`=4WY+LZwHlXp#gyFgoCFL=BYBm=Pii5kr`b56JFsmWWPv9ocZV-15K>9Sr^6?y)3-XdnTBm$ zepDpTUOSZ>s)BH72)-J=7NBcs;X`A}_9>aZiC0rfrvXn!4+P-RBnS=+#JSvW+Hd+} zwV5HhxI_rRvD!@8Dh^eZ>CKa}m^=%#W+ouo)W%JDd!v0}oTc!?NA3E$CTQxgjS+1J zIPM*sYw{OZmgZmQ{7AufMBHNnqh5syskwA|c@CA;&?DXRg5JkQZ*})8X_5MV2P9>z zSa!`fxe%S`im_}+U5uVO+{6bjD7fdO118wofICG|)e}LeEqr2faE#{)w4)nr=n5kq ze2liasKkuOyAf=(p^ybPm&fz>zp(>?#)T3GCoXEflO_!pu45F6FY4!b7(?nQ@KU)2 zrLQ6c9ttBy-86JUO*;b<+%_ZZM>++A;Dn%M%NsElM?IlOC?23fUA1xt4Y1%wJ-YIk zj>CX^)5R-bwW6cm2t));I{Qe`iMeRPqCQbxPk`SToXl|@qq3qJoB*$~jKo!a0y;{i z#c=&Tq+o3)1EvaP#(dCDmU&H$2w*jAApDw~j(}}gw_ zYLk$tWZ}aX2%`1ct48s-F=w`ma(F1U%hN}1S z#E2QsU&59tbgbzBfjt$|E!Ym8pVo{k=$)csAJZ_9xWkc@F#IUWg!m+2h&FN^J#bbH z*qvfw2sxO()tKJ}%ttFN7-)o<#Wfql&FYIaU}vG}E7=h2FXG7S*qm7PWx)pbeF(DC z6x*=X+lB&9d#!;vgBBX@RSQ#04k^6H*9aRZ{|LytGGyXff+TFdgW6*VF%jNTo-*Qu zM6n!V2rb&sRU%L|RDk+Z%%;GPEkq`+;}B)-Zy>uu>qtc#t)#;pPx9cHmDFm7L>7lz zEp^Q!G#j~z_}HdP3?v%6s(>Hb9iuxXFjfJMNJ;@1MYjwe6T*WuC>e%wEX1N>VZ9Q? zXt0V=0Ynnu8fsa=Fad;)CxI7CS!*i-_dYrj%AF$8N{OzJv7?l0lCQ zP*RcH(L%or0=kJXBJfgb&ExK$j@L$G0^QMApwZPGN3JhVtf$ct#|X)XEMVBF2FebM zJ@E+`k=Q2uJWuAcn{D@^EX#cALn?i6Lrx~vt`fqQES z8!$s3Y;#L&@ZnY!p+mLt8MA2AJQL0Vki+?jom`!K6Rxrlx#As-xS=dY8BAeD^Oy%? z4_-)h7X>IO5iyofcpZS0C`w1s;*i)HiqaxwY&6IiRYa(t z)+StC&QOqhrm%4oizxNz9-z83A|R_MFg?*2BwK{Y`2a37{pDGAol9Gfb(ZdM;$9F> zgID<&5MAM4F49tp5E?M)`69;DESga;Nq+z=F(CtuR&Yb&BylTM4+x^Kz?-j+SoiEJ zp4);T5UzIOvDKPebvzT!hlcSE(#(pTFL*8(z8It?mSRL4Z30wX6SkW%`-kd3UL|Zy zGEpF*z#-Xlx$^tt$vm0d4FjBN)j8KFX@MHJ>m=FWLMFn_V6NIrO_$^;nhsf(1s*mn z<&Ao%jsT^unjesSwH-LV0_;ua4TuvM6<1!OFkM4C;6O_rAh@<7A&sjA0ZU{W%sSVa@99Uw!qn0CJ8AakeSMVK}w=b>mH z7%9aX*>F2!E=!I!NTG~0N11U9P`SOD8OfQk){wdwiWn0AtWl%%F+F&cw=Y~f<1*EiEI8uGKRQTMI^Db-Q#fT@#uCejHj~G7CM#` zo_UDlQt#mM49^+is7)AuXT&;$T0m`a$__5{Rv;F|2r(Z+N7O=HM^b(T>)v3zF!u0< z@{~QTK6E`ftPK=YoA1)MxvG8=Q}&S^J9hBN!HG#eG1)gh$#?A7adgU_f(6DoTbKv2^8>rc0y6dZr&pDD2<1GjE;72hla{S|4A)FM@!zzZ@tpz0q@QI6TLILBk zy#BIND;;n=-z*6iPs}W_d}L05HzXD@zPSkP@Of;AyH3qFUE#4K#S85j6l6F(75*&t z>SrytvIuc)GI2g-cT=;%ApmDlQ-M4x_*m*zN=hjm95;+fC)4{zM<>&heG}L0*6#I^iyeDLfG6e1g8PTGf|2tLd@7;a2U7{HA9*4s z>*<4Sm@-naqhN0)n3}qnGcKeXT?o z0@@2&oz(+@uK)!(1bxa{fBLM+a%;3cbpkcmJkZg)&V3$E!nmw~p|K!7W%t=7tq(~e zb>y*)4s=@nHfb&38metKHE3iH$I>QJq8nv*X$q^pv(hQ4yVnl@wZ^Xscqnpxp@dCtQhqhZzd39G{_>kgM<}F6}u%?W#qw7BXyH zZW zF_jZw(RJ)OGLVIB7gi-8T?`n>q95`Am-uK98-sgMP$aVGB%Q>Fh53&zP~WU}NPVbY zkrq@DDULdUblM84j?A0)M#BsOsY^i6lDS|+tjtA*2}Ufl6moya{j&m1975kBUBW3{ z5!V$LIY|~-$T_H{9rz*DBjG5PyK|JDsl?ME$35hUh;0}Fq_v8_Gd!VG74SZ+S_rSP zlPNncI->x(Ln2Pbjc`~K%VE|;)AJz-Ch(uQd14hZhu{D#u`v}1vX2vT8gOJ*Pue1Yy}*~z~KWu@)(D;MS_QuJGePU!f#L}qub4s>bv+l zdJQD&zS)@(XRmm2(1pbGTiMBNZN&G1OVe%^9(Tc12v$)fk?zI&e)c3yzysNnXxVZ{Ls&=CU$bm%QrAqVQg#bEsSmX z@$n`$$Jn-wcoWDhW82Qu+c6pAd)CW&MNetL;ai$=|GWVS{Y`h=td@-;ScCG_pjR}i z=2eb6Zq5yYXqPVzx#dB-=#-%F<8~Ab2EtQtMTj_osQmEJb6ZE$5iy8V&~699?6}e6 zS%IrD+Rjm)2J0SE=m9ZjmDmnP0TUR9zpCeaUcJA>(w5 z)QL}Hm^m6|yBsDo2b7?q1V+H<>E-S1b^=n-0aU<67aiddo{TPdJ;bmGB(X&J3MXcx z))Xq#H-oiF7aXb{H0@=V0yE;Z#COvGWLciXc16HS7#?Ec+9AMYPVn(I4tc(NsX0*o zh_cyv+apMU6Tcp?C!q1Uj|CH!;gHEq!hwB63Mjip_ z9=oh%o9h+fQj+V8l7sgoC~c6~1`oFci%wY*=t|83mnXQ}xK+W}Dqv9*1~O~8<|5qK zPC0tgWtb1NqLd<@Dz@@`HrtcVXY<`+BzzAtoGbBf#;xrYxlN%SWxMy(NZX_k?(NCs zc0rMO->-Uw_IB6tGO~sCl2dG-T};C`#2_*i@Wlx$0@(2AH7bOs{t{Wqltd0NNE15_ z=OhAmk9Yx>42T!tPl5!p?h?O^%#lc4uv38p@Y`?a^iEZm?^*+QI!F-d=u9Oaqio5(~F(!S%rJ*bVnOnq_0Dw=0{iz*TA|db>i|LB*QFY4nf)q8#?&*^9E? zAy@2~5eN}c2P_xcNF~CcF115=i@HXaZbkQ(&~zkOm*I(aQjql~A+JD+;1l!=VI+Ew z!sOBG4cR601Y{g6nI|%3&llDfl~9xg=b%SxKF`5*Wl9*J=GJeza7T?%_JjlqOn-P| zq09{qY>Mhq!dnnrHwu>u1+}g+{o?$A+MEfwq)FML@&{@a!v?&86f7e(aTZp-9Gab+ zH|;?&jG(!L&fJ)5*&;=uEIVTQ!-jX9vf@(f^sqZL8Uf0KPVqQC)+T?IWtRrbvQ^Pt zD1uBd6B)2}k0-LZd`D+jchAmUnL>NtzW#y1tM(rly84=f!y}_(*N#t29=h)E^*7vT z%oI!J?A*L{^YL=UcB;3yo?ly7Jh60ZTG_vFWMv3_1ie|vJ1V#Ba{Q<^hG0+6U#gnU zEFh}5>PH*a5iZzxDw#ubInm0KLwFOPxPZg1Rq78k$vn?P2nzV1f*H6|H0bO%{e7-s z7w5H+NkE5|J-FXej_C+56dilPbbZKMXnT-|qPJ4&f+^3NCses)j%PuJ%I4sOm}m}2 zgdc?mcxMCvNc=C$@?d zhp-7;8F2KFi7tgJ_>^@S%8{|P2>=g4jSL521D-ZYMR3S1OHUAXC&GtPspJsf!IML+ zP{~s+i8`cjG$DN&kHZuij2Q7y!IJj+q~8}3_!z}`L_2QTz%WXthqt*|x0*aygA(vD z%QxL#P`(9=DR~RrsX~CO2j4T*vSHbZ)1a3fI|sz%Da6n8-mHYACSqWzh-1)G!8QSf z6c5Gv3P}WBiel=*AFaDYLf)&o5_*goE?xv$j}zRqeRqj)04AY^uDi=|c6FX$>Qxvc zjZm_>_O4@(G6JW8VIay&CMgD%g`6KCf`rx$AL47vW84~`q6jU`M~}-L8l?fixZ?Q} z)Kd@@VzJ-$`${Fs=d7COxBYPw{7o_fDJV?=FOe5RV+);>qQvxg>b5%~-3*N_bT9WF zI7SW9+LFqGL@!1-VE9JdbE*C$r9wmxNblo(SuQI%1hyW_V~NXRfmL!?3He4`Hm=jg zJa#2Ais7;#SHMc4%a#>}!fngT@>?3YTs84ok?ShVR$n4V_ZveODF|Qdu@FF35*0KF z{y0NIXWNm9hkeg0^*ccMzswTKvLieh)rOV2gHt`qbJ={Sh|!l9L~tn~eFUP! z24{brD8WA0E=Fka1&gyG&)h-FHZ?h-*aT6uQavS?77iS!1(z)e2hwc`z;umOLd#Ma z#G>GCl75^!>NVZExIY*mjX)5n=eyXXE>A(H=)KuxP_C#E2~g$aZv8!358ujSaJ|KfIE5OrX$((uA{f* z+B)u-n#!!^N2*AkX6D^CUjm1eAWEYv{>9f^lV z`qsYmjYoGB0K>$O!qime=oJCZbvzz8m&@-APfFn9?-S{|>k;UQ$GZBJmn)#~t~(C# zx^=|Ukt+;EK#kKvr9ioRd{Aj>DkHEbo8FZ^dIc~xLap2KZFj`8tkWKRpt-Jg@I-Y; zMUP?Xdd!VnT3q2e5kClak&yB2R<&KarrUKBsvSA4ILba1Fg?%*djnOFT;Jk}^m{~n zRf3o#W*u3kO9-DyiowxPG*%T7VJq?`DlOIeRd6VUyHf9vB1E=oQl8O}TqBSH%ovZ=0MLOgyb?_1aW%wU4I~6d zgajUnA*kT@5Lh&6NL;yIGY^yPLic|I;Wq5_2`1g;*`k8@6G^(=zemz-2ZDoyHnjXSmUD1oVKv%{ zrrd}RsUE#bI)}uhQ`5y{Ksey{M6!V|QPv)T?@ACRU!3p2Sk?k)Ac|!`O-M56x&d~q zM(_k!6~Wwqy@Y1Cygu|l0drT&WtIhJL=Rg#<~C$V|1aV0YC-)t<8BbR7~M|5Z;xSTez!_kDA>i1H#Uh0b$1CT-vl3 z^hmIm-*Dy45V83RiU4DJ1XvKUxtXd$#Mh=x?Q}z)>B8Y5FQ7RnRdt;cOVABJZZ7rq z9o|2EaA;z3a75gq*PAGGb!EG{63uIDWPEUVbaGHOlFRPOR zZr7TJbM^3$no%yh_UT+b+;_d|J)d23{}VY?`!p)&W#wE)_u9MekhMG4KJST6SvlXc z=AI9zNq6?-J3D%MI(Me=+s^Ke(`ZdWp(oq3GrO~6XD*H3cICU)4$}h)D!K0Lu58cF zuC9DqeBIT#YwdtKpa7MFD5?Ce&YhiU`r6Z(TQls26zulQ@a&0fHk-?4bDjBIE^l;p z=J)P#c`m;f-|fui^Vw{6XLm>UY)@xTS5Lm%%$GVkcV_cDv)ODXl3GG~a0~3Se*A0$Oj~&`4 z8*;ja=K9OI_Wj)_X3E_+_jqH*Sm%u+H;fOOH;h(px$)*}W-3=KWM_8We5iNL3($XX zXmDgw>+VQ9CL5kLie~$w<(hLf!!4mdLOTGuIG0vz{V1>EH7M!h=F(9(P{8J!q?EZ> zmoiE~K&-4TZyvqz%A4V&z$c$A+Ph%-^TDLJX)mC)6VwCgHHDikklzQ-!K#CDY^Hd?oE!x0=13!*tx)vD0uy9Ny}(Pb57O@D?s(-3jPu#HI3@TkcIX3Yb(Hhk=+IB!^Xujdxwf#()60^amI*>4v5HSoHY-k^EeaaV?qIj#?J7K?Z} z*r9zbR zj_dbA4>TsgF(~Lea^$8Odmf%b1+N!1Q*PPm0E8w4VJp<=j?U!3Y;bL3haoI8a*l*aJ>w!YsO`-;tkK zs?0bCy?jT$E8mmf)seepwGD%fGB`3YHaaviNloXnnGXCfmo0R5c1TP<=oljDtKiy- zd>{#*-W!m5y-?D4nnt9GN9m%5it?%EdTArym5n9S)dW$=3G>)?U9izYiX>;6C~73M zwX3c!ijhWZZg7h{1FxAvT6pMX2MAa!B_k2|ubDXIAsO=^;fI_ISO%a&>Tx_)x` zhJMsfKAY}GyZGHCKF^33pBE@O9W)1W^fjA^=^iPBKa`U*{IGB|LB-|2;M8!93NKlZ zd!|yI^%Bi3?f46D3-(ug@v(TBt{5kTx{=Ffhq+gF{9f0nNT8v-gacK!>BF_`g+wzC zWM+F*j0r?Sp_MK|exr(0GJCyw$MvCJ6?87({-}E?3A8Jp$#w6{10X62*Ar(PrXs13_+wiRglOMKRb3d5KY0q>QOqUDOxD8n{ z@xe@(wFXu-kUFvqvZn*K)qtP&L10WKA~a z7w6J7n-W>*g7Kxv0ThVu)g8tE(8Ta)|K?#lt>wZQ;d8;r(^~;~_<;?0+zM^WL$Y~T zd!_Y*`haEB?!yWNK@ef48Mz0o+t4z&ipJvCY}+hj04jzrbHTAu7J^N05z4TXwfxCu45n$fJ-R)|iWYG_IUf07zwesPYb1jllD4`ztfgNV>a50E)7$qatO>Ch>d|W6U$%%A9+QiO==)ZxdteYWlv8F*Z)$ zH!#MA={wY(rtg~>V~6PbR_%E+^gz!aSjX7)Y&gG(v9~d{nVn?K>}1mh#sO&M_;)zv`G9kq7~2Av4$HJ|D`Q)m5EYvl+tx90pfBIm zU09m$J~VU9uB(SeZW-8h_<*tNs)O09clGQ)I8d2AnD^&TjGMcTXFG<>Wx=l`>*HUx&5qtfBN%t zzPjzUxpzFL?Z)k|o!tGtKX~Qrrlx=U@K4VBPWxT2dikM)Z<&7I)r()R<{sGc=Rf+# z2i|n^bKn23AKLlSFJ1rfE!W@ss<*!6{*PCzf8EjZx?fz$pVj*M17G;!EC1wzzxk8J zwm#UEeTk@)8a+J-lsoPrf_#o>!GxyF0J=%Olx& z>l6R-!iOF_IP#5)UNHM-#=&*B|Ktt(wm$DgZ2JpteAjQ@dHm*S_)t-NzsN z&0U|Y9eTsxCGY!DVbFNq$oW5g@(b_&>nFYZ`)_$s?)p3Kd1KtdY*Y)gPG6Yra$m7~ zVq&)ImYpYNuh@UZzL}B5_A9O!u!pbjAG>aG;Y6{oZ+3QR%rH7}VJ@mz$6aT7#yEbZ z=5>SB*{a^Gyh5*e{x`m{@YVZ{ww`^?Ey=mm8(O~poVJT^`pJ8Zz2AE9;kW+uZ*P0` z-S6-CmtXdLc+VeOXMf}T_Ti^&-0;;){{Hw=?)u`h{^3`@dgMi0_ucyK3;%N8n}6`K zU*GiQ@%O#p5BK!sPQLPt`9I41`Ag3xb@f1{LZ>_o^dvjSzuP3NwVaJAcz>le}A}PIDZCX&l5BU(rP_pzypxlK(wrf zMP+9K-JJ!0fE?F1GnRcHG!sV~4}9YLpJRJAKJ6Lnmp=X(_h~!-_a$5V&TToXbnnZ? z9{v3Gj`UBzf8#xm4t?PxPs@&HzG9v~ZS}tJ%eVe=_BYr5;^Vc>?;h{U71#aKA0B`7 z>U7h$fA#jyUU>2Q+PnX9{qC2J9J=lS^M~KR)oR^?y6|r3ZFC{~d>4wElM| z?%nnM4?g^(&;9k?&D+{vGW3Q^{_VS49(mqNpL%Ng^&3ZL?tS!+{~`ITLz!1S?DTx@ zqhBdr^sUOZbFX;Q`(BgT^dGsqUTnO+{gH3KZ2y+O_}*(b?|a>y4_}eG;b}h~n*Z7C zlP>u1@6Im%?!EmV9@%*D^fgcY&bkdPrE$Nt>A)ZU{l)qFUi99}zIXWMi`G5(dLwi9 z%P#&q_Rv!|-}#ZD7eCYsEX{cReYd~);QI=1>U!Us{`%ja*1z%8Bi_lg*1zh$&tLJg zSAXQ!f4$IWeIWnfXU6tydi(wV^sP_+=kMM!H}cX?Zl8PWmwxoSV}JVjr{A}`^r?6M zNwMYr=T=X=(Ep?Fee?DoeEh$@e*5#kGrG95xZ{6)>|p2oXSetK)j8`&^KZWA9p_cv zH1_Q)CoawX)t$2ke)wSR&{+@s#XawMQ_riP{qeW{XzHInvg^Bx@4x-%J12&ml==Q+ zum0^G>%R9lFFp0=2hRS=|M!LO{@{z}d}rTfkKTRqi#P2)w(-7&2mj^=mwfKCTUxs= zy?1}xkDp$<=lkA^$B*U?-M!)I`@gyQr17EqJ06}M>iJz_*C+q>?z@gX|Ii&jd+3V% z=C|Mao#Nz8zwvJVX7i3d#@OBLI~}=!+CR-b_|uJFzQ=t1Gq-mYznp9P##eswp%1?9 z+Mb(#@rsx9^*sFcKmF>zefommU+w&yXW41>A!V+?S-kIK6;b+*}3a}{+5NC z&gBp9zU^Z_dgO1njqiH&$9JZF`HK%$U-s)eUvk?|`d)S6%smeo`~Kq0UkqM(>L<74 zcRlZOBZsGNIPUL!@^jAp=k~9Buk@U6{^unpUVF)l-uu}{uIicXc=<*D^uib4{jdM> ziLYF{bz;I8`@nPV>fi9rcl_rsO_MS9tc&vR+4YG}?|sHZZv7S8uKQ-?zh3Z#w|?vm zBR_vZ>SYTj-ui({e({fAD1G9dd)&=0f9}p3Ue$bm`}gj@|6Bj@?%jX!$h-dP<44Z@ z+!YUf?%)+o&wt>D_I>+v<0tQ$+jhgl|M`c%$@bmp{mpa#vw!O!ym6GWGS!JSdgVT6*B2yZ`oukKSrdSI(!0L#&iCH_spnd4uQ~J8XSa3TedXBApPt&@bZ>j^<*$6? z{+A5bZoA`kL(hJ5@#3d`_p_y=7tOZ|=Sa#!&j;SLga}&HAtTlTW>S!_*h}M|-y< zork{k)h%y+_~_z8AHDq_zW>1uJI=iQ!NHk3pZd}*ul(MQ#TTFPlQ-XV&a?mOfsbrF z-rxC?!vh^H?`pp8$-nNj9vmP2(@%Y4zUQ1DJp19#exb^7+YAr%s(m&tK65&xiBpkFn=5cJ>&1-gL>C`y0aTZ|<6#zcp$Mx?lbnPqjbQcD87W(@O`>q0Dk?2HZ0U*L6Ze|RJ0`v!{ zcLpxrsiw{B)Rwc^Np=Q1wdLfgt?a4n)YhhR*{QATHnCG%?)i@<_GES{x9Pzn3t#>G zCz{zQ3cG~rw&}N*OpH!R3N%~SMH4%pv2{86egR|a3iSOAjIk~@oL|QPO`8~d-Z~iV zy7i2$JByt}V-lcu9%Jj!>Nwapg1DEXN=<;x>!2cIdIjhZD;%Z@g}Mq&I4Zpoj0`Gm z83I>@ZTi?1kc~FAwD3{E(j^#UEi@DOw}lPo$^1prEYZZ+*6m<~z;LiJs0NJ{{fbkn zmCXZ$&$1a6ap?4Tm+*rzXG>@yb#?M(IvTH3j1!;+rdx)G~* zR`n@tI4=vpi%r;HwW^P42Y`#6Yy#Ex(8 z4Lb}l2%vsRcknNe%?1S2S?nYZUB_2I5oB%Pp(r7~0?>_W^~W$nn9NyXMlk6!NmYj; z7s6~w9K8!35CBpnFW{eD^c)uD!_a_O9CkK6hrxf5+C+{71&K4ggv!92{)YO3p}daD zfI;zQstXJKDQX`U>J)tkvFA}cK-2rE`~{4$SI~11k6)wmKtQjdzMjMw`!9O_WX9M> zsV?{kK2F~+VT|2Q?ErZ$(cGWP7<-h;JdH8-eBhOgv8OY}dZ_%RjIq1u`!g70e@EXr zW9(xz$8C(Ucfm{IJV`2poQJ*xD|k6b7{=ITTKn4p7ibKZGsb>P zV{9*DY>e7@CSxo^?Oe$i`vdw8w!$2J-v@J{cKQJ?>H7e*No9be{)pPViZS+D`o5nr z_5hUumj4m@J_IyC-@z>_+q{M`_FbxbkTLc$nhUsSKS||B7-N?Mp#ba|V?d+u83TMK zIA6;c`y3Dlxq9D7WhNM7z4Uz&6cXwST)pq7@4xzG6Juu$=dVDwZVLZij(;y;>}}_; zXS3lvaOri7ZJUHR%0hel5u;c%J#T32XklkI*WDKTxJy2U`&do8RM?r7Pi9@m_Tf=S zHk$>`e_{W`_*K)B+&}wg~I-Wo0n&3Iy zwrOntfzgRcy{Dae*^=QKGlqvyJY#HhVsiiZ;KcO6KB#amfxJyN*r(MzL)(IN$ey)q%U^;n&e=CQaKrS((2axB2Zx4-5WZXFa_!P;#SgO!mquVW z^rxzZ(3WNxP>q1Im>fmt6CS7r&PReh5A}`=8_qw(*tRp;A;)}s#VlFI=NK4y?Burd z74XZ>TpHi)rSccIFBoon*_vsW3x7+w9S}uTz9>{#mU=q&`ZUsZ#-4$Oh}cWn1Ws<) zLU;zf9Tji4eB=z&rl`Q8Idd*!Z(GlWRFPFulYj)NU!KbKL@lmY42;(jv+xjae?Mj%E89Z(fz>iDn5C;KVooKD%YxE)rvd zMUWFHN72p45|+<-{&1+&a&AWj2f3aj&u@9>+QnrjKwOXdjB$}(noLNxG)b$=RMzz{pG<JbkQ|S zrtMos*@NL#EW3bzn;`(lDwyI=7J$$Y!!8y0UdpDWmY06l z;a24NsxXY|EQ@DUM)a#iW{Zh%uGsa!z5t#2~W*ui0hO^U|L0RI6sG znd5Edpo?H-JX%uVE3=0%$HBT_jnRU`&_OdQ?93L7s)euPfQeGNps)qYJ<%}cJdk?z zE5Lb3*O594VLA;kR3unUK?Wl0LZ}F;S=5BCkjeQf!7Zq=Uc;n#D0& zO64p-!7T6uXq=K1b!AL-uA~KMv{-q0R7S~L&?Ge0X^f<*eJrxTJ%f5@bTXQST$*#|}7;=urhOwJdz!01V)%c;;i|{UEZ=)S1e5 z(2UO9(8&H-$F^%~-3B;J59-*4vHe4+|8Jc!W|n4ZrP5M^a)+Yj0#&VvT}rCgW^@x< zb4t_NBqFszwQ6Egc^V|;>B?usC{Imnf2^jHEPFzEDqD8#goqJsSA*7+n_woVFUi-% zN%CJd2}!OxRbreY;4szgj4@-G-Zp-~ELS~VG+cAef)Ean?8W2UE1PDujnA4U1m}8f zykr?w(2dV_FS+a^g4&!o<+ooCaFyjXlNEsfl z)Qa=1e6D7C9)>?h)Py<9pRdh;85w{t`1ZIc4GKabDqqb4#uIk7s{m)CmnZC@fdb}; zAj$;9)*jSxF@c!Cx!@?lO62>xmVVOIE#?Pz7< zzu?6dh9=pOP3%A{E8HIF-*bj*`tx(9KDSj$1p$8^byYsk@o#cwV)b@QUZ?)ambDXi0EazcJA6)z&}zi zYoHe4$%$(oM+^#aFyx8vTHlB#GT38z8wMM^Z36=@EpUS7cGEAm7mZSBNl|<={)D^< zv!KvGu?_8>yAUnl!MPnO5aCAD1S|~fZbB1vn$wv)0j2`Lq>w0d&9AqB$eI zRuDa^N0A~wfo-L?HL+|gGdVB7a_q5?2e54vy`Q!#WCJjb-$q;^A0h<`+m;-oAArmA z!u?To7EO1yR&IkUQcSn%TArE4Ytq`dQ#EbwIW@Ov5)q4ILY6g?>mlh!mrH15d_B<3Z!dD#$5$2|AlK(02=tv!d^+u+|VsIK|yJKfT!uM%;h^G z)T$Qv|FHLN!Hry5f*8oEQdO}YQcJCtTGNkPD5)v+5G24?kvUyG0!fes6-l4~uu3Jh z7M;kv1hSaOL}ez(qO9JXaCkR%zjk)LuW_s=?C?5b9QKAk?C|c`<5=(5Ufbaa|4f8G z{Ftym_QU?z@Z-<3(Q=$~@6CHN^Cn*^ZO_<(6aXvpzVA8bo^$SbByjd@8-rLFd%bqE z%LrPb%xRxFb2Uf`c*x<*NJFCNb>HbLiZ@2=3^EP(Hr*kOOdtx=oKTQBsr~evH4YP;20m;-`sed=}@T0l-sg zV|WCnuOq}72QDdv+p%IiFpp*#7=p(wA2JHS&rFY6pC61>44oUAVMOr)31~uMkR|`b zNys4#{3DRrEyL_tXRR{yZL++)c(&sDEQe{!lcs@8B6>e(kgcP6(B3;yJOJ%hX*ed|#0vCn~7%T5s;*jr=8R5CDHB z?o=;V=2v#G#74dS5PE_Vz~aRvmMZgj_kL-owj&BiwsE2$n7JtoCV{*{e8yY{S3P{h zP8q?m{iSy@_l&Xl2R3WjYsBwJ?gM=|BIjVv8U$iM7e7i~(J^hmBbc^9AdZlAl-C~k zVMJ}7A`0Cv-T9j$FPlBzW(Xib#Q6u4XJN1=3M-s}x-&NpgSl{E26PSs!pse#p{uHaVrWn3 zeFdohZuUw&26eEF$b$O!#r>7#c-}FF<$ymFCh7`4xH!yT)v-?>3Ydq^1k~@CQQ*8F zJSxS$Z!uPA6gWdOaNJ|!dn9zgL}!Ljm-bDM>1#u3LC(LJ-%8;F_A%>ta|#Z?E$Y}4 zx4i0gESo+8Q0ndk-=tRv3#MRvrBYs0<%0}_3*P0l&Bn%aWO=yac<{1T41kvHGlK2y zTzWrIP;FOkJ#Fl@y6cf>Zwe9as z6n=|C=0xG00tqe^aLz z_w%(cUK%bC8~!Nw%I`92d<64yO$3YqM7SpIx>=LHO?lK6)jV+`c|&;Plw$mXP%Wk! zA*#<|2sfHfs@-a{DGUkK_mZbNUAn)+52qWbF-cj8UBT<=q*(tagsI5jSEF)2k616) zO*xU&iCi3Wuj?@Pm}}jYj$_P~V*yp#<2HdOB4QhyO(uch3>;BuFhiK_tJ8C70%cJZ zK!c3d%(rP;UuM%o>iVN0^`a@q@;!E09vX8eh+G;aKtzWlyw{haSA4|_Mn(|kN||!W z_51$p$OAJfjV04hJiiNa9*FKgH3ZZrX^dQ~1dY+E2$Zsl@j*sKAd4Z{fDss^ST@Q` zNYZeJfH4M1-dD!|;-0hEUL z1)4-S&|5Db$kOx&N!pF8d3@>3!n`7nU4>vXkCZgpd$RckYwYs>fS zv6HyGybK9eP+Nc4-E6eFd(Dk%rH^l(r)|%DM1K2~+6xiU3`Ch6p8Bqjol@S14AtoA;m^nQ7{vV0F}-V}pw zHd@S(Tmu%b9sA>8mR|}0<$#)Rh??A3SsYcO0o9)T_NPU*V6%SEFMbBq-xAe@I{<4Y zF<*JoF{V=*$$gHYivPY|J4@dV*N z*Rtgh%M}A4F1~ir5PSg-3OE@g4S1YLi?Rt!Ge~SOn%vO2yjmRF4Z>+csvMw%L15ge z7ilarh(N|vK}J1Q5@wKTps_;VEGEJVN-B9`u?#iNDV@SBgG?vUFg=JI3WRn->4~v( z#31~TNxfzy*dWu>cr4rvg* zfRI;$G*`@R-|JUBo5go-M}gz@_d;rS{I=8gIs^JqyRrL(_B#Fn^%mzB7J;Bmee|T$ zWj41k(70tu#3l-0v;+6q*HPII97e1Yx+O+}7vD*y{6D+FsGZiIVgkLPv)ZAzW9`tQ zb(a!=gb4YExmIOGo|tmPrll|za$pxnz?(V*{3n}1`ckL<)TNT-g4idUbQ4E;Dyfi@!n4aY-dH^w8^H|=mvTzAV`?qftKE)nOW>}t7O zk?Wu!EZ}@;h~ZmNNY)Ch%=LzWMvl13VIqOQC+>h2iC5#&KFSwX%Y|iFC0;7Lw1)iBJUqL zt_!j?iH_hMw|0hT?jKC?p3+z%FJNE{;W(fem%lWmVQBVgNX&o|&yNTOdZjjbzc-GE zWqKr__E-!6e6t+ynDm^8_oQ5n!>5$IuDAC4g85J`>OaS8`S>09?sWTsY0>V8299qV zq_PykVnu`Tu;-bMOHrKz)Z>WSU=9w72ge)3dEzYdVaJBG(!XsU^eG6y_Q0cU5@ub~TCHvRgomOLatGlrlI}t%G zy-)F^-2;PRaZsq;WPOMy?H;&8h{AVTwdQtpz1DqF?>y*kL!Z(Is{5eUVrNRV*;M#6 z(F4RL6%9>uca|n3clj*orzBqaL4?*>wqh(TF3gLPzZqHsIyCRI=On2mXcwsha_dq|9t*IOwe6Pf>a(auoz2E8b^Z71!{slP`l51!X&h=n1nXNk$D) zJeBf_S}O4}NKtJ1%OH-Ti8DB#pPL*;PiPLQmYFNTP4 zJ_}ldr}N*-z0RC0KuBzHfRX206|1>A7={Pc=+X1Xwf^SrM~x?+EPuQ;x_9{T8s0I! zR@<(&JN5M#9iY2g)HTD%u|jGF)<8W{Zh&p8OG}<_Gv_4R2`&GS2FJ6I6DV6*9w`%e zF#!j}_Z7Q|L{G_c1s#&$9GHyVBLCMnnIHzg2|*0Z${^I$|8bWUfZw>lHP{q_QLdq} z4K2Y|#I?kjjMdqN*-Ca|aB-U@`-80gz#lWv4%FWe44w+t^FP9Dc60nhH%Z8po(#|K* zu~evNXlfdkt;68~7y@Fee`4*>P`t3*hdH7YrBn&TDP|Q7#f_SFTi=j4$LD7!4nu|fXPYzD4K(lv+{FK)bMk zJ{mX??fGV4qlzXxfK~aSb;sEr6tYjivK1n!H?dN2T91xcUls{D# zI(5t}lq=wVAH%E$1xiFf#(fDfhyhs!6OWuUY+%_FkYV-0>zM*o1phGiQcd*&oka6{ z#?nDRF$jVT`rN)5`H=EyIPuurhn+9RpKrQYqc@n_mGpgWGO__Eli<`|sr}(}6E3?{3@HX8e z^O%K5N}*bDrMv>R*$ms5441(muA@H*B(XnW1vz{%p*{(~{1q}%yDxWRlE8&1x0Wl` zT|%#!m}QcIX}CSDPoplDz3XhOPqgVQ4j~X3~~D6Vd=C@rap3iw6CHQ`5$7H8%7M{;prGH8kI=Ix?0BZ78;X*}8q#%DQ_t2h9T-#iR8Q?7d z+7iUl);@$tdFHD@WiHLn176;_)^0z@6jbTJNkL_jGyqT=to9Np4kFukcQjN4Adazb#aV;Lx=JIrZ~dcstJtWWdF?CxVTP# z5FJtYCc>!?&hI{*B{efVhMP+f+7ZM$*FPdd6MUjP)3fLdaU$|;97e?UDR_`j^33ne zk~DQ--KVI7YK5*N4>_6`-dKWAoU-6~C@tW}AoKIA5Mh=q%)SmFQje;P8-{OupFz{I zL`WSf6SF6RaROJ5H}o$bUch%;8)nclN|7?(+rDp zIAFc6pmHM?nO>iI5dh-cz8{7T<`#T~{dsXr`L+&IyckoUAAu;swsqk22PJ0L%9R?b zrn0@hL*8$5A6T-Ek;ujYySidYf8i?Y0}>vG5glfb0Xi&&)-Z(+LIgW4*y~TM0ksYw ze|CthHpiXVsbu2HyHU|*|?Z2CA>6LUdOgL7(x!J03RXeqAtJ7{Kt{txK2TtFNs61Cr_ichu zj37(iW(F8@yonfjuJS8rz@97dJ;GmxyfB3V{>BFloI!#Qy}|Dh;5RNH`B1pO26pus zw?K#AxY%WwSdo`F;3eQUF7e6}+G};z^U8b+LTU3djN{eEd;F2GPwcto0qwb_br24y z8HhzN!U*h%7)4@BdvVNuQ-|4qEVy3QxUkEmt<(Iu}@kkhvY7^Mkm_n{d${up9Suwc@N+bN&rleZRYD9k6g&i9Jsu82#%?+5C7gb-_* zsgy0#wZ<-^qh`-P%(-{gFv`f(vp{r466v(GX$g2}{5qnXGlmw5E35Y^27bk?w79#4 zw@XWl27VzjVau%A($W&VSelEhk-_mu_j+t6Uu(n+Eg^#YXfq6t{J<_ECH=SmOhB`W z?=}@Xf`^-FI~4Zl5zU*tQ^c zZN-j#%VADAV0eiZw4krc3u_S1LJ{LH$f&brKr~3+3C4ZsS4xMm3+3{?tmHe-dFpv1 zKU0v(88jVhZ zZ+WHfM6TJBY|Etr9PNNrH^huxQ^r!`7$ZXAyvo+h@59Qd^5)SeH7abNswTM5s^e(D=L)2%#vzH3ydt5DjvkiQI+W zh-j#>vs+)=YsVg2Ux@c$XI-@+I@U4qqX7;0U}u9KM`^Vk0I+QpF*d-(=k{kx63CgZHmQ0}VU6>g@ zMn-;V!B|>AF5UK2&YwL8=3aSz7ouhp%;CCkT1?Pj;y`&7ZUa{rRp|nIB4CwBI@@jX zK3qKvK}`gK79kk`wLjnkxr?&Kg0Zr+0DUq^LPK#&FnGkD`%5f+4Ro*K)qNO+Y;^;8 zghs1#e}$KaAz<2{Pm86JZH5Chc__}1BKV~inI}kwr;5py#L5gk5}tkRMGj8|EY-u8 z2$+m^A=o4B`r?GU2i1U7Cfa*vYZE*$_FDDMQ=Xzvm}EoaSNnmvZ+hlEg=3SIzmu&j za>|K{lDbXA!Kz=A>?vzKCUG$Vli>xx(H2CM9EV%Ii1Mx^MZ62~3(3BCyk>QN7pF+y z)lno7i;#CNNRna(s91c$H3Lc~CM3S1ILK^wolz-!S%oe|vprgGU>{bWJ=s0n5pF$sCOyD@eB} z%=3-8xdB8dvwbU$8I*Qd5(PkBnu1<7)`XK0w5!IRdyBgoKxR?lbs+qySk=Z(wT_`; zpsE_U1acSb(lvEZX*abvJ*FCnE1|E}yQszW)Mz`2 zp0b{5aUDsTCKW#`G0ZvU<~7HCZetR4l|KOULy#>`_sohrOx_*+7bg+6$-;dtk42u3 z&0{$2<6(+FjLK}KJi7p32}`fPs7S(sf^e4^sfUYsPpqa%q|xm%PNub_$R zzU!JjA1;#)DH)o<0Xl=@Q^%m8h+yc{u9$h!q3nsYS6#DJRKc2p&^7Jb3=+T!A(3YFjT@Cdt!(!i_uOS0e&KD6Xssct>Zz1ou2< z7&>8OdMIt*h9{-?(ZvbPuK}S+C-3;%g3u&75#;89KcsOM4hV!R0y`&@0VFFY4K>+2 zp2)-ZzV3j6(4AbXlS2yXNm+6-2`radBBJq2^(~*bMtK zcFR|y5wJI0l_lgWB_;uHh5zt!U5_5k9-Bj#Rfy#~k=B)`3dXMCV~t43BPTbde~rD6 zABmiiIgz!j?))y@c|U467da^Q)WApiE_YM_%18V3XxQP zN|Nke6awv@_?tjDitdZINH>c`8S*sjO{tF)^M;A%L@H+QP* z59+(M?sl!(+O6+y;Utub3DIMrTt=m3wpMC*YAqJj=j}{KPa3UUqO&JGEerNj*#r>866hrb02r0U5_251 z27X|dXBTG6rBR2Y za>hYI4<6-)^CqAqYS&tD z07}tKz7up%_bv`4!73}mBs>O$Ah_CYfv_0_PD|dMB&7xc`kH(!LQeCi3MDlJlahSJ z+6QvVpJ&b_7+$(^rVwie&d|JO_>m|hd1cyQCB)$etHH*UVV&6;az-_g{TFyK{+3ZT zga7hT#cyM3X2?IWOiFY`KQ7_Sg#~g%*C|36N+&@1bYg&Q#?}!2{cF@%m$fmw>NS$*L-*F-kH@n=q`;z}9#V#fvMEH#V*&QSGux%?w1YgN%$4c+mglvkF4`YfNIM@U}fh+Y{$am*_b4jvL`WI6r{G33*) zakUe`gJ|;?a?$2eAz>yW;v(Ou?sXbGwm&p?^_giM&?q{^t@Pwl!bO#rl1%pLru`sq z0X|R3sH5>+$Tbm&G>MY`Iyc*gUkys0!*P_4SK)od6fTaLKhR<3U+0*~I~0gnZPrO! zNd=Bp?fd4TkLVWpK>+p)Q2<*Mq;X9NmHZLgL-DH^iXbnkx_t{XbU-OFeFSmNIO;U4 zqMVZUBZXzFmC8K>zeGe2-QkCMK2G8v71&fXM;YFQYpOW&5+kU97DIv(zRTe@;5eH- z-wvnsNKe_&U*oRY+ZXs zUH5q3@l?zb=GrGD{1LWX83|W0=a!}r{{}zm;8%lJdaJDOX#s{07wMJw$Hh_VhdMpH zh>0bd7dW-4bGk(|;3itBBTLjz-Rm(S>}yWuBl^CO+FevW9ew$3ATnf-2`9?p4JN|d zmUL*ALi_2J@+usztIFZ3LHrY-Ti(8DP^0)2G{JXHg@XieA~yfWCq%?m)lJ_*)0Ph* zi>Wh#~aoF+%bo=GLK49Rvx5HS^iil-yR;bV2Rig z=261G#O(a?MK_O0FEQYaV;q$y_Fc3QcZ}`vYKieauY1G#cZI~8?3X8={@UF9pLqNO`zTs zt0!#3SaC@zFBM=LfXR3RO?t5|iVwi|#oWdeKF6F4u-Q=lJE`(%k%3LT#28m% zMH5`9xPu$41ALg|Xf`jHTQT+KT)*!m?d8~-s@$1oz45h%=q3@@;LC=0ZTuZGg2RacbxFJvn9J)4EKQV2 z;3;I*k=TsoGDi(|#UUk$BUnDZTs;Nyuy77jhp`ifrjxU3Yy|i%5CvOHoog#)ObyE- zfM5a50>|W@8yl+IjCBYr0!wK?Dknkw`O8?Tx!2k@_+HPkvArB(kNxCq0+V>b!GSFa zC{y4WA6tp%&fYWa7#F_kWmojr)EL|R6*_FonVLCq+JZGXQ%h>@zZ-J%(2U^q zje5IT?W{kjwYnHgbCW+;n!NGjxh3*r_8*M* zdzyy3?ezz>jlFH;XwS4LkZ4d0`UcA&+cj;QF`(Oxt!};9eOzswdBl)kSF{)J(``u1 zR^M&zb)YR249+w-6@4$yFD>sNCD^I$G+Ix)+x4CL+2MFw8P}!C{0g-6TBFIR%1&)3 zPBwX_f$5=9C=AckL_-{I%|G)e)RFfPUYCz`slG$TYFr7TzlTc zr0yDfk~6KZnpY*y+T=_Psq>fT(d~Av-L5xw&wC=NHa5&e==FAeqqbgcbtMgiJy&R- zic^;=3=3Y}YeG^nOnKO@e{yz&S8?i08}RDm>h{Ch)5HnH)&WdN1g=lA7{b@vJCL7n zkEM;h5)Px0t(wo=+V}kr`$N-l!TAQjlGPB9&T6POI=7*XSxprIcC3nO0(7ZoBE;Xq z!Kf!EE2~eVyhYGzVFNR5+^S!r>-yqs&5IPg0rmCsy6XFy&iK&>PUF{xwyvD_I6`y zcME{F713qI883$7OK zO)%r>iNbFcP=>Tgsl+7w5{7{t(V&D;gYH*IsRSvtf|6y1lszng0Ze$m3`V8{6WqpV zPzq^OV&fP3CA2|xS#+7ytM1ryz@NWsIjTzGw|@15Dct$CB14;jW7<8Vf@VpRcJDW} z=19LLYY1j2{v$7@Jzb%oz0o&(5qZ{%Nc73Y#n#_+=|A-CBY9`SH+v zF*ii|fZgI>`um2{x|Nu#_i#F`evHT$zpl8W(_a1lYs{=nK#)*ifuX<11p&_C%?Hi7 zo#XbS?GlUP#67(gpG$odJkf4SMRl61rvBbNH*=H37?k~Ejm@tbv2ipS9nDE%z5%Gm z^&M$tnOM!lYo;&Lz7j{LajKX)1sW4b*oIB>OV?Z^#6s~ZzdY2(b~WpjqCCc_e9sg_ z1jbWMKOeDL@gG<$t8Rl^Bqa>5W@xG~V-S#Wuqi^4A`_;tX3$AUiuE%{C9aj0XuwpC zEjO4HN~t2Y+M83X2ia>T9vCDgLhxZpk~iv5EXXDWZzBdu z21sHALQI$PbkcWCQy`X$4N_FZXyM?Jxxxp%LSo6ewn%G-$*ea8Nbpf|vrst)`TSg1 z1s|!lG03t20%?(-9n{$jLC=B(B&%s0rACv z(o(jW!emHXLz%Ne0%qbr^491ZDnTS#e?ujbT6Yeizfvkeh}2#P4Xy#fkU0VfYk47L z%F@E>J9DFxq%%T@#K~s(i*FDqb)ur}Ozf}xxFs=)2tCXh5k%a5eS;x* zf5G?v8-`S2JhhVEpJfaYy3Mnoh;qK*$%0nxs~6T&pmtOoJ9t_D?g>V-svq)e$IeFW zU~^1^wFlPfCm(NtR`;4vsV#E^$%E}9Bs}$eHe=ObT+SYD2h3` zGQf-LlZrZh(jm7fm)#1DQf&Cx7*UV3S#;I*h*Fz$Xc*0sU7u{aW;mFEzdkY#P5k2t z?S($L0^q;a#;zLU5t9Uf7$glp zSVIAC_?*Seb%B`!p=~?Zwd}s!B~C#y;>g`x97(!E0T9C#!z;{oH@-ArIrz?o2qG%y zKjT>p;8$b+ZD=*Q@94MEHUl)UeZ|E;FAn^7b-@4c#J~^z2*BUQe=%dg;W%_GjORo# z-vG;>M+3C}+Y6~jBQ*D0bD|D+vjC&3Ofo$-{8@8sC(^3^3$YI8OLviwEUfAoP!87* z@F1m-*zt?$-58*ANaYYQ(;C+(hUd7c@K zK1{---BWKmGqtiI5>hp8D4|GUd{gU<-Oc(|ccYG1?)+{?p1GIN$_@z8=@AWXiEThr z>yuK7$@uCrFltQUxC@K$AG?W)Hs{6^&- z2beuAX#^M<8gY3gtjS zhrUe%8NP}{KBu6}N3HW1sprr?bSNIlW^g=9>Jd~`eMozhm=M(6H7!ixgygsFdu9;K zkd_J5XNEKmX%JEx%#b~AgsyG@w*C?Lt-uRxIb?ovA?ZBcSi|?7osBhYa7ZH)FnLB6 zYScH@u~4Hrjs|3Ywu~jsaWtS_if79z&A>l$P0=^=s7tdyiqBnQQ`O}=$@@-N z-&+B-VH~C#3hQAdG&&ERs$`uyqCI9GK9}IGa_{LB5Y1(ige$t_mlCsJ^gJ#F4(BJm zXCjlX1X5OmoI-`u{V8p3O zd6Kh5F_^$qztU9*jO&MVsDu`}g8xi933=aU5r5!U!=CHSC4MN6Esy#kG|ReD(uT3l zE`Hd&r#o!^DreDgBI1;(@^j^c+}8)5f8;^{Vt(FWM0cRmo*#jI5=PJ;xn=~Z!sJ;4 zPCb~(**b=>O`(N3w~(dB+J4YCJs$Hq!{m=cio;BWxjx;!$EHKyfUg8q#u!$_9QN(H=13fB8?#1_1UjutT(&$PF<%Sx_T{ z-B^E6-QB9~)VK@f8$0#gdL!$-ab@Uuj;|U=UIS+(xPJz2_En`CoLg)(P(^aI6X!^F z`#ujy0KXD5&5mTz1A0!GK(H=|u_ZK<)I8pdffgLggxmgzFG4x$p0!womhNNh$ zmdll*Y7xf$JWsDuxbudHx{H%#-*WO7rvN|FQGowmPykq1K>;2>9#Ed>4`XNX#DLr# zk)N^53omkdF3+%49h#r}9%(P6oVSOLmkgfD+tD*x0tO5PjFOlOLrq|=X2CeN@sM8@s8ir<{l3w5+&~&_nxRJC17%M?e2vz?Zmrh`n zJP-5MLx(Vxm6ZhpzhGlHC?m#HVvJ!bY<3!E&P|3m@sNaR4tz?G8^=)Ixjti#S*#IV zJmI(rj^!MEAqiCJYZGw&`jw#-4$EQOdwy^2_x#!02hickLkMp zQP=c*?|2AVNFfXmf5m^|T0nI8vk`|C& zV4jXY=dF0`8}C`X zSR)0RnfD4f86*WW9ECIRs+xZ0P{t(iAzH6qc)tWlA(H>M-_6t2&lMmBtU&T}>gwaT zzbewc;?bz*zW_!*t*ejALu^~o=S$Yu$9<>{qong_Yo{3L0O#`B%0 zYY+FHnVSnW6if8F{J1?;qp!>{tILmTyhIPS#AKc=JXs3EaCBrxyL+1p$Ij>N$IqNr zui1aTv$^_+k-d~DIe^0y+BsVgodJbhtuX zjcAwjuvER&dExh!JyzCB^+M+*HHPJNAWr@*xv4f2Opf;N^v#)6BhrLEdH?eG*vpWh&b$9thgHb zoylh^7oflbUlZ6I5tx8iPzNr#0N(yyyVh;DRlq#8IQMSkt*hiJW=dY&YE_#L9&M`( z2`{h0z?GHd#WF@Ic=JJHuU&gst2H4me|@)8Ydx;2qf+DLzm2LQ20!8l)t9*4JGG5^ z74;~}Zm5eU*WlHiTBlWCPw-8Am@0fQsQxxHu;<2Q)lPM-+EzDQB?C!>eod_@JXm=@ z8w$Y6fxWBNsPA%St^KgxM5Fe{wN`x-V-)aKRKM~wk+j5QG^ae~z?Xo!)C^e!nQygf z+qG)D#=Mb5`a3=cYl*D}{O5kcFv^;WF|L{LFcb&KWXZzIUJ_nNg<>eNXb z;=#uo*3$9A?WTQnWOnAw`N!cW?e@ZO_4x7D(ei2ox_u*VrCV**yPd|v8m8*w(*%nk z0Wz<#n0U57G#yX4tiLMjBW2DTJJy8`Z_5fPf~)e9RmfJzCjcCI89Q;he)n@5pQB30s5$sJ)azyfIKb<8f$DL2y!#Bw1wf&f5Z z#usoOpds>c1!fl}!(wO40}2F@G@-c4ADmPtv;t?O*5MD566;^*b{E=|6_?TUGb^#? z+g-$L?*A66&mW)YbPe;uaQ|P)0sHYuUYK8{i$W}&JATp`8_I|+@m|A(7>6vW-omWd72A15>HLGU18Rcqj`;ASI%Q1a+(~= zwGRoi5x!Qa9F=e2Y%)^s{y$?Xa%LBAT$M99cwd~fU>_RYR7yg>sGBR!m7COnhFy5L zqnw`ue2G{S=U#&g(3~@`!D+e;Y$&5YOC8QDd`x(}oDuV5ckTq%Gr62O|FRcShr!3jiU=;w5Z4p@ zF?u!6FD1${ZG%B#O+@moqGCw32Cuj}A@zo94h)j)Nhk%+#zwE?Prl_;+|+wJ75 zl$f7T?rJ4^gP_RIXD3BXx(oMsX!Y16>u zn~?hWLLw~hO^THU`KofNXc81Iu~?SeO5$%N8tQ0si?ZhIh zajLM(>!wA+1a2l2v;tEyCjk@CjI7MYyC?~-iLB(MqHYPSra=xfGzIyqxJ52)>5B4K zc$c$uAvP6xX-2d0D(8=KGp649if$LGh=1LqFCxqJ#~2tseUEe9?(tBzU$5&$LPZ#^ zKU_W@9DFp`c~XDyaBpR6IdtZiwwIbu2aldD&SUUh{S}TJZbILgm}2%CN7g#GYE5_f z!URawnog=w-rlW!+*#jl>}_;0s&$NliXf#9UDo_|x@Jn{q-qtXcoLL)6O*2NS61z` z_S&7=Mwew|$Gdy3Vp47Rl3Gl;U@7gesufFC(JMX^TCvlpG-}1zi2~i~7E0|u)?RX@ zE~_I_xU#zmsdT#ZH7cEiP1G$k8$CKYnj1tznVUcfGAR6F{|-~vX#8R?UBpM`|3_My z98XDU^%P^ilB|J4!^QO#Ki26h{wmLA8uutv7H#V8m*5JK+6hBvXT`$d^ADEGINHJgB3>sn&{eY%TIRvRs z*h~6kf8g%xR|qKb%vF5PqhmUkY7F>h(A3ko*Xmf0ooC zjLzq%LSpFW9vLN;zXd@gs|8pwR+t|;Xwx)0fUg8^S&y*uLitJ3)M@YX#I3|RdqyP{ zA(FXZ91TM;RiH?hkfNHtREkNFnXBr}&zOOCMi^iQr;uAi9Jt7cfAOm%zQEE+))QI! z-=55~&QgO7OcW#!F%ARtB7+IWcS{NnAsiq6-bq(J6FELhKTr-z-}3F=9Q#pBrC(uB zE`C`4y6&+2u`pM}Ud2hd>z5#wu{;=~ffds+BBdxn&_4Ss>XV`3f%_u zD+GF((E;TTVxYv<1ypYPM;t5zzaN;xA>1&*^%Fg$UR1IJ=a70}MeA~B=gfT*YcFNR zuUOFv!&`tnUN{#BwTq&I!^+A^8Ep9FA(nx|#O`rTI-GVV0OI`lR|8;9>=*)Fm}`fw z62Zwhm)xsJ*YT2L&WrYsV={RA(1d8})_|7axgeU?nMz14d5uOEmSHd|1h4<}gn&el z;Q%hlCkj`XtC;Eub_E#?5K+G;A-3muM-H`VFmPyqBZaA7hJjq1e3o>O`ga7RM*GJC zOyO_h(kO(u0VJfJO-AEz0N$L=zJN@KE`X_TM+4uZ#K&Z92a!J_hmI+9}&kngIG}KQ9w~ zc2N;T(>|QI5&*mL4Il214lx$WC+#KplU4y*i~(;?$DG-=>h ze)J=;!0B|;fP~@}fc+x=J$mU|robGc(?7~Zr%T9b3sb#oBAX+e6mK`0wcRJRwbsWP z)$etGM7<;03tp&k`4sJMy0Xyz%8Ch-RZL-aqrKb(qvdXG_c2UCmX(^&i2@j?9A;cL6$97o{FHML z8#zhMCIBaaZSi;$2zS;c)uG=?`5pvAxwmkVXO#~0_@y8}3)3Z}fFI9;*(50dnR~A% zMfn6QB5Kc{e}|HQkLde0+CVcKX z5jE!K=H5G?fk)lhQQ$wLR@Akf;5|fNy9e5WSx7Lf$v@2-RedO8Yu(!r3vI8{*r{)| zsvYJ!z{a2&iBD3r9=^Fz+pO+wce>kEmX(PYRWH46)y9E8qH}9Ba2>4mny3ZFAD=XK z)lO6k{i{tgh)Nr4xH9$KcBi_#UXy0Z*#&1CbrbAEwp!K4)eg%J$V*CMcc}nV2V(ao zu9nah&5cK{Z`z6}E`I>T7>d7>EIu0dT*qS9$T5w)$)0xc>=s1z+sTTU{IwTXnY4RJ zf#hGyy$PBqtZV&D?<(luivr(stZ)uisATsl3NhttadApo(NWSRo++Abi6EnV`xwt8 zNonkS%0t8ezXTO!I%wacUK9eGWdqAZA*3WuiC9ixjh&2yq0n32srcm?pcI;WdXO1* z!|@YqK&=BQVSv9nyLS=9?5FDe2Ter^V@r`oq4Tx~>0?@`;j5aXfEIQ(EUWQ(Xagt4 zoHQBy1mRDUWFTpmp&-3MsG$DhvA}ABBru=1o1kz8sqMA+iv)rj0(it2b7`*;n-{5Q zFP>(EI*!mxm`me5@2o^r6iyXYaXv0@_fn-8g5&$lmBK3M1@WK-De=><5lfI?Wzd5M z-tXlec$0}Z(3ect1)}@i&CWK2K0G(&)$!4oXLkO-a=z zYp!oWtgh5u@5m{^F3oy0QivcoiHG9a2#G)Oe2nD7g>eU{vN8WFMM~&by=yA)MpW4|Is8WkHNAm>EQS zaJ+~H`=&)9+xT z7|dN#7i+r#vDJfV2#?AD;^)1s>2nG5yV(M=3QOTEII0r9T~T7-JsNuH~6LrP7rGP{dZu0>{GDuNp%NAqRfX^?qoHY87{w%Q;(giMw|i~}q%z&CM zBJk)472SH%Y^nk}0Idr^Z3e2CH{#;LukyJxuDxpaVpD|4 z*f!=LvuoaK|L{hN;NImS2d`dZ6d8VjBBRi7)uR!_&w|LImkRoX)rx4q$0~k}%KR+G zUKG2rr6ub>lIk0_Lv!9fY?N*ETuR|esRSW<0o1PYHxTKGJn`u=5l=2pbgB;E;#eJ3tM@ptD0Yn$YpSxH=BXpEh`^x)l&R7=Y zx!8OXh*IuLaS3rhL7=daa4_tK&gax1#rdV>Aqs^Y3Uel?!)|OUbs#U4%d5u1DG8Rd zq+5(Nd99Ky2NPDy>vr2J=*=M2e332V*-7=XG9EO2#XUOGp|wp4CN==s`=%QTxlLBtrO~GAAI;U9 zoAr-*@tpSgSi1n>29h)0v3Lx-jPmR1aOq_JU{ODjyZR3g~`7!vXG|lDiw1 z&w-%c#|Ehg7f$a_2u0n))$V)4_nxNTcG(eQFpDXEfT_pM z6d}nID+e{!TeWJZMmi8imee=NZlgnLAJ^NRcA|gsJ|6))J^N%0;v9Cc`0n2Jwz#n% zLS{Z z_D*$s`}7LVsEY`8*7BhFIK5R&yA&l$sxZ|%j%b+P3$*~E`WZS3BXc{}Y?a8Xu2r^OUyLkvCiQooeeTd02Z&-Uq4} zquh)@CH996`cNc}9FFl9pECHH;ZQXb!wUaPlwp(+wgePP>Oy?LG5&+!;D7L+6G#h# z0+ptC<6#ym)T!E(xr4)zh2&(u{DJyDu@v5Tm^Ug2fY9o|Za2g*yzy{GZT|y^F0)r_ z^Le~qo*~oDX!?U0@_q&Ww1(^-^YD*8|Hr}%neO-5i$$zJJJh-DUF(BS#* zLciqw1*l{5))ug|Jqk+JFk&4n;><>e%gQJhVNUR@6o3{T+gW6DJ6ta92WFo=g4qP& zA#Vse>Iba!5?i{%<&qT~kJJ@d68)7Rtr@nn1k1$qlI-8ON^Z#7U4j+B!Nlvogwuf5 zJ>Pqww!R$q>yM%kTU)_LpSkh{)?4kEkKUk&-C*+*PDN zr8K+5Ghh-ggjG9y{GeaAg?S$Pi~~2pSHnkK9i`Z4_-MFm_%LVYk3!!A)?UsGKH@^p zAjJgpEv`P{1A<+)W*E9~ZD)|8&92TPue4~^wV5Cl+vXi z^t(=CvG#q}2H9d-7Gm3?+@le~v{cIO5?K+|Jg3UXOi+bR;>qL)tvP`AFU6oxG(FFc z@U|~38p;boieUXwG{~oMVfe_Z>{ING9XG0bMT1lXQj1Sf0&}WuUKduUXpkbGaWUNh zA;qy{Ly1y}Y%!fUDV37DOvo?N^@`L3DX7TA)6Cm}W9PmD!~1pL^#kZN==V%GRp)`$ z%>&)9e2^Jr5mcg3x+<5F{D@Rt8bo2Xw3u_Ov`Eh87s_gX7XPixut;qO1+UEPiu(>g z`%`KL?Z^zG9p8%vMMD*JV5LWcj_uFVX-NY&j(k4JYwS01@@G0&))V0@rZ{O)_K(NSBDGmA@JS`3fX_&{B zf$+etM+1becobnAzWg#?sg zGs;ehk7i_q6df-dQ45e>P|M^;Q>!>MM@i?=< z=>epP5PXXK#MHn~5s={lb@~GU+G04&EOv3<_ah3_JiA#%v>j>rN6<7ve0m;&f{ zrfouCf5#R!uhK*DDTd==7W))(Dn7+<;KNGl&@Qz^fC>Zu=m9lt>{m%P#XhO>MW$-y zj3&&ZGCy0Ht)ymCWLHfv(ez9-3wO%FPA*F2;d4ex51-Uju{Io!egFomFjojFkeVr$ zVqSVsf}N$BjStMDM`IcQ%)%P$OSGT6&;fBnX7-BtI*@i$V#G zdslL>u60q~lV(~rGd{nry!|0o( z(yS5x#7iag<=-rpSeoo7UaTaM{V*(WB`VwjqF5iRxC&(?K@4jlGNS?)f)WXXT0nkz<5gldIi8|`*T>8E6a zf?+jkP*QLb&w{ZS${b`TN(aSJK*1GJuz`}{D6$Jv$-*tFVtQm|gs);mhmgJ<);_sU zXH@E-$1~owE8GoEqYFnm<64wh2mG3M7K?=BXWo+swN{PSV52AZ$ux7MnkLoV4YjrH z`okKTj@7c$Kl2)`jarMWJylAj78j*e%N^Ua>H-UzJm#AGv0LUi8<*KQ8WRu%xpm{fENSfcGUVNt^uN%#YadZ2E!*goP;$z*6nSF+s&M z@jdkA8Tq5JYX-y&0s;o2a{)E2=vj#S2r`#-0A3;BFVjcoE;L5Pcu0q4;6T>q=HnJ7 z#GRGBhvN~jO(E&|(SUUPAONSXPGABwGQXKU78j<@h8WJ0IygJ=UP2O5bLi4AbdOn& zZQnD4V1~3z8-KSQ_6sf)Es76`zrRo6*u)r2E{!OkIC_-%`)t&FO+wbJ=Y!J)3}1`{ z9GJ!<4A0~Q)F$sAQDXbx_hP#42eWC*TE5=DidZzF?~A!m@PV_74sN-75;P;SX`~#wEb#OEmE*50?nPae>Rj=TUTrck&+;SrhOZm$(8Y zLgB~o8@w0zjf-4`BBi4c{1_%M(RE@fe8_R&Wy@DC{WDyZ%}Y9bBYdDQ6$vYn!FqLVa@^F2@) z=DJ1qA-tV|-wD@e(OiP^oU)cW;MpFNM1e;v_Y7oL1JiyY$S%Yn`WULj?> zlN(x0We6u5zJk5PbnMFEFcD*q;}t758+s;`eyuF4nl96pW8z zY~s*AbiiU9{f)rDL^WkFVUxaryMl zq^xR!8tM2TzI;GV(p=EJm3u1&e&usPXK^P5Kh2Gou`voTA%c)Ig)C+#^hE3e__t3E zkNp#^Pu=&PkIiGqeHl<2+?Lpn8uo)dxj2xoXn_3AKL>?`0h#VxN5)hNoI{95u^;$e zRD$TP5Q4ZxZQF^+QQ$-o^&r4PYaFJ}JS9jHAFm(u`JW1G^VFUeYO#{19F8ObRVS^C z4z5-zEj?)k)WFTe>_bEwjL=cC0%}9*R?`gu?xCi^ zeo}AV2$>!R|@$S9#r=Qn9 z36EEM!*RoTP=DB>tIqQJgB5FQ`O$jwlV>}2661ySK%skO`r#`5U(dk(SBIp&34~X=J1^`bd9+=XK0RQ=?nBj2ayokdMDYIh;FCf z76=O<*5%Ub>cR;P=(pyP(f}V+IE*rbN-cAHr_mPzzJ5Sb z%Q1<`#~|jy+nSgQ$&4g%ig;KMsPgMrMFiTLAu%v}eaCx|jG7k*e7JOUbd(H;`QPM5 z=)aVcLgM>U{C1sQUjj3 z(z+GVU@AC6lCjjD`4Iey^~Ym55rrj4@&KZf+*kx+RfUc432E1rPy!ok_v5DVq|XK# zIN`mZdH2P!qUSc^A?4u{R?|f%$W6)tsjuUKA!K43S-wcD+i7r&)is)-5=oK}e%jqv zeYZ7bfNaW@v!xCz(;ASY`*5=12w?d$MKIn&Jd^x#`t8s*3FpkIO~QF{pC31Qz4F+o zIA8tYa!O5{|LQ6WE0G2o5d{g~F@UtDG`{5Bm?&kno3$AASoi&vFzQHE1K zIyy>HZR{?Oi&deLkvA-!0ZW0bDhb4rDNcN$T)8Krrvl@B;uHW4u+-_3FajS-=JWM9 zvM#*WarO|A1xsKUtyz1HlQ$(UOWqPGU8pQB_<`Uh*Ckl?c;MWwAcgKN)Uvp#*8-r$k z^IbFOhiX5+&^G+%$q)S-Y@g?~20Ap%)icoe+E+W`mM!_bk)?G5Oi-`_D%GFP@EP z|BJq}|Ha7be_@5;7tg{k9LxXW#nAoY$lu?`ulWzM3q)UxoPdU8p=_r|#oYV4uHT2t zWc97EJo*JFTPo*1_JN0zQUnTlzsNOXm@KFv?BC~!iJO5R`JWkcb23q}Azt}G^w}Kn ztgp3e)z-(mTU`ttz1P}?j(PG{HBs|-5eq|V1~0t+91lK<{(R8No1&F=t<$ORZneA3 zYUhE{lw^1>72vK7xYv|Y=*FSx9?)ZSqZDz-ZmPY;9PDjAj1t3ch-we*y^aSy%OS)| z#8qyJDxf7`+^@Jb{GF4umXn3wWT9|p=6n?kca-ZbR+ax4D+(jbQecC;m%VFL8jyR2d#9+yzH*M<-_WtXzs>bw zykEiiqPo#KE(H`lpD?TLz_bp)T#O89WI}msK=33>bG?erD>WTe;e`z(8ChyO-25PO zD(V-OA5_Dk>DdN3&%R;J%wfn|NU6Z`jw^ArFAPP;lP^VOS_L z<^?%EjZ(+8k!DZrRNI|eOHgas_K%ddFIURtG7RK$bE}SeqEpN5rOQdGJz0Rr%ZX?-mo9N)ip_4NI=EGLPu2pIo&PY4*V59;`??#?alLZNbU+83Acf1)FFn}X1Z ztreuM4G)@NIpKuFBsO)&FDP-%hT0iG?=vpa*Y(yshDOc5q;x{%_WFx z{5V0S&axePO0^1?R$vzDTJAJfQYYx%fDNJpI?38hXx%IvDr%_RiDx zqwTIpn}TF?XavGWHUPS=bwx}azAOhN2?oK&#TYN_U9}6FFv~Wx&NsC9NKz=jjPpYbP^4| z$_F>Y=b&b7Qs*_r>I=QSn3H<9as>_Ju``xXWv#mYaIe{A;ZWFt!WOEctc0xf8mk3M z*KO{#wh~p;FvGISb;vHWQCr*FQkz%jFeMW5_?R3@&6Fjk_gERt0z{NuUNjEY*XDoS z9j*uCj=#0Lv|>F!{Ky~Pd$w>u?fsAIf%p93XmxnFH@{=uhZ$qL4{MlIOSG$=idU#t z+G|6}DH!s0W4*ean4ens(q3mBir$2xBHxWVK^2mw&v=B!qvRrv7^S*cSI5!*%CNVH zRu{-W_`mc)xZn2Zs$c8{6B}PQ8H_B%)*mK!UEMh`B(W1f62v{4c&83`vXAk) zuh(~~Tea?XeN7#MdW$q=Mv-X^Kq&%ke`lv!-^OHd-P+DtZKJzW>pW;MD#%wwy=#5- z*dKqGx@5bJO@QBXx4N-`e5j~8uPo@bHjt%Ky#w7Ub<(p^_x>uVhX#Hhs$9oz#MPbX zLB;6Hphd+6!=mt2OAJTF!g$+mVPPFOB(|)p+lzJ@0c=c`Usk7bgKCZRun@_vV+L;$Y2W0AzaA}G0`Zso}A9q`|_TF{} z^CpVTP*Vn80aYWCp0}E<`r~S+hHAO?({`t})7_}IAF2=vZY%=xZeqLo`48(JHDAgDi})=SM45(1|qMY3|h|tJ}#-Gs+x#ph-$73FQwIqhZl9@Q4pOlhk9d=luE%6J;CANCt`wbSo4sNNg1YKu?;f4*I5@Aa4;gqr$ZLX(w^8Q<%9t@ z@3OdS`pR&z*MxMxwG9H7M5Ntmw5nURmjWX>$DDzeZcHUfi2f+!W%!x*(&j4UcD4XjkCW70q&VYi6U?q3G#sz1aqQ!B`NG_ z1eW)t5z~!R1$;S5#^qVU8m@ZScR7IKW(TWm&U?N4k;6g;Uh$laX~ z#~>kLEVfO*v|R`KK$@*ahiL`)gfB#5HM*$ek(5?DiML;+Q}w(@!Ix~;*ILz<$Xalh zbOuhSB!TSPkcbg@N5?w&Dm}+ywn6$VsYHhD5^7txLjsQz!4JVT(f3Z`qE)#FHKffm zxyi`D0@tz6(07AalF_(Aymgm(iovgRg@{uZE@(xWH>D^8?JH8qW%&2SMUbEBM3C=s z7cppBl|M=>pfaJ5t8^4NAuYirnl&I0Bn3jjr6m#H4Q9=eX$|PCAE;LntX}fs0VamP zkr6WR72L3d*-HknB;RYc*&7R4v=H>b&exE}d{A!@>9Da$AiIN4ec!m9W zaiIH69nkPerM0d_3T1G{O9(_x}ZAqlAE2R02zWIC=7u^GUf>m>igui5F4FH7un zI5PXxAR@ymdpjFtvuvJ27H5qluta+^$JP*lJS757udIUU0DOIQ=fv%oxjTR>9I_Bw z{^c`a%LE1x0JYPNIgh>=hp1vYiT?hp+#u+$C0x;B`m0Y;s2be(o(WNbS$7KxDZau6 zP$*1H6@EEE3WdV0!Y?Q86bci?LSf?FLZR?pp-{M8C`?=_6s~>w<(FSxD-^C5?iLEy zCngHNy#ApME&eYBEuh;Hb|TOtbiBSxgIye03j^Y*`s6BR|GgW@LLTd+bTbn!eqotG4=fx4ZjF z)&R>aL)h#tuY^6o0y!B-AP@+TWRsl)PBzIVh;z4ReklMZIyIT!ee<@#LdtOS<9K&i$m4a+grbRF|g zeY&Byx%*5%lmk&HW!-1Tm_(J!e}7#I&fBdzQ_vT2VEYC+a1=)dyIvA&_8XA_S(Ci$ z93=jrHp#28s#TE}B2}u36_tN24mo$0d15bhLztYQ&~ZCnF|G1yH=LH4YG2Dw0zd8~ znX-VXoteV7%GWr>_+=?(}-a!*R~Qj4!N7Dq8b^_c705kZs54KIBtUbrYPeI z-%gfX|GK7O3eMcGxt>2XxYfbLy1fP??%KkdZ)?WhM*a)H)d1SdMMQiFDv|BPM4GbH+Sh)`44R|07`k{C)9Pl*ySYR53GlR9wFc?`kwN z0$?e^EtTR_K^O(?$m)=-SsKR$bX;liWR-KjlB@<;hj(CqhWm%Qa7vvUUv$~I6KE*c z@McszZ5MAK=`1tTa-rO+8g4H33O0wTWHffzuoLFD4Tq7`1T;>s%bJiH@rccU1A zNH0%9BuiF8Caf)vQ>J2_9dmDyWMgb&StdAE;UQeD*lU$X#D!IEvX(bnO)F2!2gi?V z#sWbSb6;m-#RE;6XJ({H7XT@M(OE?-zjtb4x;{e>sFW%X0UapR4*WRqc;(TP=gyr` zcdJzaKQlEU7}t*_ycCW!i%TF37R5k)2Q3_tbL8E>{rDgH&7btuJ6x?2Of>j^ho#Ps2FnIOULdmF#yPjl|U5>mcRb+T)#tkt76dyq^oW7FC^5c#h zT}i)3k8TGGipd9oKrTRb^%kQiYkh znlK?U+*~9#n83ttJ)ERSW2S(BG=mn%2su$;-=X@U#tc13eYW*UcTZ0z^-v6P$e(X= z6G9!k+X<~nEo{+E>Y6nQ_95OQ^T9rPPSL*)LRO_IAB;>&~zAY~(3|AcUXGWziyg+u)DLRvTE z1~2Hkv1fH^-4IUMtIOSvHPb-dcNigCr}`(0#JuM;)$1}1(&ye{6{<<@82T7Gag-bE zMFq!E2q?;V^qP2;PVXdkLPelm!Y3eGjZ zY3A{xN>?ia2p%e+iF&;`GXWbnwNC5D79ijUW=V$agT#E_5^;XMue35q3k9XA*^#r< zzT^B^d0IqRcxa2_Te^|(6;~C$;>;u2dt@de1~!wh$xX95`t;oKQ|J0-b zOqTf?vbbBCbC1+Soi)P^i{Fr{7!yL%=|YZrB&Crqv=_Bp z^9>zKz9L)atrJDO^#R3OS^O*hIv*X$xbVZ0293m8ryJ5y2lOrJ8TfCW+4q|P?rKs39&D@q@=@|-UzaX-vzzQ zNID{zjX3py#8NZ_ zs;3wcEv5aBR8g_=`$AEHcV@w%l%HJ*fVT#?MKr!juA_XO;KVMJpQ{oWZw5o-E?U&*phia+CD2DONBwsmqY^igK|Tuf+-P2q_PupZ2Ro zG}6~XeiN*DBQv5LL^j8=8N3$rhaxOtIVhM^CD{omhV>E zR%E-Di8wDWGyo(8g1;uT?Rz97y7f7ab`QmH52vv0d+tEGU5yWrx8kGsL@2? zgU#yCl~0G;Yb&mes~Ie)TKZYY3}{9AR~{Dg6W)48fg*jcoN@*R1OVOup#8StcrEsV zwwP?bC?}f|n`TuJF)n;<%{opr-gUymGgFPpii+#T{49Azo;yR4xG2`#%%4_(H=YR_ z8&Abfg@_JMBG-=fZ$gYQ*X>e(0%Kd=<$p^N1Ajp=u-Pk$h2bj;203w3<%^5l1|tho z9B##H)g-9G(IY%ksaXQ&NuHHi&5L%8YvsuPN*Jv2XtC?Tx{(}8sN^c-iXzDHu@FJM!2SwJtAw5z=)>K=nPXTrsO#uJ~Y{!o}ou(-otFzn3P*^ zAXG}5+6QcrNNJd8z4o1kfgnqiG!*=&O{z;ESwfV(D@CI0mh0Nf{a3lIk9TG?5S;$D zLb0;336_%;Fu3kkMKUUG>x}nQ5#wFRGoGx1;ytSm_r84f2;tW*AK0FpJ4NQd_kgmraAq=m9RnTzT|Wz#gc)hX{z! zf26N>Jaf&qjltFggkG-2ybYNrU5wqj;>J7*{Hlskn@ZbjP+-SPfdRZn1FI-_2|&&} zYROW!)AB9XOY^=>fv0gWP67PR8ef4YMB8(XmEr9wff1<=Q1|#?+O2@a21R!J>ScMS z72XB>S*+WHgGM+E!o?iHqGty|nDD43%Q0ATL>0Z|De&ncPE_|5%G?zLE~Hw`{o?pu zCGfqq$|+naD6CPBO1qWHvo5yTDsiv~IhK!CF1WCKrEgMHR?Vv60YNfJZC9@y*{I%T`9>bJYUXZv7lk=dm%z0R`{0d*A z%?G*yaVhBV{X#zGu(YxKwMvjI@dyVbY)+Z1T7H7`a%Ro%i%X2a`o?n?*T${T+;D<8DRP|`_5YoTzidDUZT?NC#a--gy?DRW#A=7AfoY7yD4c4R@M6udT%8)%k zDTB=z-#uUkTg{k1dH}D#=Qlk)J&h~Dru9(wjsG9%6l1d*4QNRIRNv)ziM`#>KHrEB zpL-Xcn}723spl@?-1VhP$4<}B&YjXa?$K4t^Q@MYF=I4D8!IBmyb7vdTL|Y}FepDn zDm{4d)xfK~RU^j=F|IUd^K@_@7Qe-?t5gTSxq<2cy7%6_)4l1Kn-(e?WQ@4Fky{^f z=Zl8i-<86TDzaeAtwh{%s%}z+{%9-M^3G+yiu)S8DBg|srIUm%&I~K z_8F~IwEoyo!l_jH($ePr#fdZ3IoW5T-k4Nc0t|)ymMcZ%sK*~cQ>i=fv~hVlq$GXx z;}E>wV2nondl2laNsIV*-}ZhE;BIB6v#A}cRwQofb?CYk(-l-%$C*x)(opO-0baS# zNnyIE6R8s%36Z$vc%wlbC*b(oj?hUb$wE&Ci`GDCnRubY%+KqZ6rP&)FK9 zSF_xsE-|Qzt&l2QAHy*NO5eV4{OH-^=afgav}$IB2b$!l?2flwICtsz#WQnf$>G?g zlc&$0CEq`3Dibp~hj8U5pPpTK3S()uswVPNe{(wowDvfc7GZk&dH@I7W@PC+xg_#)2GfIKXpubW7~2@@KT}N*JfK_x|AAdk|)$%@LeI?OkA2LKU`_KCT7!6 zRJP}qBu&w|Tat7*5zv{_3+GOpJ-(m`$V_K??#hyoPG*vjnKa#S9bj*elhrP9=&2i$ z-J9Nj8j%6G%L#MZ^>3Kjr7q7PJ$hHau~>+|BNqIvQ2L&6`CuDqHUF9=g2H3ia+Qi6dHyTAnP zCoUJam&=*2;`%rREw2B|PML--ycb`F8hjITC~t{N$#Zk39HcXo=jOVIW|-V0w|BaJ zXiCmW7=k{m4U=*)Z&b zCOx7bR+OTh5>;g+4d92#U#Tw89Fh-jID+dW=HR=jBo9@d#Ia3D7CN8Iuza{Fy!;kj zK9cYGJ~9tnR~Vofdf#Xqp$hd7u^Mk^NKAcoso*Q(k}gVHK-JmXk94hc+x2+ghe&mN zF`XHU?B>(~wZ`s)7s!HdzR5u=JIRum`1QWayg`Ob)0NRv@A0(ZRo+U1un&-QTP}f2 z-{!*?C>`e6ZRh6B30JZbE}b7ugCsGc=$X+t9+K{Ay&`P@U(VYAVw!~^#b=6)1k0P3x~hgKI`S)pSkT)Ct%H<%>yh>_&Z(sgl6z`Cu{`Jk)?2I*q{JwIn0 z8^hcH%1jTEA%uwVu%JrHsb>_qz7}bs-k64QV(JPVIZxCZb#1aJ=!^<57{AeO?Ii{K zv#(8`g5@<6vN86f!~K?pqs&}4lvjhu2_qiIVAKN7-~&$Uy6|e)LnQ{Bmbv!Y6$c%j zDWjj4?*WI7n5uy&Td|yL?_8w@#FBQ;h0|w`ojH4aVF7otDPOnp0u|FsY&P#~GPTB) z$;?GSHrbt-(o7WGV2Ns#ER&gIquNW@z!_`7BH$-CSOol{l-x^fidCyhyMvQtxOP}v zZ&eMwZrk+_lh3(JK3Sn$Qf?Z|{rssd=D^ImAGPbz`uKtI$?75;-%3L2Vz! zSe3V{bc_tZ<$`w zw>9eZDe`o0rcv(3(=_H?!FL(g$%9_-{M4cIQ^&eZd-CWaKYBWTrnT$|zvXw% z&z_x|J$5APRTwQ)9;o|Qe>ePfl21rodlHg(gzB4mKkYT&NTMolB!P1|HBAmbZ?#(P z)jpHAk!apXR5@jJmZP_M6}|JJ9=rcokD0M9&!QF z-K|{>%Cw!p>3YWg(Jqlj219d+WVh#&al^lcAh;^`ZKVY4H<1rJEm%iE`HWoeCl9Fb zdnhYoc|1zQ#fz!x@OC-VnUOf>iX2{_&w*bR{-g4l+$A%~#Vd8>-T8d-XxS~(%W%kw z0x$64YP7(_i|j%mMs4NYn}?5MuV$msy3=lzCB?BCt zai_pS(2Zrv{%{1-8hmzXh9G5g50Q&s1iej_c3JY5;}GfK+u1Nj-9b zpCYYK_YrWxD!y=vow@GhLfI9_pVHb?`j1uOryzhn70&juNh|&8oSoWdDq3!#1j1Ff znEHiNW_b9PQDS;kPR3_cFAF_%cJ7_I?u4C5CgecbU1ol{D-o_I_)yxMEDHx+5N5Lu zx~i3Zki6g{dTxz(tKSbfP78O@jhlGpHKYWvV=b3TWcb z93=P?tJ&HOPNO6&h|*{!`!jv_Q%pf8(Rba zj#lCwVdT%c>IVsL1;O%oxK^oFPsv}iVK|-y%iKS_Z(lB0sq+r++h=O@j=UP#v9X7* zbgea*C137_YcNU14u-Czp{yH`09%)w&K5~dKQ4DuRPG8rN`^{rdZ(kN7M;&A{n?sh z5-IXj4&-Lnk!N`zV&vp2Sz=C`XL`!Ttf1s437uih&7h9hLZ5oM`97okdd3tXLFMU| zU~^Kz^fcU2E8|*-9Q|}$;Jv3_Mf8I&Z_Rfzap>W`99klW=}ObEla4HMVc`Wm%ATj^ zo;`l#^y#NEx{p!MT_F}rl@5$y&6Vy=zSM8cr4D)jv;@dFt=?%~6D+nTi=9F~-UL^n_#E-!k)s&qwb^4W3E zz3N6OOXXNdWk2q4)62TaLxro9$Nk_^H|7x*O>depdo{yzD*Fu6Z3eYO*9EdlwbDZ{ zaGikj3*@k)kYVbFa75Km3S%E}x_*e9-!|YkQePc?U4DAvW;*~(q=|-@XLVC2(gXtt z7mv^>-1QcrQ@~p*3{t1;xTdgITVO00FI#coPxKO)H) zSu0YWJ7XGuks}`AI5CU@oZ5(S;KXu0?quMsR?tnv;gPvB70Yq3p-SgZq^E-%i5pw) zMw{o?=FS)!?J_C6Cz^8xVTNd;XTfdcW#F%f{ucGvd}kdDcZO1FS`rzB~G?(3x<>@f*|cM6~{62M+|FU{VaDmkKVoGixjMN*;& z**dYFFCx|>l2}FNid;{+?WJnSBQjU?aau{7laiikKfTdOq+g3lsgxQkIjN zeJE!)g+s4^CV&1j#&?EpMR*^|6_Kh`2oO05;}C2v=wXE}0bsy91UFIiP(<8Eh#^T0 zvd0rQi!!5&iDY*%#@sOGHWne=UTp7VjFlK;4JQ8Z#wHJpgmy5-ZegrEfQuqZyI`oX z9S>x>GvZgeJWi@OD|frjHRL?H6h=W9#FmG=w=>4xF7w74hjftl2xFxoTtb0sDPDM{ z#D;M#1@5L8Ei+ag+AeRa*n!}kc%Ty7ON^Cw!lmxOAY-FLPr&!nwXqS|%_vN?4)s9s z*Vfn9?~ujgeFyQ;wNZp`W7p_HjN8&wf#=$5m)cR#4Uu|)F?O#^jW;~^qVlN9fLSnr zWxx;giOp)PFvePJzInem-N^1kYepC=uLIX;CThj*!jF6KQ1t{su)7%o zvwwFMgcURtXq2^#Ef@{sH~x+qZ}=WY6CrP+e+ITOR(=7UGmSbDDUhmubVQ6mjH(4m zRP{ocF^1W|O6;X3DhvAhtSn=YG4^ZnyIVr|eDg44?*ye>D-i~6V{G)#29fMqxx|41 zD&jtn-s>0}dwhnD0aQA1yRw&jw9UKAQSco1ykHfMhmW1UaBA-xcWr<8+=&J5JM%n_ ztv0Vb+=<(7yqB@DCuZ7S(6YQrCcZa8Vdm%0?0w^Q#va=~->j@(8{PikgU|jNn{QSa zD{n*fOSdvM`i&B;t93I5tDtF=JzjIeN)&Vx+-ODTyWh6x`Y@O4;NWt&ZWgkt-egWAZG5Sk=4;kUx zjPJ)wjN!1ukfdl3is(IX>M-Uh8qGim2Hu{*j!I7&`1i=Cxo5ul$ojRhJ@xUZJ01ps zH|{6o-mEZ(!3}a~Y$}JL4RUC1Du-!XVU#h}4cn3Bh(QZ~4@msu{Q#S9?gmb` zi(7lth`0+s!NgV=R;BzE*D>lb#tzF2fbi zP0!yVru;Hvr7tj6`XXcHYhcK0Py}tmnY}fdTUt@oT5aR3&W4FcQ4I`jcxSWNek5|8 zHm^QCdkX$vH_iqZ7$F<9M609*JlbYW5^tFM!y;X3K4@N8yz7_=7McE|E-t^=H6 z&^jyegEveF)YxAt-NhPDtepO$_ip!RKmKoq&hPz$_pSZ2fA=kuZ~nwPKJ>tU{=Wb9 zg#X;pkw3ZjZ|?c(&%b-{tCN5Ay}Lf~{C9r+PygjFzUlcN`t;NzKk%~`8dsi2k;0c) zb!qjdWRV9^uAF-I%5RLBFUW83;F$ad4^GJMVaC|kWOYZ3Z_w7$5(WjTxfoNW3deAu zzR`5`4PoJ|O#8{*j2$e&;sGRbD`W4(D8c@Eef@9NN7*%!6L!#uy+h92M4cFX4%Z$Zp2Q?nNaHCsi;3 zjsnl)bX04n+2p+%Z3BenS>l{0g57bh!o3kq2c zfvlU)MI!8AqfwU#o32kE0K%?Y10ZeBoS$$nkFf2iXp2}K!a|CngX8rViZL|UgQ0KN z7^)XzXmYZCu^~VlK)e=-~LoghtRF8u?yYXY5zjS(c%<^`OgS#l~jQHFxZ|#8v@AZ!MP; zS&baQ6?T|egZ{YM1u*UVGLN#x*T_5$lSO9K8#a+Nfazg+Vy2FNMfiDE&Im`3)y|%t zuT&Ib#_JV9Nn1`#!~aIvqv50T@nVAIJz6&+>)EGaBfSlyW^LTCV{W`mHVT_W#8K{S=7^|`Q~kmy;NfNGRKXVYa+Z+m1wFWH_ZPfHppV9mFd^fp5{LnTZvUj zuL|wRZ-1(*tYL$oZ^6|!QGD#QNF;dea^Hr&mZAudd5>9Lv!61E+=V zk`y3$9w?i*8UznO_2gRKbaSc>dB^yv^EJY5s-w1>g%bn5cBn*KUc201m5#b8T<-V> zT$)6GQ@Gsu54bdOdG=-o<6S+te48B0H=1N`W;lK=^S?nISk$nHc|!ee`}twL`> zs5q)ti`Qb<dl;iF z7W_sNoh3UI#;h_2!Y73aKimgYIJQ}g@Jm5R{iEYSt46$P+`D9Yyx%3Hr*{spzg%Bm z|K|Go`kjpZe2Hym^Ub>@_q>iVHo~saw!tpOO1R?u4#7EP_Ils~DtR`>*yy$OGNXM2 z($C+9ZH3!3+MuX?u#-i`;vv$W0;_pCMD6pa`PRtNysQ3C}n)mpCa zxV|P0Y&V(F;uyC|4C*jrJ#NLCVe>f))avTool7gCFU36VoO}+ViaLjU-QsS`=eo!9 zu`Aqn0?jMn3`p;K7@>}K<7MeV6gxo}gYSnrQ|=7DNJ>P;-n$Lq*b}?<5@T;=jQwlI z*hd*--!33awz$Qf@biisB%f!DJ;E6K9>&;K6toO~~SuHoTRvX>|i$H?O60J~y2LHvGz zy$_F{K^SeCzXV^m+M4zsA@c2rY-2kwcf<3j`0q5 z?h(b#dXjg>&;W^}6^za()5d&}7x?^+|lsFFbh;cLC#jkxw2x zG&MC*J=mCTRVVExuTD=a9;{9;@+rG{V6w5;;x)J}tJe}MYV(AoF}1#~wY(~{ zV2m(vm;R#h=f!~=UugD`PiMv_WY#g z`dQJ|?nFIdxOyD7YpZM_Q>n0OgcvOWiW2Fj@;J%2$m7+R4!h}T5kf=Tio+;Ceky;= zt?kGPmt4P1A_2LxQ?Zz~v$3tB{ zW|`|ikfsPk;~{L)f;yWt*p zbZJ1T$DLZf7L=SPG576gE!2dE)^{vBG^BIXp<~$z_w?FH6^7<_c)Ucmeku@I_*N2j zLd|WI1@%x*7FcWgJgG^W+bV9BQ8{5;P;u#MiSkE^NYe*86G6O{R5R;i^qh)Vba5w> z${X!hF@DN;s40ToFgcJ*k%{V9emfnifMlJ@$So5dS*xmWRbMykQ(r`gB9Mh?D~Exn zz>*DCfvO6q!B&zP6;!?AS!+Bx7)C)7=>Ao4;@aQrsG}N2p-IFwA>Spd7q7aBy;QYq zugd)-a?=r0p?Bq~XZf|2gonCBm8)icES#`Tx=Wg306|KLu&;#h`R3OLakOJ6n{U2h z{aTq-@VHO?8e6~CV>389go`t=fF2$q+dKBxgRIPkhG1}r$Da?fQS5vDk3m+hlELHu z1i&}&_{%{y>b=6WWg=G2!`5oMx!V4VK{mGk?5UL}51wn-?Wtt#qW#=6{;@-+rj8sB z5AbGv<=MA9b8e-6V*c{l%E|Nf!+$l%9vhf%{`Wy`8um+fumLv2#@K&DUcuB{`>5Bb zoj7o{l7B3wRt_wp8*HtJ`5fs)eOKXnMiD4MlFfd84n+h7N7=~d0 zZ=B))m5KqIBat|5p+Zr)FbOj<6qSguREGt+4-uACQ-K5+>mhggS+(9I8XN6L&IFa4r`K zuxMA4PN-#$!dzN$qy>x|Mno=lI++#5$7wux%xH@pgj(`|P-#RhT7F{1Iu@)FP1V|+ zuzERgHGyDsH4>%5Uk>ki2_jby^q87;@WvnB7=e|&cCM==16C85?8+qhQX@Ca^g)hZ zC_2{zxq1Tx{_#`+1v%uIPBx83k5)Te2|Ybn$=;zT&k=PqDNSON;xhw6KB3@*v>PPd z=!`{t(A5K?Iiyj^Chg`UGb_VxgN`A4Qt_6v;?%;3FS=J%@q}dxm**T*1XL4I&>hVoioP$%V)4EpcFW!=L=qTr zqiEzz=Qz~q4OklqwIJ*mhTj%@LGpGORqP;*Ug9n<%pZXr#qj*X$xS_p@xi`OOk!OPqngHY(0_jLJhk zWvRdZvq44&ipmg_M!(|$8a!#6MIJE%jX>xXTjEr5*LQ6%r+h*UM7Z#&plXW#?uIco z1L%+7;#N<0gM>ixHDl`zqV|ej%mIQCZSOQ%v>rL+tyPp1Vw0fu1!p1ba&O*(9I7oAeVP=QRbdx>Ef6BjFCYa5RNJO=R? z!ebjA!+4C~F^WeSkL`Huzyqg~FanNV9H3E$-pcS{4+!oXgJ6pC(Ce^!GRoKsNbyhb z_#Ql7#N&JMcn2QehsQs~1NPk@RdQF>A*J431xKt53^{IOs5mKNb+tx=Q_V`d5JN~B zk=^(s+R=$J<1qF7YO`uvAQROOz#;zdCUb+2p&$NO>~obc6jPdxktDzS3)bBBGI04a zTnZ+ga51jgRv33IpT-$nNu_e)$Vrw-g(|YEp`17|l)0eb7`FX!W@{eJcY~zXxsoKc zRun87a}5?uLCAeNgip(6RTSE*VoVh?7TG$txZ4tgm1zoq#XvDcE#kH|oE^*_>LoTdYIU$F;Cr;VxV2juz^ zDl!bwFo5UaRAwd^NIVDDvFs|{L!s)WRI&m?RIkA2&A`_J4-ATOxsWP2n~&-~kx#s2 zh3Qf&TMzVX)r|v>t{f_^2f=vU!bGbevL%S~xLc z>@2;M%)zuOIF7>nVk{r+1kgF?K?IW`Br8LHM2f7`#qEuRvdjtqLvALqV=g*CKABit zCaBtnzRE-zO7NaIqe2i;(1cFcOWZ1)xP?oRVb6w6fGQ@tzk~@xpv}mNri4_B%~wKQ zJE?0@3U1N~n_K*-p|+{aZBL@Ccr9*LomRTbO6#Z9Y#2C*!oslH3W6kt_v9+PC@3WL z;5RhYx>$K@6hi+K^h}iK0y6y*Muuols-HncrH6@F^E~Lz*uGFT0a|e+JS*dj3Ymf4 zqow)gcQW?U0K1bJLdZCoe2qul8iVQCO9Sk6h0!xp^?JQ_zZusfzW^^7xBfARjP~i|i)%Tq7{gmRqol%zu*%tmaPla$Efc;Q;k&T1*_J5+oA9G>($E`qFQR5tl*)~a^Y24$yOBhf zPM&n&$)S8F!tYb?R4aIXDBnflnbNV{KUx_OrRyYA#A8VEW0@i-yoT_fK=@;-2nxp% zvi#oO@M(nOY-3tgf`22z_al5dlMkG~lpDR_hY|iOz4^={{38fIoXO_|!hfST{3OCZ z+Z#TI@IUL#|0#t37lhAc@`qE4@_}CXQwX0%_|qBq_aNLR_yQ@o<{W8^ua6W^g9M<{JGllEf(7?uFp+P;h^2spsZ$1bZtulb#6V+Q5drb-rxD#o^rr+7KtqDW6#E&(F6r2j-vK5Xg_umA>4@-#8iQ;i#i!T220C<-Pu+86i}uL zuk==-nXSSX%qqMhs<6+j!WYdd5WtAk)nqF1+h!$R$yDM?y_J~AR^oTeN_ z76&2ALy(lE<`*h7EHH3h2Y+~fyMUvSfoA28;L1_Bk--kYcsH(cD^9A-aoj3AzUq2z zkc`veI#_V+zCZz$^9z;ZR!kSMQo4q7wAJEKbVN9wd%&s=aBo zRfKjU9K2W}|AyH5!75-3Qv4V+qVN+X+-~n+Y;2c0wNhR7gM_v!(JERc81*p~pQx9EO$jH>EafvWCf{e_rC!+Optg0 literal 0 HcmV?d00001 diff --git a/MikroNUC/20260630/20260630232001-Config.rsc b/MikroNUC/20260630/20260630232001-Config.rsc new file mode 100644 index 0000000..d544f31 --- /dev/null +++ b/MikroNUC/20260630/20260630232001-Config.rsc @@ -0,0 +1,4981 @@ +# 2026-06-30 23:20:02 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/interface veth +add address=172.20.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \ + gateway=172.20.0.1 gateway6="" name=veth-awg2wg +/interface wireguard +add disabled=yes listen-port=12430 mtu=1360 name=wg-awg2wg +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=*104 +add bridge=Bridge-LAN interface=*103 +add bridge=Bridge-LAN interface=5G-MikroGig-1 +add bridge=*107 interface=*108 +add bridge=*109 interface=*10A +add bridge=*10C interface=*10D +add bridge=*10E interface=*10F +add bridge=*110 interface=*111 +add bridge=*112 interface=*113 +add bridge=*114 interface=*115 +add bridge=*116 interface=*117 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 endpoint-address=172.20.0.2 endpoint-port=\ + 51820 interface=wg-awg2wg name=awg2wg persistent-keepalive=45s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=172.20.0.1/30 interface=veth-awg2wg network=172.20.0.0 +add address=10.9.0.3 interface=wg-awg2wg network=10.9.0.3 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +add comment=Monitor-AWG2WG distance=1 dst-address=9.9.9.9/32 gateway=\ + wg-awg2wg +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +add comment=Monitor-AWG2WG down-script=\ + "/ip route disable [find comment=\"Route-AWG2WG\"]" host=9.9.9.9 \ + interval=10s packet-count=5 thr-loss-count=4 timeout=5s type=icmp \ + up-script="/ip route enable [find comment=\"Route-AWG2WG\"]" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260630/20260630232001-Diff-Config.rsc b/MikroNUC/history/20260630/20260630232001-Diff-Config.rsc new file mode 100644 index 0000000..4dd403b --- /dev/null +++ b/MikroNUC/history/20260630/20260630232001-Diff-Config.rsc @@ -0,0 +1,50 @@ +27,31d26 +< /interface veth +< add address=172.20.0.2/30 container-mac-address=00:00:00:00:00:00 dhcp=no \ +< gateway=172.20.0.1 gateway6="" name=veth-awg2wg +< /interface wireguard +< add disabled=yes listen-port=12430 mtu=1360 name=wg-awg2wg +4737,4763d4731 +< add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ +< Manager policy=ftp,read,write,policy source="\r\ +< \n :put \"Uninstalling AmneziaWG...\"\r\ +< \n :log info \"Uninstalling AmneziaWG...\"\r\ +< \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ +< \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ +< rror={}\r\ +< \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ +< {}\r\ +< \n /container/stop [find where interface=veth-awg2wg]\r\ +< \n :delay 7s\r\ +< \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ +< \n /container/remove [find where interface=veth-awg2wg]\r\ +< \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ +< \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ +< \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ +< \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ +< \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ +< \r\ +< \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ +< \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ +< \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ +< \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ +< \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ +< \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ +< \n /system/script/remove [find where name=awg2wg-uninstall]\r\ +< \n" +4865,4868d4832 +< /interface wireguard peers +< add allowed-address=0.0.0.0/0,::/0 endpoint-address=172.20.0.2 endpoint-port=\ +< 51820 interface=wg-awg2wg name=awg2wg persistent-keepalive=45s \ +< public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +4871,4872d4834 +< add address=172.20.0.1/30 interface=veth-awg2wg network=172.20.0.0 +< add address=10.9.0.3 interface=wg-awg2wg network=10.9.0.3 +4892,4893d4853 +< add comment=Monitor-AWG2WG distance=1 dst-address=9.9.9.9/32 gateway=\ +< wg-awg2wg +4976,4979d4935 +< add comment=Monitor-AWG2WG down-script=\ +< "/ip route disable [find comment=\"Route-AWG2WG\"]" host=9.9.9.9 \ +< interval=10s packet-count=5 thr-loss-count=4 timeout=5s type=icmp \ +< up-script="/ip route enable [find comment=\"Route-AWG2WG\"]" -- 2.52.0