From 4d9fcdc3f2986120403ad01c7241bbce1ea6194f Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 10 Jul 2026 13:00:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jul 10 13:00:03. --- .../20260710/20260710122003-Config.rsc | 5 + .../20260710/20260710124002-Config.rsc | 3841 ++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 365 +- .../20260710/20260710130001-Binary.backup | Bin 0 -> 385044 bytes MikroNUC/20260710/20260710130001-Config.rsc | 5521 +++++++++++++++++ .../20260710/20260710130001-Diff-Config.rsc | 3 + 6 files changed, 9734 insertions(+), 1 deletion(-) create mode 100644 MikroMaster/20260710/20260710122003-Config.rsc create mode 100644 MikroMaster/20260710/20260710124002-Config.rsc create mode 100644 MikroNUC/20260710/20260710130001-Binary.backup create mode 100644 MikroNUC/20260710/20260710130001-Config.rsc create mode 100644 MikroNUC/history/20260710/20260710130001-Diff-Config.rsc diff --git a/MikroMaster/20260710/20260710122003-Config.rsc b/MikroMaster/20260710/20260710122003-Config.rsc new file mode 100644 index 0000000..f871793 --- /dev/null +++ b/MikroMaster/20260710/20260710122003-Config.rsc @@ -0,0 +1,5 @@ +# 2026-07-10 12:20:18 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 diff --git a/MikroMaster/20260710/20260710124002-Config.rsc b/MikroMaster/20260710/20260710124002-Config.rsc new file mode 100644 index 0000000..51c6b4e --- /dev/null +++ b/MikroMaster/20260710/20260710124002-Config.rsc @@ -0,0 +1,3841 @@ +# 2026-07-10 12:40:06 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment=Unet-cable loop-protect=off name=\ + Unet-ether1 rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +add comment="WG interface for Amnezia route" disabled=yes listen-port=33033 \ + mtu=1360 name=wg-nuc +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon2.to \ + verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=\ + no +add disabled=yes dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +add disabled=no fib name=r_to_vpn +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +add comment=Generator dont-require-permissions=no name=proxySet owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# 2. WireGuard interface\r\ + \n/interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDg\ + uMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=21641\r\ + \n/interface/wireguard/peers/add interface=wg-VDSina public-key=\"o5IgCl1/\ + G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcYQnD9\ + N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=10.30.30.33 endpoint-port=518\ + 20 allowed-address=0.0.0.0/0 persistent-keepalive=11\r\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-VDSina\r\ + \n\r\ + \n# 3. DNS\r\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /system/script/add name=VDS\ + ina-prev-dns comment=\"\$prevDNS\" source=\"\" }\r\ + \n/ip/dns/set servers=8.8.4.4\r\ + \n/ip/route/add dst-address=8.8.4.4/32 gateway=wg-VDSina distance=1 commen\ + t=VDSina-dns\r\ + \n\r\ + \n# 4. Enable WireGuard\r\ + \n/interface/wireguard/enable wg-VDSina\r\ + \n" +add dont-require-permissions=no name=AM-Telegram-Send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\ + \n# RouterOS script: AM-Telegram-Send\ + \n# Script comment: Mini script for send messages to admin Telegram chat\ + \n# Copyright (c) 2007-2026 Vados \ + \n#\ + \n#\ + \n# requires RouterOS, version=7.19\ + \n# requires device-mode, fetch\ + \n#\ + \n# Script description: \ + \n#\ + \n#\ + \n# Usage:\ + \n# /system/script { run AM-Telegram-Send \"Message here )))\"; }\ + \n\ + \n/system/script\ + \nadd name=telegram-send dont-require-permissions=no source={\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n}" +add dont-require-permissions=no name=telegram-send owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n :global TelegramTokenId;\ + \n :global TelegramChatId;\ + \n :local message [:tostr \$1];\ + \n :local identity [/system/identity/get name];\ + \n :local sendMsg (\"[\".\$identity.\"] \".\$message)\ + \n /tool/fetch url=(\"https://api.telegram.org/bot\".\$TelegramTokenId.\\\ + \n \"/sendMessage\\\?chat_id=\".\$TelegramChatId.\\\ + \n \"&text=\".\$sendMsg.\\\ + \n \"&parse_mode=HTML\") \\\ + \n mode=https keep-result=no\ + \n" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Unet-ether1 list=Internet +add interface=WG list=WAN +add interface=Bridge-LAN list=LAN +add interface=Unet-ether1 list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ + endpoint-address=10.30.30.33 endpoint-port=55055 interface=wg-nuc name=\ + NUC persistent-keepalive=11s public-key=\ + "+OvzAjLC45Td52hjkQPmpGvC3RGhZ+Q2CDMJ1U/D4Rw=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +add address=192.168.33.2/24 disabled=yes interface=wg-nuc network=\ + 192.168.33.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless check-gateway=arp comment=Unet-client \ + default-route-distance=2 default-route-tables=main:2 dhcp-options=\ + hostname,clientid_duid interface=Unet-ether1 name=UnetDHCP use-peer-dns=\ + no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8 verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.0.0.0/8 list=RFC1918 +add address=172.16.0.0/12 list=RFC1918 +add address=192.168.0.0/16 list=RFC1918 +add address=8.8.4.4 disabled=yes list=to_vpn +add address=myip.ru disabled=yes list=to_vpn +add address=10.30.30.98 disabled=yes list=to_vpn +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface=Unet-ether1 protocol=udp \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface=Unet-ether1 protocol=udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ + protocol=tcp +add action=accept chain=input dst-port=29185 in-interface=Unet-ether1 \ + protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface=Unet-ether1 protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface=Unet-ether1 protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked disabled=yes +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface=Unet-ether1 src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface=Unet-ether1 src-address-list=!VDSina +add action=accept chain=input in-interface=Unet-ether1 protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established +add action=accept chain=input connection-state=related +/ip firewall mangle +add action=accept chain=prerouting comment=RFC1918 dst-address-list=RFC1918 \ + in-interface-list=!WAN +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + new-routing-mark=main passthrough=no src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ + new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Transit for address-list \"to_vpn\"" connection-mark=no-mark disabled=\ + yes dst-address-list=to_vpn in-interface-list=!WAN new-connection-mark=\ + to-vpn-conn routing-mark=!main +add action=mark-routing chain=prerouting comment=\ + "Find routing over table r_to_vpn" connection-mark=to-vpn-conn disabled=\ + yes in-interface-list=!WAN new-routing-mark=r_to_vpn +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="WG for all" \ + dst-address-list=!NoVdsina new-routing-mark=To-VPN src-address=\ + 10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + new-connection-mark=VPN_No_FastTrack routing-mark=To-VPN +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +add action=mark-connection chain=output comment="For this router" \ + connection-mark=no-mark disabled=yes dst-address-list=to_vpn \ + new-connection-mark=to-vpn-conn-local +add action=mark-routing chain=output comment="For this router" \ + connection-mark=to-vpn-conn-local disabled=yes new-routing-mark=r_to_vpn +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=masquerade chain=srcnat comment=\ + "Nat Addresses for routing mark r_to_vpn" disabled=yes routing-mark=\ + r_to_vpn +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface=Unet-ether1 protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + Unet-ether1 protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + routing-mark=To-VPN +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \ + protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \ + to-ports=44044 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ + to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface=Unet-ether1 src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\ + 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface=Unet-ether1 type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ + ] WireGuard is NOT running - reverting rules\"\ + \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ + \n/ip dns set servers=8.8.8.8\ + \n/ip dns cache flush\ + \n/ip route remove [find comment=\"wg-auto-route\"]\ + \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ + timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ + NNING - applying rules\";\ + \n:local routeFile \"ips.txt\";\ + \n:local routeDefAddr \"0.0.0.0/0\";\ + \n:local routeGateway \"10.8.0.1\";\ + \n:local routeIF \"WG\";\ + \n:local routeTable \"To-VPN\";\ + \n:local routeComment \"wg-auto-route\";\ + \n/ip dns cache flush;\ + \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ + do={\ + \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ + \n}\ + \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ + irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ + \n/ip dns set servers=\$routeGateway;\ + \n:local content [/file get \$routeFile contents];\ + \n:if ([:len \$content] > 0) do={\ + \n :local line \"\";\ + \n :for i from=0 to=([:len \$content] - 1) do={\ + \n :local char [:pick \$content \$i];\ + \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ + \n :set line (\$line . \$char);\ + \n } else={\ + \n :if ([:len \$line] > 5) do={\ + \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ + dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ + outeTable comment=\$routeComment check-gateway=none } on-error={}\ + \n }\ + \n :set line \"\";\ + \n }\ + \n }\ + \n :if ([:len \$line] > 5) do={\ + \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ + distance=1 comment=\$routeComment } on-error={}\ + \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ + teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ + able comment=\$routeComment check-gateway=none } on-error={}\ + \n }\ + \n}\ + \n:local dotPos [:find \$routeGateway \".\"];\ + \n:if (\$dotPos != \"\") do={\ + \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ + \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ + \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ + ateway distance=1 comment=\$routeComment } on-error={}\ + \n}\ + \n\ + \n" +add comment=WG-Default disabled=yes down-script=\ + "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ + interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ + type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc index 0bff4d6..85f8d58 100644 --- a/MikroMaster/tmp/Diff-Config.rsc +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -1,4 +1,4 @@ -6,3478d5 +6,3841d5 < /interface bridge < add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ < "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ @@ -3472,3 +3472,366 @@ < 10.30.30.33 to-ports=44333 < add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ < routing-mark=To-VPN +< add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ +< Unet-ether1 routing-mark=!To-VPN src-address=10.30.30.0/24 +< add action=dst-nat chain=dstnat dst-port=44044 in-interface=Unet-ether1 \ +< protocol=udp src-address=109.107.177.79 to-addresses=10.30.30.33 \ +< to-ports=44044 +< add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ +< fragment=no in-interface=Unet-ether1 protocol=tcp routing-mark=main \ +< to-addresses=10.30.30.33 to-ports=443 +< add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ +< dst-port=80 in-interface=Unet-ether1 protocol=tcp to-addresses=\ +< 10.30.30.33 to-ports=80 +< add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ +< dst-port=2904 in-interface=Unet-ether1 protocol=tcp to-addresses=\ +< 10.30.30.33 to-ports=2904 +< add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ +< 5000 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ +< to-ports=5000 +< add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ +< 2377 in-interface=Unet-ether1 protocol=tcp to-addresses=10.30.30.33 \ +< to-ports=2377 +< add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ +< Unet-ether1 protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ +< to-ports=81 +< add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ +< Unet-ether1 protocol=tcp src-address-list=TRUSTED to-addresses=\ +< 10.30.30.33 to-ports=22 +< add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ +< dst-port=2377 in-interface=Unet-ether1 protocol=tcp to-addresses=\ +< 10.30.30.33 to-ports=2377 +< add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ +< Unet-ether1 protocol=tcp routing-mark=!To-VPN to-addresses=10.30.30.33 \ +< to-ports=22 +< add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ +< dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ +< time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +< add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ +< Bridge-LAN protocol=tcp src-address-list=KIDS time=\ +< 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +< /ip firewall raw +< add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ +< in-interface=Unet-ether1 src-address-list="Honeypot Hacker" +< add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ +< in-interface-list=WAN src-address-list=Trusted-DNS +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ +< content=linux.duke.edu disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ +< disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=\ +< googleapis.com disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ +< disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ +< disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ +< disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=\ +< googlevideo.com disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ +< disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=\ +< googleusercontent.com disabled=yes +< add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ +< none-dynamic chain=prerouting comment="YouTube raw" content=\ +< nhacmp3youtube.com disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ +< content=rutube.ru disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ +< content=me.com disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< "icloud.com raw" content=icloud.com disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ +< disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< "api.db-ip.com raw" content=api.db-ip.com disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=\ +< esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +< add action=add-dst-to-address-list address-list=NoVdsina \ +< address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ +< content=gosuslugi.ru disabled=yes +< /ip firewall service-port +< set ftp disabled=yes +< set tftp disabled=yes +< set irc disabled=no +< set sip disabled=yes +< set pptp disabled=yes +< set rtsp disabled=no +< /ip ipsec settings +< set accounting=no +< /ip ipsec policy +< set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +< /ip ipsec profile +< set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +< /ip proxy +< set cache-administrator="" max-cache-size=none port=80,443 src-address=\ +< 0.0.0.0 +< /ip route +< add check-gateway=none comment=WG-Default disabled=no distance=1 dst-address=\ +< 0.0.0.0/0 gateway=WG routing-table=To-VPN scope=30 target-scope=10 +< /ip service +< set ftp disabled=yes +< set telnet disabled=yes +< set reverse-proxy disabled=yes +< set ssh address=10.30.30.0/24 port=2222 +< set winbox address=10.30.30.0/24 +< set api address=10.30.30.0/24 +< set api-ssl address=10.30.30.0/24 disabled=yes +< set www-ssl certificate=Root-YE port=18443 +< set www address=10.30.30.0/24 disabled=yes port=18880 +< /ip service webserver +< set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ +< no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ +< webfig-secure=no +< /ip ssh +< set forwarding-enabled=both publickey-authentication-options=verify-required +< /ip upnp +< set enabled=yes +< /ip upnp interfaces +< add interface=Bridge-LAN type=internal +< add forced-ip=146.120.64.211 interface=Unet-ether1 type=external +< add forced-ip=109.107.177.79 interface=*E type=external +< add interface=lo type=internal +< add interface=wlan2 type=internal +< add interface=wlan1 type=internal +< /ipv6 dhcp-client +< add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ +< info use-interface-duid=yes validate-server-duid=no +< /ipv6 dhcp-server option sets +< add name=domain-search-set options=domain-search-list +< add name="=\"Client ID\"" options=HostName +< /ipv6 firewall address-list +< add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +< add address=::1/128 comment="defconf: lo" list=bad_ipv6 +< add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +< add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +< add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +< add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +< add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +< add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +< add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +< /ipv6 firewall filter +< add action=accept chain=input comment=\ +< "defconf: accept established,related,untracked" connection-state=\ +< established,related,untracked +< add action=drop chain=input comment="defconf: drop invalid" connection-state=\ +< invalid +< add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ +< icmpv6 +< add action=accept chain=input comment="defconf: accept UDP traceroute" \ +< dst-port=33434-33534 protocol=udp +< add action=accept chain=input comment=\ +< "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ +< udp src-address=fe80::/10 +< add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ +< protocol=udp +< add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ +< ipsec-ah +< add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ +< ipsec-esp +< add action=accept chain=input comment=\ +< "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +< add action=drop chain=input comment=\ +< "defconf: drop everything else not coming from LAN" in-interface-list=\ +< !LAN +< add action=accept chain=forward comment=\ +< "defconf: accept established,related,untracked" connection-state=\ +< established,related,untracked +< add action=drop chain=forward comment="defconf: drop invalid" \ +< connection-state=invalid +< add action=drop chain=forward comment=\ +< "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +< add action=drop chain=forward comment=\ +< "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +< add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ +< hop-limit=equal:1 protocol=icmpv6 +< add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ +< icmpv6 +< add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +< add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ +< 500,4500 protocol=udp +< add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ +< ipsec-ah +< add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ +< ipsec-esp +< add action=accept chain=forward comment=\ +< "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +< add action=drop chain=forward comment=\ +< "defconf: drop everything else not coming from LAN" in-interface-list=\ +< !LAN +< /ipv6 nd +< set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ +< managed-address-configuration=yes other-configuration=yes pref64=::/64 +< /ipv6 nd prefix +< add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +< /ipv6 nd prefix default +< set dhcp6-pd-preferred=yes +< /ipv6 nd proxy +< add disabled=yes interface=lo +< /ipv6 nd settings +< set router-advertisement-route-distance=100 +< /routing settings +< set single-process=no +< /system clock +< set time-zone-name=Europe/Moscow +< /system clock manual +< set time-zone=+03:00 +< /system identity +< set name=MikroMaster +< /system logging +< add action=email disabled=yes regex="* added|changed|removed *" topics=\ +< system,info +< /system ntp client +< set enabled=yes +< /system ntp server +< set enabled=yes manycast=yes multicast=yes use-local-clock=yes +< /system ntp client servers +< add address=0.ru.pool.ntp.org +< add address=1.ru.pool.ntp.org +< add address=2.ru.pool.ntp.org +< add address=3.ru.pool.ntp.org +< add address=time.google.com disabled=yes +< /system package update +< set check-certificate=yes-without-crl ip-version=ipv4 +< /system scheduler +< add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ +< on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ +< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +< start-time=startup +< add comment="Every Day Check For Update Scripts" interval=1d name=\ +< AM-ScriptInstallUpdate on-event=\ +< ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +< start-time=startup +< add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ +< AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ +< policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +< start-time=startup +< /system watchdog +< set watchdog-timer=no +< /tool e-mail +< set certificate-verification=no from=MikroVados port=587 \ +< server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +< /tool mac-server +< set allowed-interface-list=LAN +< /tool mac-server mac-winbox +< set allowed-interface-list=LAN +< /tool netwatch +< add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ +< -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ +< e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ +< interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ +< https-get up-script="" +< add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ +< flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ +< oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ +< name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ +< up-script="" +< add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ +< 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ +< "Google-DNS IPv4" test-script="" type=dns up-script="" +< add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ +< rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ +< -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ +< http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ +< "" test-script="" type=dns up-script="" +< add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ +< dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ +< interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ +< test-script="" timeout=800ms type=dns up-script="" +< add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ +< ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ +< down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ +< "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +< add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ +< down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ +< ns1.unet.ws test-script="" type=simple up-script="" +< add check-certificate=yes comment=\ +< "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ +< disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ +< vds.vados.ru port=443 test-script="" type=https-get up-script="" +< add comment="WireGuard NAT " disabled=yes down-script="/log info \"[WG-Monitor\ +< ] WireGuard is NOT running - reverting rules\"\ +< \n/ip firewall nat remove [find comment=\"Redirect to Router\"]\ +< \n/ip dns set servers=8.8.8.8\ +< \n/ip dns cache flush\ +< \n/ip route remove [find comment=\"wg-auto-route\"]\ +< \n" host=10.8.0.1 http-codes="" interval=15s name=WG test-script="" \ +< timeout=5s type=simple up-script="/log info \"[WG-Monitor] WireGuard is RU\ +< NNING - applying rules\";\ +< \n:local routeFile \"ips.txt\";\ +< \n:local routeDefAddr \"0.0.0.0/0\";\ +< \n:local routeGateway \"10.8.0.1\";\ +< \n:local routeIF \"WG\";\ +< \n:local routeTable \"To-VPN\";\ +< \n:local routeComment \"wg-auto-route\";\ +< \n/ip dns cache flush;\ +< \n:if ([:len [/ip firewall nat find comment=\"Redirect to Router\"]] > 0) \ +< do={\ +< \n /ip firewall nat remove [find comment=\"Redirect to Router\"];\ +< \n}\ +< \n/ip firewall nat add action=redirect chain=dstnat src-address-list=\"Red\ +< irectDNS\" dst-port=53 protocol=udp comment=\"Redirect to Router\";\ +< \n/ip dns set servers=\$routeGateway;\ +< \n:local content [/file get \$routeFile contents];\ +< \n:if ([:len \$content] > 0) do={\ +< \n :local line \"\";\ +< \n :for i from=0 to=([:len \$content] - 1) do={\ +< \n :local char [:pick \$content \$i];\ +< \n :if (\$char != \"\\r\" && \$char != \"\\n\") do={\ +< \n :set line (\$line . \$char);\ +< \n } else={\ +< \n :if ([:len \$line] > 5) do={\ +< \n :do { /ip route add disabled=no dst-address=\$routeDefAd\ +< dr gateway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$r\ +< outeTable comment=\$routeComment check-gateway=none } on-error={}\ +< \n }\ +< \n :set line \"\";\ +< \n }\ +< \n }\ +< \n :if ([:len \$line] > 5) do={\ +< \n# :do { /ip route add dst-address=\$line gateway=\$routeGateway \ +< distance=1 comment=\$routeComment } on-error={}\ +< \n :do { /ip route add disabled=no dst-address=\$routeDefAddr ga\ +< teway=\$routeIF distance=1 scope=30 target-scope=10 routing-table=\$routeT\ +< able comment=\$routeComment check-gateway=none } on-error={}\ +< \n }\ +< \n}\ +< \n:local dotPos [:find \$routeGateway \".\"];\ +< \n:if (\$dotPos != \"\") do={\ +< \n :local firstOctet [:pick \$routeGateway 0 \$dotPos];\ +< \n :local derivedDstAddress (\$firstOctet . \".30.0.0/15\");\ +< \n :do { /ip route add dst-address=\$derivedDstAddress gateway=\$routeG\ +< ateway distance=1 comment=\$routeComment } on-error={}\ +< \n}\ +< \n\ +< \n" +< add comment=WG-Default disabled=yes down-script=\ +< "/ip route disable [find comment=\"WG-Default\"];" host=10.8.0.1 \ +< interval=15s name=WG packet-count=20 test-script="" thr-loss-count=5 \ +< type=icmp up-script="/ip route enable [find comment=\"WG-Default\"];" +< /user aaa +< set accounting=no diff --git a/MikroNUC/20260710/20260710130001-Binary.backup b/MikroNUC/20260710/20260710130001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..76e581fabb01ba55208a3755b73a87598ce38bd1 GIT binary patch literal 385044 zcmeEv2Ut_f7VhjMKtho&7R1m5)WA+pRFsY=z1hW7hy;R308tdgh8=tFz4wmo*n7j? zd&k}t-nVvk02R;izVF<7&wJN=y7y!=WzCv3YyGpHYY*2+OEkmNp zv?WNWphKl5kj>uEMXe@VugXmI%a*2Q`N@>2mSkUBkPXAV1&ZQWp$g0%%0U}gBUItz zRO2BuV##3h0N0u zLufPkycOgjpJ$jMl!2l+X$Zpz`Y?nsA}I)CSXv^Cfm*`F6k)CuwT6x`pMWS1uuG0G zI*jaNDq>(xG{nH_(hvjHqalV#eHx-S#}J~?5Zlzy%p+=5@@tL8D9{*2K^R@*Mnjee zqkpNatgLF%RH08(XxTOhbG4HRuJ=eF~HhjN(|*P%%Pps0c$egsc#VLj`(GMc4-_VxW(3`2-hVpbPqV)dU&(SlvCM zx5hr&!MHZ0AqMpoaKZ(c@Ro`g6r%Glvb(vY3?e#jNY?CplV9(=Sjp!Ka0QnomGcxV zo{}f2we$R1JJ0`bc7AYm=Lc`Ys>F;AVha7Ygu(YK!eH=g2%CA3RwYkWup$Ga=?L@g zk415uQNYS3{?q48mX!J$4aJiL=5LVSiH z#of;Dn)Yd=-?0uFPtBl#EDC8+f2s`?3gRbO309_ zLUNLm(}EKG!eZr#f&P!E$hCP?TVZ^hAVL%5r;Ou8MkI4oc*l5oOdKxLgh|uW6Vied zVY!hUMTd+~e^BF%BQo_0tx_UWFqIlDGfJYd{S<&qib^MN8PJ~{T6P6vrPFJ-{Ql-XqmWuhE)S(8UtTfPlcf0~UY}04+B%-IjQ6z#J3<<{^|JY3~gx zhrm2;D2fBf!l*7G2Ngqz(APu`z&`RcS(cwntx{y_Q#4sHi*$h5-c(jrhLcUct*opJ zB-8H*n{N2*MF@qHq(GN2R6&Pwfc5+-2)Wwfy_HH2@8HOY(CEaJkfewZpDHwFWoT0+ zPmyP<$o>KI_+%P}fK8^MuL3d+g@t6=3`2-lO$P?H$1pBnl`<>NaDkO4#ZDlA>rkpHeQ?raou2!X2uxl$sg+djTL_>@ktthkAYJs5u zL46fvG$?RYMu-^QZAOhUrc#M4Jv&QSTPYJLb$I}t=#NK#thyz$3`wRWRiOn)u9nI5 znrvAbNH=`KYTUz66eklQtQSH^hY%sbVCvHWjf3%2AVjB|A*6&aV70;eGq5bU^aRGS zIb0sptX9ZV^jcMFszR%S?=S(43lzA+ngf6x1{hqeNo7e0Q=x;whR-FA>2my-;a9{=`&=I1;fLbBMpw=NLsWtq? z7Qg{u5##_Dn4`!MQm$~Jzy*W`U`AbpTq#!O3;+v&7^rGZYLy_FW+*Z=+Pso~3q{zs z6k)$a5lybrrT=^Ap?pgZ<=5y@$kH_bo)M#dOAqyz=rPqQGBkR{>~BX5kurqr5TQW+ zFJ*}KEk(3iD5{eqk!y4T#MM`u{ewiAC^94}HB2FxHQH>oLT7XU)KrkhG|UrY8s>>H zeTqmEmZ+GpYQ-2a*I=H|Ngz)%iaw}JSE$OBP^1)8T?Xo}wG8FwWndoHT88@bGC=$H zWhgK$Y1L(n&I(CZCa4@x9dc4Fz+FzNW*ACq1ZyGE7Qi|L6a|AqEJ2JW8&=H-7UqZz z&65nUM97t{0>GQ8&{r8eqj$kbf>x4i)UU3rq7*ZfrR*ry~sZgb+Ni|xg zOp~cprDkg-VCtD^5*<^PCdo`y$eS~>)C!4C!PF{rdWlxg)Tb$!28RVxmC4j-Sp8B5aQk=713BG*DnzJ%q3Z1|^S< zBZRpigf&J819$^)#|I&-DMAO$Vr;4dmz z6=K8+lu?)tUuX!ydQqN1DrHzVf?q*{5dE$vu|8!4z#`HG){oSa)&}p?DdJ8;r>&8} zNWZ}hHW%)M3+w#ADwAPaZ90hQ57q+=0E4`nBSha~L8uCPY#0JbA^vWK5WUA^guuWc zWP`xK*n)vUPH?FYR2_y(LxdRS&Ir-#)kCNe}HRNjo`Dh4v!5txrH`PEXm?X+j@W>Uz1tgI(3{oS=3P-}1QE(YeMGUiX zkQxsc7KRwDe4&qi&<`9#3 zzn{6(e;#vb{~3X`$yI3;YK2Z`WNweYU2p!w3)(#nh%FTVJYIjd!Z80gtuU-e5X{nLNYsRvEK8%+ zr>HfubYt|UfLsp4LeiM7AktABCb55|A&TO-!0Nd%T<8e7n!^?mKfOLL0dGipO~5&3 z2ql<83jE0w!ec?Wk6>j__+tw_3BR=~1d3ddGhE!^0?Q$AVYr&<6k3%;jTih<^Xy-0 zp7Jj@&jvTVRwB=l`w`JDqyMZs$t<{cM^PN3YtZOYw?c$pgYcDfq!8|P1{D}m1P%xfn;kr1V}dU zlBL$9s;XRo;Ie`b+*zax5VoWc5r8Tph*%KpO9C&QNsgY46X8FdDkH_{OEWt3I+GQ` zy)%m9fX@OpLP2-|LU#~-B%}izM24+Shyfg9P$AGj_Tvu~!?uQ*@7>Dcy*KAJrm;NAab<0<9!)k`kjGf=a_eCToaM(s@7>$dOh zTpFB9P(%3G$JWN1>WNM824aMS%mQx$avKu7AtpKm>R`N@p)3yxJ&Fv zORG_;)Pw?r&rNcA!TlzR;?zYDDS=rHJ0j{=X{8FxlT-mPt>`eVAWlk{k7^ZYnEVDM zXisj1stz!M)~3`Wl?FJ2VX88~6HJ;S@cdFd;49G=!jKSl#TC?tOO+HwMFiWzlR9v* zf(t|~K$Km<-RBDYa0SLxdE^Lz0YwJUK{-p8A!PxFjb@-W9ctXaFxMIxY#vd^9BU#B zTH$Jvnyt|3fwR?B>e3|ID$^27au)8vD2h{R0Z!KK#1-l$O%1ly0-XL2BLopek4T6QH%GzI{_z@(p4lmM5CMUj8(M?#CK_nKg#=22@E#hxIn4|qdVyQ= zXxQCiz=yEWwAdLT*hAXG6XYL&J_Vv|)WHbR=R#lzA^K4YLPOypvBw-5WpxU*276?I z5Pl8Ai?B<05!Pc4m4Z%dp4J<$xaQz-7@WX0j*Vw{T;pUzHJJow7taQR}s zxbweUUk+|#YDQ2)!Awn>4WJ=6sua;$*;OvTwQ_&YUTe}m(;KAL?{Rep(_bWOZt^x-*K_x| zL-J8}8>2S2@ok%yH-cYU-uiR>`9XL9(YHp{7*ioPRpO1{ zK^WT`uVa#H@{yW~a5)9<9l3gMKh~MINt6|DoRVI5 z{`~0PX|ts(N8gd1h~71!p*6onT^9bjelaUx{>IVWH*cZf^}FAnmp}N%&Z{5x^5-p# zTHpO?QThJ2MN|Kv+)vs(8W$YFdOh>reKgZ`;RLVdFDqIOL&yfi286R1BASCYr$Kta z@1g(yedx!)6d#F@Yk-2yQz~T=IbVw79KMjt#&Lm6BH?i*Yz|w(;mAb_u@J|VJf&1D zQ;PT;CC-ruagjvAm-7Vz!El7wwTkozXreblu1pCJ=Ln<{jzTGr31u8y&ck^^1z#cH zO9W!B2=4``j#PLW*pUbNLJfP=k`fXa1|>-&m1G?h;~%0*RRt@wdS*nX%pS!g`RC^5 z`pQ+QDw#s7_mycf8h{3^$`!8GNF{0}(LiwEFKE;~38A1-3)gnir-Fthe$rCGpny_c z?ru=3l5dqN2D|YCU^hOYPBBoYE=CFr1VH=2fxa@W-Zx8;k%Cug+4WSsh`JgtqD(eu zSsQxGo5>|XVQc4R_dMKb?7?=pl_{g?khVkKTVa@q3Bo1c>RCtJ-k@hKjST{0*!6KI zcx+*B^F4dmOx(qwik+%Te9I(I&A5QgW*am!sAev^#@GJ@2}PJ&&5mOxh+2eMBfJPR zrxalry4~`Yt@iqo1!w1XSQa~Pj74tA;du+o?M_VUf-#uKu0lS1S)5(3%0Hd82r65?IgoSNvh4YX0q3@l>eyyu!-o;x^Rh0pY1iJbtNSX_ zJlbr@vv&U7Hx|q<*}K|{Ld6g^UxrJ*vpqxp%=S>P$MTa;M{ZZXn18!r!@ZN&`JYb0 z8-r#reD*b+4~@Sm$`=iV!D}U&Q5Gp{<*46(pQ&5o`M1_u;+{5o(ERy>qmc zy<0VJQJB8?$!bT3M;C|f*(y@s9;+T+Dc_pw*#Y0(&}06stB-Dk=WpELK{vslvUXVP z3f&dEb?NITQ!u-ghl&qO;iZf+Z*}0&xrq}qu7m9a1yN-?_auZGZRhU^ZBWnO>6G6S z`uBwX=T7KqM8xCrL=s#f=J9wkp-3j>2>1$|FOu^WA~BCA<;g`nrC1=~NaY-XT*~1K zl_D{hC*kq9G9k_uun9y|o1z6oRO=rIl!S}8QU%Tzh;bf=Cy=rwY$0DDk%{?YFg9#QiXGV0aEpp_5es#Y0cKvgj7_3RKax!NJW<* zwEIU?MW16>s@4Ejen!+{P%z<~#K?sBgusNhfgHYogLClUKsJkA3(`79!;5H#@FMCO z5@}h!-C^1+newL3me}U*$6hFFS~`pW0MZKQ5Q|_o&L!8t2Bd{^Ib!1?xYI9zJuc2R zAiAbT-WauSIER@SnZS%s2xJ-E@*Rh_4pB!J+q|m#c)8mPwwtX)RnlZz?@N;#-|44Zo*gn#cW6cB^KRzDI|bib zv95*n>$YDmqzm`Ru3is2evo8o5FV62@6e2X_sgOZR|id9vWNCZ?u_$o@1C%|*|c!#i{Px2ZF162M@B67 z=>CUQ(bupg%hltLN#ldE$9jjG)DXbawD7sp0v8SgDJh4DQ03~M#ZX96gJPr3Se#fyP_0shEtQLNL z8ksKZo5c_wP?d`^gh%F*Nnov{`zGUe(+bur;T)Jnco1~GF|8#o#)WhEbGSp;#%i=` z?l0A$#{HoVCQX3za0^pLk0EWbAz#%L3^y}1NgZH`VL08?6cUu`6s77J^}C5lK+uwx zSx3Dmt0w2`zwZ9jq;JCVmB$rdx6Lq}G5kX3;Gxf=B9l{A?%BW5gz4MqbY;7@bDCaU zGjZi%-*zo8EPkgc_W6Rh@ffsy@8-Va&6=+snx4abhLYmfb((c|>#5f_9#~gg`>=1T zjdlQomU43PEMHFc=#$erp6S5uFT@6{Q)c)ySgT}YoX#wHv-Oi7=CHqOvK+hAZ|D+H z!t4>{@qi<>NLtt`@z0@}|=`cPo#k6Fno3%pH5bZ1akt`t>g}=1;xy z@!XC<0kh4f00aevS_MISN(s+9xNm-IIu8H0ru(hw{C;b?{|_`>H8z)ta1LK7R>}l? zrCcc!^QBywL?n|5MFOEzEa8iUQa(p06brdxzEI2-@&sI^OvL8OajAgAmxu{$UYo5Z zuz77Z+JMbvO1@N%3pi4~0Ou%qLWxww$2l?%S0+>90s&z2e*t;@44F?Lot>tnvy*`m z`~$VBKAKF4C5rS(?;5d`3GWu;lcxpeAOg17=ry*BV;_H)t(@y?MBXMNq{8 zP{FD}6|0IWRygN7zvyA`i|)sZC@T$U9Yf!t0DQo}Z^1DcVxrrdkz8Zj;6*c_auzHBz`X8_XPzsgC%S1QKEIO!|}U#XDI;j)bg{+~hRUwL14 z^^($Ge(J<~-|%p~`R@xOIzDn6XuoJbGZzZ=vrdd`L`SyK*ju(c+w z&7#ZSe2Vewgu6XhUOzegcA?pq*LAZC#c_S_edKS_M=u>!WPf*4o2Ar&pXTix?%1>7 zy2aj2^&L!(Jl?y6Hlbx$KF8`cQo0=)rOFVDw5_-K>^kQj8$_QdBTt;Y7G`$cy!DfA z`G@j9uW6RBV4PGH=V>Bo5Het7^QFO)+;6OCF<@F9pZ(5DA9ZutG;0=aE+9bMDFIcd zUg?&1?&IW6sZ`0!{w+<}*{r$D(J_jl8{RLPQF`%_->EB|%TMY@>NbdiE}QiIK*`?n zb>Z3ztKMC>ZhthvrvLD;)001K_HAanykw16;m3!wJ3kW6UVit6di`Lhnf{kNV)DlF z&!^Cy6b@WIjl$Y!^X6j7L7Fb$nbvd8(%DaEEl;zX+Tp+$yB3TEJ3_viItuqpzss5b zO!V-g{B`sG4qqsbXCJRLOLMy7Rw82c8Ff1GrRq)!_edZAzUFt16r_mn-Ok>&Kc^n| zMDrJZkt^S?eQ+XX$-e3B5>59P^gBnlzU^Gm-)YN=?(fR#t_x;ZM!j2{zG3Ph#gRV6 zw{M5+?E3z(^IIa)==6}-yGleFCK0p6B86N+;I!Jb zYgJU4f)jD$UpCW#xqh_wnXps78X9CkB$~tyq_?#9Hv#C_$c8A!KPgkyN1@j+6BV+w zObu*mQs|fozJb235RC?Slbyk=Mmg|$gesil3@DAvlBmtr=@oKjv_hY&(Wd`Wbb6Rm zWm|w{!`N4{YQi!Gz_L~@KZRxAN2ePbXkd{vut*wM!GYhwuw4Mdw&O*V`34w9rG@OS zY2zRw-M0tN&9@vAu9l$YWve^5^_ARz|h2|5L6J5KP3zIUF_z7jlK2 zovb)wfMDd;|2lntrIqh|?l)h%?T;6S9frP5$D(g#2AFNj@ak6Zz6)!8=Yw%6%NKAK zNrrC9v>tK>r%e8ELDgYyJ#n|5^1K6BrxmT(?L_%!XlL4cKV+t~G@ExUN_XY;s+fbx z=Q=N*H0;ysv5O9)>?R|RPmgUr~@s`-r z-Rmz_T{q);ABmm#adG0&YvOFu^Z3HYi8TlAdcN6jid-t9mBYMpAM8u=AUF zZ~LDRPrD>~8TUS>Ie;(F7DhiIXb>a#`aQY-R9XL$^7%cve^2iJ+T^Z=TznZ{#1n|* ze7=$|Qt-q=g^=vP+S9+B_$Z0VRU=*YDTghh`=Vz%-*5~ zKiMw0vjM?5*2-44FWwyfPPO-}>dBum7XTU?$2m29WFnl+7FGGk{yC%;QGVQaNP&Ha z6mv=u1w(~)3MWCGy;tb#Pp#-+mGkVl*V)LGu>&QymocLlEIH%qiD9#k`7eF??&O}U zFVC($-&g2u+bsOD_&{lk`WsRf?dUgizAR`{&a0&@n~nW&TXX7ZU1kZR_3elH!}T_d zEtATx6wEh$SzNDYiCe4E3i}sB9s0hz+jw-@-M9m`sbTcEqeC1L+mv!E`m1MD)}2{z zN8D)sqQ%NX+SDtq%C%+FdsBDEws?5##nsYTkrk^=Ch;40=)Ae|#7F$fsmXQ6Vf zPd;amENR$2t3Bfr@%r{F&h`^7e$uUln&0(G;03$OOCv09Tr3>U7%v^YQF+p{`1qhL zYuhXkTVJBgdSVwjG5>YC$3fTmMpZ3pQL9* zT#V@0pkSQfe%!b^ubcF9j&dqJ{4}`9sa=670ZT(d-b{VaVd$*b#vKxuwEn7>`K^sr zFz$B@@(pefx#5Lpc&AS^m+@sy!rH|SSa*GA@6BIQ9d8}(Fv!JPcK(rc+xe6v-^X1K zc++W~;w^QWEqxU^+1ad(Rs7p$&;5$5tFdY|G)>6c)p=R7b|(`HZ(W?ed*-WkROQhh zpy>~O#Tr=E5_Y#zFx0gy-|FOhtY6?%g{5wP{OqG2PEIu~Xm~l;arP`qQin+nFXLNz z4V~cqtZ@rWI4|c*LhSBA(+{LaZyV_vGjDW~bnI)DB_?|&YnJ3_$BY;$SiQ^2 z?!S0ypw{wbs_ih#8TOG{-i^|8y>2Y)b?w$x^~hFs-4vI1bg@{}e^@xgV{9f}My(T!Hl-y~uT{Az`)3w|EYmF>?(;Buc zTK#lj>fo{|ar(7erxp&YEa+XoYhJq^zT*N`MGBiXKYUPns7|-{f-XmHdU|3Tt~D^5 zk&D`#x_a)Zf7z$)ZH^5-uPIo{y0Mk={_W&x8~K;_rmh*Bl1_OTH40(leD+j#98WMy&o@|Nlo! z)o=a(TmS#o|G)MBe?|XSFXt3OF;^y*;vA)1B$2SW3JzPwWpg+piA*NNMQpZMz~f4V zJh4n97KsHsDQtF-^8_-koF|jYImB|VHe6D*oMYl_rCcEA;!2r>E0gfq5)oS}l?iyb zg3HIb969W2_%(bFE4tcO3gBR`xv~HcdyVA>>13Cf{=Hk0xqrQy+a2{O4pwsk{LiqO zGyHDWf>_GA8J2S2{lx3%zng7j+;ht^Y)CfjatP;sw|)zz;6;=+coDXrT)&wlC6~VH zzJSl)yTJO~@=$HfAA$bce_<8QB^G5|9M)kR_?;JQT!1fp^6P(sgrEFm_uAr1+lOzl z_-s+&dgjH>ox0cDZVgI#kFOt?UV3WcyBEh!S!|PZi3{sLi#5A^w9L}!sae+BlY@K% z2F`fcCNQJr%Cid`IthBuqz0GU*sHbIR~0Xwo4zslMCw)dN~-hx+pT{k&Of9EzF&W( z?ShYU_g`Ek2s~yhQ%QYF+aIVoTGTXzD=2KVvhQiC=q$bAJoi zzbatW7KqE1$OQtPNGW3DJT_M(6LLjLu2>=AaXC1f%jJr>3a*4LlF4umM=Ve%#X=cJ zA`>f=0wI?z#|aBm+svt9f%tqrUm%q!Iee&=&*jUw5+1IU^CeOqUSZ(hQ=|I%+> zuKnuHx_T(aKS3|iDpd-#{F?x;VUt~Ra41%1AjGWNqxkpjva|fxciFM3$oiMI+1-Np z?lruKLYk#ow%LvO){pp$+w44XcY_bnxr(rF7)tKAY%inb#^fa^n)?v-B4(f7F|2aKn|FDHN@x#KB-fYQszF%-R zaaH>dN!kvS`X8Knb$a6BZKmHpv+YjxhBph=yp{{|#_fI@*1h0XMna@?_3_3Qvh6Kq ze*Th&rbzTBn-m4eUa!;ktZy~-NLiiiW5UlPhVAL}Qd*F*K1G3lSiCtZr?X2=ci!%Y zlai+nU;mpAo8?BPS2#NBUx`T#3) zBD38%?CF-_seReEQ+-EHq&D#lp4pE5uFgiw?VE243*5G$`E~lne@@@ta^Km!xai|0 zZ&J`A&$X=BzNJ<)jo(@!({pX|T(r5S6}mt98|>^e2sq+RLbdft?h9f`deuD#Bl?$_v2 z-8D-k{-?~5+n0lVk22(;7A*q?yziIKc{}Au$I<6d;0&^rhhf0sCQJa$DZ7+j4Ln z{3$^A>n(bFY@&Yt8)UcKK63MO~(B+RDcYh;PS*uAdT8V%ud7ilNF zK7KMjeb=64{(np_EYsI0|zX`-N`Px9XpV*t?!}t=O2*t;~P&TJ}{_7f-Vl zlOAC&bI*5M*^8nm*-+X&_)_AAX}K;_0>Y16EbTSs<4VPOs~M|v9-R5y@u1*UC(EV{ zDl0z3E>aD7?)gT>ltj)*-ZggWp)F?RVegVgq%57Q`0BL#c>a@IH7YZScZ+e$3+440 zp*S;p$*cT+-0SD_&9B9GC>`D8M$9S4mM81(b?@A+{U5hQvRvPLCx@-e@sMZr9Wc}E zV9c~ec}vf&U%%78Mac68oU#V-4l8`)$jM=YAdA(sXN? zY{Ao!S>2zp8g4na+hip>k7~R`vbnjth;G`>g+%Fm3g|F%!3j6wKMlJsov;{oWfBJYSDoY1#27!Unyoxm>j&ItfO{ra;q;nO+rq0*pW0$|C~ClaQbxH zXW3oM$6nMo+W+Chls)|-GF3LdHbIvUpdk|9+$7&#i!HU5vzFKoZ@u`ghg#R#Vcw#^ zBt~b`Lmk(#uC&y=xzr=}3;o$yw;Quc2Cs=`ES_}SZs-fkNpIaYji@MC?K^-rEyaHI zAG>2dvRy3RG^mp|`O4I*%lnQy-s)_Bn(#sPz$0Mxs`b$8`wPZ<^JgwxrO8GjvtFGNbKF%OlYeX}If_C)|PO z(AQp$4JPr^_In*KbKWt+--(udaWkvu)%Bg#V=KpRD<9#P%oxDCk`=dSM+9SmsVgL z+J9|RQR+&nSBJ^-2hGlliy9}`@g(E9?WjD~MR#4(`~jbr$9%YSqi@*Iwl`vKw(tJ2 z&z-=jb}e>ZWNbfQ*-)T(D}FUE&$su4MT1?!clLdgZ0X;&PZIU{fu*;lnB&aCpe^Tz z%pMrHG<-&ei|O(n*4dk*&b>I6C%Coc>gx8lgO)Z5P*L>9|H$Q+M!tWy`qt~EBOf1` z+403FC+(!T4fdSM=Cspe=2@g#te*02UN`pBWf4u^I}aSzy=la-bS*Q@c1o&p*}&(g zzBsQ)M+4H1oDMqE>5pYO&p0n97an_^6kOqS`dGI~D_k;6E<`&v4E+Oj4C)%RAu(XRM+mdzf2VZ{gaOug{^xzXSAMX0x zeR|gVtJhlW`Pe7)R=Wwze&UVAvD17eg*L0V;2yrPMPNm6T%fi=LHK;^?wxz~ecxsT zjB|O{bL`sggFmh8lj!Kt!|a#WOq*)BGQGyzA6Il<^seQ(lJ}aK*`c(J6DEH*z{F3M zyoOELk+bVgyMujKjCkQ!bTX4ZS71t6Uf_bQ+Wev8!mBggSL~)$y1jk7V{I@tXgI}f zX-NGS7dyTYo14FzzQ@6Z_VkGU?ZEeeu6nyhA53$?+lnm>}CdbD+a>ot6j z&5=h9gLi9Nw&r-aHrUrHW%1kaoks>N(lzziTiWl0*OR+XhwT|s&z={)qjJ{FCFP=4 zrvkR3uk*g14l2FTX78FuD>_V^yh^sNjxMGB((&R6yLQQ@BoEMh_F3#u{>*lHTiw@g zP3Z5ZB;4^72v%W#bYWkx9(-m$_wAKdH*S=A_g=N;eM8aR-d3AWzfiUxx2oTEivaO} zSzr70{vdXmw5_Ktv1VFTQRQeQ&srmXvh;hV{GKUTm3QHPeWr~0jdXt_-QP&}H`4uo z0_hSjy%h>2GPzPI7IB3Vsa(JnaRf4nP=@2UP$H6wq-+WCT55@c%jM%rsgNyFh?N2X zN5SUG#1gI{v{f6Ds`7)_u=$}}KF-HQBA$>NCT0_%te^M_u72;pfMa}&Z~A7?;gnV@ zf-crof2y%^xLumYb2z3N@xKk->O80q-YVPSigbH{bA>CDw$TdrDc@r)5p-kZ^b zyEVPD1FiAG*srUHbsfFLt#{Lu6E1HC%$UBaywNju#s1lCG!MKV&#Z58N7Uruhkoa# z9(f{d-fj(lo%iOvmwAhK-W&Gj@$hrGiwhHU-9~1=d3R;}Dh=NFg0J~~=Q;)*HkDqqBp-1U~CyImOF_o8xGlt;VD_3>1JQnBT)=#m7acG^#^(E(L`P_`S z@1V{I5fm1AFZ~p(Of)#4O?;k?3+dU&_~_7Oq%KJd-BAy zL2c^HJ-^Lw_egH(%M;GM-FGeMf}>>@k`iz3pzO&qtMnUvV2tg~eM2UniW~98()7V= z=b?u!rfUOQzuFs8FY(UyvWSr6wY-})&xdz@@z(!*^xL~*tpc`nmSwhZDLxh3*Tsiz za`EJ0zYaG78`zdVjC^gcYvZeuTmAA`$&EeSn>d%~1LkgaJUOM;`?S35+lSv@ zo!9&5xw^;B9y>PtiwWhO`j6F))Pf@VV&VJgNx2bICtqwk=G8N+1Gzlwg1#ddOPE84 ztIC93J#V<5&)Y3=c-6GqWZT2@PIZ1dlVvyO@~zexo8I2*>RYhs$msoJrRJL>c$?;i zocMI9p;OUq@uLT4T4y92R^4C7o#gr8XkJhQLujDHdOr0d6HlL`+$=z4YJHva*ShVNdpL)N1XpMK8StMkFrIn8X4x;y07=Kdx7`sCX3 z(~Be4F|E39*zm?HbWNT1>+FuCXG&Ha`OtYr^6Z#1`_6KDy&8EaZR)H_&&G33lr$Nr z&O2&h(q+`$`nyB?*Insh-f~Gis_XxLjC$6+i*qNZeE4+vjtRBH&Eol2*OV47eb2vj@QNwN^ZiW? zV}@5@!XGi0o+OMpypuJ|OXpF%U93iDyV~xspi@gW)LWImPg?Nx6aWG@h0(R^k!^X4t3Cq=DYs5v59$KuUwqauJ4wYZ$`|BN_rVr=398@sD1d0xQ*Nv z@~PfW%P(E3w0#ovjQctx)4b8lS(B(`cMhJZ{Oa8``ne+M{r1j2xr{EICj0s1JKlbM z=8uTAb3g2vW#Xc?67=ZT3xCi)wQ0NUp~aC+>wmgP=qhi6dN}91 zIpjO66wsfv=oQfG{?*|FH>e-w^42;P4yEiE7!-5VV(Y?-4ZaLHFn?+PeW3<#MLZt+ zZ9tc{riOE3Sm-$G&&;+LryuHT%Uh@PTK9a-#BbiBSewoLZnO#Sg-e_KJG*8*-8Uk{ z>tYA#+}ZBi=GgV!mQy%n#f3I2lWl!YuPjU(x9Q-{M^jgu)e|iX-MzZQNq36Fxj|bN zo_4u)BzTtZ*UQB#h9qCR{$%JQyR{s=2iIZeS+~tPabSn#{5!j?hUZ*cx>d7HBrEm5 z&}e;|h36M87}fjEEk)+DdQFeY8coeF2n&tt)ZWMT!{@p$4>hp=eB+LjuUw8P2ltMvhqj5YGxUuhC4Dq|_8;$xT9=-;-KKlA zr+%+bEj66Z`#rllH(2-h@JQ496-gbUy*hamo0eZ~yz!NyE#b;=iB!%p{OrFr+y$2=_*EEjC?BJ3l%TxexFH}y`_ito1!{w>RehQ{-EsFpua^p{J8a&g3T%HjCp&(ACB zWuNc9EPG-5CX-9p#}@T(m0+EJzDdrm(@lKlw3~jnth~P!zvA_!11*QK|ajBj~lLx?N?vFV9?@KOGWDsZsZqSWiS3zG1TQni?G8@lcsF4Q*(9|zue&0 z%}%ga<>y(s<>80hFK%tV*itdu;X=t$Md9`>?XCRhjuv!D=zm-AXuDU^>cp@sPl7In z9JlOd+5B;;;Ednil;FBWrVl@^tas5A+1}N*viA0GEEwuN)@i9c$mMRf|As+5pSulN z|E?geD158v>7BYypR8bbKgv!HUi5hRxi;InT{}Ec9fVQ}?+Ue=aISq=e*Irr zDlABy8b3Ziz1u6=Uiu-6k8itPerNiBwNz+smsxkNUHq5r9irztjy$|<`-p%EZ8yYo zyLkjCM*D8r%ddAk)U$N=2mg01x8A@N2~ zvQ>{whD4c9Ir8e!n@{^*^kXi_yAbu@nv)|ZT*SU|_12?u=UubYtgl{J^DJl*qx%ah zTXm(6pKrbVwbx6Z3n>u`y&5JJJ{W2po}}HPaUFMNVc0#c^v{+Gzo*RaDO2Mu1;+i< z|LaqxdP60j$CE2@o>0h9vXwZ8!;#6QY>pV`D+FRCE?`S}3a*gP74t>7NXp^JIBYJD z!;L@5n{=KrY4S5fM^ZMd2!vVh#{vb|(H=H?590_a=rJTrm zj0aZNC%?nN)tEE+1rD%>Tk zLMh2s>v?cuH5V?{a3M~%ZU)C}lAq=^(!|- zUCUoD{l7h$bdb(p8BhkCY)*{X-#eOi{Pz7d+5NwntPQ|u{jKo3jj*zN8 zjokzxSJSL)saho?MBc%8fVfVf%~5Fmv>Jj*0-)u!VTux;HVC0M#5vOy7!45zu+!o1 z7($E~IN06F!#g-KA~ZTNB`Pr3ho~El(KMH-RfuV|e?Q;cRyx z)HIgO$N8CFKV+d)_XU39rjJx973?NIWTRGPV@NV|dWAMbk>mP9E?QMCT9hg=`A33G zsxp{nsMKnO_Qx!y)maQJ{g}n9I!mfVD@j%OR#5`Hg@e@TRatE1nhc35lciHgw6Zjo zPN9c$uZdITNue-|6bK#g&4(NTs40w0Yl!Dj92g;}9Rsh)VNP&#GkkKCRjdQ&^#KgA`kB>=;^}>7OcomIy-_od7>GUw@s;n%HMh&tGgf%6J zfqPRF#j!xBn1ak*Tqc>jxEvzLvaHhe=5SOkbQ0>xRm&tYwFg;`xJCz!X;5Ug4`$@28-@(q7d z3FVtg_(UaUL?!&x{wRt=?}3V`=*1fkWE1R(@UfnVR){c@LWDuxlyAwR09jP1F$?Q~ z=*(z@h;C4!FLi-#(;kSvhK3B}n3G?i3zVAl6XI1wwr+xYn8%>PjxlJ?q8POMO$@pj z6kA1wSr3Fk8$?$r&=CDk8Um7mM%p(t677H6b%Fvoq8%>X;6m7G$=!3op6x7@wpuZo*PC0BSyf4?5jC+6B$`ah(b+P z(m3HPE~~0!k8a6TCFul%pacavZN?90@dX0BUDZGbltvS*Mq^{YEo2ML(aj86gbK~U z7pTM%Dq#z77M~-+TUIw~9#d6=1<`EH8fZ0ZFyV)@xPt1UFxJMt{#exH`=Y!Wt%8XB zyr}69MS0b&f@J-?sM!xiMb(1?Q^Q#F$HAdPQ4o6I77UKCx>1-=KQGCsS<-|P&SJA+ z)sd@~$+IN-G?_BhsQZnU7<9kU%0>_tI*L;@VL>^eLd2i~Ar`%LtPqJ_5-ZWCfuX9I zi&B+~Zp;FbnX8uR6rk6PtpfOf53~xa4fy1ffP}#$<%LPkIgG*tWyU0RmT7MtD?uTn zF_Eje7>768!;1=tdFPL!ek@M;wm7XrY#^t$!e9*K8a=zWUq-rwMJ~>amZ$+qB-|Sq z^tNG5V@^y55|omCl}IEqWvUVU`I1H94py567Rv;F%LbMbSU@a{Tx~mcZ1L^CI1e#dX`e9)+@A7Cm1dOdGLX|!?$LHurB~cwR}IVCR?w{OeOBdt`v49%fh`YFbp#w zOiK(gTw;J4dsM-Ijr9zQ8D=mUbPSr1hY*rWl*qOG@}S5rb{`3?P=81|v#C2ntu4AVl{e2s7LX5yT9C zG^ZHuU7VNi?z4R7jakxWqC!)AHq7cQ+k+FCs(Ho#vCreYvv(*Z1D})FQ zy`H2HhHfL7_CpBGB-3D~VL=TaHbUqknNFo5wBA4u=8GAYL2Te&1}tWQ7*;QY=r7VS zSih6D7szNDnxoL>F+(JI%mhW%%Tq!#b5vSQW`-hD&rFtRRT8OMp<`jlwS}K9Pp4O8 z_~~R?RhFLFm#NLpWCli&FFp#^WGYpuEx&yjmYpeU$?T^@$kjS9ij|-sk8KUj%-Q%O z$;2w2gCY8|VSzn?dP|_*w|45?s;Li7Q^?YpVHzznDN7E=T_q3{5>#_qq^dPiiJE*C zk*U*5)M`V%mP`*r&TpRrwRM47qLy#|HuG1B_N$#}W^F`=NzxU}AgxNCYGAbcw~Y1! zHfLz$et}V}h*&9+kD$@|yNAPnB#z+%>};Y60Cv*n78`^U-r`(~JlG~G)QVKCB!d~8 zCebs4GPH7Tu*fl;;m5rC2eOp8(7e!pgb*-u3X*0>BSP`h#h~usC(;}!I}oF zqhTDgG+Mn577kz;SCbPOR!GJ)=wHwl@JYqsc@zgUwKYN*=v}ZQjtF5+2x0XQ0zU`_ zX2T3spoRz`XL3c~2pM8;OmYoOM-`YS*)FI-QvET2He$igKvs~l1NWCbC=$XQ0Q0d4 zEFXLbPnjEJ0XG>epctSk8HJ!H1%$DwaQ!Ec>tkF7{TaoKCZt}D;y~}30NRB^a{Xjl z0Mx|C%J@vD(1W3?a<~|M4R9wN00hjyHgmGh7;x8C;CdO4G++o24yl78BgmeKl24SN>MfNg9W)|!Ju=jSck!9O?SlxSD(x|Pm zWLt6)KsI)tuB#^Ru!=>pf61x7V*kxhci7!&cF&dE>^nNFIwa4q>YUO!r^x1=?g0`z zfGj(*6F9aX62u4+LKdk?!xZ+3+1?)bOBCxoS+)kjOq$WS&}*6=5yIMy%O9*S=8Uy1nX~X zg7r7XslTyr(%;xO>F>YtZTu!{0xe2t4VWGCv;HJpZnZwxe=|ydy4Ctu+pYgmVBiNj z-!I+&?8%Dx+dh7ST-TKpP0L1#gA}aS4eK$V(`%mx= z|3dctDVBd9z+?cz`}2KKO&5A+OR0zi_QZ+-V4t^Djc${37_l z@E2RH4}Sa4kZdE9HAxui9tt(OB8N#ZoU)3mbb#SpWY>a4%KWQ*@U2$sFMX@k`iC&3 zz*Y6FR_o`mxUot5POJ5Y;@N z{$u|AJC|Cm-v#r48|)Ih!SMXmORd(IU@++GQmZwQGQWGN)#^*Xf9+DM^%R-`++~+q zt>>~|{&z05TK~C}`FAh1TE7pUTdURj8<$$GzbozhdzV_RKP7wZzj>+E+6QxLwOW7c zQmb_cQ)jEy`Y$fES~r1%R;%@QFSS~~EWcp^=t}#4|5B@!N%{ZsQmgfs7r6X?eW}&@ zA+(EDtMv~qwOT(Xc>A~hyKlGt;pOesUvB;Lzw@oupAht}S4mlY(E20t7#_7+ANzsW&hw(ya1^*GFpr1I^Srn_G6{!^>A+u1}`b zO!GDP%6wW3l2-&G6(`t>K^Sw1I>}Fq_`w*$2hcw&I(fqFM-}KEj`^U981qu8<1C8G(7J~d$ zhyx-B6SEuXudfVE{X+DPfLXXKSkdB!d24o~SFfTCv&%r%0Qidf zvVA)!6ai`=@sXnM98%iBs4V~+-1l2_e%0XFPe)0Afk34x?wY7ul!M(~F9Kbz4|C&~ z#6B(e+0s<>s;uEPtl_K6XxPNVAx~19s-i(!Me9{wR)w*viPkRFz;fZjW{_u9l2v72 zR;n&NZ|zZEZI5+I-Hi_~p97_Enzts;I!RIFh48`yLw{j~Jbd=-$uq<2q>23Bet7w6 z(D&Rf>vPNm)i|SspIOS;FjyQl+YMM`UVu5vLZQjDb2(dKSt>NLzB#M%RYR*68_=8v zX$j~84LBZiHWm!R+~^Nlsm9Ulxm0_V@ga+;hGzy#nXht;jko8wDhy89l48Fs1`W%| z_JC#dmV|eW!QaovlTlJ7S1`U0FB>e#d6=!qcpAfuSWgdRG)9q3ZO&WfP|$UqQ^B){ z8HH(?GnjeC%j98EfIo0Q%T=C_miLotaA>BJQ63Nbr%7q1#i+l~W@Fe3di|mpfzd2S zz8ECd!`)!2E$C)iCPhE2UnYf_#ASJs7sK$=)3_{6SqwUG4%Hc3I0$1%IJ0RP^Z?Zd zONg*rTg(C&c#l9vl^5Esy3>5PE-_2+Q`ar+sekULREhmLUx{7uwb^{px@H z>!ihE(*T?G-)L50e+nw>3Ut`tyW}KaG0mV%e4Z5MlW46yD$?@`z5Vd=dO%Bo1S zgLU(pI`k*yW;T=s_M2UibdUqkNep*Hzn9E_98shEpp;@zKWc0x|ynRc&@DG1MdEqZBFYK*! zM6zvVX(fI#pEv%e|HtnTZ~Pno^e+-`gb{_jkabl`snrzerviXYKmHtNCRuJ7y)Z-PX$Lm+6?Pm$ZB=;Z<6aSUZ zn`731N=VG;u&O5I`tov-mtC?)cZ+FYLl`FePfoI=FcEzQnYfl7rA1jin=+@PWwvSG zS;lOPtKhnZ(DOcNH}d+bRw1VFgXHw{cr;CRs=R<6j*7Y!+Z?}`4DUbt>=6$&{1})z zxE6SUdrd$xgZ5>H>6-{s5}7w|n9J|w`G~}c=~G9-z?BGB-)=aHTq90r%++OhWcc>h z#5!T{!|YAdQI%$$3KzY0N{p*dN{$Y|*L$M2nEhT9BWki-#+3t|-*|{Sdm=L|D^^XS z0ROpT}FG7m?A+VraDZF z*9-YM*-nyHX73bx$b+PyH(j$0=W#hL5|g}+2i54*REKG4@+@p)A(AmhizY2id6=JM zU76irNI)kKMJt$>zP$-&3m2K%>ftnT+#<6FJk zaeQNVA6*qKg-3KnfD(N4{FgL%rqN&1bJJ+&UFdB?Q9RjM`E?OoDx z*LB$5A+3|%$!}a3{7UVMvJM)|oMK=sJx+y(ttApg0mGS;>vl<&QkmJ|70k#3(j&5z z+Lq!P>N=AKPp06htxQpo0=ulYA6ke)y1>py8W599v}p2aHJMg@Ys3A|M*HR^8#ARB{%l^&AR9C=J5G&a@FiLhgyVmZKpfiVsxTm4 z&*Dae&5H^C_9jrp!i&jJfD9PBGDU51u6WS`{=!pA5<#l7qpy7%KP|_Z6~!`{hupNJ z_&Y7gh6Tr8Sz%~c&Ad`+)i!($7qd>ea)Oz)Jj*ONPNw<8V=s%g2-+3%%bIjVEtn?a(q3uD(6YVg*bWYOhFrQYPK{5Jfcn}c^*|XYC ze}qVCdn+D)mI*|_!`EpEwr*GPoY#$u`zmn`uZA#>t74Y6jW*XdO~gE7O7q-hjM%TE zA6>mtlmlo(pW`UOZt?xy>?(AVB&+&xo+%tyH~}xYkOOVD+7_HLFAZ<20}a}WQ+BN> z6zX2{0ARgSEcDDzeRmwqfxr7+ASaMlt8b#N@m_EhY&fl3itBLW1T)uhFQ|^8ovCkH z$4-^Z<&d%)ZBi{Z+LL^g4o)}P!#t}xMeSoF7ihc}}7=Oom`IN|TV<9;nnPtQO40F_r zvtd7cFK$-q48}(u;Kneol_N3YYYv~sqYV<UF2_jozam%LTJ=g5w;-VCsX%09J z+WYvs-)*LnyG^ebHx@c~RnGuv3YHcdyL6TI2}UU!8Tf0*3gubc#xpd z=5T0YGfoFZzVpBg;$mn4IZ2Pwu69fC;LY-OoK54=`VI%bKS;|XfMD_hVsAPzv3a(+ z-NAcvoW|zb@-QurNJFSjCrO{;NDTeIGmc+(%Jj!cf3>%5%28hRi+Fs^8tsQ^VWMRY zJQ>83avW!!iBK36K{kY9*g|)PoSx~v9p@5xXPIjw1UiEqAl*095*WEQog5VLFzKN2 zYa)(5yu6%dRZ{H7gJk(6-A}b^+G0xgY!GP!Ky8CN>7xgPb)d=4IL?;GaTXsW#XHr$ zs-mTg$4N(=9qgarZGbb|swrC`qa76SbGAuHW%JTg8i+$iN=MNv4n8ms68QE^J{p># zENhxs_ArGzP?}0X2DSHfBr^nMLna1N5O^kgvRz{e(XH;v+L9R-DPEZUyg<)MVNTK_ z86{;&cAlHPPd@#zu@h37xFE8fz|)fN6H%ARBrb5wA=0WaH4!7~n&*eG1f?Yb5@9}1 z;^So1mN18LY4(yNGsE;a9VSE2a++1S8B(P|rEQh#T)*>MgM1tjbkrXG-H8WL7gg;r z@AhwXS5{$MvWu?Dm0Iu<h;w%vbSnn z6;2taRWhhx^GdV+S0;*!abR+3cu?l%b$>TC`$VsA-~8gdLM9rglX5SK-g?_)r^PCX zFkqJCe1lNK6XNy4h0h+2i4dLUDv-s94tI_7Bymn6>(I(pHEJU^x&{E z3xh?o+UwoutoBxK@_x^7wEwTFkL51=gHTVnPiZ;Rl5$`$s5?QCVRD=fk`8EaiRqEs z33rUNVXH-$k|L2JA&BVgaW*X1r8Z8YF*fLxTDTr3CxVZNzkUJ16v5|g%dl07i=E?A z(qI<}E%R&=t|PV(doQeE!nb^0z%J3A0nA!Qp;5hyfz*!Gfw>U#PF75TJpAC`-JGL( z9>U?>Bf(o?dz!@~%tmcvXU#TBqky(a^m*5IAO;%pQ$S z3qkQanc}E57glkx#xG`H=cWl;VgkW$_3Rxd#a><}{Vdn5Fqnb!*=`M!tV*j>tClXO z@`l28u)ZnCK_?Y_SmvU}P_zgeq_@R~?Rt7P&7Nd~M3#z{hEtpxRd=m^;9UpN1L@Hm zjKa$Fv+*`U1}gQ!a+HPhE7zAgS>&~0ZwSGAg*$j@!3*9JYy_1x&Ali_JJbFB^tEX# zO1TO{{Gu2=z}^U^Q;x~EHSZ@y1=o8shmwk2gJ04^H(ExNFJz}Qk2da;Uz1q9b!++{ zpp1=3RNtuc40|m-a_(94jrcPOQeJf){nS=F6oH00GLdp29u3DuQDZt|GmL|pf`8GL zpm+*^K~`nLTixPVCmPrtf%p1*FnS80pk4sTm4$_cHqg5x=PEmQqtKxrXM@AMD5FIQ zBq*z7NU;P6LbT60jZjoTv}nFI5ow<9-9X<&@n{q+nqT>q0DzZ@)2JX=woPT#sZ&A;F=;*|YO7RBJDLp4b-I40MG^u%x<)oiV!HZ7u4c=RyCe1cK zepHNt6AW=C3LKUvrTo>?&2U*@e$C9wJ&>49G2+3eIL%50ud&#>T! zF36y5Xa-H?mA+XCr&7blcJgsj9bzie(wr1|c3|KLGN<{p@MpKA*kgA7SwqqG(Q}+m zvO7>2ei>kLs`VdgIcJ~NJ=@u)LS#;}pTGRtO-crYy)Iy&OUrm6Eg@Y1=IjFC@7xzRzxZm?z~m zSR`s)0Cg`-TR9O}MzH(vCY1waoBIJuVeuGXx|87*j}7Q559Tr$hcQjd1`n@YZ1;%Y zMRrmmM!p!?Ws@EVJ8wzgsdEK>xP5TKxh-ksX^|<(No8-X%y0|-XkAjoF}PY_Z=5rU z+c6QP9j&=0BfNITnsM~vW12n0+_lbxkdwUik7C%PG_Zx!7JVvIrZt^AE5KK@FYv*SHoR99GZj$W1)}(BP>22#ci357^)`a9R?pgK#KxdDECJqH zXoA?i^DS6>#Hqd;aaJrh1?B>#8qgOLdI&vPp#)UnDx#OtX+~A!?9NjL6-o9a?1IY9 zz0(eDf>|>_H|JtMgyN#OuhsgO1oI)(GZ^>y!RByC7^Rt5KRLt!G6=0|Y(J6U0$&RR zFCTTMa{$B#>$?k{5857sgUEzib`e5&vDu($W}(`&jr5fHb2lB>KYFT_0xRs!+c_e9 zDy>R?Lu$w1tO-D&MBRh)-8;SiSV)_;Jhe}{&$Rm>DvPa{9ig*4gf>GgDh3uN>{p6N+tTndU>v?Df)2j_F zOFqB(^Sv8=!6p^z;v$VJF~7} z@`Iq+NWD1_N8D`*$9D&!tWQ6u6ZT*q$D{sQ4~G#t31+6>mMIeYY1Tw{v#o2#I7*Tw zCP9Wm+9ofN13Jr3%+|HBsnQ}DcDr5rW0b^LhTYxlIi=J%Nk=2IhjSC6dF&;l{A7uV zhxE;29FLs3th-8C^#UAI;%9kGK0F){O%J9;43`gqvOmoR_`_)l;1ap{3S_L(!L1_Z z^cVAKa0?8;V*=LgWUB-=ptv|y#VGOeHL8+S+FA7g@N9>yB}q4;U|CyjuC%L8)}{P84-nFG&^&WJr;PVIHYe&X%;Sh=)C6gY}>hfDOD$k_9Ij(_i$ z)N}f0Jp{Pkkx9tlx)|=|xU_slxfxgLt&6!*f5@p$*3E-Ft4x(o2Zy|fMroE@alQ#P*?_sxcnSPyH0h-d>2 zOT@G*Se%6i=Uvg!lj;zsVwfwM1sHCY4CMh_BL0O~tHPAi2@cIInn9dl?xrOI8%lGM zj7Ah5v}J|}T&qlxFl7%Vd@UIq=B9%RX6PY;g2R${XcjcEs3-^BSeeHM{R+#3(9&xSM(P7~Itag{GP zye>EiD&ca?u`7_h+Q$RSC z02N+G-5DSz=QN+1!x#sNbKxzZdbpi%X1p@#urv!GQR)YOUReZ&^MX=gkd3MAnoj^l zY2wi+KS5Jem#q98cv6}&9ZyG9oF)0R9G!M&an6V;pG)r~Xgw4`?$(jW?{2KDUcY{O z^>*(TzgX$rzIEs3?c1vq1P6WmDyrUCy>tE6jazHi2^-D*%P^vacr;oJC{3{nDE(4z z4)byHCg0yr2MN`14f}_iz)(nql5r8QU~qLl&>aK&JU=)XIa(0cgDFqPd-E!sjTj}}n zVQ}`_ulgt+jc~-w)r}`eOWR{HIilrOCYmkluvLd#*KiEgC&yCz(iahcy>jw<$IQ7$;n*Ly1L?F zK(XSV62?F^(^Y5Nc@8tz>PgclN(TceYOZq73h^rt=kZ!`+9}rt#hT_9imqq9>Ts>_ z--0^){-Cr_cPsVow#ssv3?EWPCa+fzAG%|9z$07f46>--1Oc|stNe8iFldcsw`8Z@ z%!VxRDcEtzOzKm}XAPH7ktc^DJvut~IpRLz(nNVlB!0@lxJ*9o9irIGLYmnCC^C(Z zWPh^50Boa(>te&S{VyAfUF=(~n!MyP4uo{y#K&O-f(RL1##(a1x-VosW=*V3qY64*VSj~Aj!%^O0(*N{q+4$pDnSurA$XjhU^pNQ94Qxrm@v#zhgI!VS*piHOyCZN$hVOIs%7zZrs`@$v&@ZDyyQ zOAx1|N^2uyyXw#^ESt_<^Ti@+;$4-{%0TtUc{VAM5|&jg7CMp=&i4eTNNOynOp4Fa zvNBOTtsqbGY1J*#{Uz_ud^E%>Rz0p7I#y?`Y9wXi?9>b>S()3si}x{noZpSNY`(pm zz3seJ>#!ZKlOHF=C_atMt0h==->c29qaQUky1UyQE_dlv5G5E;;vC?K10 z&NFJ~H}sZDuM}D&c*3-?XSC6Gtw)%#$FpHZ(QYZ_l;$nB?%z1P%Ej@ejm`zxa>UT>FbN=33CaZ>;@KZanxB3CEAVctEFKkfR;O z+8zHy?uUV$3#Que4Ggva_dmLzp_W%I-~e+Gimuyf?OH&Y85`~YC&yiuoP)>)7e0KQ zR!@FlrIomtcnlQ!P>Wo*HWqTiKbvO1mhYMN4(^CTao;kvpT0(7A$mozSMmZhz#XdN z@~T~j`|0a<;GADaE^~TqRUwRG-r)n+376m`JoYVdnHhj_AcNtpFW{e~E6TBrR17Lm znfgIXp}8DX^GV8wt5Vpc%&(9pxCC_~8IZ9m@LI`1RM#?W%_-U8$Vhr?_0IDC_0{3^ zwV0Tu0>H(dZ+>E;X?B$5CzO>Y{7R`NqRnYV=^6kI^oU8mZu}!LOXh$qn1F5Xlp{M( zBCnQEq1RjQ-B|CfnchmbcdLuzUgXHaNTFa^_m=RSL6Sn*;ZtI8{dqbkkxiK}^rnajYJ0Zk615av=A?GX*}N!sn*`#>g#c>ewH7QD@dSzK*uC$iQ~>S z@m{&&TP69u`n@wXPolJ@<~$hhZ$5qEC=xh^nRXYq&Il=w#o;Ocb?IOQE7(Y3T<$!BzAO~(fvBIfZWUbF~W!%%RfuXqurtNOf^}Wqp4V)G~5mdEZgZFLTDHRsS1#r5@$Qyt?%L-sy`h#gK$>by%Mx$yQt? zJEvI{`!rPxN$@&!k{8_JAo0iGzHO%m9QEYY6qfZo4{7@uCkPvAP7tpKHWd`bQ+xL$ z)3=Va9^ra|Pp1b7=GX^{KESfHd5~n)PUSa-vXsfruizODiD`oPJpjDVn#-d3D{w7w zkBV>0Z#-V)hOm_($fEi@_Ca(np9O?V%(I@8Ka{C9oKtpVX-U$!c8J#nd)0Lq_oXH* z+=n^h!W9UGk9!~2B(?-_@kuN`Tw-?H0PaeJ#xnchxKHUgoVMM*>e-N!g!IR1+(mi(7zB?L5k_* zShiTv;yDXlPot6@l}@Aj?1!);hq5?dQM71Tk{p{7t1V7$y4y_LQL$hGXqGwRR&2oa zjh~ZWR#U9)3!Oai$$;rc>NGK+pnylQ!TVrR_zUwuUQ_J+BOZfmB^k$lF&YiBnv!qb zQb@Zdqk*#KgOG|;^#JOj5-c-;;bJR{8ID_7VpFFJZK^3&LPU8Dgj?WmoE!n)LYxFI zP~{xNElD=I0e)<5hKEOjqcB3`uK0pi^&_*wt5!<=Bm?uG5G1MISg&dIhqb*GPUanS%EBNpce&Rve&8OqW-GTya%tk?yh>}xD0b-5DWBzN zx1GC@D0-ILXkF2xDeWk#(iy>a*kWWB^cb*Km?-tk8N!S+!5fS;V2Nc;6G)^pq(f%4x{c&i!-EVIU4`UxZaLkocq6WH*kBsy zuA^)^j(E?>dn}%zyY`|w=J|}e8aOYF+*21$W6y51xGhy6b#A1iXLQqDa}x_8pdXo4 zD3N@RUf7xH?QRW7^Kye9)0y8TE{}5{HRDGw(wo5!KFr`I#E$gku;X{`a6?`2RI6?+ z39IzhK)wUeXPTyG)>x;%|LL;`p;qdqYcBQr_Dx^!_wvUG$o?XFiMgP=itPbZPIyU9 zJnWewqZhh0*0;N@S~Z7l9@#?M>$Y=O63M@@A?aD&Zro)so(s)CIw5|ysJUsrtG9~HSv^^NC z*dT2tM4%taq5~5CM#4DYZIsuX_;BYgG5{pb;G&QQo~rqk3-M(+&L|_Dk??5%MZKvgU(de#8=~HYIc^pF{+R=sLe8r$uQC7q05ep;}cs zKciP#+{%DME-}BBP<&@UEygEt0SsHaK%K=mlvQQ4flM@O|3zAED0@cBVh8k*)U+<<5X>W_h{^(WiMy zcj-j#qzlI%2MIuGHz|q+z0k%GJ9i^&rQi>S05z0|#pWnQ<{7^~90Z}Fb82@H&P?re zwUKi=r+ohdx_RoHzVG8^fI;PT?bmJSIr=m%hG0qSb!_-Ug5E+34I0KQ)deSIx;n1~ z1f_WmG)d75wL_BAYe=OkD$A_QL#V*+3D+5n;uhTCYnP&`MxSzU2p6RScI>0l_ zYj1e7jWo>TyaCHn?%a*C5e|)BfPMjlRD+d)stHbJTXRU^Uz$#bmEb2kGi2ph6qz$| z-TQ*q?l%ggG&Tpu2HcDI_mDp;1sjQ=zE~vq3h9jPf@zd#CNw+4k9l_bYw( zz24g5*@LnHC*IW7o4C-ZEP$a-$y?2NgK5wX{jtodc;}4fk!qwKX*Bc!+UVR3Ib%~_ zjk9T)fh2D!XP82L`LJe!8>%T6Rmx#|6ujTSf$OzJU5YeGInI~JJM#*zEY{6x<}5!t z%SL}SXd|SBHy2*`>g}S_`)tsk7ce-Z0eaDgPLp|Q){AUdR)rZQ*+F&Ke`(rUkQLW# zI_7KES9|6aoyO`%oA>TNc=+g(Pq%*U2cK;}e)9BRf41}d#pgf#_22jl@!nvV>>nJa zUmlIdSw8u#qO7LJC$CR`+*?^)yME*5t=o6l&^H(QPm|XKyQ-fGj=RtO{eX4=FpvNP z)&jz^#UO`GUI+kS2B*{dJyYdpAny9=o$GgQ-deqLgY2Sgq0rHJCteUZMn;RnWT1y& z)V-rxFkLO~b`N-z87^w=Rz<22p-@nyc} zA3NmZV>am~-=9h&LIck1CMWe!n@*MCD{J$@DMN#a7=LLka59dBPX(*b|mVq1asDlc*4C~auS0I4N`SUsNOn|gJ` z_9O2`+0dyU7ql7N`$=g$C||AE%WW4ubKB>PA(EcK5tR4I?x`-NY%;~r8C-TVeFpW? zEcDDr9*bJ#X1zV9hI+ejZuimYhT*Puc2dN%l?{`udX`WwW(CpiVxJZXE*`NPeY-4e ziO=blcdx{%BYA&N-hkFz2_YFfA}?SR%8#7_2r(VCmND36EVLPC--FABBq!w>ZVTXD z6N$)e6QCS~!AyXmdwx1ep5V55U6yU0m|z$FS&{)9bqO_;5ClT$@)61_&9tQ#0an^3 z5|uBwI0MJnL-JHU^@HSei4mPAK~X1{on`A1 z=DA#mcFC^qe3T(nf?_W06Qe9ar5b4`@?3t520S9Nl+b2DV2g%zlfE|yXa|c!WsikH zgh4P1NUfjclt;AIBk?dLrn9JOhU)3gQBpk}JF;6THvcJyoc9s=q?9AD;pe9m7DsWpcx!Z2mHVej+0lUE0kDCNIoV);iYz*D*&)g?h#wxtRqUdN>7nqU{tdlEWM0@NlpI1L zc3h9>K8*LqNrcS^b>85Q#k|)t`2Xbni3%bdXNGD(dpJYsioFLN>}!U#f2j#!wekEw zFemRs3FlzNl7bBf77c0wiKEu;wp${vOvgoilCXE*f*V0Lr4+3-gKsY+<`;uTlt* z6`~SlC3IP%tH;x^M|9V9@_Z6wVxj5e*?c@5L*J6PZbBQHiFy%_m@5|)J0`jbAf%x3 zqWTE+7mc*FQx&gX`PK>ULW8^fJ_N^plW2-!(~IhrPNOAl8n*~whcqqqD~;B8L6pc;O=;WM;s7iVUt zVuh6p0iJTJny*-?>)*M#LFWYfcW!N%6V5i?zq7W%hg14@R#XmYYYWlt%DtD^v9+nC z&fWG3c+r?%(N7fUjp-PePu`#92asPL+oWlYJ{FtFUF2v2S0m$fTV|9s6&7q3RbQKh z=tm2jm+TE`r*G&m%^MtfT-qy%Bv+4kx z$nXw}`k^D4t{+{2^i8l&UpJWH+W|-NQTPRkdHWH2D;^OY%wp;cC;>Jgpgtrx*FqEC zgSdI`oUZk%ID+L>0UK4$_qWbn$S+D{6=+<_#D&yS<1Re$js-jOQ)99NYQUGF(wWD3 zQAG4<#kTBfklZHCsw5jGNOn#a&DjHx?oKpfgVJvOfF#p81E7hIf^;nVMUr$5hr><@ z)x^9qADi22w{PF<-41<7wfjqhyDfUGKq$JRn7j zoV1jC;mu)O8YI)kV9fp~E)NY4XK%`>&#a#@N^!3ZU)quI-Y7rGD950;Uo-cgea5N9 zPs=J9E2@2DvVil*>q0a7IQJ>?AU#epZQPmsf)Eue|3QB5dQ<5)af9xK@6T1ze)Gnm z+g!AI^X<8!m(_^p+`Dt#n%8@CEn9F{wn5D^vs&xUyJHC_zugtRVK-Kj^47C|*xh3v zob27Je@#S}_JOuv2!6%Ts!Ff%~MJU;MasM$(UYtSrL2^pF+MOydV9s_UNs$JpYkDUCXA(4e`9PQtEXj)g7n#U(BoVajYOU@yB5ig>U<_q7+f zX%l`vB&Y2(C0%h}ZC)Pt3TG`J<%Q(yA-$;18kCJuK80*(_y%$O<;!NeDFeL233U%w zjWnl(B&Y=pq~?=zP18Nqm?zA_lZ1B+f&JOH{hn{>MRZ}GZlGa9@nI4VlcKYqCZl10 z;VW#|W>9I`2+MfuIS3ZS*&og{U<78$Wn!gvSY3?=km7dUy%vXM)j`hZzN@A-Xrc~d z=nS{an7hf9iQ7B=J)K3PmiC^m3^5JZS6e!gfqYY`U-ZEq$Gx#F`g^mh^EF5b8yuZ z5otS3M^&12=&Bl4w4+7ywTbAyEZUw~H0yK0Mw+!Ye%?!WYd{#HrG43mhd761s*qGd znq(?q6>^JogAzrp2zT~1AuAKizmRo~>u4jrugVegvgSu!j+l$UL)3qXogcCira#7& z7=7d=H49$_eC#bunRa^5U-V}#dqSG*C6V);LwzjUDFMgKHV99f$@FO?%HBQ1T zpJ|+XadiCzd?vc)wqec60;!Mmzd&VV5k(pBDI2QCPA73$P7aH>O!`q2GS@I0Kr?pU zo!f-F(V2+|;GTC4^VbW}kLtoC`r>7;bLZ7ZFky+UP^O{I@I6)Hf_t2@!mXUs%q~$k z53|dYRd|gIL1z-e=BWq1f(#$>`2(_wmkIV%steUwJ%zVX-yWwIv@n1dQ2K1+*1pOc zlkK=d=G|G7v)Z6kSz!&%?Pj3L%tOP12WY>|UF1c0VX%Em*COzri*QEwJX@!_Noe#l z^fhawiOl2Nj4`CT=-vX3b;Qt0dRb;h!?s7AIB~gdL>NFB;+WoOVZwSG*S|N%9G1%JwDmK`7FKfmNf% zC4_D~MQuUrAun6{W2inJ<(^xeg4DPM*|7zP&Rq#_>vIWKP;6^tTMD^>$~U(MMDEr) zk~#PXi&-6gD{Ke1mpcotpT<>{6yDiyhiVzTWcsOvTD7&J#(SkW1VUsZME{bV=$_6j zT_T|^nhV2}YVFf0E|)1{9x&9_3@lT%`YJ3`j#xo03M~Kv*y7|9j6Q*Zg87tX@fQW` zts%or-*Pnl3}us9tHnm(Ev)CuZJs}xJ&m#VIW>0ZemH1-d4zsFSu-w<%x_AfJfoxS zPo6)0XtNzOnLnZTr};^^N8na$2rtvD z{N3KNT8!mF&&QJ$iU@#L>U(CT*F*DYRyy`eu9}55RaizruLSX_=i|vLGMC^}u(GJq zDt6}rNY}LQrI`)0vh2eajJkoH1CL#R1b~t^_4$fc0*=J-$5*CPFJJ>)?Un#f4IUXW z&0OekgUkd6M8@no>C?M_Z!x*5=AxoAh};(YDLBC)wxr9;!i{(W`F&&1Db+xE6D{kh z4{IgV`9`ZSrSwsVCqpO$Uo0x=uN8|c`V*`olqNz$sA>6z6zy=_@I|`m&8e)N3E!cX z1J>gdmYUANi=hGYES2Z04YU&NP?QDIShNdE^_V_~FfQw@qZvL={P-t6Q$&&Pv!aSk zPGXePu8Hntu%3jM?Ik3#2Cw1KT0E&z&Emo~<0iJFVv@}c+#VAX;U?-t{%)1{4}XZ> za$txW>eqLm$#HMk8k*Zg+L>r|~ z?GRP4ra7~`GG*#}Mu#Q6hlK#Az=O?od-K=LN)HRW);vu?m1ku#;9*o4&;qyJ4W$^3 zCc^z^Q0ZPVGseSzBK)J&cn>*+6<#4wN8a3pU$nSv#z7Xy1((a!rQB1q|Jdaw59(a0{ zb2U)xLrwEuM>#$``N4eVMOJ!0e#+7;W0bPQ``_#FRdwZwB((I3EU59Q#Fil7cP_4( zy0583R%+14o`HhiHxU^}JgFM#A<)P~?4^-NBJogAZF2J_uTxy{LT(L?=ka|T7+j!| zU0G=JsJ}MRj~3p55xt>dNQlvb#wt;%MbaVUFi0TG2??BL-wt1}I)in4B5@AZ?X1jI zS!+0juNT9tjqO6X{iZNm>-)X&>UMP7^&5FCVyzqa@YNB&@b{HdmEa=s?+R6<_G9q zz$W7()81Y*D`rj6rA(J6{`BWYv}&#+Vo=`=hv3cr zn@>NjzZs9sT3D+r%}sO5o}JTB$Ob|9l6s}~LG0+cJsk4CpMJ{!j>r6OS!#B>vSLHjynr9u-0{Q|GwmEcxJA*G{qS+AS z%DBE~)*OEdRI*vyBfy8HRe_#MVNUdmX!q!oKoRA*Iat8-FtvffR+f^?l0qhKR}T!B zgxyyUrIrpQfUCg~DQw8!kA(-$1}j0U`Twx}kW$-+jSdl)kVIn6#8P1+;~ib>h;3 z0d;A?KR)sT3t;M!zASm+%z&k?IsTStn3hN9kscbB>9m6k$qwi`li~=?O{Vva z_?91NYwj0GOd*kI*yQ_!4hF|{+-6x85tN$QrHPmoz<4;EgJNo;Gmc+(;5~)8xbYZC zl~?hoGfu{Nfit4ZW=%O|Eutud$>-66>Y135`2%iPFRWfTlsXY&@jZiWUQkePWu4Sj zTek8ue7ooH84QEHnUb77(W! z#G@jKho`I>c!V@(OhAIQ)euNMgG5+;o!+2hF5OmU(5MieF=OX&VvsJe1YdNpk`Bm( zB0~Mte(>p!5LBnW`dkUyrZJO1nPu5bf{Hmufamb-&0i<3%>=e$?wYn56@=CEkxBa( z?g-UPXWLtkgUTOYu(FuNVeJhr(5=glf9bTSAd&+VPr1Z1F^7TnvnKM8k05C2KFdBIjf=G-(Cy)REvu1agK#t z0g>yu#HlbF5mPf-w^uN~y+sf#3_XmH=Eh(R62`31&$f2g^h&?AtER#^%agn~D(OrQ z(2>NMp=>qfk{P8{Qp6*ZXL@3bllmPdWm5XnQ|rryhx^DEQ;G~Gz+}T&rTQA?`?E>&BR)}){Fj8}%- zC*@;==Tq5BIUQA$C6rYW4TRMbTpSGR?v|7WgWwv$3i|?W#i&nSR7EK1q}(Y|e%Q5Y z%fofs*oH-l)#y26%4`!LfF>xyur1qT&@u+W$vOHFEml@H2#eew-V*L;D1Ld8$Fmja zwW|Ss2Yv#KckTj=MM(!D9MN5X*-(~XSad+}EUFmiRz2yhM;A2dwVelv&tm9Q>3F7d;-pgewFiSt~g!l@+ntzPOaTlXu#j&uq~v>83l!CBIw+?VuZM{lJRC0RSQGDWaj zSF@PT^#&^f9x_QF2A_FZ`|36}4OiICB!LD&&M3KU!ZMU#ND%+?oW0F+@Yb{ZpfdFw z!?Zw7=0y|j%kA=!i8${nyOw?Lv*@W(pET8lxH6+8E-QmHhUtDfFxpT&N~_aFQ!su? zhkObKuxP`PIP(;3ByzQ~i`JL5GjBfTnJdEk>1QZEAA0w`Ii*ZUQ**cQQfRQ%fbGyd zTMLn_1MQD`;u{Cr)C*;dd}|Ll_!|Rc)1V|3l5?)zGYiq@@n}f*G<;(_0Dqy?5ivJ3 zg;zHva5BBuD-{32z75M7C?Tf26U5ckVMZXBo_0hLAhah?jaedJ5Rw=zX@W&7gSH@i zzB18|lOm5cOhhaIKfnd>Z!w4hq+YDI_Lf;dZ(aQAqGLUQ!aP+)AangRqi{BRxiSyt z)lzsCS`ZUP<8uQl(ph3KR{MjHp2|BTkg%;?nE^&8#J@Xe&8hgx51$J6( z$C7`z*^z5w=e!K@yprc^GUT-b>q#+8B&4r~!CDz1?uJ~cgrs_DWU?nn7)4>*dX^c9 z%L#zaUFnXGW;CW`rEbouS?iLK_-pwdU(oF|Tlpdr;PfR8adL(zyF*cfrm@ung`!|pq$B?;CVu|(1^ziNQ;zDATr%4N9K?tUvW`jFM zig0A_KxDbBM)}9C3@YG}10!Xte3TYtCA~O6E-*pd0NoVtEg`G&IyXa&E`^C&sqvmT zQq1%rC6mDs^FJN#?A8NBCj0tEoZ>vVe!0@zsJ}g_p|`I2GIBPD!}rJRCPfcXwx>2b9$Bg!7Lhogf;)F%H(E69&7s_%hdOfCc5m!_EyRP) zZ>LW!&7Dv}J^fF{Lr&!6{V~n;-v`sG`D_iB-h+%~p3X$b)({ufw;9B6HZL+STXv5& zZ%%}eXOK$n$mxWK1XlovpJ?B?L9CS$}nB7jm**ClKNvj7i)`kDOT$gUQ_4< ztZAkro5c?brhe>|OrTO1OU-RP9~hvRM^=7L!O z{Z-L`sBL6asz~^kraFu>g+?GQXF*;0w*TMw7jsa@@$a6NFWxlnybOl%*U3fa7zSIOkrm=L?(W75~mbbfkQZm zz~`f`Wb?AO0|cx+-0CIS(7)A-6xxQ63oD>%<>AdWNPZeNvx{I`K!CoaYv zIzoaX4_9|@Kia+5(-^K?a6CcR6-A#uU#EcbVzDQW;;QH=82goQc4w6n@#Mwd88KlKvZ_pV!S@D5ZB}|&wOClcJDa^O{V4HB=wtL^C!I=q-B{Gw0tl*_jhlv+P=#{k&i}U?~Y!| zaXLy)JCnGmaMes_KOT5cY~I+t=ZIX&;vc^#dc3`RZ`1Y2ZJwkVBEqOi#!{7M2UD;4 zJGXazP$qG4G)lZtcr#y4l4Nk$*^5V`Jogc?y1VI(rm_^e`C#{sn{5ezs*|8s;4rNc zq%k}`?Qr@-e~H}(Lx3oIyJXrvPhM3Gpoo&ZGlxugrBE6Bh0% z{1CpYc%+9xd_wQ^u6KGX-u!Lu-n(aU-9Yj63b!BZ-gcAIRAHspS@U|h{m^G^^@Y;V z{GHWEW7)m^*@9xKquKdqwmwb4Y1sLYFmeg*NPEGSPShrnMA(ygn+e&TN(2&b7Udmu zXq8TYigDe!yPyrVY33GjfJ`RW0~s!~hmUse-Nu5(eAk8MqrC9tu@jpON<)drA?c$* zPzLfh`0m1d_%-kxh;+YY*xQ`3O3_f$A2rFws>Y{~MbCzSVcZ7Sjzt=O!<1T!^is8l z#{@-(jL#GXLe_sm2W=;$rWeqJ+d&%i4tZ%_g^8WKihwMbi5FS=di6ohW)(N!^-3?O z^t2Wl4?*;z7(L9O?zlPQL8`ydtL4zHh!a1Y+s*H`^`DmEGv-Zu`5xa&2Mp zdmk;WZ+zUp`~6>ixx4%7N5A>io3~%1HLNhhlHN2x+WDe2xE>cOx*f1j7%IsM5)BSjGn1t8TZrP8| zVA6VAP28y3?jzT146XzyzA;lBaalE49*oi?t4LSi(-qAJI7H0OsaaNWHRZ!1QF)pT z4vRcXf1Kz&#MXHMGM#}~5XH;4hCRF_$gR=(#e|%=PS*);;h6H*dCSN3t*Dfh6nN$4 zfNQI?83vjK2Oh~sfvy8$(-FuM4&~vJ7n;x|lVXwO(;=;~=>!^ihiDi~9K;`(K}DSv zN9RiuR_EI|JMnN>BqbIc34(MIj8*(2jsk@>Ty&xNOxl|_ckV?nNP{Rj+SZ})il|*U zt9wwygJd6k9JW7ZTOqC-!>8=+pH2@FoRxFlDpf-0a`$-#A(p7P=u#dRkDxABDMOBC z%Dd{7;RsF;ib@c&&!RVmS>(!0g8AU<`-YKdR9w&)9X|}-%pMoK*yRAM8YBZAbxkE_ z$2;M}%ioMd7K8i-U^TUL&-lR$51|jb@pRUwn#&xO6OV$~) zJuj7{sD?F5PVW`TfYR8D(mIFlcyQ}cQ?p?EcUQ9e`D_s_irc?o;+*Hb(Q!2dO`d(f zfrojz#I_-&xQ#=ln{h98;en5GBrOl_BJhJTbtd3HnYo<6+>k61vkYo}5^|AaZrVH_ zL_=nA90cIFSh+mdbofv2bhwSXmAH<-Ze1>9i+9C$r<2z`Ri_h!cX$gM zzD5iTnnW3Yz;pHjIFgDXFXITK$@llmr0Uzo28Yw^h|jLBt=_tMo3P_$X;(t?E?(w+ zg-9a>wu+dQm1tXY(M* zs&%uC>{(TM#P^+GPd6kSNP)fTv`DH?u zSs?#Veb{JzLj(4`VKc*BteILEU0YdM#iJ2l#X^X0atktU1i?@SYQ`Z(3YU7EoS<*M z@K+2k#)ZG>oNZ+(t^t{1+eJ%Qv;l^DE8MJc&vIYP{b!#&3TBe=a6ixXB}hH^x`i8k z(<;297_u2>4C2aN&KT4pjb>*$EFN9o`+A~oD^w{urN`ARvSIb`t^4W+P&r2G3xK{hF#?jWd(k!(kKjm%VO zRhrU*t1(~#e!Yg?IzyC$i?(`?ndcBmKS7utDCgKk$IcKEmQ#$xWHhR zOkC2r%A~9k@5UQE5)K=fw*+dP7t1?XNort|)DV-k7RH$j<(lx_&JdH`;ZS9k_CZX( z;ASr_lg_lj4IvQn6mKcp8f{fdPK!~eBt^?F>v1W1UYhkmo*m=frmBdu5+N%6@$d$& zuQ^QQtkVeoS|4QQ2h=X0uw$!Jp-+e2Y!NET>G;CrM;8_$wE>YvJ)zT_d9!5a{Wt@& zp6){ft7VX+Ue40O6hngkusOZhuTe4MXU>X!KlO|sOS$$(lW_@;kgHr*3Kpyid3{_S z0nW&4kB8YN?M0VoH5$#QjTZ9;pn=t3792OUxW&peF_th-EVckOXR-ypn!M+qoK8~|#JQ|&T-|QTv6Y;Rgt>@QRE$KryxMtE!_kqq*J3|mYZLs4Zq#oHS;_(HO zWQlp4oHUQfEfY_sKF$T)8KF9tX@!uV3!y0LWZ#21ikJJK80`lTTl(VFW=&oi*F_hw zH^PKPxw+kOyWaGGoVMo|M$mW^oB^>o^^n=GwPdxJH*a(VG_HB&W+|(2CYS-Rf?Vs7 zM3P7h?%mq`2ZxCJ?V5)f4CXjJkdy}OwaN{k3Mb1LPi^*0giUrIeb#Z07TGZ8%@{x5 zz@XSQZ4!ShRc>ZSao!5?RJVr3;wO^AYU!Dk>vI0@9Cqu*7%~u z17_+;eirSmoPFBCLX6h&+=AD%8L+Ue3#oXm_qCSX$UcseJ&ZqmUGm8(f#u>d0f?oo z{hXoG%+z@iPz+Wzug*7!11nwRX&gRyfsUNKM)Lscg5p7D7gO>N$ zbv7B5N#6#2odu%I>^pR>4q_1$HI?rSD))FO0m+H*=r@~x@rZP{evc)Eo5xE1EU@VNn@?BZ$&QJ7-5yMiq(l)5n(=YqaU>D& zcH%;8?Q9@$Uoy`OgzTs_%Siwk(jZAne~|~{q=M7nG@ruUNbW{b)w^@J)I1?TBdX8N zgKZ$G!AN@k+;}bkogTZSga)=*hCSF0%=<1y$D<^M+jhw&c(SN?upJmeomML$Xt)+b z-4Zw&$PGz~8Dz1fyc_dMHMq0{JK#MY)NT8F$=FWpD81!iwGW@?yV`oTz&GxGljLR7 zoI{nUkyqqRl-XxQ;hs8*AJWKvJ5F(SzbkRU6M#ooW9XRlSNL4J)ttq~u1(g8BqiI0 zxh(IjD#2L=nana$aUg(P}TJ=&55XZq=B zsP#3jUtF*oKUCb^?GE3J^Woxhw_#fc>%JHJ=j3j3ilEy+u(Bs zYE*MW@FE`HWej#1VgZmLt&T*uPnQT3aa-S23$7QO;%^lkXfyIT#HnZvMouRCVRM!g z=R$#~qbg_UXCU?YZPYaq50nfI5*LhyNuhnKWlbanQ_oCuGVqTZpz#N;0V%HjecJSE zG}-L;?eu`@OQe@bXs-5IetoZFUMPM^kn-`>ms&fE3J7{|a52tSIq2Q9>B@At9o)OLR#MoFC!4NB+Mqwp8Z78$%g#n4M!geW z8uQ>S03i{&?7PbQUaPWr>L_Mwo9ohV)4uK8b@72)8bHiX;AF+41fqG*Y$IYZDXXHv zD(&k#-UicErW1&?Q>R(u1xJZNRTYkp<8*}kTxRzyjan}rJHa00GsNnEn5&-PnL`_{ z_8CJE0&F4~kD>`k&%hf%@49!wWOFj%qakBm;LRu$lDD9Soz7o|{z9~sL(`5pUmSD+ zGj^5EN6!4!iB4wk&a<PDl|D^Cv3`9d5IeA1B2q zK3#&pAu~nNfd~(Zxb@*?#nMc0URv;@PL~w-5gA$BVENK56~SUbH^jwKSp(ehOjsg4w$03^#q&4+b$>*Y}!*Ot?o` z1}h8Q%MP>QqVRSj+l08Yy({w+KoP#QV8Z3%*5CVeH6!YmOnH<}CSK5yrsTRxSy^f4 zm%i3*p^cFH@G?2v;AA#=v8=^-wYXw(no%bAN%jz7hb9UUY`zLNeDimK<}J=fN^5Fl zjvgK-#i@A^pPHSdQV5X;DBm0%eeKgvI#GeEw|Eyc+Z}=}=k~-J zuy%JA)DSUqo3Q|Mc8_<2MMF*n7#Zoi1EcL&WHB^MtZXh)BbS}hIkY;bG*K8Zp|cSw z_hjA_9Ix3hyTTd5*S3)cBBg*1^C&Mu2;QGKi6sX8&(P>B$%GWz)Wi&-&XT1`CBJ5W zWjJqYKD<23WEG=MxIV*efW-H35UV&fUom(06h11VaTZKDy2VO8%C`>F1%uE! z&09!M%F*2CTfcE5_YJad2FV1Vkf#U(CK)3WOGl|c%VPx7c)D@jV2O#w(Fcn2m}W;= zev(Ctw9q{@>8+dIS+k%N zK5!A;L&#_SQ^m|xgY0kd$ebjkMG@ZQqCQ3|EO3l{u|?AQAZ6kQ`ij`HTBX}P^jw=0 zYM0%LPJSvSTu3wd@bb^L{^-gtNV`^}_}%Ypul{oDpZ}e2wf=OA=Wd;%>F!U&l<-nn_wM^XI>F_3~9ex)Enh`Z#o4B0ADqMtC{l*dox--HVTw$2ds% z#a?{$MN!7Ty3*^e(SIww?qrG}dwZ%mI;ZHy<*S#k7I|KE$Juny-HQiD(@9cX{)Pd& zy>el|r0B-wtAP&Z47eiCFJEC;}X6#@o&JyPWG2RDHKE)X}w0`-rk~Wj8M-vfI%=+?jk(XT}wr(+9uEvw)Xv5ax zyatz5*>T-$$60)k6u+7dK}rOR;GHZDxKchsLzgvofWF?ieED5zw{5%iD0IQL2-~?U zu|cb|^;cWE8vmrOM!ASpR^qp?690!k`L|Q7#IJw3m?f5l&ke=um(R^rb{6G^Le z<-3YlP5tnp4wdJME)d=Tr)YioZH48}DlBxnZ*o7+syNM(!siZu;SR&}-Mzm}F#T15 z>D$fR;pb~jfkXV0Z^>K?@~ql=WTNAwI;3Qg{`;pUTIpf!(|^lI0%o;ZRQ%+JegS;E zx=fN5DIk~8q_=jYC&_fu=f9ttgSbjg;#2O;YxVM|w&yr`%t{yVHuZ)uBQ0ETF? z@oPUlAU(H;#~q|V?cch2d)pMrL0VSDDGr}7L&x&emn+?2J~&E>ZkpqI>S0>+%eabH zKx!G%TzBGQ`VrH!cqgo13O}rO zZ`7vzanW{la?A2?D1S7<+*Hn@y(|y?21p;i(5R|$GluY|J;qvBoXX`0*27k%@xBut=L`&}f`i1|QIQ#F)lKYmw@{;6wp7Rl?{D z7$2SCpvLa!lhYzSIIPUVV9~7hdN(?&z15q1j@x`pTE(xbZgKa+%UAio+32q&bq4ou zbyw~HP8%TR1?epD`4nnIgai*q6HR@Y?~%z5u23`ryAWOEE2H)|r)8Cl?GaKh{7|+&9?Wobq@{WM)w2mw z_A5_oiD`dK7E6{OY zY10ydbIVF@gqeOwntPYSs8E-lFx|D2iZ$wa*A`)@OtW}UrN>D>%j*P1_FPIOr&^1I zv6+{~1M|x8G>gaSz}GhvWHsK_!exC;h?57tdy{Zxuz42R?Va~#AWz%MJbzJ@72#LU z|6lgr1U|B?EEKQVXM*hT*zt6wn5oR9Dpi%OJKfcg?#^^)rjyPj=~?Jxx^Jp(k~^uo zx48FK(wPl-D&j-g1;hnp736^kqK`#*50(AtxZzW90Yy|45KwvI@c(_w*>2s+);*)| z{a>LymAdzw^PTT}=iASBju(#D+REb}_!hFx(SQ9Gvd)(g>%98YB9k$>=Oe8ifOp!z z0Ox#t@6I_VL6XKdPe-np=fbHFo~^AqF`aP3d{lCo;6g`mL<6>tXYEaG2pSphR=+OjEIBNQLR*RRfd`1fll3V7x8W%SKhv(934s z4Quet#zUhk=gNNJ(>^OaB#kB z=clmTSJ%h0Z6C^+ratGm_T;g2*k&ES9yE`+4JUo(^TC?yBk;fncEH#Cb1@Z745l(MDOc=vFX}A{*YR@!Ks>rzWTEzt@g=_GG#t zuCov%(H~rBWpxQ9k0cpf#BxVQ#XxH~{N1YA%&E34+gR`enDRTy-PAmw6jv+=F*9KY z2j>7dmHgXca4D))Z4;@N7~&7(Vy1eMP|E;-&JMucw^ayXuoQLntl~Y}Dqu=S%F3mL zM2lD)31U#rI4?)44>C_oz6-C?*5-sUER%1gj3K5|-oHnb4&wjuMGGjVyNzSeDi5TK zlT)sOHH`T>aZ+AKNh)dEUu2I5;+RvfZwjoPWxONC+wp1;dhwT^kG{RH#QSCH& z7Y<`==32O|Wy7tXrEIRK`mEt2&#F}Timzu?DsT~iu8L|DtHixTpRS~OM&zc(ZxvtrAnq2AgieY>Vn_#wZDYLHd$iUJ=JjoWUOKqlLV zn-OhJ9+O2^X^-xrD!npQIZ*HU)qDUuml&;sB^KAUg2^DIZ9QO z(bACH$!0uog(j3EU@AB)hMRqO8MQ+2;c7b5s@R->XUEFA!Srzt63$Wjo6`bAQK4HM zJG>FfE1RzYZFjx~UL9~Am~Y1J`IHXlSHUKltaqdc=q2=`vvJV!YQ_?p{qn+|jj<;} zIb8O`;tuC1{W#iWp$%dpezM+gV^hCuqf^R5zy*{jt3y$joPN9Wq>~WxWhm$e3gJ$g zz>=i(pM*y8WU|F%iUCes^G#%+w96#?vO#B}AL5MFgusXTpAEJ<=tGQGE^<|5pKUQ0 z`Y67^iOUxA1tS6uQ29aZ)u>Jhah^^VqB%16YZ)Ns4V-#}gXrh*>Q$(@qR8%pq;71ZGHvuH zd&-9*B*5M6Ode|kk)uImMIN?3c@6jV@dW#YBd>5p$CGq4?aTJjU8s6A(i(y8IDtk! zLfKCr7X9!NYox##t>OXzL`js1-NP{U!6ms1Bo*V)!+qj)z*B znkEn#IZ^4cu}& zSXWxntjM;UDDu`ZZ?1z_vRrW$FC^*Q%*jFtdtd7mISM~1eZU}##9m6JT4sVMVC8Wy zNg5q)bzTk%%_I}5jb`bb6+X;e=VB*zW%+&m;is4=Bk#eGw_g=NFw0vp()>(t^|#b( zICx~Nwia}2F>PIUEw%H5I| z8$$*ZBvw&Q`vP1I2OT8|Rb;nmUk`j2Z$*Zjg=!w}Wk4uOB||BrkE8*^(FWo`f&yJ- zq1=ov_h@l<_SK3?NnQ|?T5*HN0!~H5y@e!XyNoU~WjVO&s^yYZPN?W$zldV5(SYQ4 zTvX2&kj}Rf25rAyBX+we)yibR0+*_!jGr9cVTecLh%-*#rk<;I=!;)4tuUc3s2 zjBz`$_}yj#tf~io3Dt$Nh7U-bYi53N~yX?YL$4%6f0Y`>Y}pYh0(N-%pbqv5Dd0c;xd*?Ma<0mMhAFCZ&fhb`jpmOu(JOs^JDh!1HAOvl6#x1fU3B6(JADH>Nu{GR5oBC%;3eIYzI=dI@jo; zm=FJl(|LEJXD19XZT*tAfx*(%*G}4EM#(OOdG~xQ^4VFp=6dT;*g;xTOjdr(mNVwj z)ne3ItvzTf$8y^$TS^)AT!_0*WP!N{?O3QsBA=x)>1?R!2TK{Nypxpbbw0 zmMQc6uGX?m^CcO%C39JjrQyvL0g@< zWoiSKdY>tVJIQ!U^|lMH^{yb>G1;qLz_f_Kcmp#O#H!=h!8zWIljNdLmN-zz&%R!yr5; za_T#MJ#{mff+|@LOW)85I>;y*-D7Iae6P$WdS+)nk$JRR9s$6^IFp~HjG~uwGNzSI z^dy~5WOV?EMctl3iqX#|YNJ8|kvv3|OwOD?Zugy*Y(&-;XYQlUH`OKUkocV%+5Re5TpUe&U5~L(FIx$8*(a{d%-?E_*6d#u*T&x$8 z_i9@YWdaNR$X=6Vi*)}(2fHeXJZG-TnlgA1EXZ!U(YqfLtq^U-IqfdjJF*iH?iWqD z5bdE%4S;!=_c`n=BcSUYx;3XE#v2XWYszX6(%wneSAH$I*!V!kA!%85oY0az+ev<4 zg`f$8Q7ScTRT!tgO_`=t2tWpQ2O$9ooz&9!4kwipO_x;TMgS6Uo2?iRu7bQHL8PNS z{Y=jg?MX~qdxPcFWtNL<0}e5c6AIgV+_}T(!wA3dj0e1$wduyILA}}vqF4$@`fQ&9 zVa70G$b^Fc2I!6hkmbn}%qA>D9272TutFf}*PSIeXz`2dUpSnbw47K!!5CT4n01WrkAKHC>Bl`u`4n6e;WCP!0p zw@CN1+z7l)O%m+P7Yp5Hu%5`0#>}%W86$qVN{ z+WOs|*C;yOI^C*dJGd`2r%ID&cZuT0HIyj8)4J~9t!3&S(|L}>R!!&;Im^@&QD07;naRX*Hu=rkE1$K_|K?bA5E z1;x=-CvSdpe0mlhUJw7Afqxd^pFI522mjm; z|D1z=4%?vy`eb|I(GBoV0sg7NKlj2v_rO2*!9PX#XP+LOwKZiw0N|7-hEpgU&H)Nd zJxtk;(s)ppc_1>e9q0RJeGhJG)Mf{KSp7N=vI1W=2@xdg`ItL_%SS2Jyy}Ez9<8Zj z%A6Kl=_(_d#*_jgpFMZ(90#wkdyHA1J9kbMzLjs{V_X*;f{BdWAONo18VSx;IE*p? z4GvZ#?3d-HrJm%T1yN+OyTajY5PB<~51BNHHh@ucOGy5a7%0)5%-+&wPdZ$(w;e&I zXQ-*)2oUUHu3RlmHI?8X8QIgOBTn6>K~Hxy3q2TjX(%Yl8j+9is!@I64JO!4lKY13 zd`UrQ3lZ_KcR`xi5-(bwkhSdxF=%X(X3cyj#GHsjc!6#eS|o zd)5kiOdS*X>>1oomdJ!;4*3J@j72jR)Ip#eHvkG{wnbssvuCe2@(~!4ldeD4Ub@Sz zDZP;PpS7eXU0KgnD~|~>Hu9LwJ#f?s)vcz_~ z2T5^>aAwN>A|eGwg=Y|_j=^_Jr|3kZT4{?Y7cKiMYo|HFen?K6yRkayW6MBqYRDqy z&DW{K?*$1_&5NQS#0$lZj3^TYR0^7xMQk{ch=V{h0v}J^>Z_Sz2^ti2jzzG%ERYQ- z?B<#1o1!518*j=!alI&)N@9Qsu!-KYXPt#SQi+l5Sw(cFggh}nKSLHc3c|Bq9giAG zK3NpmYx$V`S<|4vmpT?9@*1uWM>h;qWUs}jr*Wu3j?vMa!=vQ;yOuGgGvx^|C1I>F zB#ayG(%F`?;+}0$RclP1zP9Crk$V;^x=lIZT0PkCZ>=zKr1~XD06et*m#&_GT|3%S zQxI{Hl~#MG z;eLMDoVV#N9_@o-xU<;E%Xw4OQ|HL zPQP=`?=+mSS*SIF+FC*YB>A2fS&WbU)sg4dTw-pzNDOv|wMOcYWxQzZZ&Ym3-i^H` zy_-FYWg(#O{gNw!r6_2)FhyQl&;=KYj%2_$#G;_3Q0Gk z`Aj)2krZrYLp`${n)&R4rB@oSEhxt)X0ThY=`5RP?I@?@ovOf@kU2H68^zitANT9h zUtyLydrCz0dY=5VlwI=*&aRm^i}mOdw@>NXDP+?;^9sf%uI$Y!6v)3CM-$AfB0Q#O zG^F_2BUQ;%JqP1QITy1rtbG}L#M~L|i~ZbYMa9}7*FkqF@;PX>55o`mH3!WwRf@Zr zccb{A=mnVL0EI)gQUUGU9NXv-*rnvaaS+9!08bokcVQ{m@W!3A$F;^)#? zE!#uFp7~rltNFR6N9q+Vbsn@TvgnwyoUu49I@pxYaosj+pQt28e5lS9LYAy4#j}#Z zWd&dU&ORZ&+X7qTjn?jY4?I?Q3IqqX>~ol#HU7RlMA(Cnt_ispcFesv4L)p`mj{^e ztv+yWOOJ@Wqk?$KURZ&#oVtd2O17kV{3<&Uh64Dds9|OCEEO4k{|jXHzhPOT@%EJStp@B-NG7JrG zbC)77cE`|ugv!1vUcA~~D%OJLz>@23y6f)0GH`2e27;dshOM zT=j(qn^{D5v~Coq#bc-}3p6h*dN&x(BA zU3S`y7}9#-hdyXU%?67iHwZ(*VhCIfZdfXf;s0g(h0$DI;s|QG?q#Sbazmn^iVo+4 z7Uc3c4b^rG)HW{SXW(~C9D-RKh6B6_DN(1wsW_DOULh^q*OJn5@cx z@l^EH?VwlO*P3sN?9?XP1DcWH&VeWwDSZ5|MO3?oPMR$CgrzT+CAZpO=UO7^-jxAt_O4&- z=w3fMBbkqm7Xa5>w8xYpPLDVwQy0t;B7tHy9*uCk=O9(OoxT=`nZxbneH zSgbu`=B|3+k+gyNt&VZ|_Y3FBHc+^1$a*zgqiJyI7dt@Hk5ZN%I5jOjW@@ISnD??~ z<1HIo*u@&i{qUn7#G)Yiu@_TfpGhP->ZCY$TD{y=m#%h84aC@PC`~=!TcL{$4DAHC zq`YbZbAI%8-tJ-p;@)zHXm~**1A*`Q`l?4A?9tmAk6;+%sS3S{Vo5+(B_UDGUs#2z zv4%z^V7;l4O{pp;smr1jHxyi~2^z};x0S}LZqr(&>TX1sZES^KN%#!l$zjU}~Lx zm=|S2I~imrrqbC<0umWtV^Ad1G}DoG0E_HJFPx3rokAm5m!VSe~gDeQ9cHA4(Dvuzky!ZOnXDm*F%a-HML zQ$KX%mFx|PnY8oGNz@>7MXApD{N$w`_v;!jxTECrQ;m9JhAAyf^Bu1Y-dIY0b6Hqp->>0FjBQL42L+fPZSOCt^w2yg*mLwYj!5 zG@Jp()__}g;Y}HZ#8m?NP~p7YQ3%?iX%nQw(~v~OX+3^pQ!E$@v7k3wm&4{ZPf#0CDwH8`V7<=HN0SnNGhk})!p6+L`o4hIjh~=ZGOHhfZ z%YG5M%k2nEYGA-MC~}1*7i2OMTffX$aKJ=i!d~7|a>HPRRnu>3A^bTGb|q8jr3zzVCweqU%tkIzM{_Ux6KomJ`=jxjmd;gId}t z@WOr#A{r)3ev;dQaE;s<=b{*{XFG@fnsbneTZrATc@7Q$13(e_C5X-N7~Zm&8o%k( zY;kIG`qZpwA{69L!XQ>f9HuWLINU=0j94r}L z;F`Q(4sJ147Zhx4Y!r>)8D20~sJrU}(6W~kTR15<60Oi(_RcHV=B8#u_Q;xM&tv2n zW|$y+jG|G9p+F23e6Eb!deVCVWJ*B`K z(?{ngPfgFkAHBVLuR(216x>Wn2k8nK>nHv8l;?Y3%Y#-m7dvAyqSMIm|x7fwW8zncyQi)Fh5 zBTLZDt*cOgwn>r$ZK)`Pe#&WzzrMmcyPTg)nT3yg>yzEKs0 zGO7MjGk}++8Bg;esLya2FzBl!u(j%s-U~4Y$#{*&z`|Zs`J&x|O)0UQ6``X+vjxF8 zP#L#ay>*|Zn#Lb zw$^S%D9CA&;5rJOO@I)*Sy=dMCWs;r?qgLMw-^|tupr)_46pWMXamY1y60mEHU+pl zDF7&gQ920Mhguzm`BZ3%YBzX3=aJ}_RorEa=7Ehl@By$GEP$p)DorGEG(#{g7p;wI zzb3Z`laFp>7$M5uBNBrVKwXnN*Z3KfHIW-cPA5cH(XaMny6{(zA6ns$!>q71MRJ)9 zMinDI2b|49*f}ZJ`-SJX+A)YyjkI&9T7y;73$}@e2NG1tE9IpeGw_Ti5c(=q>ZR@v z{WjSs4zm#PW6oecRvQ|+;R#WCA5BONDX!Dat^*ZOK?ULZW;==@nCA%4C$ZEN?@UzT zRM*l>>*##JfND407Z?0Vv{Ms3#DTbu1CDGXU8f-d-ers@vi6(sB0@}v$R(+WEKm@} ziqHr*P%wLLGZI;&^CCT>KCMjxZ$n0ww_-O4qgu+_un!|~5BJO?9W?%=uE0D7xO#iV zj2kWoVN=k#4h9inCTanL6E#QJi|Jk$aum>Fp*jjiAWcZIEXkkx+e*RO?}t+=}B%Io?xxe>mtn{Tz=y#;g^4w{@>RpE&P6-nTj6l`W-A)W(0 zb&VNbL)!9yoL*32@Ir1%21Eg&77Rf^{%B@#!Q&J@q!!DyI>aPeTW0KN*?Pqs9-Pw3 z=BV&u;k#}f&XmH=ch9#PUd@Xktp$r(!S%Ut=+p-vl7zz^n}H{C#L}lS&;}Y#&<5iK z;ux&4EJ{@4(10l721z)v>+=CE_6k<`nqSSY&fq-{bZIt)45=sH zON*B4D}86+ZSE!jB5K!aZWK{{OkhcvLIZjzYG~BLp84FS+P5hy&H3@nH?0BT5HV%ka^WpuR~Kh}~q|z)5Zh87DWB zHpsQ7TXpn3>V^-g@6n`MVm0G&45~MK>hXjqkwF}Yb2%F)=%)iSV{ZJ$iTOLm1l&4? zkyOXu1Rv|V7qp|sraU>VIwGn^N+oj+8iHpoXvZ_5D@Lrl+2J8p&T~U}$j>NYFP}d% z5X0#5oUvk4>FG>H(8gk5JT2xHLcB);fpc_ELaW#KHx;5f2}k-;#jj%>rHbjkV)K(R|;FP}swxS+IJ(Tgk#Whp|0 zWK$1hkuz&4kzV7Vnjlokv8p-jL2g}OTl^DlSzuiJx3N_T5=<3=Lt#}@U+%J|GCi4Z zA41&~ue2(1J{Lv&|qh6ZWOBNn@GEz-qZMb}pkYemWd;8(uBkKdGqF3DL`QV>+YaT`hmK?|q4}4^@ z3_Frf2hyq{i%KyFcncevIGFh`GAs=mPIz>eIC54na#!xEHy`YbBBWx*Z45gZByrB# zk-+}U_}oRWz+sO&pu;HljM&XciHpZx@b6{ zL?r3Nk_NWzxnfb96;92B#(fIyrTO z4`39NNQg<{i4QLlj@SsoH3zRL#LW!b!EiVg%N5+xL8I=5(j`Rv3wSBC?_9fS}t zRWK)^7FCfg74d%tyX&M0$@&q`+^3`k&KU;F&VU6hKFlFFXP@Ccw>RQ2Hx-UztnIcG zP0-7O#&`@y+&Ft`YP*>jV_f9v^vWFq1=6e?O)@Dhy#@q28HQPs<=tLVNjO`-M(i7N z>$ZL|h_Kww=9Uz~$samwa&93Fz#VcBAf}Y*?U8uoNp_hLl7et6K?G4v2}_Kc&c`Z+ zsp}hXq7F)x5^_6xsJrWKBWU5lrmgsK8fLBDc7ap7-QKohueg=;e>~rT>53lMe<<2H zImXVKK@51y$k+%1wGv)Li^05!oc(Q`(}d}zW?~sgoix&bm#A;f7DaWpORi2wB!PCF zg`M3IfnGpMwNoNBuB{d@bB@M{gzJM+1;Hb@1duMSgI%u9JEYQ&!>?;Rz%oFR5EM zWF%(*v2udRoC-rhn3it{4914MV>j#=TcEpOJ|(Fnp|gQm@G7K($L8q96FfGjl$6lf zpp#lMI;h{IQ&vW=b$8vXxs)p9*LgMM{nfIA0U15QQ!p}mWOhRW1Y)Z5ZnFiN60Cm$aaM=VUbSe=rjCI7eK#ZHdy|MBZ@jDgdCHC4B2FZ3M)8 zM@Qq}OX7aIcZ41%vmaEdNdo}ai2zR_%v*s99%Xi}%wUG4H1Uoh%0)q(Qzf4DV+u)mpl-FN0T5qP>XXJZ#wSAGwr2GzPN-0;7og| z;ngNv%JddF`I{GzdxKq{P9Ai*_6oSi^$Ny}a|?QWckNRLoFK&84G@11nOf;$!QmB)M>2Hcw=UIA;odMcWR zjG+182rD`%7fpCPCd%tM@Ee1ZIc;E6R#b;`;8m8HxN1xwN2#jS%EppGVtwK*XJF}**WP^?`BIF%xj#hn3w84EJwCxPV*0y^4QQ#Sm4Kx?gLc>@! znPL(oJI2?I8o2%l$h!tq;@X5FY;l0vqeYmA?<7x|4lGeDLA1!CA6+Fxs@4lUo?WfwB7VC?x3MaV@5Z3}!rkuPx(7FX>-8kbU}gp=smShV(l2#FH*bstzLZ*X(f!lu z+Gt9mI~ofNUB_|c&i9%1bUWgh*z%SI43TQs+1l8nk7h&^C$*Tf)>-uK=Hh%l^G%3N&%WZhy@&#GwKI=xwZm2rxo|$zraLGzOOY@5 zoftj=X^5p15ywG*R_H>w8LNM&@zYhp?pr2_BosI-d#+P{e>|Bdi@RZhQ@gbiI&~va z1EWro4Xzgx>}~KWjQ8n(^B53hw2FI)E)B!mal#Q$5(*8nY;mM0<+>8 zo1CWW7zZ49$u)r+D`Ih;ZkQd1d}*g4LKhEq;Q=fvAmP@{sDLVmirI4k+)~v^xxl1k zPO-`++C4%hm$B@8JwWEp$%`;;EY8E(J^(4_8u@TLW4XkRHYlNtdyXsPIG}PzZ8uRf zV>4)nl7LkGjOBI+ZOw^m)UukQ@`|j9nLbC7=GLiNb3e+sxb%j}zrh72tz>H%6TTmI z^6&|ru3Jj_g4l{7-VjkS|0UP;4JvAE%HGJ`herwIDI@R&0xc_rEtw*v@Q})^Qmj(i z8R@g4#L8_aWoQ996_W)K&or^#%q!GVo64%18mk-jDPR-dP{4u)EXwjF%(c}9sX2bl z#oa?bRjQ}Lds;hIAi@(E@_lll2o_^GC%P z(t4##Vrjdl(bUBlcE+YtIcP5*OR{Hfaa~!3!9B6rjKz`JdsXf{nt{9ShMRb&Iq-1u1{$`Q>H6vyD}iLhc*{X2`cceMjemSf z!bu_BRxv1A3rY^qlb~usn(=ti(MHg&p9rGZt&@u<-alSz;WKH{EA#02yPsEfW6WFdLBNaQ+u^Bxzbunq`IP4gT^fJg5N@G~PhL=@3C2R*KlxA!O>trj$PPB%EFORA)lZ9xvI&o)0 zBqy}Z@=6+Fotb2sRSZ?+?9B}y$u`X9HW)fYy#*2E9VyJzX zd+9E>CbQa#B0DiVdumq966%;eNu-Gd^NdWACP_Ed#bgmE89;;?feIn-ERbbkE%uGI zaOlJMFn&?{M>eJD8*kVcFdp#g>>LSV8!Si=%qbh=nX_igt=sx^2vi+BFv+^ZeQpSdduo$Njo7hTI|@+hZRe==9=!(ptbZ+#NC5cvPb#$SN{vM&avWz>J=mVQ-MD z1w$mfIl65XQIK{R(SgBA)B8hp%(Ndt?a^VFi?!f-TAeB;>TZ&2?Nqx=K?&|9<9C{x z9(l|3ahAD!$22DvRmMbqCWzt!=_Y;RwByzx2rVH8)sXulj_8k^EwQ_ceb3$&! zo4AbM8EZFg&|1i}akEeMOQQ6#L{So?lt$X+;28ckL+xbE(({EQngN_#VFm*03_%27 zHPTOD`TsbmhaNS!feNTpg0IE#PE``AvsF^{DLPhwI_;p;ol^9(q=;L{ZXp0c3)`jg zbx`qiIYn3HVX{G2;DJADYe&662AB|?OY@X^fFnLoO zs>vwO_`w3oy%%jSLS1EaHP8mb6{=b(k;;(ZxQk(d>fIQxdSM-nhJN%&!L~AqO?p<)n0p()ANTzYv16&uUbZ!jBqTrRpqO)`&h{^m% z7ijFZ2BkjKsYuhVNW6|Zfppr^u1?HbRFi22TIwyA;H`*9BwK?3iLIhcrINJ&5uM)%q?8wSZZZ|wVNH@e{TRbH zYvND}7*GOBvQ;PILTWOQ4`nHmYG0QI{jwKu7z2mbdgM6)Yl|BmPVQiEjD_EXEJk-w z1AGkC}v+%eJmO}7qR74^U#Ke^2HQs&M zRORWJ@4xYq%;Pfz(-@nXl22@{i!ak@t-79tCJ%CweFb5=<&>idql_f9@Mo(1?4ER|nMF&^`7hMvt3ZoMf|=rEe~3(86&hy7B*ij5DNxN!(@ zixYgJUqGGjDt8CUAMfnUW3QFF^@(z~j!zYC+<^0nC%q_+%>DYV5Bw|c*Xr1}alif~ z@7K%C{rV`oJ#5^>Pq1~*J*#(L7}elXl3Sg6fcGRQZIIc9uzP|<=PC(&rRJEBC%F5C z*Tmc^U{Ra~vh0QK2He=rHF^pSm=E-#lp>L@^@&QUG+L;XDkB7mID`!6IrwieY#*lD zrqGV7-A4-2ekp{jqs8(8cx5$?ThZ9SKo~?t*~36Rs0}P{6aWqaqSypq99a>-hELtB zQg}Kqk(Eq|YJfqR*jYFyq1`?704^Dz2jEYF0^fdhzp?-l$^HJ8u& zv^yOnh;(%3v(y)t5CVh`1fja@fJ$Ov=oVZL;=Y4$ucO;=Hmk#>QWLIHJ6|2Ps)N#+ z!fA9%0C5d_d-n8hbULJ%8KV#h^_Ul8ANj0}>iPhrx2S7$`BwCJ6HP~!bw!aKUI9g8wtSEhskYHml} z5bmgP8WBk#ZTiC#4`r@Cuu09Og!dr1?i5@qq+8wS#iQD|hVJfUurd>RK9wkx?@qh%loPFSRb1|!e;l!(Ayl3WYHRqj zG5H%kzkbYZcumuVLfZr@kpXLuM7C6}3=R#CjP5^B92*!va`f25jmJ++-gNWHsp(TQ zx6IDXpT70B+wXX;vsA0Q%PXtiU2Bb|AGDqqMsa(698R^K{yfNVz0Bh`!r|%xPSNDRhAt=}_U4V|~)^3k7_f+A5Nr@O)qxbvMG> z+`PM8q1T`ee9Vj8unNjIv6yP|nOp!-AnCU`;U)24a%O#qOO&{g$lr5c zVwlO9^^vWf1IK7XSzA_FaMKfn$DG(n`(3I(IjIow53KhIu_c$490Ge!<+03V@r507 zSc&;=TsCdc?mTw8ZIr@gL9T$6!j~;83WeL2x8%1Bxm-2+Y|C{OWvefVqx;>li#rG( zo4F9Mtt2TJ68s`#!erZtiQB&C?Z!RE^}pOY%Ca*em(+%px`R_)6y;K7h;p8fY`Iul zfe0=o+#gz$_~7jC5G6R~?!^c%KCw6->dc+=eAkd8icRp2R;s7u(&WH_R&d!8Igswj z0;Lp_`scgS1c9|XKP+P z%=Q`l+0HqW>^hC{GgFYm!UU|zCgmrLi0dtdF%Pac8q0=`{7UA2q_8UtOAaCdxL;)N zJX0zhSiGm)KX~85LUAX5xj9Iy@m@uw)tKs3AHX(<~kw9hM$oL%!^_G+D`EO1hs#+AZ>fZ4qv@ zcCt~P$EFKV*-nuUO>LPzT?i280zl;e!bJf@4`0!^6*(Mw5fs=nBB$+Rk*6nz#9*aQ zm1Cu%^ zu_NiwDcn6?c<$o$V?bf_$JoL`aq$LCbAuOy=E{}*_N0g&A5Nkh=_H_sp6WVRUao+m zyOA`)8!-vbBrY3^KpJ}@C9T|D98y|XC=&IQ3I_^{HvnT}(z>V8e_uMw+B5K4bKNQM zyz6imUBJ}MoEy2cxWXMGegfOb?-XTSZ>;r`elydBla9f*V zX#0TI0+^(l7;3Dvzrn?HVXy zJR&CWPz+-QzguWAq#<+VPR-ojw(BGR4jZ@YpbzoZ-I^^bj6alHcjRH*x?Rz{+s(T} zyqR=SBahe72fr(676;v!Y*Ly5U>(w|GYl<1-Q^sdSlEfS zVkkHCVb!Cmq_ZU^gSIIq^~M3eCvF?~l4R`({BDO~_Qk~kz_J@e!=~5*)l4K4VW_EN zCxS;)Rf2Lgd$DG?wLbJ8fpT}sWwu0TLJ!+L<#uIA|2NU@PEmc4X;&vMCgX{~6pWw{ zhd&H9kQI4K(&%)+8arI+w|$~qDwW6&+XoG;t_lU%#879kTc6MoFb&m<-Cl$slDF%C z0xaFT0F84S7&sO~eGr3yqk?K@tKk0bvNm;kS4D)=Ts@6$a-wVHmOIZdS){ zJAU@$D)9me!CjIQrh+Sb7j?f4~;9bad~iL_d^fL)I$tW4%B50ys8TLhoS~u0 z;X|P)R}SN|{iRB!R4VNs85~(29U2`Tt&F&p`ry$1Qe}UsR2qVJhYs%^0)_8Gp%|8xX3x%?J|a5` zh9_5!Hp&CXN6s%bM(!GoW}KO!=T6@-JK^4Os``((t*29S9iStM^8>p zOwSv`of*Jl!^=+19oX?O=`~KdL9iZ>wZQ+pWZX}}BW+C$KcB?~EeB3$k3vfmpo|>|ciXIWZ$z>cnEB9wruUW$L z$W;>0k2UaIDQvh)ZI2Or2^__E%X55ZI}%6nX3{q%BXdo&r-BcKUfG`Y~qFfEsg2Z{%Zm4V8TSaD)^ z!`YO-mE|}UHO^A#)mL0hMTah-H)}BYTn@Js0#%vd@EerTUa#}t{Gy(M0#w2Yr9zIRqZTDCS6|k zYBYk3Y6#znahTewH;UxAB^cMi>sqS1dpYoMQOpEk40#qCcsbbV zV>4oCXiz-c03bi!^xeBX=eFbGmeZ3*Mbm3~wQ#dQIb*2s5C^rOQEk^-L{C8& zS78K(31|#ni~|X|t6;Cduh1Z>qGl>Qzo1d*LK3zjjgjO`PR!5G%!vcZ$=v2HiPMw2 z0zIx7pks%-gB?KF0&=Ra3an0D01iB_STv;wJSMu5{IKmQP5!otBWF*~P0X^W!ZQ&D zBipv^%=p|Kx4kac>w2=k2s(uu&$akIkH#oSx^d%cbHV{$IH?HZ(LSDfwjJP|;W7+G_hi z5k7M?*y^1^$>3?mCRIGj6gB*+Sm^1LHu71+*>pog5Y+>l#}1f+jTe%NoEf61o6wRo z#v0+t>Cx;<@*TQ4H~CTv4i?B)=2nAtqb{P=U}FrL$L*-fXI-;BJpUb-5to$pShBm?wK+B!!%k~H@ zGY67lj0g#ZR-p#)X|*|QoO3_`W2*Fl`_sv8h+)d8o~;vo<)#jtD3a?GBd-ks@kmf}p_ zn^LhDn*qRH zXtb|FYY zS(t+HmAPXm5P!*Z6#vd889ds5)fArA3gL|KW5CEWdjWa){>$;W721}kW%sc5O6v#p z0pC&4hizU2L4=iNWDMH0p=ELv!xFcB-)&$5DyAQ#l7L?X9dVT6y#m>g__ARogw0w?=?AQXEBr~r1b+{ z&hMxyCUj8WIJlnfWXm2@EzoTj%{cL@$g2KP8H1N7t#lGxd%{pL&|6vU{BfyWz&!4rED_2orPPE z&3V3K;`o0ZCLI6r);I<)C$|P^^wfN>s9wOQrx#66qR&D>OnGZzFz>CYauOmhT~cFW zz0%jyE1)bzp)^t$EQv~Gth9fuTT-5j zu-wQ^CcdEcXRtP*ctE}C2aCqBPB_JjoAhYl$ByT_q2S)2l#6kt9NfGVs$PnMZTIkW1EZPvPPPZ3C-Q7ZOE-qDD@p(WoMNIQ8}jEfXkQ!Q4|2z&wq0lio*$DjkzEwa zq3b4CnL6q$yE`mObjq2|h(Y?Hf(>jEKm#K-pFNG|a8J)28AI1PWl`i+Ujw3C8rnZR zI)dk|#ncgmpfB48hvzw*Za3XjC!hLnX|I=ioeC+pmkIc8qI_ z^LOh-abplR!5?Z51b!I*Ywo5vGZ4FB6E4vj z@O=0|W{3@z7UkP`?jD|1MY&SO(kArR{sRU^;X^A1H4vP*P!B;#2h^hPtq^TSvD>Ty zu%h8Cxs573<3UtO`@zWg<>J!>eP~MQl)-Owp%3`T73L-4b)Xt|{i2PegHkptfDBWb z5P4beBs!fAfcjE;yN|Y9xhRz0&Siai5`tA(IGWjNQ^M59nG=gBXooeT+=LR~H4~Nr z?5;G!ApJeKC%zTB>&K?&L>AlXm6gArNvf-mhHWakN>^oYQD4QJmMl1oXJ#jEJ$r0= zF1tuB;}mv4T!$Hy#gr`mW4>^qP|eMsnjJqru`N)5h52Ty4x$_pgnQ0}1nx;9f-&}7 z0*~Cog#wMJoS&LGHaXiJaG>lR8CeGPvDvqWmUTbEW=c2?MBCeAOeoNhPi&6@b1^ze z(LI$8uk0zK8>8vACY4F12m&stBzNQ5D`XL@{(G%~x*uU~Joz-DYF4(%+PXS513e(0 zg^d-uKrVRi-I!2qP$DT=xGg~$6C{TzUE7M3S;bC?#>~OB7DDf(KthcaFncyI8K;QP zopfS`M$yWjEElMZZv5O!Jm(UkbxVDYM%?!}i(G z@mJjFEUQArFsh|?zZ)LCB^38}&aBmLG|~n|Tn&)ms69C%b|L-T==FkrtVD~BgbItlm_q@30mEppsGZb$XpvV2 zYTX4TnXX-?R4&xY;VKfmdDCe$Hv3GhX;z_7#~x_fUl6ukcVZVZ!m8P!qbD|}SC>vj z2P%UD6Pwe=R@zgy-*kI@W%Xoba`5!#-M7zdgyYk(|jnlnEy0`jkuhF-9te%lj)O;WQe-hFe!H zz%f}WmIg|q<%W?L#jYP0)?BycG`w}US}t`bJ4kCP6$b|fE8Xw{VcEiNXREVARa>2>nDUj_vyF0D%uF|_xJJ?NrcS;AlNbpW;t#WO* z&+txZej$n0Y27JkcAsgT)}2ZM-b<==T8AndcrUruDIGqfiM=V~T~KB(^=GB_nvwL* z6CNo5?BYy7T5E;>Z4U*cw0^iV+tWZ$1isVM_OwnES??ydJ*^{!&K)PWr}fg2-QLqH zhKu6Z^jyz9(xn$V8(<5bk%lBVQP_}NJSbn1HYgM(R3~a9ETSarFE)w@a1!Ke9+!0wzCl6-@s-eKq)+?q@%}(&y9=xJngm=9HM#!3Nhgeb{<#y7}wvRC3D-_NKPB zR^`>ZU~Z97V!KdwzHa1EVu(y16|D`@DtQnRuAUT6goLl@HiK}puRx72_RL^~8 zfWZlCt2*Kmy5!)*f#8uByJ(dZz_vvf4S5J5l|;p9tX6z|i1BVch-ZRGoZ)I-&@@{l ze-CvAZW$r#(8J?=j@wW*E!tG;Zn$Xl>iTuFSL{P}3s&bDRndjsq@rM6gMEXv*-|?Z z5b`Cn5WKQY&ksTY+umcDU2-?ibnf`$x9v z4oV=p=295x z#6Ke@J`lPM*NNO{py9y99|Q6%>i|N;P6MD001(*#K2To7E!YPa5l{^~`3Kc+gBO62 zNXI+5N1D!>3klS2Ee^uXl*X{UcxNsm^c}1V4zAM>@pB)b_2oC$`D3E zZ{|QK_ z9W-gYWhqd@PGX}M&U6D1W0l`=^7T9$T zi{?Q;7Il{ERUuZ(K%nI*x4G5cB{c)(AW9b5J;t^q=YXHQhrZ5X3&YRwGqq3c6_3+L?`ltDwt^j^K(f*RCOM&V1G z(n2?7$?FsM>E|<$)Cy8=OxSw6Soa*m4^E-UB3KWu6N_>Q6Con#XrKjsBwEXjO|Y#y zjVfd^5KMY>&S?_U6SvO`xEyy*<~iwi^f$bwM?@{R1{aaYBY+}a4TJW|D&AM7(sLPL zOzB9DDk$$sI08};8ZPc&<4s_HU?8TOH~WkDzwUNT=Vs=>uAYhhX28;3^4*<-0q0i8 z{kp%4eYIOSs8k*Bu6FEpMMp}wqw7GHS*Y>0sHd;L2{E@CY=DoMmyY0wx&mUJzv>Es z?q7csIx{5Mc_OmY_VM5W^LmwLuDj}*lgEi)qeX#-&G@Rio?eqb(SfsGGXq*jFSdS& zNxSq4w?0 zo_=)fkyb~LmiSvwm8qHIU`S?3uUGk+w?a@L@I`hV=(MaKU>P3jO}%_u5Ux?m31({Q zm+1jWboB~engr$zT}vQ=ID%)6MLtVk3MsGL3dg>u=1+@kxw5~c2f^P(9&)B@t6dvH zS>`NoGJgrJ8WdBR^8d7KDL3v+h*)QsTDE!1YR18!U+%YbVb z;k8k6=I|b>O1h^aI0cNZrtrvD5{sxON8LM~RqE7s$e(prya-Co>QrC;rBE)?8KI&V z=y{`FnShxPkF*512x@qo-k1b7!W$~oD285)CwvQacYT0pOWSeEfJ2gybg9Tl!J;vb zKLP5K7{d%={oeS-3S0!>`XW0vG*lWI(lZ?2SOJzwWMNkSfdphe>Xz;4MJau;j!yzX z7*`i|9Iu(1AD^91IbdTq186|^r6ZUQYAXkO%qS~nbEp7oj<%2V|IwdF^V0E0KfxY> z)ND|+>>=}6mOe@e8smft*yhxIQDpJt5}xDNzvDRgOb(`>!GL`SI{>#t7@5B~#3F7e zjlVo%;$Z=4kGQnfO(Rj&To_Y}Vk3nRre^+?*AEtQ#ws#A@1^vMu z+aJ}_OS``pjZRoeIvcK?TC^WYT=n!OT5riaSW{pJfz%to_gRGU&U6%7SQJfz@vG^W z-dV3*C&JCU(IdO=!39B%6_(R*g@Y98+s`1M(yR;N>}5bTIRq1NmO3IDx~?Bb)$Ex` znKifAGea3SH)DeQZZd9qxQZ>@AFK4J9#G%p4^#7}dmwsMO_-lOGogFBC91+}kr{z= zuuW7j;K0VEu92J7-F5!6XC{bZC@N(3QFj}=>f@%GsEPwUH#I%zrd%5CxvA-#huilO12xgk*%mC>FP@Ip%6xSkWxA|)}Q=LGbSnqts%0y<4i z7U-FTaV}DgwVp|UO~sUZCIKQVI@~h}kmxvX&*U(-*nhaE=gf@jhKoIP#V`>}u!{;~ zJ>!(2G&ut_Bkki-&jjZ>0o^FItY=0gE!`}0mJmrmJd{^O5bP?is)ONe$+AfQ#>6rx z)W0q{mGT%#4c+2enCTC%r*o_wcMAI&syU=@W+>Z`M=k_sdY+$%A6*D1>GI#n7v|ZDIOH@SBJ*tR}0jJqTnl@+Jn|WiQ0OisHKwv2k z0RYac(Vc3{5+J0rV30$0S%A`gy2~vWSL&QyVFjYv@apmE7{!8YESeYq*!vBm2j4Wz zQxyur2hvs3Pb?W&5~L9qk=0XIGNfexs%mKA&(aBlW6RhBCY;l@{+1^Ere!n!TLF>#)>nlFusl82^={8G*i|4@@s6OwaL^B{E`!8ai91pHv9 zVPMkBR)HS^d=XqQM#LpqQ7Xs2L`X77mXtaOEwzOV#3Kz-vpP$n3<~#{7?->(U3%C{ zRjJNN?Xjv9JE#CQ+J0OBhRaHk{f3jrMcY+fDRZsZ0}12&zrs>`DJ;bcm8dLbq8MHpp}bD^G&2*133rhgt9K%owdSoriZY+)H67`b^HW`xC6M8jX**Z=LdRZSnV+~tQI$0XE6e2 zhSa|Qrxa5A?A0eQr1k+0sdcFqeU0h_!f9{3#*j$qn4(DJ#X7@ODUS@5MGwcvWh@?w zRL;zvy8R9@H!**DX3Ky)2S~B_od|rf8MH&Fw%~@o(*SphS93*P6(=1W?4xQL81&F# z)Ur)`b9`q(4B({{R z3)wL|X|-T}jadjc}nv5=OZaP|B$R6nSaB30;Etk5so*KU$+E==PG*^blU7uE< z_rZ}a!=Hf0DXzP2uS0Js4!v%#55nMSmo{{3Fod{Bxs{FivH4x}=2^4aD%Qvp!($EMzf}kNAi|NOORip>BAX13Xl^t->TM+C}n%8h9|l zn}mf{-qCI^!5l1~X}1?)I@*)k?X6)RbHDY5-rTj-W>6P5oHuH066?Dj?p-f-aKuB9 zHhx&Q*WU(BTZwrW|o{ z5aq||8R%~pJHu-a=qVS(AL&v%0L&HDdL*U1fA}Z@bCn;!hT9y@NWUl`H_rL%BOEM2$ z12A0kq|4yvOEQ^#SH^C`cjL!o9+Y2iO7?q6*M6bDOQ63es{Srpj$6Lc8&f;)5n#Lg(oE*+cVC^!=+2^O6+4Tf)w9XYXrfmDYOaER(ohNA zUJ2cvd92axRT~={g(zx3*Yf-6WcNFp{Z-KUle0$WmpLsDVRl;Ho?*TQx_ye-?Nv_8 zQ!w-QC<*gUP-0S74-E66OAP2A8M<)(%O(98=3)PGHIQ|*3dIVdCucIaU49DoOeTZd z}TyqJMVoxTsZ*cC!cx8BGY;$$w^wP}- zZkn8a-mwF>op27^c(QcUfzjh9k2RN1R^rw3v+jYl(%@8UZoGOq6#NY%2Y@I*jl)v8 zT)r%m;j7~=$z;j^OX*1f%T)kv7&)0t=CVrw+)FOW{QT_CN^(Rbki+=_PG16edLj!{Pv^& zXx}|6?|f1JbFcl``GfEM&#zs+@{&LQ)o(ubs{_w}-K$TZeB0Ug-n8)-t@0=ZZ_&2{d{QGwfJ^7aRR7Uded0oA4Wax%p zJX2crKKiFG{mds%PJii%FIoO6=j5gLe)Ek-u6gmxGS|N3x&QUM?^^rzx%a*GzFS`V z{*kp$e)stwYoC7O|IB^l>thqni>Dv=k578(3xEATz4~i!ds+GR``-Gdw1v4sEzG6n z!i+S=Ya?@W%frvxe}4If<2M{xn%)?=;f7=W)a^%SZrxZvUmG7^Uf!H>oFQD8Ct_XF zvrEp}bCk(gF2U+tqn>QPLO=6kU;5JeAAMx8?@^C_UT!7-#@@epQU8g_03T>_RG)t%X_{t{l;H7F#2ydAN+59^?&=&r*8Sse}2Hd@DFUq%X%`I64ZxH-5a0y=+{1-IdsL- zfAF%+5C3NP^!@+#lxxNx)BDK!hh8=F#m`6&oc!FcJ-swr{Ji_PvtIS3 ze{lCdEr0ix?|isD^fzn6<=Ulx_(N-7ys2=>SN{1OpL)WR-#ak!iiGzJXUvzVRu4{x?^D z;l;0f+V{`C;fhmBANt~t|4!}&r;D$9AQ=7hfBSsxiGS6+W#u(*e(%o|ul(!s^Iz_~ zVc-j2dDZc&fBx@&_NpU4cmD%7wfvtR|Eu47RPB4ebo5uJuXys=o1ga8 zOE2%O&&GY1ocN*Nesbj_FZ-ou{oQSMJ@L{{zQHNJ@KsO#pPA1*?W+5KZSv)xsRB!L z-tduo-*WQ3V{aaQ@0)-9FQ0z&itm3Rdhn5#z3wBQz2RH0|FwVl_4RS@{gqGt=FFih z-|_K3{Hu@s?f2fcGX2VrUAyx3-~ame&i&+PpYf4{_5c3vpQ!bI{6|~oUmE|&-+lSs zzyI+6{)>Bm?5n3X_SdfeFCRQPwEC%QM}PUzmz}D-<*o00Z1c@CUwO{lGt0kx|MH1{ z_+QLAAbAS7yj_q4*bo=`|e$Q*W6@~ci(sJ_5XUv`^fuxHlOzG z6Oa1*|N7kD{Qd7e`m0Bt^~D!H_+(o-nislhaOcNdCf=fUH$!M-Tl3zzkTA* z@89@t@WH;HzWssHQ@`|6ulw=#i{2pK^o;3`ADey7(Sbj1J?ojrzCQGuuldNA-}a%G z_I_(*=5b%X^tIpl@Bih)-$fw4aA5qY?;crs$20$Y@K0Wv|Hm)h>3(YE)^ERU{m#dT z2M*rz!LNVexAx5*_~JM2&;QeRex>!Qf4Tn^_k45wbx&A&>t~!JKmP;YnRw3kzxlk% zffs*z`nI!oti}7E^rFZ7@xbT*uKuDg|Ls%G|Ljv<_Di4o!i}TLgRg$#AHMYEFZ{DV z{pja!xn^$8nR)+Ytl zESEe|;^!D)OGk?2=|i3<=_s!)p2C(Tl1HB6ct=V{^Gw+^ZHr-k!ej(PCS}v493k1H zV#ksB-m7}`X#j(r<&pOGZlHUr-Zx)nzRY}?`Tos6{@CC9tuOtPue@>oS3dg9Us?a? z&<}j$kL-WGR;a!Enf8U7zxIcJ_5aBiztj8r_y6JY*kAeF$A11Fe&*-@!R6nayS(wt z=YIF~AO7^O{GILZ`**+RfBw?%b~_+ce%IbNzWLq%@~{2&&3kwL^h34(L!bG*pZYJ~{@VAOlRtL)Z=ao<`|g*kw|?nUFAV*BuJFU3 z|E*vA!Hxd6f5#Wf-}6QN$q)U(^Z)kCzpA`>`SqXqM;|+>{BI|I=6@pUcYgo>K)!J4 z%*8MN;;&u(zNc>JZ~ykwlMny9U--NFKmEP(KinyQ{kwk>#$f!j-)I-#%KJa|pMLEh zAN$m=k}qEwea`vj|M(lDU;MQGa#bTxxyihkj`E^Z)jx-Oru+ zlP`Yy-1q#GZ~W}>+sm_ma${xY;+Mv+KkL)1UmKk9;lj%It4m{_4+xM7?Y2`gR+9 zK0nTd4@8Y|rUEC`(U zK6?yT{={`w;B7@wKCImPi6Lb|>1ukm>$NZKns&>%`=W}W1urizsB=r|<#}~wL0w)} zmsSB-eCtGH0U*L6o>UYZ3eX>*-YHzXdqXFcd!uKSca>Ahz0r5?jVT{e?u`wdSMH4s zpHS|N{^Y+IQl3!m6;Ax}8#}-8-+pymxyPkasBTjqvQ5L``g07;hUfUi9#)j$0{{Jp zq71A2_fIH_GN)`z4=aGCLyGd*VHoZ3h@uRiQQk#m5}@~xq70+fv0kho?iF~YA;9Kg zsHiA%1?Uhf+~5_|M1>(7m0Sr%29-w9Gt{O&b_HZ3O$`D`Ths;ZAfqVCMLv_uilV&0 zf0yz3#BC?qg6Z1{y(k;_AhGWy~Wt{2W2O975R_qyM8jJ`#$ataU~ z!{P$C;RDnmp2I@V@aM4LPxIfP(TnoG$p;GHA5tDuK(s>booO(jl7s5}TmZXLtO!8< z!ZCl_?_CVaoO(Li%m_APy7~++GOYa4BZ~4b9%1sF=n>?)^Jf7G-W@xRRXnrzw6ZZR z3c!mK*k7+FkLe`#u0apDGKOu zLjavoMHw1Xl%aDBiHA@JKdUIC|Jmb;a$Zr!jz0_>@KN~l82o{yg>@K1p!a)ruPgdI z&-;Y$^GMkW*eGD7ko@lSP5rh-u|yP zFCp>13#H-RIAx|4Wt;u`)s7h5@aKk<3!|8_u(GxMsG<~3{Bi%yXPVy&_8(-nSpHdX%ZQc%$=N_N?hZIHmZC>WXilY1ga92f9KB6efWnTUnMNvM(e?O}z z%D>{jiJ~Y!$LDxKQIs#iOU|pF<7I$FT;#uj75p&lNs6L8FSQT63}_NQ6N;kz87~hg z_xt?!i;ALr6DFZ3%1f{oe4HOu6y3{O;MCT;C0s(Mfn?i zE@0IC1zx@aYYBt`uvZiXXcRtGz-JEUR~1G16(A079RB;fOkGiwEBto@L>S%|7>ECB z{`)`t`yoX+voZZqGz4G5zZ3ZP5k-0Dobo-&#x!v0VMV#nfIE%VT<#4`*Qw`~t8c0c z`NI5U>f<@_xTWd0sconWdGTc1b!;CV&E)fW;QWs+*K4cIMs2I!D6KR%Yvr|ar4GCL zNnZJRX%xpAZl6M}<13}5tu?vWC#7N!X-3zyU#54pZqK5SoCoSWyz)x1vbNbQu56Sm z&C*7(ye>B|FEwx+8-PlWMJmAst~WMoEB9LuE{&}eH%fB7k4ybM%E6d`&gs?KW~EW8 ztTeZ3k+)gJ9Rp5JyU*cvaKsIFbztT*JI7UZ&q=4&m@LnxlAZq^%XwNkygvIG^* zbC6Gp28&Y7Q+fw-GT(c`J8 zHV-Y0SGShd%gb>X!ColvH$M9D@G4yyRI^f*(Xzd5+NQq;U7TCmT)Ek-mtQY6*UKAa zgzu8k+BG1F|QkWE$gXG77lJwEUVOJ2<{;^&LQQN($c&R z$?D)V-}AHJY0&Q(5VZfo3&9h9jUdVH5dpP3R<T87R%7*|XI4-91d9JmqzQ z@+31ZU;>=@)}Lp$%7w>*Nc#Xe)WSUCu$WL*Q9zm>0$B#6&I^h%lu?u+kX1lN0WIM; z7d-J;>|$`}^0=am{>OXw?mfX@k0}ay=mfZGK%6mW7M9Zjt(Dk+L*>rNYPUeX|C z%MP_j3!(-fcA?jCe23g}`sgpVOIt+i^(>Jsqlb4b0iAhjE`mr?TCX>*Yd&o|?w$(w zWg30mH+M{bZ``2UTHo@sx=Rge`=(}L7XH|Q%@Zy!Lq?`!fqi``2qtb z3!tfmc`N{j{+ey5y;&yh;4*d z3f=)LmzFO6T5J^@?spMexAZjs=gLOe0;|mT$2gyiX$g5h<#Mf!S z#9dkqum#J#-!LX5-1U+xKuAQ^5i$#`X4ka&03$`h)f`v^#Vp>0ERc!$1{*i?K}<@R zykMG?IH-z{HKVfXVTDpLQ4layk^zZRkfJP%1)T@G1xU15d4E*KomZ81Xsk0BNrU#W z+@Y~FsJ1Vf&f%!lUE0Fd(-4)dP$+!_6Bl%_AV9{%o8Wy6{MZ2@F*!;lLdx0?3}C7F z3<7Ytew zZo-)yeJ3AI+sXg^5ZlRvPJ?ZnAmGq%ucft2>RljLsnzp{u0cE=IDNp*uHPn}MQLx6 zY*PvsWqXsvFtr|aAwmIejG4qu-|u(3>>fSHhi6gEwTaep`s~uh9^{79eH_MwM{G(B zkL;R$2MS!$Jkss!ofk>F5BK*$1X)Z>kP-p~GYNk^5TPMxH$vrySwJM4#Qu|?Qy232 z0|>jk0vY-^(;@^ATY8Y-Vhk~XbJ^Qw`yg`tyMMvg7}!CG_{a+$JwAvR98+=%%1ZFNPc8_qF@h=Q`V@jo{&LYVp4anN-iJY$K9n_l7 zzP7T~TrMtOEj6!hGK)gc=Y%xKV-Q)5S|>{a9%(z|M8_4d*@M!^W)<+EV<6!j#HB#> zgSvctLFMB(+$Z^497^zR#P9Y#%HKSigAmRfW)?HsIajwFJ8b0y`*)NT{ueK>0~h!P zD>hR!xgI&BTuo(#FN8`=TXU)3X;a5-Q{2K}u_R^~0Q2a)a3qZv)`tZzWcVRi;SJi# zf<4ASX|&%Xo@4dF;Tbs;;c2OnQ?l&lpycS5(}#rhc<-waW4*y_D|ONm|S< zdDQRsB5IDn^9aK_9GH=Hq=*_>63_#X(-kB$EDS<*@Q%^Sl@yu^%0_AA3ZtIjEhC64 zKp^-m!RY|?)oAZ2%nt^Ic&^6U_q#ncXdFs0JXX_?9S0C&--`>23o8B*a@ip15agn3 z4-kVQOagi0mqrHhL+W&wmC&_J=iM!X4F7&zU8CK8g<>989U<)>lgDQ0{cgHr(6F11Tr!fFNnrn28D@)I~# zdS^(0C7<)ND6BY0$_B@Shu|f*% z#wczf59+$0Ht1@0c1E3@of+p7MCG2Ff!MqlH@7s#bVPunN_@9ZkuLQ=hjj`O4~g~C ziNg@<@PW$5B~D`Jb6T&L(>2R%xiq^=TLHzMgh!gY7u}oxK37xzM!K4EEtQ;JNRx7< zKBc|+l=S%Mly*FAd+r@$3o7*>=uIQKMKvG|pSs%`4>xML&MxG7o+LnRkgggwW|0;Y z{!N!0=eEZ$r`GK7a-3xb(9nh!wMt6rhOD_U3d+g@JfgX>Fg+8a)?k4nG<&#(K`IPV zel(L{1an?uw@>W3DMSi%$ni{#W1{GF+iXjQH+I{MN+#gkrrD*w225dsGYUd{&23X( zB@;Ql@A*y__9Q1)%y?Q$SGAUY*eVcZI6psoxZ>&Hkw6j zMnJe+D;V~{jYhAU5RGh`xJPL3J8yv};>PD20NIK+D0Tjq%%hfGBksr}J zF34x0t!sK=152!w>(`(sC;=i~P-3nyjc4y88>J0VAQT&i6d}xwccm0=k$&%26XhT1tI=m3;W6W=2{_>&_o*2VSaQ0vs)o_uqsl=v02%wru;9dv# zY?L-s0w~1)4QQqkz`FM!mrdQ@VhAKb!ugru!w6VI$^sXlF68>2o5ReHIlFDzcXJ)T zYsqGy0NW#WUxDghNFJ#Ns1CjnNmT!cIKR?O+ulR*4Sq;M)Ny=pbeun#CO*9^a2`4n zSihn9u6b7^J=u2jJ_t;ZYNV^VriJM}JQG}WCJD7@TeF$H)}wmgrJ=kPqX+C`%CvJ5 z4ZtaC-xjC5@^LJiJ|a-;>;&J$A%q2EIKEKG&&v8i0>g#ua?oO9;{$YgQ01>aD2M^l zvUNtZJv)%!4=J+m%9)#+Tear$YO}Ft zepO&MuyHnbf#b^-+>3?gIpiz&mNfddO|40y5ksS0$0mM9^9f{?@Tezp?TG9Ja20uY z-Hg-AbNeb>^WB5LWN6RRok_gK1Cb>t$;6)v0 z($D)2yf|JUHT?R(Bfn#4@e#tysMsrk5JtsWH*3-{XqFj7WcS1&bl3_`2u~eQj2{rn z#bhT$`8f>XRP{!&S*%utBcc30B*lZZ`wM(?I)xUKn3vdbJf4oK^?yc~i449|Oz!ui z)`xJDb|iTsN2lDeG|JuMR(Gl6fO5mJfGO>Ioxl^|Og8LNjt$u@*linZr6&pVeKq0! zESY4{6hPgC)yy$y++JqT9cnqfF17t}Q+I53SPs5OgH^5+BY;o4kid$1q3UJ#`4KNT z8JS%;YYK2QYdLLas%L{6Rf;Fm$8DzxdLF3mpHKzXM|n)xScJ!hE!ksq2 zn!pGK-^AqvFdE_?uq48UUVHFJ7Uw_6(oUTmB$u96rX_vsBu`)t?Bv|?W@Tlo+-Me8 zR%)d>^SRa?+vuB-!^>k}(S!=m1{K!VH*YkTua=gtHCH!l&8_N6u~CXN00OY!qd@~t zMjKcyt(0oTMtKtj3(++MekE!?9j#d_t(EJIWL?=Q8lqV)oE7!L^HtH0?3aAfb@bbw z(Sj<$AmIpVsaP*H;ozxMVLsm+K4oc;q4R7PL2K1w<0`D7XbOCA z#e7E!%qKp8^hWVD82a*7tyZcunzhoaTcvs<0%_SrdUQI^K9Pw)BfKU$Fw4D9O1&SO zFU&(s+lA9&(ACWvb0kkei}R31Z;EloDc~GX^AS;#y90!rIv};IqD!^vc+IWLU5kEN8Vtwcr&g+u|}s{ zPm(V8QK4Az2;;vmunl0A3o2k-aO{%8@C80d=%ix)Mj7!qlNMzol%|rvVKlm+xk0r! zwX1~lgjhKs36;ROV=v-VrV>Gnv4V_y$}CJJ6ToAIy;)3z6%4uLzQq#UctGhGWvOH$ zN`~=44B$ZMClsF;+ecJ!OGfN9W5Ft!n82-Zb@_o{w#>|MEBwKMy6&)&mAReR)=t9# zCrDX z;oPS7?DWhmFtqVkZZw+A=N1MUv>Y-q2n}cF*<)zz2MHsv37rum!GrIpQ2q<27`ID} zrx?Qc>7;e&$-p`^Yg(3RgP4O;jg0Q-ob6N^XZsnUJ@dXK)&_mQ#(5jHwzH7@of^ck zEz_p#3L{>Nx-lLmosz{TBQdpu-T2eJTf|r+JZ}*25Yc0@;7mThaG-B(h#e}qZ~Wrq zC1Wo?eI6v(;!5*la=u3_PQOj5aJwrYo6r3fM+L4JLpSKTnGj)KA<88!<-vdmW3 z>}re^t2@2Dp62>{vWp%&xj0|F*|@q{*{UpU zt*(}8jJ(4NG8KlNY$)mnB$%cT*UvH1gYOi5_~leV<0IjY8ID-fCBY&b*wG2_bQ%Hv z%MpGkDqvtkrc;oY)iDl}+1sh{ni|%M|D{;!>~QMRB9wvmDLvf?F`dQ|>(^ zD6SC?CfUV&z7WDeB3Q^OpY3Y429bs~h(Rd|D@Gfr3^fL*s~jgH^t5(Yfgd+ z`QRPI?ljx3rqgDRx~5~Oq%h|Ju>4NH+p;y&qG-+m?y*Y^a0ds&gK76+Ke0`(1HkL| z5MG76N3?C9x|kx|>-2r_-yojZwlynpk`IGm_>?%qe}f?a-1*Kv5<-KsmAt{VznyCX`%SZWR&djM)`5+pAdrr~~q{8T}mo1K{!B|quu9op5d^!hE!)B$d%1EnX{t8C?X z9Ks;L)EKrpKXZ8z>W|e*E9H8;a=1T^pkW-mE<|YFBEzD;%t7qDHU^Z;Dz&??zDQz5l zt;DyqdyBcid0MiGr^C+KDqNnLmbyNU50Ad>pGn*H{}$i&`IyC~zX4`x@Gie?a+fu| z4_mEr5IrVe-++K-cThz%vSevaq&ACk&202@ts$HuWEy=yFmgb}!@^JxuemcJF>vRys} zn4Ep7BqKQ60ZdQ0HHB}cRiiu2R0DFs;!6icSi;?rh+RFDLjUv78(UYCK5ja`UgA! z0louz4_)R~Q;GEXP~O;~y6?DVH^+N|m;0cM{K^_2$)Fx+JMyb*!#?SsH_pzgR3fgKF+9j$Dxl$xc=b!c#$-i6=| z!_{^}3?9NP158hHdVUUe(k2*ZwO$x98*F_;foJG9mxBH!{~m`L^?<)25FPQp4--Z$IZbVh@R;?ZWtKKjO*Z_ z0+pUlsnm1L9nF_42K+(P9`M7Q?SC$v?WgA!n+n-}ILP1^U*2rDZ}}#Oy#SW6;PuhT z;-NIM_(z;9g7yVfY`c`QK+Y_SZJH$VL0K%l6;ccu&w*f|F?N^UwqqI8_2Ld{L2uEW z03ILG1dnFQcsN;Q5K-iN;u(2k`xT*oBEA7n0o4K(%fJqhl=9%<^*y$r)c@W zO!$W~?;XEG$%gZmX;~Usb^5k}Cc2m~$9n)LDoM?fT*cE)&?5Vv01DCo*C7rD9+r;# zbc*T183!KEnf_kW>2cW+k9?>OqN&=q@ifS$2D#|)3;wWL>ShV3eML%Dlf`5;(I*mi zUKxnT*hPXti1-c3=`+S>W+0;*B=`z8b(qXdzEFUt1$fF(l1)9#Lsw`YkcAEobyk3z zyjQ%CNfJ58j}F|lha<-}$6y9{3V^-@fz#hMq)55t$Vp{Jrl)}}FO1gfR}%$gKCoX> znJ5nc(gv@+2#JHr_BhYo@H>#Z;dcUUj;CfwKV*LvoQhl2Z38*v_yokaTEIjNVqQn5 z_(#$x{_lw`oIy=c{3`or(#ORz+Z}(G!e1hS`e6TV(26xB8w>3t7=P|Hk88eafU3PS}5qOQfNZ19j31WZ_ zv!33K(SuOI4odd=alJ$J+u#e~p{UJiCx|%s#CYGevOUf3s3d3F2E7~IXtDnY`Gh)1 zas|=}fUUmDu_BEKGK-67H4!o~pnc>0059M+M-fEr9~MEg zQLjdh9Zqh$W?S=VxUU=>+XSf?L6Mez99S)Tb6d4wk%D*?RBW;3LvPS56)YRBQek(ow6TGqwL=iQZH*=khW&aM-QZO zy~a-!G#8{=NT6b6eX~p9K*4F>DsP$t z85;lWQZ5-o3z>z*%LNtx1fsM!yM?!NbF(V`L1My|S+%*jIe0Ob^Yxy}=_u`W--y0W zQ8Q8*5u8W!lnEK+q(AwW0-I$bN8bFWhY~x6m5Tub6;}eZO`nGTuxN@F5u_~HTeN_b z#~?hY{puh^UnIDNdzOI%i~E*YR!6*V86wI{sVcs(XyX7dI|lwz3scjxQ*&8JEeQ#~ z0T##c&C%K2<7w<}n+r17wqSO3$&Y=_WI;LLc!?ggV6O|(NX4X+U>1@Ze?&o@fdR=N zdL|h3kq)Ueik->lFDEtMX)aSws~%5Vlu)Xfq#nVdfG`Cgp}x*Wf^PTUsj=TSgSv+CeNiC1z}CVJuvEK{H%)xWXIYgj^Cj! zAMBLd;v_9}u?_|Ki)wlY0_jcPL&*%Hdcw9u&cr5UADa*+J2w3(>Fy@xiV@TFCl>Pg zX@1ByA==E637)r6euUcp0Dq2&7$>qc*)0SJj=T2-odYx89Oyi#&x{zhC$h7Kuh_P4 z*q)FJcmgE+4)mqap#y@alPBHJgxss=bi0)17&IcR3*mEg*7al>>v~79E^J(|u64=M zw^FG`LTVxc0m|o^0e9KxkWv-xeo$lEw0sHyhePbNs0(v5&?nO* zQaElF29NY}WsY561Cx;H>I#e^Y;^@>gw0yx$^tJBL%?f)-pFLLhURt9$k%;VLFM=&3dif35gswe6#ALh+(H?o%+xwh7$PT38MSD-LtwIFG zR;}E)$*<@WF4@rd$+oL)YqoY-lGwt^k0&dOJLN>hkh={9$*RwX;wfuAU~vHh3)2fg zpe?8<0|IW-Rg~vKR>Zpy-*DL%&(|!^@8}%qsWgrxauM>*1xu3L040x4IA%cYM1za3 zDA_T+zGj(kF|$C-*C5V{7yx4;SJ$z@;{!NX>Nx`obHcw-VT!djfWZugBobT-y(ZB^ z;8yf@qhvX8pOv@)DZ<0DWCG6w#lavWxdhdQasphjCzb+8aQOi&gp55%dwT=3K%Z3P z`wfE#_$QY)R(Q4nysn8SCt!Cnj%dB!b&2R^g?ql5%XJ__nc?U`&Y*a}k|+TB(m3?8 zvLu3xpj|ol+!H+10B#l)Q3oQPidEg*D3&o*3{;g9mmJ^LEOw#gIp|}nwhlRM#5pFE zhD7c{TpE=J6%SJjuE&%UaYgLa=^<)CJvrM>q^D%0T2LosO~X>0l^AA@g?Z(8%x%D; zPVxufeh9kd!I4=(htad6U)qnc4J%htWh`>1ukFEZ9}H9cPzzIq{L~DfC4fHtpf)0+ zvCB){yo8a^Ns&hmx-5-o{{1Y5)fl0noxw zt%rr3I4cwl-}fOCaM0}h89&u`0h-*f%!Aeg~>AP0}}7~m8CEnnMj4l-^wM`QiEl&WJOaJSuT1^By$+&#iQ#i=RT9y z?G(?g2Lq8-OHQSE4E*a6)p*%h({cdRNWG4kJkG5wHS3MdT5+w^Y}~9O28|1}EzHUa z83z@15Xhh_OE4IzhMZ9}g8%6XnN(9op-9c7N+#6`m9p@1v&5BSXBe?_77N}&poyK# z;U(muswRrD$KvwCaWDtCnrqUq?>MfJpPHG$uEGjlDd&eD~orMe@nxEUgv;f{^RVI9ulL z3%-oPSqYqWBe6T|qI$5op-)l#`p1|Y$U2E#QqQtZrCQd~1u(vXC&LE^B}Cfe;6e|c<%Y{9U?i%SYOn!@s$2L@@WHfqK`IGW zSsEtcIUoeXP3;yKn@V7}bm`cOXGwH?o^nKH2dE8SZbGH zPxv~GgrZ4nLB4VFqL8xG-4@>u~e%rLeP5LB% z5Zz~gl<%|fonog*cfptPLh+mKf_`D%qhb(8-?~1Mwsn1md#;J*gUt&ew6X--7et?- zqpC+iL_s@bm>$ZYkR^{L*n`Myi?ZDg?h$37On3U!-NWnDF;`@KKVxg5`S*KdG+<-n zOB*5FkRQZhi$oG*J`)T1g?ZpU^ZVElqDMKRSB6lW^0I`ZM@TbaIsOVMz{BiEK58o*yc^`qJe7utEE2eOC%6uk`GJl9uCht%XX0ci(^?nafHuU1& z)^;2uH{Wqx@MrK{SRyx0Yf`G@SJ)bgZ^=;vWl1^gTezVENr~wrigUp+&B7|mN!NbF zsBE!NxUAwIk|Uw3E72Ps<`kH5U9WwHAE$RH$d8e?QH7)RzM~g zB)@+(ko<-sS-PGUXP?Q8YoH*1=#|p?`pwmHrCEjKk6wowb-dMi%f*PT(OcBA_O?x1 zrYzyEz0ZX|!j~(d;Y#k@p)15s@U0HMQ|Kz)E9=9l2*Zbq{7U@e=p^-QnjK!`#1hR5 znp#Z@xoFzleYU-ezK>*f7nKhtU%nbh3<+YwiL!iyk@U9NG%|~k z{lr3k5jNLFX>&~>{C%)HJbg6l-_}G%q}fVqmh)A2W>MfzbBQiclTJbL~IG~QNmy1 z^fvU$U?o1OcQn_d{*}JJz0hsVz5uMAy4R@-m)%}j0Ba14Gm%x64OO-zvL{gZ?8eRd ztLuRRjw8i!%}FCY6B(COO{mggHQ6`hGd)A{oz_9=(P;Z>o6TV@r zc*rV86j%mO8XiHHUaX7i1IT@Wv@wp)@lFOs$6#EAT4w{*1R)i4 zaEf(+52F&z3g^7VG|oFbK*^AD8L}DS-)U9rX?ll+OW>1TZes&RpUn!h5)bam@_c}% zZ98yN(z~Pg?%lgL4EI7ESXR04NGOXlWL;n$B4WXmp>gHiA)+YC8Rgxf3yLz7QIw(Q z6h(PnQIxZaGIU%~u*XqF8B;DQ%Gl75^6nT(lc9c!AH3qE1h>BiG|0?ym~G*Oh!Y$r zI$U}RRT~JGgR&Ob?p$w@Xl-iipbLT34l}ITCXGv5*lTQ$IAnma%qUce3CLl^)XrH> z+l>0lF__BISqi-Ibqdps60XX@hG%X39dm-ii2-+syc3km>j^52l!?$O+^iE)GnPwi zHP{u$lqij0`QUK%0L;U}1B5!vo!HgP0Z?Njz`ue}u(jB}wvflGVOa(cERX`=fZcOv zLwT984q-(Alqy{1B$z*c85lLUYU?Ur>l_=~gJJgA&wxc>8ZQJmFpz*T1)lM-W%*hK zI&ZY3(02iw1}p?f*RQ{S)ERD>xO0E$*+Iv+mlWCOZ)A_+>FS3!inVfaWvN*!R#rAQ zqNogQ4;w9czZnHn1GT$YIb}~AHd^2*EKV26-Hqa^xA#`xnRB|EHyYZFYsJ0mje6U& z=C3b$H!+JKZ$?lW?^Qngi}V`X`>p3fPk*VBBx zL)}Rx5=?q_x97WB&zSV~Jj-d@ZTafE=!qsAE{jvdLp60(0z_m6(2_X*K2%GF)Y73q z3Ww}6JP*~2yl}(wC?buoEC~}jEX$#q*>~DPG&xjD^4))@!o@>3f`?bi^=h%Pe6>_- zVy?k5BF=bNOumdSJmp^FCYnPH;L{S^&kD?ETMuB^6YJ%rTB)*8Z`Lat)#mc%#>Q5q z+_-sYP(kKCK`Nn_?;}C8H%i6E)lzMvSUq%;-zGJA>ZRNqd5Qf8zixMaz!>w0PFdj5LpP8Bb8Pw^)?6ny1- zRR(#R9I7FC{^5RfwqB~&%bS(^-H~J;8|EVPaJ{@zS}xX_ArFK#mw2B{QzHdN1?RS^ zaH$wxc~~#Met3eHY3fi5aPE3>{aWc}WCvn!02dNL>%%OE@K}8V?kC)0*Tx?Ax_-}) z-Dl2hJI>4Pu4Y;gd;@67Y6whcHDn*1v(Uy=N)>^2tcvUcG}6)#4;tGJ(z1rm}x5`O($P~&EOeRHj{21qz61gX&M zFoaIbU=Wx^(He5Rf=JQw356EX~6 zd63O27oG~|#>N=9TEWa1_kzgIq%ZzKP&vUS3l4tC%2KzwtG%_?)$ZoH$RDs<{FQ#* za8S1)<)%kC9aKLc z-crnEdKNs?9;6`l+N4)QW2~;3~(!4K9VDRuOpZ zd2b4o;G^Vjq2V0D=l4Zb@CnT}Dw!8Z z5PIY%2X#0{(8EvxNm^Q&jg?zfaZ4LOB(W_J0gyrgC;&50QfMs{^*O|t5YK#F7sN&O zLTXlt!w!H6dn6?D`18iPBw)v1g1Qoa#<=3P<3vUwd}v8a6X=K|0rf?N(xGlMj+Y^E z3*`U^37iRj41&=IT!MsT{Q;MVTHQH@eoMIoA))m`Sa4NHhRg{-c*_eVGb}B7+*#18eeuY43bc-jZ3hqQpWDZ2R*pkHzh|zLZm;&KyL44w zeEqdGu2+D%)KT=k_Y{sD6bd%1OO*FFg&#^JzY>;ZP)Za%q4^w`6P^qde?ZSd;?C$ITwKNu6a^t@kK3NP~L*6sb65)zZAqB>Z|s+tKjH4chV?2nE1@ zE%hzS>zIB#fqK~8U_%oa1jH?TVfhHVJrn?uGsVNY!Upkmikc)4L?v+mQX(SpB1xO4>3@4cHZg6P8?%+EdA&9J;f5dMwfbSIl zZ#C7D`*iwJ8k&m^wkIt7d35Bzn1=lSd4T-Tk3jr&{1ap zh7AsOl@rx9aL0o#hK-hd=68C78m7iBp~17#crt@wqxC82c(;(vQd@Tn({5jx*lMgU zOuz}7p2gH+KD{!rEFQpB>hMqK|Ir{Yv|K4SR+gH@+8Q334jV1m^E@${^fU>>MoT{F zOw>xINQl)qC8Z*T@r^HUR#wYv&6P49x%0D~aL+x4UUtBU4$f$BMl1umTJLwISeRcu zOpF?EI3B_x;>S*-p^e46hY@5aPyvpGbT03AdOD10Uy>(QkA*gRF@CjhnIp_rDr=k* zA;w+puHm@0X}77%s0DBHjQv9r8#sKA&NZJ)<9|!m5)I1P8rLAgLWN*x?%b% z;yav!vYSR4*O7a6ogI_nmaMsZQ>5%eRXK*VMTrJU-7QVWJHC3=3_RSC+BR zX0h*g$n;bmOKN?;Lv7#G`JE`X5mu?X&aS12zF9Oz@?jnmSgKxj+JK=q=yVQVj zXqG3uho#i$Jawvc>(nl7G5_#fM7kPyPA8%0Kru;#qKEQQWEPB{2c;n3e82ZhWlAf7 zoK+XdEM&qe zkyv8-WFuBV_=J*f$W1xaA*F-XrXCLiWB(Xa-X%{C$t(H+V=#zd48ZwM%bXNtlEY;& z7{aT5!%!h`uJ6*Wlv?OG{xcdRWIxI>{=j#Nc%JSq@oczl+0^l%S=Nv}zOU?a_w{Yt*|i`6G2d@6qdV|v+ws9a2{Y*TEX{|j!os}fip@@6u6<9OG!O-FW)9ED&dIDZCd_MB7=_ANFVs1i!FL-%pn?IoU& z0KP-Y)Ox1StY6{x-}iFyaY%VVVVev=X_jSq^c;(3!PA_29?7VS`FtTG zdxY^g&x5Nd7akE=cX6`pZ#em*bAT7pIKclbH~;`vaDc0D4=BIr4|8Ynivf8!BHv?K z6rOLkEPlgQv8%o1*rYxa3*PRUb~Je^Zzo;Q5;&krXcVPf7;1!aQvk-Pm0$F5xb;e- z&P8x|!9QA$IWWN$nQhxPX-F~J0P$NHTsv| z>pF&5hYaA)4r%TR@5$;q-krYb`wmh{pcSICtk4_JN~J6(R2@ewhhJGQuK0Z8B->lz zJD}iW-8;SyF3@lZD3C7X+l!F!_^vRT@=NQ}uZxiK*-_mxdmhaO!Cecu5+8l^Cbk0#0|h$3GRfD?Y}|k2vvpq z;UIXV5lmrWVMfJ2urM5zkzxt~#V`{#+YJ-@CL^3+NWwJ-K3TXMN0r`L4ik=9u938S z!a+NjIhUy%@bNXbO?{P2NUgC}!Ut3EfK?epW>UxTt{5y6iF_^7^Qlc;1QZ94W?9Z| zQ?ng=uM4-3LK-0cihl*Qfa&mOJxEicI~KTy$`B>#?SW|V{Go6O$Ua1KB>mqXNczVx zi={B*1sRNR#M z({yt7g3bQIy1<~0&Uh}RF`ln*5x`yu(zD!f+}qo5>wTEvocNAop#-lxwhi`rxFoCB zW0JezCb6BL%|NoXgzcqo{^_31_Chp&$^iHvUBsp9`OAyy-2CN*V5d&mi4TRVQm!L{ zHDailcrT%oN@6&}NjQP8vg_vn&KN~LBSdAoBaP)dzWh zWuiS{Q@`ch1wlV$RgL@QeCNC)m%(1AlGb>BY8^v;?xl&r% z!jLjvR8F*Wo}u>3m~#j&NX4@mcJYV^3{2^Pr5k6(guD;y!HZ5v(;uFmliCzfe!QTJ zfn$*|oMw%)e7I86at;L?#lyT{eZ2`0e6VXv#pUatu=qn^@oS}7!RQnOx{5%a*}Ji3v$F0-pZC^@%QD^{<*x-JVO zyu6G9#~0>j^O&XJv8$U~_0qLcsS0`d%aul{cD*Q%O3s)6B$|pC{)jI$U*d9alvc_` zw4+F?Ap{u5%JR4SsF=RO%Kv@3au>3&;DH7nGzfoGcy198R zje&(a*~ue2G=ND7j&_bm4O2|^!IMXEp+v02xllU7Vn7AZ(8GAUJm=iZDiG*}+zA2@ zfjM8mc|Z!24=OOfurMulvOJK0>xV8BC;5Z@>Ug?q_T)PJK~!V?A?|mPdS%5ibp1?f ztb_e70x|aw0`vLxeS@xHUYPFxJq2K2-!BUDy>y`j+PUdOgRy~ZSSa=%-QQFfAcp_w zvF3-F>XEwGf2xw2kbcdi(9*$nfx2FtQ%ij2=oXC^(<~Z4JN!^5hwI+p z7!q7(EOF1b;plxh!i0ZwpBf&~oiJ$NOf0PxKZZOggd3S>%5A&Ctzm%WHF#aP9~Y5> z^jL0vh`5b#SfOz=d;@!v8hiKu8CQ`*hj=4Y4i(^ibk>4>q}Zln8v0SgTyd`4r3NhQ zBElW@`~k=p$u)7`FgOCwIW!CovTa~P3Hw=W>t=p5;|B%Dr!z0?0ry}AJUEVu-Z{uedoO_J&&yR1)n;7zkqUVPoUg0NK7uq*smg zdh}IH&5sy&Q#E>(pvuo@7pm$iNfF;ZG>-E@Du(5Ky<5AA954b0$fwRz8+o?D-*-t4@3Yjzrw@1`H&gu{*4J0nv}9^-_y z?%TAMcKE^+NZFe%G^0FODZSQMUf_&DxyXPh**@rJ`#S8%!vkuEvv1pZa!)L@Qb`Y0Fs~Fo+pxZP+ z$^8e`OK#L}(=5I*q)KMknDDbq3u=cXxMl9lsmiO&}#16mhYClbLH$;$laR z5+n2fBP-2-NXgLaDWH7mvIdR~N4HnJlxDB^>-;v;phsb{s8ee@3rC35h&VcjzSX-O zQ}4h#xX9FF-qrjPIFIUmmy+$ijlq>3+C3n%B=I^Lq_LaC&`Yi5xSDV7P`od05*@L- zj!WaN9D>!y{I4-pC5ux66H2;Uhiv_j0%nqzDLmj zA%in${$(RvdSxq4Gr*52A|)x z2Lu|XVj@5gANz;IM-lrSJ4ihP{ry$_%Sq_grSBop%VZi-J`*4%wl1)8-Pz@6={jv!>vrLU367uW4z>NP;hHFMi33Ryf`Q=JCP#Ev-9CsoegDt^ zoD(aCNaqdoLzkK0aB!F0Ipphj$dR-C?Y)2vp54(Po4VeiS$Hm(<`^>x$t6druVWd8 zqeAie=ldiif*TItkbFov&O*iHNU-B5Xn>0P;Sgh6roC%YgSs7)x;Rpp`Y{;D(b;D< z4O9Q7z*K*GPoOFMCKmNQ$QwXBY8#~2_c{>GX>JS5gzN%)PTwWHj$>2e;AL&MeWyou zOifs~$hPZrk>SD>ZG9i|1@t|@de7|kEK0668dXx=YCwGuWeDU{r=Fice1Cgy%Iiq3 z6anfX$!#8zeF`XEqng*!eW$gaqyAN zYVgXX5#t0jsp6l(*^dN(H}Xg3FnZUzB-VcMo`igu6m>5Hb>Yg zp4_aKDmO|?wbxQizhh31+Pk#n-j(z6N!H(ZWnujdD@I&a@d~q3_4y_^EjLS*>oA3| zY-kA`Qot#ldB1`BWSOm8FqUAaO;I?0fGZsEokG`Q`&1OMZvqT1g}ddg+tl}|YlXdK zxBHeQsUG2Qk51^hG(!KUoX~@L3R>614!28N{8k9h+4gremlA_+n>ICws~M(4T&h!Z zClRtKIk+b0C+&mS$bM!vfjALr3&tBExWj@pjr< zTlXyFLfdL=Zj{$*#Rdx-Q{2GbC4B{s5RU6n{Eeyw`78rp}I$10H#rJ#FINEtu+~ z(TaHaYb&TSY_y^Z$=@D$5;UYNr^cCHl*qs3yN+$@UJf9XHChFUnQ~Yhos$;QIO!a} zDVi;bV55Bbn9LNi(jfShr-%W02`YxyK|40JeGkMe14JeYDJ5}AL^oZ%ZzePhiQn>0 z#W%kJO5(W(Cz)X<93R&^RKFc+7!a?{&RqmE`-FV{L1UT17$^pD=s`<_{4uW7aHtM2 zKnp(`cB}FI@CMF|Icrk+4#J;C*+A4ULn3;WP{IAhV?os_iBLXoH^SjmQrfEV7ZCzi z1@ee74&=RR;9ew?y?B~X>Nr6&WiC$lyt6EkNjO$irum?}(TbH~1di_$M+%Ez7sQPg zw8S^wM=C*im0=HVc<&6{@P;FKphq;z0;c=aYGWNzpfwHKYqGQjrrq9f3}!&=nH|TX z@`a-jLH8L^8*&=pl|@ahXEp`(u)$#yA!iOv-ltHlX72+=$)hiTS&k@Au|y$bbHj=< zHW$jChV3O^J#Fqaqj-hU#LLZ$Ow zc4Q-4Z`kk#aJ)2#CCTF=S*g@X72L1_+RDt$sB<$pU+<}g?TLGlvf_E)h&;bYR_M0Y zw|s7$a$MF8=!ltx{DLs~h<2joJ?wjmtTxuku4!4M4e34b5T1B&e(#xW5dL-Qa%&nL zzsN+|EXmBy&Zx7qIMlHDEgMWx)b@$rp`=A26N9}q%X@$@K zVwPm)FRSyHVWNXtwM<)T8ti_csW4kzyo*Ys%8y5-9tzVlYGHaN>?7r%^CGE33g=+= z0~?~I>yRT0W(L_FOxvgKwx&}^dF~UB`WS`*CPsv&OFdW_(}olESFnq)Icw!b91_X`} zujBMB12U?5)Q8zlXqF{95+h4+Mm19GB3Us#tz}V<*nW@bK%>Olvvp=%4R(5H9(+T< z!b(Za0c-1KotJmq@JXdnjlstDdrfGuiO}ECER{^;*)U_f-$k+tN&BelnI0|-#|?lH zKL-nBu&!fsn@S%%N+8n4w1iiCmP`nH3-xtQ+pNn0X9l>{JvoSFNm~K#Q(qaFoo-0! zNt)0`+d;tjKJ&}fb*FFpQ$35`o$_~bx}}+2DA1-pGk1$8x8bA)EaRHzQ)2q0LtQlE zk5|`AuQiv~i)Fms`WQ47?oPuGH2eGKzLQx*;XB;Df*f^_<|Y}P_hgz~4Mqtt#Ni%& z^O=Fo=g(r+&>!Kcte_9E^;9i-S4i*FBjB#&O!5ry2-c3{JN*0r(9N+mi`g=H>SB{4 zn&-Pz>mmceh4Q+Z>yyTHZ<49tjs=&IbfnPL(?*><&U&DPQl!jC5_3zM*@C>w-N^tzg^V-}ORi}x{m+i1!8K%}yv z>#t}WOUpw#qq$VGkbrx;Xy{IN&Blr{OBJS=^Qbg|t&dMQkor&a2k2b@W-~CwJQ5Ta zag}#M=h~A-D{w^^4t!(2#*TSMfA&<2;a=n^2TzVNjtt+xkx^+lX;UBaXF=xB5heY? zYDqQVV-??OVR{O4FN)PzOJ(aXgytKzLOFXI7Rpdt7Nu~cl!X+%fNCfC8_4~U+#ep6 z8ge|p?NWXOxNW=#qt9%bTJl?$7=^L{XE~U}9>JcH;7(;sK?Zj+P~CT2vTOPsVzh9( z@H9M5=8z+X=5<<*<{D(j^!l2`lL*JzJtFd8wZ`dz)WW$%s*c0VJV`x9Kpt6P!vAN# z6B7g*3mN8r@=Fr2NgH$rXMLq{;&r-B&wPujBr`oX-$kX6W8r`arcpOG z72A+!^7%z|=70;9ldM~eHF~U)EC&;o%M3;(K46R%X87ez?R5v@f|wsVp?jtS+7S92 z^1AYGxg81R!X7ypM+(M~Z$O8lYA#>~kycW=bFfB)o{}` zfhosl&|@W3f^14mOMH_RuA9R6Fj=Kzvs2jA#=JXL6EtZR`4n#i9vUr`Z%Wcb$XB28 z7|jZX3TBj0rV#@Y-+X2qY+OwiFZs9DZo9Ot`BWvo)}GWY&GRNbS8sMTebVrJ{NAxN z8y{*OKGRqcv!c*$2}@6K;FKy>O9_ z3SPN%+ofIyS5LaT8^LEnQtv&L6hw%p^t9ZNbO-)Dp-X4=FVdC`R?;K z<8Pa6i&2@!6yLz)ZD*X2=#DjjG?r_nVxvSFkVcl2S4m~FK}xTc>y3J(e{zYBfbE`b zvIKb!8(6%uwZ1M+EJ%J*Du`>;G!014UAt76e=%8pf=tLYx|-hfTphk4YkW%iyc+zM zsA+iq5o!X?kb@_qc{s8|OcQ5Pc5fLY@sl)#<7k59;3V53c0$b7z##s5h@uj2oaMP-fmdxmyE+w#b( zwem)>c9UEy-6WTQD+VMtDM*R^Fu)#)%#q_Ue&bVyf0G=mCIejIzeE|v8DUAlpd)H|C<_ONEeqMnbpA#8eFPMCzdLADkN~09fYsg< z!?63^NxA(OA-l|0sm|wdDL+Xj%-+O{ljKqXe(GKJk7@WvoBv~Gl1#MQ?8Pirpti2D zf6q;l3D2Jh#(Qagl1%tId$}-4CMd7Ch%K_`h0BviREX)a>WnHkMV>`2K zZaeeYZC7ivM=%@L+u;pCM{Spto@1cfna}F(UQdR=oaiqL*P3BFa{wl0mt_A&C|MqB zcMc$cg9+e2htq)8ZO6VVw>}^A>-2mNTU)?Ko|EM(xd4;fF>T6U<1(0Sm-V&)O*>w1 zTLQ--wBYqz)2CUtr(>&&(2909J3Yt#$)Ll#Sj091EGXmwVS2W0N{trsP^er5zi@1# zP+*X`n>B4Q)hCUC8*<;q%&j@N3%N`ur(>!sz!B&VNAvQ=FvHcFFZrLCpA_jDJ}j8| z70l}x{RCGJL+#RW+f6e9tZm0KK)09(3$bO9&d~^ARw`+ANmvohJO}E>Oi_hSg2@a} zS_dHBw+E<@(QMoC@wCs&sL~5UGT{A@QOO%YVfchq*(cNLo0ea;Gb$+vq86V_h|ICJ zd0l``MkN_O<4n8(LNa~RfD+j(Sz|VFlFdd}nUL>@*UL~Fw4e-APZMuDrZMmxINmQi zmg7RNZo8$yt~w38ZW{Q0;l;!tGhh;h(!~&z%Qjt8;3sz<6NQ{SN5Vj%5UXD&Z$K8my=HJ>Ti33pN!|zUL5bjPudb;HL-@7wo9p<3Q;V#qgj1ePm#DR`bn8Md=Bo_rN+U1 z1{vL=ADI=1PskF)CtfNs)Qq!3T^G`eAT39bAyzokc1@$|q~TQtILXX(l)MPZ>}FIl zJ)3xZH_BYtC$pCTaC`u9CIp`h-!W70Cj-QAm747iAZ^C$CV-vUb{wAqH%~5B27O0r z&Mq{K7$2X9;2=;SlW3a|Sl_;m&CC2yd@^3Yo1{L8or+J!>o@?(G_s3<2uPvh>|Ujs zf&EICO|eg`e1@4?xu6O2C`?ZkrV6pyWY|#?Of)`|6u=#@v6G{6dH5WX)59k=Rjdu$ zqvL|ZD$Es<3dClLrC5|6lwf;l%EG(a?yG(30?q=A(@WIvSkMSlIsy}gFk{7x6=m;AbJcmjNj^$GW5N*4Rl29>itR4;{xljZkVD-DWRm9hoebOo+hBfF(ea`~<*?GU>lOAWNBBDlg2mU8mn$g1zm2 zcLfOSbA6~eh#gA1zvn}ux^yO+x_z@xz^278Q|3idxqtd>EwgLFWiI!;@eZOvI4p5OyMUkmKcaI>Z?KP??k@rVN}n#?cOvV?bB7vzwjoM1Y*}9sVZlDBfJpguo7HH2wxoF`;_Pb#^`K zN-c-PT45eN@;mMy0dSe+)B6r|Fn*Pt20TC~MsVOf%UTsSEA$$^e0-4Cu$&8NNV&h9 zEC1{B%%2s$Qz8t~!`wcc>Ui!tyO!o+6#c09$I&AV=F`2b@zeq#Suc}a0 zuNw^yZCaGP++E4mv0>S=xE!0bBul2H5La4Kc4#TBju6Ea#gMEJ?863dA45S~i-kl6g4T@H%f&<ZRFve$P3TEVIXl7Z}4y@mBJ-$86sArF+h?3p@qhDh1AbNe~|u?h^4<33{5hqi9eR^2L`p2)tE_UZe=+ zIff63Qt(zu`j8~Q9pW5AjxKs{KRxjN`1F8mZDmCB2%W&g;l=;CEb;&2Lj22urTAa) zZC7k)H=3MXO()s^YHCB4Bw8! z74)qN9zzH{h$>V#0E`ltQHsfny`mZW?sw$|v4K-II?Ya0UgsU@GMnT+ZGGGf>ULBy z_{z6Tmj=(%cRFXPmD^rYhZXRT%A(d{-{)uJu-lRL*S1|s^jpNE$f=d)zRj|k6Q9JrJeT#w>v zV$<7luw$Ig8)5sM&=<*LtI*S+XH7bhROPT+C4H!r7cfL8T-#2TzQ=y~1m<@4%a?ta zlxIyyqbxm0pbz3Ctp%MQJ3m&TM`tZ)KgUUNPILNUbc{w!#307LTo&^YI;V~Re*f<7 zv0u+TQ}_JsmbrtwF9W-VV@v#{yZzuHhbQu}3?d)=6Br~axaqFp#6Fb*XAAx))&tLt z^6>5o7sN|;t>#3=cHl&j?ZUyrQY%c4d76_XQC}~pi%*TV#nqk`S+SC%9MvR2Rl8v( zi>}5>#niQW9RxY(=IlWl%jtt^Nc8dD`x2lz_C9f*H09Dd!_(m#f_CtZ#iQvvT%&q3 zlXf(}Txh9d(Mx!x(n#n8j};Mzr=;-=N-|!Osuk5hy2PT*$rWR1W_iWn{&@r~p_)e3 zv^HDtSm9urOEY9K1Ey4g-Si?`q)JQ81f``Lt&tjznV5BWv>^{2c`LAMxVqJBgrIxm ztngQg4iO`9NMzP_Op|BJKsF_BJGzB6Y|Zm^N*a#gARj$U-yr~+nt`8o9&IDyhljG% z8kABPN~S;Wm2vnUe@0>1gL_q zx5J(BYO}TAT%NtMWRE-NrY?_Jm(E?AT73J~T&;AcIyYk5bw>#5hd>Kp#3VHnKmPL* zoh)1@nSRsN0G%(gT2=DLkv^n;OvTo!aF8KS(a&6`2BF!03sOmONrvYF0GPe#j8wPIS;JCzr zDyb%5(3uylCY$A zyXxZv%{2{xs8raD+A5Vo^YYxvqPUf{y`4I-c8{DJMV+2bHj46R zS17h}bkXHw@VW3zhR=oMjU?)dcpwB>K1f-lqrJ0+B4)SlxOb9X^OVDf?(OaEq(jVK z>FA-qyTcU{FT~UDhEom9U`HJ{uawRMTRIEAojG_9$1qgA<1etI7{T-Felu@2e8(jh z4M}3XmdxUqnc3pENFgD@M7}=->Kz~~j^7o)x(m7prcVvRZII|~6j3*bwaMP(& z;Tx6On?1Pfk(1g#KF-}rwAWP=`2v1=oag{w$@&W;=lBu+n(ftsy>3vxi3(NN-ZZ}~olv9|sTa~g)fW>reY*{J%xa7k<*7CNgu_+Z zps}V$1fCc1t4-vftjE$yB7Y9~8~%sTf%1o2-^r9#NEDA>6zr_wTvKSAZUqiK3Pyo| z0nA5En?XI)%lSkm;6HDCE0UjXgTHQukyYouV`CB}F*jZ;CK`^POy1TSid8?Ej5fC# z%Tr6Uiz{mvXRppc7#OE(p4GxK>l#pYS|;WPdI_<5gYa|s9+V{9{WSYqjBg!!^_E|M z=az5R->Ez6@Az*09V-mqxfQ8A zhF8a8vK}jU9(@AFmePTTedti}EP^I^pXj)ap^ND*>|YfZ6E6l{eW@72B`Aci$I(l{KDhd{tx9S%)KTBK~+GcRatrvvzQ992DC{Ic#%QGu0 zv-6jh*A^#ME^DA-g}0kwtqt01$|!Vf%WQ1gJ9Lav`XM{6m#Q?_lcE}V&fV~84|tE! zfY0v`5-C)c<1!1Z1YG--tA>AlH>+hA`(K2DnPX>}sG$%O`Fv<@*~W0uC>eQJk{kAx z-7vPz0FHg+jT~K!4W2z%MmDG|Z}F_+RT8%ZeMzXZltJ%C#&Cv~B1R$x% z+BHXPKWG~jvk@x>s%F!4YZc=l{YE+4215ZMWdiFoT*;xO!$6*DyXZ&JJ1?kPIt1~LgE!S`YbGp;RpDkfo(jUX$0S_9 zCpewbbwDd5@X*2N52CA26iLGO-*wy!(Zlr1MtTZS(}zeLn3|ZnJhL`EOU8qNu<32u zIKGF;ury|rr8wS8Qmfn~vyaYAEU(NgNogI!eno@bQz{mVs7TM^rCG8Q?U`;hoi3Kz zT?}`xK+5(BU#3d5KB_7w`tNkMd_Nhdi-oXs82^L2IE>GB>UcV9%}o`dNx8V$ho9rW zo+aomNsr__Ewxk-zqLtcuks+r*m=y!`ETjP_IuW3Ftzv-xM6#Go4j|c7 z>x7JJljv~*u6|T>=e{JVBt4MzPFwicMLd1-KR3;gzNu~Vtt|O z__jlSZ%@wMT)uX7O2~TD*f-85YZja2o?M;oW`s2lg5r2N&85^!$ zUaiiYTPSTqa0yt_&Y;86x1Sjoqb;v|qxELv?Zw9S`1GaQ6Ss@CyJPEj-aLQTyEc0p zupa02T3T3GNdSCARPL;3gMMq1-marOzqH%SHtB0Cy|gi&3gZ{5OioN)SzTP??ojxE z!Vy){FcIf^l;;BK))rTnE+w+)ZieG51GrsgdS-IcR+$m(lF>toI82-S0Xat%(UmS`^s}n1; z3$#EY^A2fwdz(AqZJIirpyc!OGgG^zmoQMkvFXVqg9);N&th4(e!BU(%C7`Njiy)U z7S*IID~GzH>`|F|`O56#+VV2Z2xSi4h4nzGe4c#K(LIQL)01lXMyAHdEo-zdmPgYP z{4Sb?o4zEVp5fu*IqFU%URX->kA96>kK5um?F=B{(#*x#w{$A%m~?qz>PoWL^`4Ve zl05;DAlK1koL=3oI{E7!n4O!rG_!Vfc2ci{zKV3zj3U$8fKddnpPHMPy-JtGtOsNg#0Ud2M2Pn)FbawX7kue;HyaKf8irwLIxo z>3!b^^U#J@N0tF9MlRjS5_FF4ffbbyMoICQNmNJYLe*_2C~+1!B)YCtEYs>6uSS|6 zbPQ+V=oA&QG_!d1=E_1FnnpXJDVZ&eDScQ_eDwsCv~qQM?fT5p?8TdFi!=L1LKczf zLqhi`*Y%IhO}w?XG_$;Vb%pLtl%1hp8Q2R`BZ;1;7nf$QPpr(4S#J5}^2*HI+Vt%5 z6`ewHj74(Zamu;I&z2F5F0M{qot@e(zdnV)^aN9glWJv#q@bEf^wp{~HIVoE#ZK!5 z!K;+oRaH4PhnVO%hv;Hpm3Ax1Gw~9n&;u%^($L5dtzgPAKHI>eZRV!R@n_zNw3&y* z{^92x7qaFZ*N^eFMS&DK>%hgOax1qP;#Qq_!)xCijk=kKEWH&8fa2hfm$y%3q|l66K~mF%PZF+ONz+8Ev2}`*q6Pk^_RvR@ zKoe?Y#dv8i4V33@n@I?Aj~6P59bg3FE$M(zicQm7CSC=c6khevHnUN&w8v!ZWg~xp z9~EsFFB?lU*H&kjW~M8+qi}W#_aYk7XrvMy0I-A%9r4P{O`JF&sSZW74WA zRqTp!W_4vsF2JEiTu;X>l=)TJOWFv7W8Ou%*7U%1vAT%serKi)ED{;ZD+@~#mu4Oc zjdU31DzxavO_GL@J(P(wV$6GJZI$!mhtfQuc$2>&p^!`Z6dH2HcnM0g7CNP792G-K z9sH&zh5B1DpgjvJ(Iy;~g!rHgQaQ$+i5py34r_PQSFm z0P`YA=IO~!!q0v@2do%kvKN=7=6EVjn+QHMN?BN4xwJ4lf60LMXe`exU7uNcC{#n* zC?2@%0{Xe^0Zcof%wt$49bb=tdJW54S>97X$zux8h=yWf0!YWC6yXHkDXW^dRB#Sg zpWEmaqEyhoE5;c)kCA;#V06`fS4cA9ZoqJNcVaq*3klV){t=GMCwCWCVGB1En1%!k%e?|U&mx(#{vUXX6Q8nHIvCW3i0&I z{G=G(@lgnMb>VR4ROZQeDg*f1ETjj2AASn*;jAgh^WumYK zV-d~TFyJHwuHe!$5w8&pnZ9Xl*h5~RFG=ux$%O|rjEJLcl0i{eVF}w88E`l4I1X*% zv2BanY1_ymURb17VKl_1N~{A5g2X|DMv(Ud+X`$mk~&l#S72g6o6Z{8{5sB8KuCL| z10+QqMD#SYuVXb2_gvx&g4*!Tptb{?OTtlnV*|MyyEpJg7F+yVjV(}Yo(hrd5jt+YVN1J^ zw+;`R(FQSs*=R@)C;awLT1bvIoS>G+z4kjs)p1Q+CwrDpKV936!n1U{idjb}7M>?& zY0G*eeN1h8dwWP?0#+t?AHftkBsz~Pnh$K>3*i`GM>9m#u$9X5VGPfver$*|3a0O; z;qh}|bn)Pj^mm^aMF>3!2GNJktgaJdfg72QYfGCI$1)fwwphhsDW)1LV*DwNmDDnK zhvA1H5QP%x4lBl_s@(cd*R|lhld>~8eGv!N56FT2I5OC3M4@88J`s@IlDEe};vZF8 z@(L_(8sb7EBfoA)_=V87?b@atSsN`MTh37EkQHv}yYdPL&dYSOujxjf8#bdvS-{ls zMB#^K_K7TJ|FmRwt$nFsMB6J@HzOzXZ6{GhDH)bpE(T1;t2q`wZi4%!2(SS?O6)^9 zt2UtsH1gxBmIe!_A3UT*x;Q|HL;Wh z7eBwZ$`jzN5}ZWc@{#3p*ECpH%t}kw2|q${ZZFcJ=Y4zlG;Von?92UOtU*?$u3pS~~tw%l?i3zf`_6&1&A!Mhrbj7YE% z;Fd~$s=yDtdSEtbuUQ;t^VFeHwWDp@c8zG;!#uo+{b#s;s0F9gDfyzxPMttQxtcel z>|r~50ZD;O49l5%t8BPF*~?fQ%G0K?3)-HsJnb5bL)r#lX%^sbAw}}i4~L>~ibx2T zyfHRBHd3L7?m(zq#>sYi79z{9pzbjps{-_7t(r&{lW?4_R4kvb(38?-Q74Lc*i;lJl#JJcRT_C)KA9*YHqAoXbZ&MO8)db$)y0^O1wa^f0m1h zfzd9;21b>D=&re8d(@F0#wdz=rof@?_LXIAc{sAI4S0BMHBm!xcmRz)8pj-7OiX2I z2~P+y5f>ok#EPnnF+IO*EYrwMlV>-%fZU2UyuiVIMO(IEhQ_wtXy6^#Rx1b*i2ULt zM6_W>w1u^5-Gl#DzFx{}}gt#%7 zbUi)b@IqiZOIP?AF;&oukYYe{%r!+mXi{Umo~Md)mWfRwcFi&0Yg3tCgVDaAv$XUaHW8%x8xmbWgQ)QX9n(hy3e(E<(s- zcgJBhDfm^oNnNo<#yZ4jgdOY$vh84S6Vg8LJy+kb0=V-EF|}-k&5=8WmLIyNUl~RH zkMKVZPwO*TwEmX`t#ja#$|sD_fdnwN%}pEri*chZbbGKCpv3f z^2n^U=;1uYq#5pd6iqd8)n9f^|AEIRfhnRlF)!W)pB)I9ye(;cOvyS83KEE3Z#U zTP+Wu^e_Pp7mMY}F!s2~d0Hp700F-+K{{*)B&Pe8i1U{_YAf9|QIM9JW2v3mPpmG9 z(;|F_huTs6NGssJ;_}>AoPH$xlmNnGuxAo`a$`_aS7&GDS2}{4)^_#|gjmvyHtijN zcv{s)fS6caxhzh1q$?ELi{fSOz5=haVz?vxZ)jDFaiwV?lcQdVX`}_~MIqIE&Bl_h z$l-bGQWkIhu;i^I{w05{29pUFewfmrk(leWd|FF}7krhBPn1%Ohb0mTKfU@bocHMp zk4!2^p#yL2hBsn_OlyhiagF{iXhf=5NF~&$OD2p7v14*UNf#8oQOY)c=k!t$bVO-( zFe>nPWbaAFt6&ux(yZyJ%V&L$+csYv~e<96_f}4boO+JGu2wR5GSEP&0a3_rHCfD+y`YFF!L?az{ z$nS$S4>BSOA+kS~P2e?~KO|xCt>Y5B;yOW8l7F~aFf~yb9UUo+RQOYlh8QCeGECva zl@viK_((HKX+~ulqN6<-b>^Y;Rg!Nxx`=Q4_r zk$_iTaF{W%ID1yjn}i!=nk>Q4Vnz-;dC+vqTVHo9$82aII4Pyq6126-n&~?Ex*1rG zsUuF)M(JjIC)!C2idq{xaF>=M*$bUnOFOfj;+o-N@tiy$0Uhy^|G5!LYN*yk;)DI# z&!ta?#|vAIg{v7%m|8mRkm*u}^xr(q$0xkihyp|UOJd0B>f#CTMgm%II}+}M4X@4z zo3Dw%CdbBDo<|IEUt1HkS}@eA`4=jqr4d8MwL*J|yduvoQY0>l)fe-}WWs|3VS_`l z+9?syw4=bWLiINxMjPu+$b=kYhhF7>GmC+LRWh*NE0TrbD+?QP!YFUAuiF+FnQz6h z&2T3ld3iW`ghwhlO5i-nbpdLQw`)ilN6s3)w`~XOtp;{Cl0%7F~@q(5G;x8MoUYB<`=@NteLGvgkt(fmgFQQQlW5pi2f^j;)$!`SCr& za~nIxJgyYvyHTgaz7^xTgJm`&^wy!r+C#<-2RmPFGit$`W7x7bu%hi%Z`oF4)a(dj zspppkrLwR~<}B{{t2cK0RQ71L2ERRzt%a;aDzX?8kyA@V48tf(&ngE^^6B3Z2xGh|z$ zn87OAcUv-ztt$E-Z3*{Y^BWr*8^e`gV@lNh{(p;f3fU~B0g2?VbexXo*vB;M^Fe(0 zJiB~z?&8Ay%{836UR#@9n46fLS2phcZL`rZt7c*wqo&%J0XgQCsWO&@aNY$%`DHTc z!Hcg-ylqztY75i&Y#}AvD?bvm3K`fz zTFGejv8#q-7#(S8|Ni3mnd+48Gh8fU!)YpZ2Oc*rO^1}FgMA!| z*9SCd)VT-2zKXPnf6pB4rF^6UFgIy zyQjyIW7IfKuX|NX+@6wlDivqZ{q)44s1m$#O-#?t&Sw;KUK3r3f=;PS^4N2-hWgbk z&&W#*@_Z>I57)M71DievIV+Jsjf14LOlWB72M6l+8p`eip$k88;7E@ZMP&T zicZ~7KiiB&4$GB&27J7hJp82gG1?f**Qn`Lyp%tv~gN z0Nmw-F>UV~W=_b=?;p z$tz_CDkvKrTdYWjS1iHfF>o;FGxyJ zPKoj&k_7k#@>i+~)J5`zT_w26q6^=BWqH}Sh+~_AEEJrCSiVr^UVgJKA4&Io2b~A5 zE3~8udf!csP=(rvSjrm`iLtLP8GM^x(nWbQs5*K3k*bwyyOQ@Eh*ZUA)0sBOE{~p* zbLt?t#U2b}6Kc04E+pb2Q-yxB3TP_mmzRi!^pnMo- zdsk*xxGPzaE*>BC4M|+0sF6`S9ulu=eO2rM{8D-kAck3Nr1<%)O@ag4b~R5&__?_| zd;A*A+LX*&ug&a46SVOwCk}|S{T&cr$Qr-?nVi=V(&XSZK^LkS*q%~@B;kjf7WOlJ-Y~H31vNjg!w`&`;TgQER^2nb6nm&dSFNhgy-tK)(@vDp$;)?F zjgFW~L6odm%C&c@QeAvXd+Nr*()8le%!4~NXQxP^iNHy5^>p0OC-r|A%2Nu+`V3mKq#ff zgHk%zLgny6TIg3#b{driSmHA4gxC5<-ky9*?s=9{eZZ{SZgh6ruIgUWdrQUQD0#Zq z^GJ8&aUT7yVI#OWHdY+Nf`h2hI{^OjewpPRUKF}U0)-hE3rnWtMqB*mbu8aVw5>3w0a)3C3> z#2s-N?MjXPT84P2JW1pO``L4J%$8$Cyw-?TYC|!1EHqkm+M}YRFl^*01`hL4)-zdoH|?D`>myoLM97@)%gPysjWsJi zh;~BDYpJEj_WHU_KMG83bBL<1jFEduo=BJ4bgFS(k4c0&)llw(d6ZwV7&Z#r4P#j$ zg=V&d4H$ys(+Tj4*2P%=cc;&V;)E&Y$&+Vz0=(6RlU|~6xj}SFB*9xH5$YA@(LD?o zH?*6SwTs6Se3&Qb5G1^u$;{k?@!%@&#Eo^Ae5>k=>tZ*1kyhInldOTnEiQHe7}1*S z?KQ8)HAzB&HGy|TUO~dn+QaLd*RpiZ>wVm&%?p}8!+I@LKjv{wwJw@?P|s+$k}+$l3We2XYP zyhO@ybDWB5wf z&UWK_(M6@yc-59zjd5wn$bxYyGY2BFGFWD2az323WsrkXdmb5+&Vm7{Ej0pR$+tUM z@RK~1mYh^ZhAjB6pRWufHLGbC9$EtF(!Ds!B}<#U17b-H5Erw?s=`sjAb#AJ%%hZ@ zIz_7wpN6KTot9wF3R6j>f%6(C=tODkiUxUd#h_BGi(F|2<*A83Qz^lpn9UXrIE<3A zz)Pc&Umgc+*XU^yry~&3Gjt!o^-7K!}(^8h^^w-2{ii9rFBXy|wrgu7OYSQ@}-Jh*4lgN-KA&{HhnmEe? z6(glzi4s%RJl#_+Mg^%qiPQ5;N}JLO#>U`|T5hg| z%F)Tj1>U>z5YZ35d^Fw7#Gw~Da%hemrb|o1aXPYS^BrEWqnx@rdwphdVc|-`_R-&P zwur@IqXT1@bH!_u?{=DV$wS_MQzS?@tv;?_6U>(U=iSaPBxk%u*>9lHiAG zw(ezJ=b_A5%ImJT)(Y(alco<>^j=NyoCKd>y8WP*=sH7J$s2711J?;Szd#N#~;P1ne^GX&uzaq#Ppd~5KF6x`V$Po{B zoahH0PHluZaAGGawlxbZ|BzuA} z=J=s)VG?3n>-FP|u^eNp#P|f3g(<_Dhdg=Pb=k21zSCSc=@Lpp%n$5^fhmr&qZicen4u_L&a0(VpN4=^^+ zb5z_`aSXx7@jxYx<`^3|4wt%J-Hi43yaC@&_Xhh!H={7#I@ANj-@AYR{u82jyq_RG zy4R2JUUrWz#CR;u!9&&)1i_wW2u%K-%m~Y9D9|Ws z8JgHMjKA@l(%$erj3z?gME`X4GB)r@bj}#+NTfif`u;vHff!W_nyBoB0mc|c12eKV z$^tY4ExC~|%#`8lg6u{_JTN^ezPq*W9__nV`+hyg81~oq2qdCzL?Jm4#}SA|VjxuP zwWD)opz)mR}Fd8s`)IUJ&@l`vo>vJ_(#2AemI1BG2h=Iw#snzYP6Z2S{ z*&PZR11NYWq4ZS=N(mlJcZY#1cmM;)P)3#RhUsE8H8U#{7*JV(JC(Jc`{ptmV7qmv z-Zb5UQ$rU)tS<=^iZ|p{)cCN>qow~`?p5^=-W^H%-wf>@1Oq9Klb6ff92;!U-_=T zeWP^yE{f#du<{$*KPZYkk8*|Zd`WzRr9UaY!P0}`8!SC6zK<}*zA38Pr+tG|uZlD% zP>v=L_A(sOMSi2{@*Bh5lF0kBCmB1R!`}%(4WYyS`2PL>aKE43qmk|yjdaJv z*h9n)@phqz@f`ohhKk0kRx1c>H)`w{*m_pCYsTdr-wyKEjV&jLT4uwzerdvZHL$lT zM)9@RK&TG}VSus0BgH$T!=uCf{IfJt8tKN;`)(z7F*f+*oMQzZ4y+qfUf_HD0K`eg z2A@SGH8)Gx#2R>whE0c!j_XZ+Nuf<5iezn98=@vuuJhT58Y>T{}zo?6O2wi6iU5p$LSXFO`Y{VPnOyb3oXhH2~61&AO4@NF(ehD$4mB!(EJ_^Fzf? zW@D(k4MQJS7%FCCXk?@~`BvfWw+hp5VUArM85vf8lS5Ko1LM_+ON+Qi2R=e-uL)`! z<_LVx3sLwTFQ@SPkq4}QXY?P_TA##!ai}<$jsKoD{7)+UpC1~|V&yCfotRpj6&Nma z3_k=g3Wp`h)RIOA_pC!_EFIy)SrS3#hlYn0f=-d-d-pzLKYpJj8M?O(T{W3nCW^Y6n=3!Y*t7uppH7K7fuZL-k}n0dGDY< zl#Y5JTps%~Tl6$f4j z%dMQ>e_l+O@%}uUEB7+?Bfab?Hdls$6{}o~v3_i=h27yXv5LUhi9Qk5mrPqeBEpZz zwEgQP9=2XOBGdK=c(B2K^(q_z+A7zZewD|&KxfdDBy`L;}WSu)T@H!^s zd;){rZ#5gnQ2Jp8FCv;@&-pjiWLEXsAXT z1+2KrFw|6JhWXxdqo5(ra4kFijP1<+$&}JNpYFK8&HYHdXk+JWo5L&js zW|?bri4Zn)cyZ-{qd1Wl`7$?J8%G2RDjE`p^L>0W53DNI#=7UK22iCMUaKaPphZ?Q zz)knodR>M-f>3_gsu1pk*inM=@jIoxPqDf3ALbbQqa0&@kYj@ssq*=@)$r<$E6MeF zkrQt?wStuywmq__=YAJt@(rjVD7p~Q=VUk*3bgPw&!_%T@t{>LUN-J~M1H)# zhigxt?qYv<|Ni|yxPSltlZ^dHjvZxl<);PrypJ)~$L=v)+lU`EuC01J9lK?_HBa#hI0M?d5+j5(C)^Z1FtP9g8T>rVnPP40Q)EPB?6bWH z$Ewb~cNu$|G4{VQ#(s)1_HmvvXYqU32|r&ILh>$S>=nk?w=u>(#Tfez#u%1NzLPQb z*BQ(G0AuWLFveh8g+(3w0u$~c?52$MPoHA!y97DC&RG9nAfbP6pl?D%USh2O9~@_F zRz&_y#s;3cA_A|8z>kXe&w_?L0q$AxenGrn#8}eB6ip7me*ldtFN^nS@xCM8p8&W& zC;oU9*?Sm!NBsRkM1FAMGYu`T$vhBm2m|?B@SMkU9xr>R-DZX2pI<;cUM4TNOvBO zb9jv6aR!fX!Q(YNKA<)CX~qUWH8g|?CU)x;uFk);d~q52RS(}*IJ_C#qCZ1AXB!52DbwJ)=hvW^m7jGPWsJt<7^@OLo)%8->tuSUc_Mv4*AU1E z4SvvSs9?acnt|1Dqk`imRa>hWw1wgFY}^km!9u5!Vfg?tN(1C2(p}qOlx|VO&WChd zOAU)q8tP`~2Oi)__!wL3f$8IFcv1<-A)AcFu$_#pdUs-wP`Q%PmfvdHO_{wte#15! z(MIQZ2M(51mD}^*ZrQCk{z<)j>b_J360PG2YNjHIjO@wsGZG{#06jg~B+v)kgZo~@ zfyuU_BV`0>*N*B)Ju1~bdQ=!}AyxteWl4bg1PPUv;cyjd*KnIk%~qYNXWXtkYNCR& zsQvkEC$Q@+Gf*{zcIecbz8`pZb_#XdwF6VJ1m#na1VPpj*odQ=>x!(QkU2hfXeb>J ztjl-fI5qeQiIifC^&k1hJKhc0qrzTcQ#egd#(Eu${ zM<#fzQI33}u*w`*4R6>rRT@y*uxo{MEhxJkg|=%2JH8@3w7zLtzNVd{4o%aF?1q{< z$->b5rX6n3ZZ#PQ5Uv^dOvfuJ601A)1wYexmKYc!9$Q6wbD1sNC5mIyv_1d2Y; znFzA0Q9dz0M$gHJbqBW!N!Vz=jB#VeLroFv_|dskjzm<`bnCIG0+LlO4O${RFt=sl zvc8Vrp}vUVMF51p+Y5pxV=or=waF@=28YR}RZ#Xy!`!ih^M2q(p6Xv2$1ko;N*&oS z3XK9=5%N=_df~PcSsQuNYUFJ<3Y=JCO7w2sX_#(dE3$o6qJ*lL9}_1iA)eTZ0R%}S z0=9*Cxw-Q1bz^>foXwR#aR1%_Gw|r|LD+LLZ1DcQw!LqdKp*MhGowH5X8i+yk+Gg0 z?3%;lUw5 ztK^@ohYg;cSvYs|vRU3<-X8m)7nDBegclde(NsA5=IX7n&53!_F4k^0nseU8*$e*? z<=<^Bg$p07T`k-?XKtI5H{LGH*WJrYAFNKzuijd^Q8h1L^lNuF=iTj*3xC?pUhA4G zL(_TxqHPCs4v1zQb2O-9e+RS}$8%w`!4@R3338wp)-i0(!&yy9^Pos?%a<2isc^8f z@0+;EK_=xve!(=ANea~A`+fluPdKEMslnsE?|X1m$~$G}iN!jkqckXbNVX!?z?5QJNP!8c>A0p^Bav=DeLNc;kqIE7Hxy1>6$5-;@E z3uX{o^e{%I;}ZiHD7Gzu8%EdwEt{B?#58D%`swaw%t)AI^v99+825JqJXkg%PDqC?1 zi%#f-q!jCzh5=RsA<{&40BuoXDurs_X@<>&dYytI60BSKsOc+ZCKF0E43y@Q!U%_A z#iL|qd>F@r$F#Osp089IXscS(y6Hw{sA9n?!Dyl0^z*koM-d3bww5W@DpPn*t0t*> zpvUBJhBtnAL$pglo9ZgTfcXfUnM9U!se$7s`XEIw6rJjURK1Y|uH$3@84%J;Cz?jm zqgwa3{Du-%qIW2&QR8*fDNSIL;u8WPosn}w+zo&lao^Ppp>Iij7(-CuTf>S#w$nrG#w?DLAg>H8rJ{ ziZ^RpwSphm>&_inJYku_#Ss7*0d*trnw}~SLq_O2>+A8jg&Kr*5Lrqwr46mkYPewr zv8ICoC~Q`t%&V$mQV=$)lD=<Bl7o_sP zl$nN##Lbx2epi~`$iDyWbK?NAdlC4~XU$_vL-vQ8j` zC@7vA7mFd1Fs_RPcwc98*b~`IiA<82=aDjLzB&KvC-db1#ta z9E8jkr*A+bFvRnq8PmYl+Bg9 z7{maaT0KXre^@`yI=}-_0iakGg&4-b#d26P$D<36ZajMM=*8m*9({Q9<1v88Q9O>} zfrC4cfc9HyS%F6S*1 zWFq?kIK&Tc+Q;zI=!f6s3urlrV#?FhvZR-l!J55a0xrJ4#0zB{_rJ znj|C}kVKhOs3f}r$_XRQN(>4PacCe+toft)ju#c0x1*>~4ZKZltigoI^KF;Tr_+2~ z7KQf87~OV_*}H-kwyIoM>3a+?8OTmi2y9F3%0RWMQLrB7!&X%sR+NQf2&~7GesmH+ z^lH^sNIfW1l06QM<58ilRA3oXjpWLe%mY;gd8$#tw*$xD(CviiR}pE}w(KCnC5tL6 z6f70H7DhqKqU-r2Xj#)LwqcmAt7X;d!_}@tCew${JX}PbXdY;=;RR+P^89$*L*Gy+ zpN}d)AOH$??Z`>l{Qv|Sx!qEe8t4ubURTyAbc*sgF76GJZ9@a%INRL{i;Q8R7mJtl z!$}}{2y0n8{I|jw)+OoJokM!QJp)#gYjtutX-8IJyIwZ8>*6&8K3&J{LK8PGtxYY= zU!1)}yFYoVyzOq$$_q|KVd)yMmH_KWWn`o{GNQ6xon2m;na|3K^N2F*GP0g56~~84 z#q&d@^XG@ok1G&MGjj_oGg%;{Q*4yJLZ$O963E(*iq9=fXJ$+yy6Lsth_<1Cc_h2z zT^DuyKjoH;=iuk@=??h9$t|NmYor2Z22!)yk*rQ~u#{tir)$<`u;!c5nmK;cy0v7EJEPT0Hyab96K{rd{;jvh%IB{Yb8N8RY+_Bw zZ4`10x0Yf{G{oUhjtxFfmlRYAg}|=E1;kFi6yJM&E=M({!7WeUpCtJ_if?iBFWDrr zUMf=Nii+z)dBXsCS~L+#i2S}x-*o0(Zl&RaANm^G-}uSQ-04nfx{&6lu!E)xLsP9) zv)kskkn%0x^_zChQ3fuEAQjlAJVC?+cIY*>?4V%QbR#)UN@di#7i?oiB_O)mkKGu; z2BvG8x~UZpAeKUFq{pamNKu3fGj98^szo+UOW_{w-VvL>+Y#1%zM-mb$z zMm{nn)03i>O60gARiN!dgrrENlfd+3An{bPrfKErA`MwDX_4m`qI!9*UG`k1mSR6y z3JR?RB;m;J<8Z_$$Fq?^G@hB=+30=_ zjFPk}X{X^>am|vgr&0-UoFdt8A~Fw3${?cK9@kJD)uXavh)J!SV#G$B5v9SB%@o1J zB(g1%BxPK@Gzuvrfkk(kG2Q8<`0?_lOpi^!%{8;7EFTaAVKYqeG?cPdb5z!Y|0xgI z6EN(8rELJPamaKiTyC>%#AFVpmBC@)r>D&6=$Z%1kP;$LU7-JJT0U|lbz|GwO?6Jp z(;#vanQQvg5ag4H#chbPedw!1q_$Mi7N=DRswA4wY&9Y$4=;57MxbqHL?^&tmRw%M zfWgtGfubQHUTd(od{sMP5tPdiWVzROc%X)AOKoa(8fAq$VL4x`#*6GU%iT_ffrBW_ z_w!ZHi$b`6&ch9aL{b}meckvD`-nmztaM)6K#4A(ou7PNx#k^$_p=++6t`#@_8>Pclsj8KND3LqV&+u=DWUF8036=*noZSS&oR z$F=D%zzgKopT{l;oL^@wx5-%UQ;g+4!5F!d_zV1f^cFM?OrQH2m?huE!E2%6L1`$| zyls~*QoMutvkxnu7VRR?VQlcMY>Mgoq1su9ZH5Kg40jM(2yEXQ+A*6AXtIP=Z2loP zvl4w^JOpan>p^`85-6V9etohNg$vh>BU2aL9B^6Ft{tU6BZb5|8l*WeY%^g zY#9FVgY6Py3w{u2@*D8vH|SHQhb))hc*`_caFXA!8OrZ7T6#?6Wq3jR#ym)dk7?hS z3(0VJC6V87W+A^PwC_vWH`Gs=W>)*YqJ3lDCDY7n-=ERGKg$?iceU>?Xy1QN`~C^-`zPU+LDb=kS~#{a%kZDp!oQ?_e_8wf``Y(c z7^C$>{C-Yr+!!v5gvZfZwlb>A%Jp(FA_K zrltS7mj2hZ^xqKMu<`p1E&Xq5>HndY{oO9s^Gz{5hGPY6Zt115Z(SqVzK;!sy~fs4P?jT(b;( zf1(HqFChE}5dNAhg2HkC?!af;!^aSgqpfjODLtIF44g&ySON}Q2@RCm!!IEG$J^md zApDC6zmR})3E}^sJ^V7lf1y2m7UBP*9sU)B|9=RdO~8jwlYw*X>E{tXhVZM2^q)bv zMd@GE3F)&4w-NrC9(ZCYC31ZZvF~p$ z--+-aP7ubAf-oKtw3m$fyNG&BMEz(Y*B21=KZ&SZBI@rUYEe+y7ZOoFfvE2kxxRoa zCg9|Xh~y^`^_NA|PY`~F6M4Ug1pg>A?@uA>AB(6jQr>bR?@uGa5s@HS+bw=&x`hfQ1B^ zDfZ_PyP;zHW?b?zlIY-HK$=^W1~+i1f`5_fBwF&5qHKv{g8oZL@!cZDFY@AX$jo=T7CtIzE37fRN<@bRVXK`@T+hMjdoaWtDpbjl!{(&Ff1N3z(c+n7@t%TY8Qm!yb|=j#m&pKQjAl)atDE2&_lZs4qnWWgGMaSVHPk5Eq)LdQMd`?e#5bl zd_o>t%5S<}L<`DjReE0&ZFZym9BbNMQ%ohaO6zMLa^8t~gJ=Nh`\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/729/f42d43ae\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 00:05:03 01.07.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add comment=awg2wg dont-require-permissions=no name=awg2wg-uninstall owner=\ + Manager policy=ftp,read,write,policy source="\r\ + \n :put \"Uninstalling AmneziaWG...\"\r\ + \n :log info \"Uninstalling AmneziaWG...\"\r\ + \n /ip/route/remove [find where comment=awg2wg-tunnel]\r\ + \n :do { /tool/netwatch/remove [find where comment=Monitor-AWG2WG] } on-e\ + rror={}\r\ + \n :do { /ip/route/remove [find where comment=Monitor-AWG2WG] } on-error=\ + {}\r\ + \n /container/stop [find where interface=veth-awg2wg]\r\ + \n :delay 7s\r\ + \n /interface/list/member/remove [find where interface=wg-awg2wg]\r\ + \n /container/remove [find where interface=veth-awg2wg]\r\ + \n /container/envs/remove [find where list=\"awg2wg-env\"]\r\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg2wg\"]\r\ + \n /ip/address/remove [find where address=\"172.20.0.1/30\"]\r\ + \n /interface/veth/remove [find where name=\"veth-awg2wg\"]\r\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg2wg\"]\ + \r\ + \n /ip/address/remove [find where interface=\"wg-awg2wg\"]\r\ + \n /interface/wireguard/remove [find where name=\"wg-awg2wg\"]\r\ + \n :do { /file/remove [find where name~\"awg2wg.+tar\"] } on-error={}\r\ + \n :do { /file/remove [find where name=\"disk1/awg2wg\"] } on-error={}\r\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\r\ + \n /system/script/remove [find where name=awg2wg-uninstall]\r\ + \n" +add dont-require-permissions=no name=amneziawg-mikrotik-c owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\ + \n:global imagesPath \"amneziawg/img/\";\ + \n:local Image \"awg-proxy-amd64-7.20-Docker.tar.gz\";\ + \n\ + \n:global DstDir \"sata1/dst/\";\ + \n\ + \n:local Url=(\$GlobalScriptsUrl . \$ImagesPath . \$Image);\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n\ + \n" +add comment=Generator dont-require-permissions=no name=awg-VDSina owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# ============================================================\ + \n# AWG Proxy -- MikroTik RouterOS (protocol: v2)\ + \n# 2026-06-30 22:08:12\ + \n# ============================================================\ + \n\ + \n# 0. Check prerequisites\ + \n:if ([:len [/system/package/find where name=\"container\" disabled=no]] \ + = 0) do={\ + \n :put \"Container package is not installed or disabled. Install it and \ + reboot.\"\ + \n :error \"Usage: /system/device-mode/update container=yes\"\ + \n}\ + \n\ + \n# Auto-detect storage\ + \n:global awgDisk \"disk1\"\ + \n{\ + \n :local usbFree 0\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] free] \ + } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n :put (\"Using USB: usb1 (\" . (\$usbFree / 1048576) . \" MB free)\")\ + \n } else={\ + \n :if ([:len [/disk/find where slot=\"usb1\"]] > 0) do={\ + \n :put \"USB found but not mounted. Format as ext4\?\"\ + \n :put \"Press 'y' to confirm:\"\ + \n :local key [/terminal/inkey timeout=30]\ + \n :if (\$key = 121 || \$key = 89) do={\ + \n /disk/format-drive usb1 file-system=ext4 label=usb1\ + \n :delay 3s\ + \n :do { :set usbFree [/disk/get [find where mount-point=\"usb1\"] \ + free] } on-error={}\ + \n :if (\$usbFree > 0) do={\ + \n :set awgDisk \"usb1\"\ + \n } else={ :put \"Format failed, using disk1\" }\ + \n } else={ :put \"Using disk1\" }\ + \n } else={ :put \"No USB, using disk1\" }\ + \n }\ + \n}\ + \n\ + \n# 1. Uninstall script\ + \n/system/script/add name=awg-VDSina-uninstall comment=awg-VDSina source={\ + \n :put \"Uninstallimg AmneziaWG...\"\ + \n :log info \"Uninstallimg AmneziaWG...\"\ + \n :local prevDNS \"\"\ + \n :do { :set prevDNS [/container/envs/get [find where list=\"awg-VDSina-\ + env\" key=\"AWG_PREV_DNS\"] value] } on-error={}\ + \n :local storageDisk \"disk1\"\ + \n :do { :set storageDisk [/container/envs/get [find where list=\"awg-VDS\ + ina-env\" key=\"AWG_STORAGE\"] value] } on-error={}\ + \n :local prevTmpdir \"\"\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { :set prevTmpdir [/container/envs/get [find where list=\"awg-VD\ + Sina-env\" key=\"AWG_PREV_TMPDIR\"] value] } on-error={}\ + \n }\ + \n /ip/route/remove [find where comment=awg-VDSina-tunnel]\ + \n /ip/route/remove [find where comment=awg-VDSina-dns]\ + \n /container/stop [find where interface=veth-awg-VDSina]\ + \n :delay 7s\ + \n /container/remove [find where interface=veth-awg-VDSina]\ + \n /container/envs/remove [find where list=\"awg-VDSina-env\"]\ + \n :if (\$prevDNS != \"\") do={\ + \n :do { /ip/dns/set servers=\"\$prevDNS\" } on-error={}\ + \n :put (\"DNS restored to: \$prevDNS\")\ + \n }\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n /container/config set tmpdir=\$prevTmpdir\ + \n :put (\"Container tmpdir restored to: \$prevTmpdir\")\ + \n }\ + \n /ip/firewall/nat/remove [find where out-interface=\"wg-awg-VDSina\"]\ + \n /ip/firewall/nat/remove [find where src-address=\"172.19.75.208/30\"]\ + \n /ip/address/remove [find where address=\"172.19.75.209/30\"]\ + \n /interface/veth/remove [find where name=\"veth-awg-VDSina\"]\ + \n /interface/wireguard/peers/remove [find where interface=\"wg-awg-VDSin\ + a\"]\ + \n /ip/address/remove [find where interface=\"wg-awg-VDSina\"]\ + \n /interface/wireguard/remove [find where name=\"wg-awg-VDSina\"]\ + \n :do { /file/remove [find where name~\"awg-VDSina.+tar\"] } on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/awg-VDSina\")]\ + \_} on-error={}\ + \n :do { /file/remove [find where name=(\$storageDisk . \"/ru_ranges_time\ + out.rsc\")] } on-error={}\ + \n :if (\$storageDisk != \"disk1\") do={\ + \n :do { /file/remove [find where name~(\$storageDisk . \"/pull\")] } o\ + n-error={}\ + \n }\ + \n :put \"Uninstall AmneziaWG Proxy complete!\"\ + \n :log info \"Uninstall AmneziaWG Proxy complete!\"\ + \n /system/script/remove [find where name=awg-VDSina-uninstall]\ + \n}\ + \n\ + \n# 2. Network infrastructure\ + \n/interface/veth/add name=veth-awg-VDSina address=172.19.75.210/30 gatewa\ + y=172.19.75.209\ + \n/ip/address/add address=172.19.75.209/30 interface=veth-awg-VDSina\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=172.19.7\ + 5.208/30\ + \n\ + \n# 3. WireGuard interface (MikroTik derives the public key automatically)\ + \n/interface/wireguard/add name=wg-awg-VDSina private-key=\"4CHyNhbOs923/E\ + yNDguMXJXdghL2I3UyzXPwrANVgHs=\" listen-port=14710 disabled=yes\ + \n/interface/wireguard/peers/add interface=wg-awg-VDSina public-key=\"o5Ig\ + Cl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\" preshared-key=\"RNvF7T1cg5tyXcY\ + QnD9N5BEp6e20vVJQTv0GMjyvHU0=\" endpoint-address=172.19.75.210 endpoint-po\ + rt=51820 allowed-address=0.0.0.0/0 persistent-keepalive=10\ + \n/ip/address/add address=10.9.0.3/32 interface=wg-awg-VDSina\ + \n\ + \n# 4. Container environment variables\ + \n/container/envs/add list=awg-VDSina-env key=AWG_LISTEN value=\":51820\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_REMOTE value=\"109.107.1\ + 77.79:55055\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H1 value=\"472437748-472\ + 438637\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H2 value=\"707808381-707\ + 809250\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H3 value=\"1609078552-16\ + 09079495\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_H4 value=\"1012329484-10\ + 12329741\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_SERVER_PUB value=\"o5IgC\ + l1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_CLIENT_PUB value=[/inter\ + face/wireguard/get [find name=wg-awg-VDSina] public-key]\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-VDSina-env key=AWG_I5 value=\"\"\ + \n\ + \n# 5. DNS\ + \n{ :local rawDNS [/ip/dns/get servers]; :local prevDNS \"\"; :foreach s i\ + n=[:toarray \$rawDNS] do={ :if ([:len \$prevDNS] > 0) do={ :set prevDNS \"\ + \$prevDNS,\$s\" } else={ :set prevDNS \$s } }; /container/envs/add list=aw\ + g-VDSina-env key=AWG_PREV_DNS value=\"\$prevDNS\" }\ + \n# NOTE: replaces existing DNS configuration\ + \n/ip/dns/set servers=109.107.177.79\ + \n/ip/route/add dst-address=109.107.177.79/32 gateway=wg-awg-VDSina distan\ + ce=1 comment=awg-VDSina-dns\ + \n\ + \n# 6. Download, create and start container\ + \n/container/envs/add list=awg-VDSina-env key=AWG_STORAGE value=\$awgDisk\ + \n:if (\$awgDisk != \"disk1\") do={\ + \n :local tmpPath (\$awgDisk . \"/pull\")\ + \n /container/envs/add list=awg-VDSina-env key=AWG_PREV_TMPDIR value=[/co\ + ntainer/config/get tmpdir]\ + \n /container/config set tmpdir=\$tmpPath memory-high=200M\ + \n}\ + \n{\ + \n :local arch [/system/resource/get architecture-name]\ + \n :local ver [/system/resource/get version]\ + \n :local dotPos [:find \$ver \".\"]\ + \n :local rest [:pick \$ver (\$dotPos + 1) [:len \$ver]]\ + \n :local endPos [:find \$rest \".\"]\ + \n :if ([:typeof \$endPos] = \"nil\") do={ :set endPos [:find \$rest \" \ + \"] }\ + \n :local minor [:tonum [:pick \$rest 0 \$endPos]]\ + \n :local suffix \"\"\ + \n :if (\$minor <= 20) do={ :set suffix \"-7.20-Docker\" }\ + \n :local file \"\"\ + \n :if (\$arch = \"arm64\") do={ :set file (\"awg-proxy-arm64\" . \$suffi\ + x . \".tar.gz\") }\ + \n :if (\$arch = \"arm\") do={ :set file (\"awg-proxy-arm\" . \$suffix . \ + \".tar.gz\") }\ + \n :if (\$arch ~ \"x86\") do={ :set file (\"awg-proxy-amd64\" . \$suffix \ + . \".tar.gz\") }\ + \n :if (\$file = \"\") do={ :error \"Unsupported architecture: \$arch\" }\ + \n :local url \"https://github.com/timbrs/amneziawg-mikrotik-c/releases/l\ + atest/download/\$file\"\ + \n :local filePath \$file\ + \n :if (\$awgDisk != \"disk1\") do={\ + \n :set filePath (\$awgDisk . \"/pull/\" . \$file)\ + \n :do { /file/make-directory (\$awgDisk . \"/pull\") } on-error={}\ + \n }\ + \n :if ([:len [/file/find where name=\$filePath]] = 0) do={\ + \n :local freeStorage 0\ + \n :if (\$awgDisk = \"disk1\") do={\ + \n :set freeStorage [/system/resource/get free-hdd-space]\ + \n } else={\ + \n :do { :set freeStorage [/disk/get [find where mount-point=\$awgDis\ + k] free] } on-error={}\ + \n }\ + \n :if (\$freeStorage < 262144) do={\ + \n :put (\"WARNING: Low disk space (\" . (\$freeStorage / 1024) . \"K\ + B free). Need at least 256KB.\")\ + \n :put \"See: https://github.com/timbrs/amneziawg-mikrotik-c#insuffi\ + cient-disk-space\"\ + \n :error \"Insufficient disk space\"\ + \n }\ + \n :put (\"Fetching: \$url -> \" . \$filePath)\ + \n /tool/fetch url=\$url dst-path=\$filePath http-max-redirect-count=10\ + \n } else={\ + \n :put (\"File already exists: \" . \$filePath)\ + \n }\ + \n :local rootDir (\$awgDisk . \"/awg-VDSina\")\ + \n /container/add file=\$filePath interface=veth-awg-VDSina envlist=awg-V\ + DSina-env hostname=awg-VDSina root-dir=\$rootDir logging=no start-on-boot=\ + yes comment=awg-VDSina\ + \n :if (\$minor > 20) do={ [:parse \"/container/set [find where interface\ + =veth-awg-VDSina] shm-size=4M\"] }\ + \n /file/remove \$filePath\ + \n :local freeMem [/system/resource/get free-memory]\ + \n :if (\$freeMem < 16777216) do={\ + \n :put (\"WARNING: Low memory (\" . (\$freeMem / 1048576) . \"MB free)\ + . 16MB+ recommended.\")\ + \n }\ + \n /container/start [find where interface=veth-awg-VDSina]\ + \n :do { /file/remove [find where name=\"console-dump.txt\"] } on-error={\ + }\ + \n :put \"Waiting for container to start...\"\ + \n :delay 5s\ + \n /interface/wireguard/enable wg-awg-VDSina\ + \n :put \"WireGuard interface enabled\"\ + \n :put \"Installation complete!\"\ + \n :put \"Ping test: 109.107.177.79 via AmneziaWG tunnel. repeat 10 times\ + \"\ + \n /ping 109.107.177.79 count=10 interval=1\ + \n :put \"\"\ + \n :put \"======= NEXT STEPS =======\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-awg-VDSina \ + comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-awg-VDSina\ + \_comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=awg-VDSina-tunnel dst-\ + address=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=awg-VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run awg-VDSina-uninstall\"\ + \n :put \"=========================\"\ + \n}\ + \n\ + \n# 7. Verification\ + \n# /container/print\ + \n# /interface/wireguard/print\ + \n# /interface/wireguard/peers/print\ + \n" +add comment="wg2awg GH repo in client mode" dont-require-permissions=no name=\ + "wg2awg client" owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:local Arch \"amd64\";\ + \n:local Version \"v0.0.1\";\ + \n:local Name wg2awg;\ + \n:local WorkDisk \"sata1\";\ + \n:local WorkDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Bridge (\"Bridge-\" . \$Name);\ + \n:local VetchMTU \"1280\";\ + \n:local Vetch (\"vetch-\" . \$Name);\ + \n:local VetchNet \"10.9.0.0\";\ + \n:local VetchGate \"10.9.0.1\";\ + \n:local VetchAddr \"10.9.0.3/32\";\ + \n:local Env (\$Name . \"-env\");\ + \n:local ConfDir (\"/etc/\" . \$Name . \"/\");\ + \n:local ConfFile (\$Name . \".conf\");\ + \n:local Mounts (\$WorkDisk . \"/mounts/\" . \$Name . \"/\");\ + \n:local RootDir (\$WorkDisk . \"/\" . \$Name);\ + \n:local Registry \"https://registry-1.docker.io\";\ + \n:local FetchFile (\$Name . \"-\" . \$Arch . \"-oci.tar\");\ + \n:local FetchUrl (\"https://github.com/vados-dev/wg2awg/releases/download\ + /\" . \$Version . \"/\" . \$FetchFile);\ + \n:local FetchDir (\$WorkDisk . \"/dst/\");\ + \n:local AwgListen \":44044\";\ + \n:local AwgRemote \"109.107.177.79\";\ + \n\ + \n#:put \"\"\ + \n#put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n\ + \n:log warning \"[::::::::::::::: START :::::::::::::::]\"\ + \n:log warning \"Add veth and nat...\";\ + \n\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n\ + \n:do {\ + \n:log warning (\"Remove interface: name=\" . \$Vetch . \", address=\" . \ + \$VetchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/remove [find name=\$Vetch];\ + \n:log warning (\"Add interface: name=\" . \$Vetch . \", address=\" . \$Ve\ + tchAddr . \", gateway=\" . \$VetchGate);\ + \n/interface/veth/add name=\$Vetch address=\$VetchAddr gateway=\$VetchGate\ + ;\ + \n:log warning (\"Remove ip address: address=\" . \$VetchGate . \", interf\ + ace=\" . \$Vetch);\ + \n/ip/address/remove [find address=\$VetchGate interface=\$Vetch];\ + \n:log warning (\"Add ip address: address=\" . \$VetchGate . \", interface\ + =\" . \$Vetch);\ + \n/ip/address/add address=\$VetchGate interface=\$Vetch;\ + \n:log warning (\"Remove firewall nat rule: chain=srcnat action=masquerade\ + \_src-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/remove [find chain=srcnat action=masquerade src-address\ + =(\$VetchNet . \"/24\")];\ + \n:log warning (\"Add firewall nat rule: chain=srcnat action=masquerade sr\ + c-address=\" . \$VetchNet . \"/24\");\ + \n/ip/firewall/nat/add chain=srcnat action=masquerade src-address=(\$VethN\ + et . \"/24\");\ + \n} on-error={}\ + \n\ + \n#:do {\ + \n#/file add type=directory name=\$Mounts\ + \n#} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove WorkDir: \" . \$WorkDir . \"...\");\ + \n/file remove [find name=\$WorkDir];\ + \n:log warning (\"Add WorkDir: \" . \$WorkDir . \"...\");\ + \n/file add type=directory name=\$WorkDir;\ + \n:log warning (\"Remove config file \" . \$Mounts . \$ConfFile . \"...\")\ + ;\ + \n/file remove [find name=(\$Mounts . \$ConfFile)];\ + \n:log warning (\"Add config file \" . \$Mounts . \$ConfFile . \"...\");\ + \n/file add type=file name=(\$Mounts . \$ConfFile) contents=\"[Interface]\ + \nPrivateKey = 4CHyNhbOs923/EyNDguMXJXdghL2I3UyzXPwrANVgHs=\ + \nAddress = \$VetchAddr\ + \nMTU = \$VetchMTU\ + \nDNS = 109.107.177.79\ + \nPreUp = ip route add 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nPostDown = ip route del 109.107.177.79/32 via \$VetchGate dev \$Vetch\ + \nJc = 9\ + \nJmin = 105\ + \nJmax = 920\ + \nS1 = 90\ + \nS2 = 136\ + \nS3 = 45\ + \nS4 = 27\ + \nH1 = 472437748-472438637\ + \nH2 = 707808381-707809250\ + \nH3 = 1609078552-1609079495\ + \nH4 = 1012329484-1012329741\ + \nI1 = <\ + r 4>\ + \nI2 = \ + \nI3 = \ + \nI4 = \ + \nI5 = \ + \n\ + \n[Peer]\ + \nPublicKey = o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\ + \nAllowedIPs = 0.0.0.0/0\ + \nEndpoint = \$AwgRemote\ + \nPersistentKeepalive = 10\ + \nPresharedKey = RNvF7T1cg5tyXcYQnD9N5BEp6e20vVJQTv0GMjyvHU0=\";\ + \n} on-error={}\ + \n\ + \n\ + \n:do {\ + \n:log warning (\"Remove mounts list \$Env...\");\ + \n/container/mounts/remove [find list=\$Env];\ + \n:log warning (\"Add mounts list \$Env...\");\ + \n/container/mounts/add src=(\$Mounts . \$ConfFile) dst=(\$ConfDir . \$Con\ + fFile) list=\$Env mode=ro;\ + \n:log warning (\"Remove Environment keys.\");\ + \n/container/envs/remove [find list=\$Env];\ + \n:log warning (\"Add Environment keys.\");\ + \n/container/envs/add list=\$Env key=AWG_CONFIG value=(\$ConfDir . \$ConfF\ + ile);\ + \n/container/envs/add list=\$Env key=AWG_LISTEN value=\$AwgListen\ + \n/container/envs/add list=\$Env key=AWG_REMOTE value=\$AwgRemote\ + \n/container/envs/add list=\$Env key=AWG_MODE value=client\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$WorkDisk . \"/tmp\");\ + \n/file remove [find name=(\$WorkDisk . \"/tmp\")];\ + \n:log warning (\"Add \" . \$WorkDisk . \"/tmp\");\ + \n/file add type=directory name=(\$WorkDisk . \"/tmp\");\ + \n:log warning (\"Container add tmpdir \" . \$WorkDisk . \"/tmp\");\ + \n/container config set tmpdir=(\$WorkDisk . \"/tmp\");\ + \n} on-error={}\ + \n\ + \n:do {\ + \n:log warning (\"Remove \" . \$FetchDir . \$FetchFile . \".\");\ + \n/file remove [find name=(\$FetchDir . \$FetchFile)];\ + \n:log warning (\"Download image from \" . \$FetchUrl . \" and save him to\ + \_\" . \$FetchDir . \$FetchFile . \".\");\ + \n/tool/fetch url=\$FetchUrl dst-path=(\$FetchDir . \$FetchFile);\ + \n} on-error={}\ + \n\ + \n#:log warning (\"Container set registry \" . \$Registry . \" tmpdir= \" \ + . \$WorkDisk . \"/tmp\");\ + \n#/container/config/set registry-url=\$Registry tmpdir=(\$WorkDisk . \"/t\ + mp\");\ + \n\ + \n#:do {\ + \n:log warning (\"Container add width: file=\" . \$FetchDir . \$FetchFile \ + . \", interface=\" . \$Vetch . \", hostname=\" . \$Name . \", mountlists=\ + \" . \$Env . \", envlist=\" . \$Env . \", root-dir=\" . \$RootDir . \", wo\ + rkdir=\" . \$WorkDir . \", name=\" . \$Name . \", logging=yes, start-on-bo\ + ot=yes\");\ + \n/container/add file=(\$FetchDir . \$FetchFile) interface=\$Vetch hostnam\ + e=\$Name mountlists=\$Env envlist=\$Env root-dir=\$RootDir workdir=\$WorkD\ + ir name=\$Name logging=yes start-on-boot=yes;\ + \n#} on-error={}\ + \n\ + \n\ + \n#/container/start [find where interface=\$Vetch];\ + \n\ + \n#/interface/bridge add name=\$Bridge port-cost-mode=short;\ + \n#/ip/address/add address=192.168.100.1/24 interface=\$Bridge;\ + \n\ + \n#/interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n#/interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n#:put \"add config-client.json\"\ + \n#/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n#/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json \ + dst=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n#:put \"Add container\"\ + \n#/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interfac\ + e=awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-prox\ + y-client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pr\ + oxy-go-client\" mountlists=awgcfg-client\ + \n\ + \n#:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n#:put \"Add user:\"\ + \n#/user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n#:put \"Add forwarding port web-ui\"\ + \n#/ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n#:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n#/interface/wireguard/add name=wg-awg-client\ + \n#/ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +add dont-require-permissions=no name=tmp_print owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + interface/wireguard/add name=wg-VDSina private-key=\"4CHyNhbOs923/EyNDguMX\ + JXdghL2I3UyzXPwrANVgHs=\" listen-port=21641 \ + \n :put \"======= AWG PROXY SETUP =======\"\ + \n :put \"\"\ + \n :put \"Run awg-proxy on your external device (10.30.30.33).\"\ + \n :put \"\"\ + \n :put \"1. Download the binary for your platform:\"\ + \n :put \" Linux arm64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm64\"\ + \n :put \" Linux arm: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-arm\"\ + \n :put \" Linux amd64: https://github.com/timbrs/amneziawg-mikrotik-c/\ + releases/latest/download/awg-proxy-linux-amd64\"\ + \n :put \"\"\ + \n :put \"2. Set environment variables and run:\"\ + \n :put \"export AWG_LISTEN=\\\":51820\\\"\"\ + \n :put \"export AWG_REMOTE=\\\"109.107.177.79:55055\\\"\"\ + \n :put \"export AWG_JC=\\\"9\\\"\"\ + \n :put \"export AWG_JMIN=\\\"105\\\"\"\ + \n :put \"export AWG_JMAX=\\\"920\\\"\"\ + \n :put \"export AWG_S1=\\\"90\\\"\"\ + \n :put \"export AWG_S2=\\\"136\\\"\"\ + \n :put \"export AWG_H1=\\\"472437748-472438637\\\"\"\ + \n :put \"export AWG_H2=\\\"707808381-707809250\\\"\"\ + \n :put \"export AWG_H3=\\\"1609078552-1609079495\\\"\"\ + \n :put \"export AWG_H4=\\\"1012329484-1012329741\\\"\"\ + \n :put \"export AWG_SERVER_PUB=\\\"o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+\ + v0b9jU=\\\"\"\ + \n :put (\"export AWG_CLIENT_PUB=\\\"\" . [/interface/wireguard/get [find\ + \_name=wg-VDSina] public-key] . \"\\\"\")\ + \n :put \"export AWG_S3=\\\"45\\\"\"\ + \n :put \"export AWG_S4=\\\"27\\\"\"\ + \n :put \"export AWG_I1=\\\"\\\"\"\ + \n :put \"export AWG_I2=\\\"\\\"\"\ + \n :put \"export AWG_I3=\\\"\\\"\"\ + \n :put \"export AWG_I4=\\\"\\\"\"\ + \n :put \"export AWG_I5=\\\"\\\"\"\ + \n :put \"\"\ + \n :put \"chmod +x awg-proxy-linux-* && ./awg-proxy-linux-\"\ + \n :put \"\"\ + \n :put \"3. (Optional) Create a systemd service for auto-start.\"\ + \n :put \"\"\ + \n :put \"Route specific traffic through the AmneziaWG tunnel:\"\ + \n :put \"\"\ + \n :put \" Route a single host:\"\ + \n :put \" /ip/route/add dst-address=8.8.8.8/32 gateway=wg-VDSina comm\ + ent=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Route a subnet:\"\ + \n :put \" /ip/route/add dst-address=100.0.0.0/8 gateway=wg-VDSina com\ + ment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Remove a route:\"\ + \n :put \" /ip/route/remove [find where comment=VDSina-tunnel dst-addr\ + ess=8.8.8.8/32]\"\ + \n :put \"\"\ + \n :put \" Show all tunnel routes:\"\ + \n :put \" /ip/route/print where comment=VDSina-tunnel\"\ + \n :put \"\"\ + \n :put \" Uninstall:\"\ + \n :put \" /system/script/run VDSina-uninstall\"\ + \n :put \"================================\"" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="local,ssh,ftp,read,write,policy,api,rest-api,!telnet,\ + !reboot,!test,!winbox,!password,!web,!sniff,!sensitive,!romon" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container envs +add key=AWG_CONFIG list=wg2awg-env value=/etc/wg2awg/wg2awg.conf +add key=AWG_LISTEN list=wg2awg-env value=:44044 +add key=AWG_MODE list=wg2awg-env value=client +add key=AWG_REMOTE list=wg2awg-env value=109.107.177.79 +/container mounts +add dst=/etc/wg2awg/wg2awg.conf list=wg2awg-env mode=ro src=\ + /sata1/mounts/wg2awg/wg2awg.conf +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=*136 +add bridge=Bridge-LAN interface=ether1 +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +add interface=Bridge-LAN list=LAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 comment=\ + "Peer for MikroMaster connection" endpoint-address=10.30.30.81 \ + endpoint-port=33033 interface=MASTER name=MASTER persistent-keepalive=10s \ + public-key="zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/ip address +add address=10.30.30.10/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.10.0.2 interface=MASTER network=10.10.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-secure=no scep-plain=no webfig-plain=no \ + webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/special-login +add port=serial0 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260710/20260710130001-Diff-Config.rsc b/MikroNUC/history/20260710/20260710130001-Diff-Config.rsc new file mode 100644 index 0000000..9c68ef9 --- /dev/null +++ b/MikroNUC/history/20260710/20260710130001-Diff-Config.rsc @@ -0,0 +1,3 @@ +5476,5477d5475 +< /system gps +< set set-system-time=yes -- 2.52.0