From 4f564d091bb3404cc7e1239ba42d213b287ab7f3 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Fri, 15 May 2026 07:20:11 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 15 07:20:11. --- .../20260515/20260515072001-Binary.backup | Bin 0 -> 119405 bytes .../20260515/20260515072001-Config.rsc | 1247 +++++++++++++++++ .../20260515/20260515072001-Diff-Config.rsc | 6 + 3 files changed, 1253 insertions(+) create mode 100644 MikroMaster/20260515/20260515072001-Binary.backup create mode 100644 MikroMaster/20260515/20260515072001-Config.rsc create mode 100644 MikroMaster/history/20260515/20260515072001-Diff-Config.rsc diff --git a/MikroMaster/20260515/20260515072001-Binary.backup b/MikroMaster/20260515/20260515072001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..267c52cf74637fccc20a77b585e50ed58ac5860a GIT binary patch literal 119405 zcmeFa34BvU*FS!4lBT&`XxaCYvV*iu(uJ~!lu{O@r9c4@5Yi-V18EYHlok|OR2COp z5fo8S0cBTQKvwlpaYsQxMR8vM5f?U*=J)x|y*HT~3dHC2dH&D)f1j(&J-NO2%$YMY zXU?2+W@i4n6;D@wAW$3;`LZ*nI(&Yo$891afrvzsE-eSgaBwUKw`XvnMIaId@!|l! zaXSJTQ+;L4Wb{|c_u61ESYL*Vi0Dcxv}lQ*1bKxP9g%^EGy;(jOSM8A)sjH9BE?Xx zAs7q>MXF7uWU5WoRa%|y`iz8H1CYkxwT4m=eV(d-(_NlXRa)-Nu$7f3$YmWWXN>z$ zDzqfZSv17A$VX^l?3S8PTJBAAI|9`n-()}XinTk+tW~Z+YpU(iRQig2!T+tETx6#= zkXGh&1suL{0#O?xdRNZWNJKBla4HeKBg1XE=k2)n!R%Y*cRCQ!qcYr)h*ryRCnCB- zhC35cwG4M5BBu;@C87y3d<7AWkl}7bR4K!0L^NE6(}`%L3}+D04Kj=dGf0Nb98L=n zO_ZN!5|LMivxulfhO>!imJH_*QEwUU&cV4vbd~(P2NC&YxF-=!mtns33{3=Y3oWgv zb~%xaXugK!gS@r~Bz#3g_X{Mv7*E0qfrJlYiJB16V*&|#r1nJys-+K!gv|m82Z?Ar zkzx0fgfbc8Qc_SJ+=KB%V*SoUV$5tJ(SWAXrbtJI21FV(JmXlR)TBWkw_}>u6EF_4 z+9o@EorqFnoNjMb0Ijw`smo)VY^+e;>0dNr3{h%)iLc5ZaM;uO7maw~e_k3PvNUvO zr#efcSC_`fmnQYnrHLf_9TnMn#$+(sW|aPIFcABPN>M5ymTCzVWT09>sU)6sR2V7) zMxWhltaiFfJvAs$Y{~GEBT5STN7lhV8WQ_=5#mEF z>{7%>w4Am)@$D{8eA5Wxt^R<+=k!nJ$&Ty@=(PCv7dnEf2;lv!#ris%PDF9q@x^I> z`Qk)&grbsSRf{SrDZVw-qPTWKaa1d`Arf8_NLVUJof@sUGx}sb^vU+&Cp&(eLeECG2+6W$h2!be2(tSn20%JKmuvcaVTlOiCoBS_SHssgfXXqRWRIlKYm z@G6&s(WnT8qLO0c2!{_t_I13lC@LvleF^fEUM7n=g-pglrME%cT~y35dOM>R37mDOhl&*DZE7o|x&td5{X@Dcm>Ptnp@ zO-mP!mWXVfp=={t^M1KCKT~IG?s6>zppKyYh+To7Z`BR#jxw9aUDnfBX7vXGXxm{eyhc+9@wh7!x6tqykFN;V`-l+wQa0Es=uwSwM+l)j z0HsDC)<0Qex`LraNxE^IstlpzSi?qZM$c>_14u#N?uKvE!qlK=r-gVR*Sy0Yu$H=< z{tAb^o6q601|0ToRc^){hkf`ZGmC>15s*_Fa!Oa{)Hsxr-RJQdo$jetm(xBngt0Cj zgjkx6vJ1ePp~l)MgjJ@0aDHL&4I!kD3naW5!CZzki^wpONXVA&pgIHiO=|oZk@y21 zxr@3y9&afmVrPiN{Jdg+VO~*}L7}Yck{pm0$Q4Qv?xFITkhK|E%Q7w85MK>9xA6Ps zTObl|RhVMImweN16G^tyZFGA54x7>IaXD?%CWgqY6TJoKg%JA8Nc6@?^q#7K3cojm z|FW$z6GhL8%ppB8hq~IOG1M?iE}37rVP+w-?8waOZkn?~IQd==mFsI_(pLBfCv;dI zhB-vyEVQNUQ1{P?%&k+XXsjbxT`psp&r@j}omXUZdjiJ(BT9<$N*wmyq5L@>GVuV_ zPU+pE2HEAHT-}kAq%KGKtq$LI$G5rRZ?6jF`$4Q)(qSHeeBXqpEQgIJVr@x8_>^awcC9Tzu!1y@Q4y)Ph%Gh5QZ|V z%~9&{Or9QHmOYgzaAdA&b>=!|=*W_h{R-;LI(Cews-&va5jlNs!%t!>t?qJ{;}#-n zieW>ZfMGhnK!(w<6d1#}GFffO!L5jBp8S4mB3cMD0}-VV(F5{xOp=$$Feb^j%P>FL zyW0R7l*t~X6NKX)B6^dX%AuYV#o-q%F^R=b;~+Qj8*&rVI@D+T6IyAMMYCv%dTj;{ z$9a7Y*^GdZCa%Qc4;cNmVeyq}mw>IDCv7GW@S1q9urERTmL*FJeTH>5jIIki7P{(tM68>BKt%5o(S9PdGbS*h_CcHcn20_hqECtF5E1PqqR)xwu%v-P z<5$Ka%%JH@BHBkpiv^-30?~s4(L(~!Qi14UftW~n3pOx;Xt_Wz4}^rk69UmnfoPRL zv|3=MM0!dfbV6Dq5Umr4)(b=%1fq=s(I$cDX@Te&fpty@cv>qEJufho71}aw6^LGx zwdd^uVJsoc`F06Jy9J_`1fspMM6U=${}2dz2)!Rm^twQ_KbB~ZK+Nv;wruCK645vE zfC3=_TNnh?P#uXE%)%n2R1Vac?l3;(0_uUJ7m*>k6U?V1&g=tq>MG3GhY8e|NVGtf zwaz0F8}}nJbQ6g3i9{`0QA&S&UqB>k2I9LxNCqRh8p$<8hG%1l5~x;;9YSOX1__2* z5k^yyijfSHAD7_ANF<|>j7D-Tl8HoO&!rb{SVyTC$dX|)$5lsPY&5F>h{0|vo51I}T+(Qf z27!$!sMY0qAS4tpY6iKo4@%*j!b1homTm>?`0*JU)RnCT&2;F>M`2nA=0dMU43&cGWemvL0k0 zX`DCEg+rW?SEeF{`goL}NHYJ2YOlx1D&3DdykatndlR3*buo358( za9OdJL%wd6pF?d@R3gaS&GK`|-g{*jYSRuGhAdtq!@R0=I0iH*a{ofRIB1L*o|zT% zXRTxdugfT;KcXcu`zR7LhNfr?P0+5Iq8;e%{(#%cX5<|Q3>}_d0OPi?WTq+3tKDJjFFA+8lhR1cACaU1hH_{g>XuB);_zxl4`c&*k!O_M z?{r(y{`8{GklF;y zXrV}w(2S7jV_c0lvR1+#oj%oS_xRI&RTY7NSCV>`JocBc)RPDwM#TPI%qsO)2^WW< zT@DM8-0}jFnfAt!taW=UH%G9un27!R+o&oARmCByT3tXDQ|CCUj1i194uECG;R}?) zqf}B-d~XEF=*aj7l3~^Z=drY?}(rXt~bT~rcm^) zOeLsV8MX!~b0k9BRNQZDG)Dt1yw;#a1Feq+iXV!eW0+XNyo82ZL|kq7*JpY01T0zBV^$P8AkTy(x(KHf0yAz+~s#*z}O@|f3p$% z+l7`25}1Kh5J(V*Xh;wf5=aoK7ZN=QsT!BZKth+kg%(U1?68iJKp0VkraBUZCeRO? z=}3%eu9K8$oi3yp{-_OsU+Th{X^>ev4G9KM9~~h-Z79E(YM0e*Hj$88KP$IqZduQ4 zYtLLqPqVeB%_7$M)IdV#*}6i@CIiifo1CE8vNGci#^VmA;|>Pmj>rz&!9?7_K-|GR z+`%~9!8F{_G;mLr?||{IfqX}B1%9Jx;oexjL+0Q&6dv56?BI?bk2}Ug+@av$4&?@S zC^oo5slgoz4ep5|E!U8qY!z0g+a%x32_hW)xKP*eb-oj)dMCwzu##9gOoh(GDhO~j zVRMJ32BPD!B>Wsp!Z`y8F(Q%1K=iCZnm@)Ghztg>N}yyB_gXF z{#Y`&M4}I4Nz{H6i#by;cp#R<`Uhi4O!^q_d=g7y@KZo%W65wJmgtXI66qYCOcY5Z zE0R(qHY7R&i4uIXV%*@Q{X0&GaG}V~88LbxS?r?a0 zo=U)tMM|Zg43tU_87MU&D>rvQc3y6QIWOPx44&?brPLUv$GvO_Ni`gB}AF{$6u0TFNq?h#+pn$O{R1c zWSU8mX^?0kfd(n|Pe?O!NSehmX_j4Hr#yQpO9(4$I>{DI^gl0UU1>SLjc8jz%eUVez{qbEs62kl7v<`rDcJ3*KF+=qVh}VlK@yJ>!{0W>!|6%(Bg0~&e-n3hhPks7O-VbXpor&EY&2ZTlDSl;PElG`Czs0p zH*slKm`l4Dmx@N_58>L9f#XuW3#F6P)3RkQ)jhQ|)x{;730(T}Qex>&9Z|9@nrdY+ zbx9EwgjCV$NQ?^$tNIW!k;00}DJG&+lj{rRR3jaUHI0FS2`eV~*ldUiFebZVbd;(q z_c}dcA+|fr)7>v{yo>`c6Cmj`<_K(R9ySHU_47IH<&Lx=c|}l3ZxR$Ux|T>l9K&sL zd;)^*?~>yp97I9|k$`~vNm5X~;E@C2VTXfI#{?2V>@$djo8(}44W{a|2y&mf=wgV( zBmh#yXOrQ}a^a^N-_0h1M-3s2qQ;LT0Pj{6k>PF!(NrSC!#1`c zz_8y$aJLzL&=O4}GGr&n0|lIJ8aUkq1lnQJdNaI)x5z&bK{X3rwwSW8BPdtAvm|$ z{ZBkRNMzWQ{npx#iP+MXPl?2oL-@<*L}Ks5sIl`zUE&HY#$YXb^+#08S4ciWasaVZ zO!q-C8;%HAeJ%tbS&W6w$v)4B;!@&zMB*jNEU|W~*Nr0YxJ;1+#Fl~0N|E{Ep?!k| z0%HLyXqXRtQ8jfGwMn6+W3Vej5XHV(kpk$+OsFv0Z)~!0$6bk;O+yc(BdW% zrpQZqz&l9D$ylO=X5fHnEtaSZKOpQNG)2LSWD-J~%$Ce7(C>2C{mQ~4*cfr4YzhoI z6&T920^?f+24i4<#I=w;$11j35g()iL#oc@u$!C8j|J6Zi}F~bdYq{|)~X(7DUWrk z$Js4q+%ciYhAO|qm*#TV!9SP7J|W<9mX|wxth6X0oKm<@LIp+%6&NK{V3bgS(KM8G zeF&u~W;F_P0=|f4F*2}=Y9Uh+LO*o~`c~G&#Sj@*27^HiNG#G)fI|kPh`KO7+5E_r!Q2A&D^LkpL|LWQefqiyEdNfL!!W zOkfF44KkyqQ>E6OfY30fJK*rS9n49uTDXXOu~yUR4dkTxtkw7(jU!3%24TUY&srT2 zBtyQkY7fTzxpGku)ESUrtbBCIFjhV)kq}tM$B#>z+KIaWT7m!D(hqk7^D<8|`_aj$6 zR>;q>@=>WqxI@Rv&$05+EyGy(sPF_X9R)vDKKkT$u<}uPzZbW<6V(Gp39j$ru~JeQ zpx|=hS9l;U56)Hib6MOo^OUlX1{M(%5&F`&KNdGcEMxS;4;i_(ac(Hfha(p6pt8rK z6(Ud8G26f~%T`E+;u`9R9%|~S3HYr3^m0eQYb|&9y$**x-R7x8B-X|L7WfNPAmm3{ z*?1``>bacms+x3r)nrGy!(N5VBObXzc_Ju~_p>9woM$-emg<#?b(C9K09x0A&~QwN z%w-mZej$h3qHJs>;ibx^pE_A#s0@Z9VlIup9q_ZIeV4)?=%yqFt{uAhqpXR9wRFyiA z$+##p>4HqUULq49u2=5yl)D^OuhS3Qqa$&%j&@az%h2TyDw!%78b$(&}`jhpYdB zhZi)oi!|q4Ft5ku^3<1mrpiT=L0^;{l-A5$4u6ubdv1D}-|tNiXB7GDf;ziMiLhi& z>~*;u6Rlony1g{b=|y`$15rN-uNuE}1Mj7T@Lev$WMmj{xExqXmG1GeMtQ-*$e_Oz zWm6q_j)v=57zX6~vzkK7I3mGL1k(y8DFPz78W0H$i3CJ#Az};BTFvC8J(y^`LnI&q z3p*=dLWW6J7b2l6k$}n3-2$-*4JIa-kn|!Fuzd?Q^ywpS+0vIt$RiS9{~1Vxl_XfM zz&7|PCK61Tnwnw7#L7EtDUc(ZlCZ2L7Ry?g* z?riI!k8Wmm4_M0eGVWOU4h(oM%J(?=9#3Q_9>AjN*xwV03=@yAs5%4o!bu_$pTR;D z*rG(t(8QECkhH{{tQC==Su++3$3mIj#oO=U#l4`INMi)=-h|y3He&GMZQNn9!re%i z+KQOdirB&jRnD$q99+P`{W&R8ShY{RISVEF67=F!oh<%cn}A7 z=HN~o+@6Emaj>%9bV`+@$`P36b@*#!+g=IGU$W(EybQzgrNFRbO_ZO*28GR*aQzVs z21{l5Tre24%P^ezHW@x23{O$!IdZVk~~EzwAELv#|$oK6WOT22ExBai{h!ES~&<x2Gz^-*JCCe`Egh`1@~a zyh#wwtK4GJdbUE2akDujD>an=kYl9-_wd4dfcvQX%$wVz1r$?q%pnQ^|!Ma3if{< zi}n8=7PqRbas`|cYt#Pa+8T=w`p@Ha#0(?uUo^u=l$GE#f2Gys!u-%3@WO$OOY!jH z4ikL>Tbduo_CC=O33|415SwK)$2uJB^%VzuJtD(%9obY>jKK~PSoJ2d*%PMV@^%wg zG3RsmJ+7$^Uxs7@pT)MT3-6!{3yrd~E(lco*Op0HM4Ci;uDsFD7vc zjL;4RMqH2r!zHiyufc`uWKLkApW=_klv{y8zCr`+21>s0Ei3e3@!vEV4;BC_Fw9Ac z9~@>S1%`P^@xLSZM)7@PQ6N@+9g@Ot_FjXmeA;v)2 z*_ii78vUV2p z6y8Db5=bWisV0O}t41oasJt|Hm5pHxdlfH%k&&qlVbrNH#!2hOLny;e-OHiWg;2(* zQ6@z!MF*++yuuMB1;epzwq)+V9QK$HcD)+AUc&wt%dZcii&djj%I|Zqox1))&BumN z8q_EgD&6JknvcFY8A3?KNTlWAT@qN~qem)+kj6zI_4)$;ETwTFr123*eU6CYhuwwk z&W`KZ(EZohGG@zgA%C7L`8EcmNlD37GSmWMg2?wkUd zlN8D$S)E5xrPJl&w&-Bpxp451AqB&ul0OW4atM2UHTF0OQ`(S%BG#&-k`N4K{Se9q zYLt43V1{nmWm^bFT$H~-2wg)px|V*2t;**NOiO1@%rX~rU(~J5Q;9qp=fk%-Kzi({ zkSjNejB!z|*f5lFqrV|zbJ+jPwOoPkY@#TN$hc7`UauFqG!Es`tSn=9?_hgYH3{X?RGmw_+iy;d{IsXrtu90`1iqU9=-ax{49KPCl<6Zd%MU*bXU# zeZ<2s<{8R!%rg`i^9%*fW3aR>3OK4uMSpJ6rlMKbK?)7=foG!NE46ZL& zD&4=JLQ4}CqKlHH$5mO5h^9T`+R8i9&5Oeaj!z=*70Me#_*d9>oEG5p#_3^kK zl0+nkug2Uf6%(OUa9mnZp!mO7XT{viRB(0;y%TG2gVpG=oONYFX4`o(qPkiP zrWXByl|KqcNiXj)61c^Z(V{3;ZKSYLg zeyF+3hoHL754D&1P#RU#q%ti|7x5t?Zo_5NFmsh$&d?U4Y}pZnbWG^u=3TLIxx;>= zt-|Uqci3-4>zV4X8@nddi*v|bu%io)FZ-*CRzI`WM}UrP@x6e$nJePW)d>+ zJ1Zyn9RVCU=2tRQY;U+@lB;a81#t{J8tir`I5r!T7uCu8*J|0;wGhZP^5Pz8kya|i zcPeWJhBBwG5*B)OEW#7!p>%s*kXolljD-t;|s7Qc4);2SHp$QslaGn3Jl#yfuS2IFxr{|W0&cH zRA_0)I&(b|Sks1u6siiRps+PxOp{_ZWGxAXJQj~tD=*WVFiV{D0+TSA)6TZLM;IebiX zKwQj370V+0TRD6Vj#y;@Wo0wGQ)pSpwjOUm`9)XC=cT0O=cQ$v`&qIJvQ6Flo4VgZ z^dzy>WeG$$s)}wV!U{7 z3=_k0#G!#B^Y8@Cy6Hu-$9C1|%%%jbX^z%lnj@T8uGI({jiK?^#l`anUUiQtQ7?9# zJ816dL_vs;AyZqk(UhXsj?`%rE{4>U(loKV$z(Q}O}Nb0HBHRSHJQ!1rc85|srz+N z;g}<|<+B!INIOSJBGVipPBTXkXv^^8Yr8#vD(ll z-E-@n7dKz8*;h8j-lu=Y?F$mEG3{5y1jp6?eDH6XPc-o-J#P4LS54!+Lju121KYRs zpC2{xXtHVKE$edLnp)d1ZS|Hb&g~lXZqA5%C%*NWdExy0w`|rboVo-Z~f$SqmPfCpPc{hvLAMxyMC#6^P$grzI1ka!IxLxZ=BKNx%tHpb$OuR zie^uIYg*YeuQq>Jp0CBsfsYH{eEn_18%|dCy*K65q*<>48g;s_;X97&R-Nkg;oYY_ z%c=@=&)vV6=W;ybvOt{{EZH%2*Vk9Se#5%kPh`w_&uv(dqt~pRnIdd>;moxw4=roA zZnrMj_TF77d7Q8gKS;MS>JA#iad-8a0@4bDu()q{Ezu#~B;j3QR^y9kGixzLNJyXv=;hLxJ z>v8|CUA85oW_!+cS>5RPPxaRh@}D2y(Qtanh_5^35kH#LbbynmwXntM0Q*cRWn$LvSW&!{=mqv-=LPO86vC>gyDeSAK*gZu3N z_LTqj6h#zjA%_01_msOZfZRcp+P8amtIb|k)+0BwyS3DwlbLJDv01y@OeRxzYi?<7 zso84kVahaF9hsTgrn1uR=3GaQvYZ@?!<=dBVa+t%Mr5v2K;4ckYH-}5Iopw$ZOS&~ z=4N%zEbC#Of_1(Z8QH!~{>#HJa}HmA_|@>kFC0skAAXbb^NQ2LduR5`Pa-m{(mgu# zLCw0G9tup}Z;EmCa8$Q%zI~Lqc<~#zp1alP-uv>)hq6k#96v}s&5vHYsB^OkKi!lx z;`+|T9mYKRK>q$O-f1}c!{ranxpCjFvjy>wSGDeIgLJhby(h{ zj=vYZFyqvK*n94a+w^U>r}NicH~sPBy`EbCN`|J>#_}(|YA`GA)9vqEf)`K)$67ER~2@6f9aFsRy}j5_qN~nwYYXfoISzR%f60gUu|#cNjx{X zd@eP(XVPzC#)ubd+@I~s8FbUBUe2{C*6)V>WEf|DcKTg=lK=dnTvxo`b7$%7tqE(t z?J?%JGiMCLzIuEAr<;rQeQ&?Vb)v_k3U zo??HAbISBz%kNut{Y!;2+mwG$>D)SI*@o65o+*9q;dfKEKKW(WaldqS^gUAVQQMdn zt>?ek>x<;qIzRo(ADuD}e$oB$nop)Q?~`?^xAEEJkJ~JsHS;s?@)I6m#TReqHMsln zw~Ob^eq?BT`ja782Ih@gzv1Q;sXH`Hcm1+za_?~&PwxyoG3|-BYnBfyyz7m}ulFYR`!03Dg1m)2 zdJezJr5iPP^9Of-IeXXShi8m#t+(u&QCap=2W#<)l3lZ|ez4vvTe7AFEA!SFmL$D@ z;$v~?m5yNt@H~!RmU!yid&P^%PI@3mccg-%h|Cu{1J8pdH%{gn%Ef3r~-R*7N zYG3X_p6a^3rs%bm^=-ZG{pHl$H>T>2e|_|Z&gHxBG3USg zVe+@*4!^N#!PLZ~udE+J6Z_a#4|=coj_b?z|G9SD3s3Gj;;;AQC)=N#U2^F4lqucb zo3s6)((l`NM~v*S&zC&ms`#;wwV%?g`|4x1K8{yPd*3m6>jx8cj~vNb_2JfgzB^s- zhXu`d=Kg+OQ{w*MeAUw8XCC`wgt=@aA`H$P%ygcfv zz>l|g$qbHNW_dxoZDfnv7k-re!<2c8_9qn$==S}o{6|X?ELFKXx=eb1=9crNDPMnZ z>gf7ssyppydRubL{BOtqe#3XG-if(Aw_vRPQ1ZZ<_p*dvPqp0k>yq{0qMN#$?KX1EoGTYj5w6t`&9_hM^7hT+vP*Ar9({l0 zZFApEN?RP~nq0WA`s0SdAvdiazV?;Jx2=3~)(s=yGc;S~>oub6x2wjl+W14!$_=lS zcWgF$!-=fNf6m`NWy6z08kt{Rv2tYdB+se6eR6Ngy!P1IUpEeQ)gFImp?g(>_}cg8 z{+iJ88qR{w{;r1v1GufNBbS@|4zdAglHN(t+~F@18-C}9B^ZEX=+osa{*Z`s%vZzDYfL zb!F1Ce|YBB7nV9cY<}(e=4*C7{aX3^W7l_We5_r}=}GSVQLPPEZFetfxb4$5!S(a5 z{(x+EugM#Fea-mi^Exc;F=*T)I~Sk-X6okr+&}9*I&0aZAJz`~rHiJ~l{YTfv$N)h zo7U~TDse;Ethc|ut7!X{ud_UvL-sX|-?yvXEw&9uV&)dcEqU|TAAkSjA17uQpO|)_ z@cYl2Hnt4RHGg{O%O8)o+VyBf(xC&Je(Lvtc>RgQ`mSJ?jPzzVKK=RjpSx=Yuk6%v z9Dqg3P!C(*(I=D`;z3Qdw73QTXw7{_o zUxz@o27Cv%%9YqQpn<8TtgLp_U4;_BZ zz~Mtj7GDso1;lb!ZJdV!iu-dch`UX)!hU4-#IO#O>O-!}V8F0XXF1M<1Mr70`mgrrf(9)Qh_9g#oTNVTu(js$Z-lQ2*f|85rQk;!`A0i!*^MAJEE8aV z?uhKM6(crv5wRsEj*ehnX_@Ovm|7OvY9^8-BrLw|3U0HGZXC=a;Mi8+2&qDZi&9IW zD;IxAtK$#sklh^owR0VR{pdfTHbwNizh0HBYNM%55y6cN|KD4c4V3k84!6xWjSUO4&sBE#-Za{E@~pA^Q_P>K{X%Dgdxj#MIZYQc(UggLRJtG6$C`0*_b@3P-;jaHK}e`M`BU9ncP$utYUnG5dgegE5bSfC8e_FrI^7HFB2bcZQ4k1W zE5}(eYT}Qa%kJ~$#w+I<#Q_ih+4#YU73n*YKAy7ggF!dE_5CKVUZSRH%vS}?&uwn` z`*RP@dF#MCdl@w>d=00AUcjyhY9Mv%W*4Nm9K6M-nY7Z~t?`RrO?}($+q~B{3I?K_}GWb1q;lv*caU~_rO zoo=PpmDniMx&out6&UX!whGehc+T5S1zz-!Zju6beM3JfQZ-PAJz<3)F5FY3O|Dt{ zOHN|@(Ml0SOxz;EgQ*zMbrd2LL54d5z)&WjGshu9h8oTb9P@#g_fpl zXo(|wQbP?SbOv15xF1*enNBA?(;-litwd#8QW;oml3}SJZApdIi%>!!eG?Fa7Rw@e z*o~SQ3UEs=-_IQ?~p9y;M<{SR@yt62r1czYAnYIU(P8ind+#1F# zwybxmhNwm(36K;iEQjq;j7r6RXE?6Fu3<+WqnQ})t?B!|LOk~P3I>B`xI&;%Be2I; zTuMqUE5!{O5^1)EMD48_Vn?K5BPY#xjdUpF_4xAy4T)Y1&U738wh+(m0K|&P7>4N7 zdu#gco35c$s@70yGV9ja<(>S-fmIHFz;DA}Zq-oeRI70s<&=jj&`2AF&d}K248NNq zVdFEV7RX5t)vA;oal(S&um~45zh16!)T{y{Kv9A5nF2!_eoB5HTCozT4z)&U84YxJ zUkZA}vT8+xZcK#LwgUE_YcB6W2TdCbf0Y)5#l8rg!mebfBZD0Nk3rx75sMa$W9kvx zPaTT5)UMEW;?U-?)twZUXut-5aZE#Mi)X9`z=$}od=>)z4NUv|8;NB*mj5%viXb-r zlElXT-Ndqm75@ye?676=lEg~UyniES|7l|5!P(?X602vNed=G(W)b8YZF@}yq4h6G zs1%uv1q$-?^l$52e}&Nc$}IPiv`XRU5I!iE0a65ExOT@>m($Ot@(qYI*klqHwuMw+ zL`|ouLdRL4IujPKXW%=SE3~8Yq(!HfdKrk>%R}Usp+9hhq*Xd9OC3H8_z-$nID-oc zfdXS=%XU;~QT7plh8d>_5|#mLKasB_;1xFC1;OkUh)CpZwcCAuWC>+RSq%g=S%I+= zVsCl96~?8wl$0QpU)Gk`(nAa$Y>dT74if~15RA1fBh|MCV&B$-+^okY;p|%ju_=F? zL7I$*zJl4jVHkfEYG)vi@qgEj5 zFPF0+R%*?LJ|8RT0JR7Po|Pz2mxMw~+hDDj*d|yjBJR0MQlX_ouvTmarD^w*m&5^5 z{|7j*Ho<@*Mu8*dQe^>aqQG&nvM@Tp(kO7mu$?8KktGNurVPb6szV>+8H`YL1L`Fn z8#;1W>xH*ZLV z!Wu$0Awz&fYNNXHfw=YiE7Hn5zG|z_?sSLNS^SJ{OT_L!>k2KfHA?C-`Zn@W6nU&y z)Ux%8P+K%u*r0*EKpRJ7dIo4>k%iB1#fJj=n;_5|4{jZNtnlotZx60)HEdD;1Fzm< zUe@5$AH(e%k9@VN^NiO$w{^L0{;r#^Y?ky({V&(P^VJ`ndXy)>;d?d^clM406Q|88 zS>>HO>Aji5f72`2w8^XGPmDa0u=k0jJw7^iaO?}67R0sinC@%d zxzDNk-{17uHvP6nJ)Ulw)_z`_tt~fSF?QJ3+Xl7#VdRWs6ZhVE&u8D4%-C{W56$UO z>m9FGZ2YbGt}b@p+k1pBKN~b!+)%hZZp^lvV<%^4uif_i7`wP;ZO1{`nzM61GvD^e z^bG3xVzQ$4Y+N^o<|Q_?$)@YU*5fc-Z;3@~-Ut`HVF;oGe>+sPMqq zFK6tZJ*Jp$ba&t2*wEq4b%X3)94=bH_g z7+=(BfcYBNTdz)=)bookcFvn`c;~&oec%0P%dRU%AM7!sY;v3Pzn^Lpb8P)v&yOA_ z)a;#l`jP9${Ib_H`%JedR*60ImIvOveQ#68-n<7687h*}5=;+0vE?CA^V8LpV-C)o z;6C!hO)Wm0+xf0xt^V=H7ppRFvg~>ImdOtbjg0rsOZ_eL^u3>#wOe;jo30~Al)t+2 zdPmjGGe_>adVqh#OZ$J_-u1cV1NxOOdg|LB z+pKO=G-kz+UBy#=Trs}*&LQtJA`ZWBT}Jz=J+nFvT=VO&+GP`(Wpy9^kNL@i0{s_s z{BvdEpqU4^Y&52~KGoOTaagOy?GhW9zgUob^YI0@+iuPz0}YxUV@Yfc*%E%FDK zAJBW7jEsBv)-OAJa(h9M?%mYm?!7yPfBW#d#e)hDoZPmmL*rp(s~_w=vufijZSNcS z^}cztCrm4PY0dQcchx?*=-y-X&&)bIaL6|vR?-#inR`y8h5q~-x8y3wP zyZyo6ANl6PMX{}GhW)r=$*(W$PJQ8)-!?2*?cZjJzj<5o)9Wn3!e)nBdGAQLZFs{? z?|gh+`n|9I`P)l}N(X$E`{9S1mK(P}ab2sgZp)o{gXhquFZO*WTderGw)X>FzRAUs=vldiGj=YYc;@RL zHa<}NWb71k2hE}vw$AO=b*uQrZQZ`jZ*?r|C8uejpfCwG`yjoz=QbW=S3j6ls4nV;E0gCGZ^FGnPF?2p^jn}Djkl+PAp^Vt&}gY z$(QO2m;@rfU<(-qIgbmz(A4pT7AlqIVqa+0U$Aq}*caN1eW9!43${X1cd;*G>iB}4 zvK9l)7|xK$lIzu9FqKw+v6o}(csUj$B34V=)BKgCX)voopGBQ3b%i=tU`3^e14&k+ zg%wHC&Mndc*X2oU5qWKDOgZcw5-pO>4FSix8#uL35FD-~gJ`zz|;wd#QLt54Dttw^n2yay>8otkJ zpK8xwCn;jCfV@iOyl^j-m0Edmvw#K*mZ7m?;Tn{JYcmZw!zTtNa;N{?ZJS$&7!fXO+|3k9lsG1*^G!xx`5XIITq}vpf}Z+OeW~Q0L}KCQmp@tFHaad$DtzpXhTuFiV|IE@dZy7)VRKHXu))+VIb5~o zG*kX%IcEuR4($)eEUKB7Z%#AU#k721)pUo?IKXOi1TM`s3uD{gfu|u@WU*vb=E*F~ z&hDNgv(VH%*Q~J6tYTrKto-auv&m%6F`2T=X0s_bJKF?qCh%ndKVwH&-Tj^Z$vg|q zRWb{emYvMP3lKSggZdQiN$cZz?lB2-HI`NOWdEnv+4hFz=k>_V?QYC9S<=mBtIarC z-lg1F-su7UFdR&#D8VcALW_e}<_i z`!7wdp){%L(pd9LtE++~IiV%L-Kx|PYvJsmPPPi44K*{W{H1laZ#kn&wsVY0f1R?l zK1{aw?N(N&|KC!83Qrz6qMy-{ZZ;XSa!rM$UOxoSMSD%1oRO>EoNkh8-=MHBRJ}Sd z`t3`N67XMyWDl#HZgQ<(PW~8;MkC|pU-|%zyA>}2fadZAiIs`MXlS)@b`4nCap8_r zmN8mkD1|D3!H?}{1Zy6Cu-zV*UgHR0$Fs;CCUDXzF5J6NAx`gQW=0q^YGB@j%@N38 z|Ac7}zoEBqv1N+h^0kZ$_phZIn6F_`WeE9d%uWb~gH4G@!M;q2EfmTncFAZY9Xupz z%VbX$23s8LjMALJAwF?EjnkmV;CN@Y!5y(x!XAWRA^c8n2|xt$7$4=M27zL387T1IK8n2g1lcNj*Mb|97tr?p1?G9_Qw@OVv}p+ zhr{GA#>)4dU=a>_LLX7WXj;p^Q=nFAnDa1V*Q$2%8|~$LjeMU0bT`O9I?HC#8|B~Z zWTo9)+|w=&-ihXfPOA0WtqIygi^kz+DH3bw*>LjH@i#JF%rya^;KgeUvN z>+{r1yX+^5yj3>lftv>h%D~~J#B4H=@2@OXvQs=E%0}gwvPp9&Y*P-~2j*pL)*=Ta zV4#p&14d8%Sij2?7?06P+9WdIoIIkiA9O5z;fO&)3kxvcWMW?qru9iN#W^71w_q?> zAeS8X0xrrE#(ex8bIzf_*N{z0E)w<|CkHH7T5Xu@I=y~}Eu+$7cgRB^3Kcm&g`j}c z!eAj8Uf7;`s4f;bapB%vCLW|P*QFApiI;g4Fu1^Lr#R(!GOi`b zk)%YnIBAArc*atJ7WP0bRKAxqH4`2-t3r zH&aYzf&ID2n^iU&(Xf{zvq`Xyiiy2aT=aRr!&h1EQ;v*Bp>UxoDci$?dmi~Yj1dZq zuMz%>3%y8r&detAbM&m)GK^YPj<0`ROLVOi+w^2e)sa}plr%U}8==kU*_h4`=Zu9- zS%FX%eZb*zI|67vGKfu4^(?Sav4gRyxg1^=Ce%2DS6deF0x9ku8KV#iG2guSnQXEUm^(^os)rJfq(D1)=3$uv~P=s7H+w9O+*8*BACLrj)o|Npcu5xHg9CY{@f z={lt*`W#aoKEET4jnF7;q_lzu zQd)tbIKU5v3oKQ>h4#@|eva9UGF7gp!JfEm-aVgr*QJ>!8+Vu}7*uS|Hf6gzUGR?N zbig}tBLY@mV2HEKVV0-x94aX~3$KaNAs77}Q&TTMCT)_5w{(Thl2M2n3hw}lF<%Ou z!wd3G_!qt+1+1}Gq?|5%MT!<=uSh#yr-w2^B_Sgz`Vp_xw|gqBPIsE$VfEQ6pyys# zIx)m3d7JMc1w|LWB?Wx|XLvL44xyaUnvrvS2v=yM^b1Rn5PC^3O>{e7fG08Z3co)( z>>+BF)(gFtaAn(kwy@4PxPRM7OMuj_6+f2JZon>tfZ>7`A)8yI)&sSPt!I<;7Zltu z$m0(bSt}g_q*;Wd$l=9mMTySr6j~A12|9I%yawuuz{CL^mu*3-h>a;SEx1o%VQFNz zMkB@cLl==EVl}W3pdY0+WIi&#)6+M6j5}rvZNl5%_palWJ}}5$aGrQr35W0Lf{jo6 z%CzC$SE>faKNN!LIT*5MDZ8FRh0Pz-!4nQ%Nb~JVI7xp$BF8P zh-eQH?IWTOrA2W#G1;&th6sly!397OUdlFwul zz~}gJ7|F+==zS!Z*eWr6%H*znW6ATScpDE2Vb9~o9Q+9ff6Bp!1nJ0ZT%U2zKj+}X z9Q*|bf62jLaq!ndxY>TgJ^z-2zvJNVIrs+-{*i-^aPUzMKE}a6aqw{t{+WYMaPTi2 z{3{3l#=$tMTjA|V4nD=fr#bix2cPBOKREat2mi^z=Q$YRiAuhh1}iYyv;spjS70d5 z3XDZH3Jfh*fnzurx~cLUI->$Zp;KUJR|*XMM}gxx7!pW%p2)!%@|5RE9GuL-^*Oi! z2RG#4MjYIjgPU-0Qx0y%!Oc0i1qZj};8q;mnuAj~xD5vzIXIPr+j4L_4sOrE(54ig zbmZVp9Nd|M;jL2M@5;efaBw#cPUGNo4$k0U69=0$(t1){nVPU1$l~B^4$k4=?i`%U z!96&*CkOZ9;NBdJmEqSg3W)k}a2^N4qNKc&&%ymUxPXHPaPUA59>l@$QY$#G=3oqG z%JU%{T*$#i91QD}@_sP~BRE=lKAeL`aBv9+kL2J{96XwXVcu78j^W_zICv}vkK^F+ z9DF?oPvGE*9Bk#_QVzCpFqSVV^f)-UjDyQLxPpV796X7GCv&iigDW{0%dC`qJsj-i z;3*vJ<6u7r!?Uj7sp4QP-BO-IaZ+F`=ThKl96X(aZ{Xk?Id}#K-^9T)Id~Qa&*tDc z9DFke-@?JSa`0RZp2xxSId}mF-^RhWbMPG;d?yDl=`MQP(PBdJ5xNqOkFb5mE-qaA= z-~!iM8iI?8U2kiM?OA~99WJkTIXv%i`R>&aEs{Q^_ccTh$nXamq6IR%PZQo?V?Rgd zhZ@PzhwCHhR0nn);NCf?fh9w_KGsOiMO>d~!pjCf)eziX>^h_&dRm4*(=e+jyFS-2 zry;uzYlyZ=Abp`BS}nt0a`}FxA-Y9={xRCwwh_|6J;!2Z<((KU+vc8KdM(@5o?WrrI|dFGIXF%m?j!NqaQ{lshIy5! z4Y%8RT4MWk;7a1~By(_m4rc>xxQ#XB-od<7p&!O~1#ZH@F!n3Yn`y)6=r-4e9S|+F z1b;2NT57}R*0$!pP2u1+9Bky^R1R*-!RJqLH-;Eo*JiGw?HFk)Vmvf!{41-^oV zyK!(D2d8sz1_vXQPQhd5U<(Ila&Q(0XLE242Y2V-Tn_HR!96*+7YFy|;43+}4+mex z!F@S6kAwSha6Sk3=imYk9>Bo^Id~8U59Z*jIrth59>T$e99+b~LpivZgR#evQWwKH zcmxNRaPUYD9>u|c-caqw6U9>>A(S}XKi&%qNocp?W|IT!)2%C|NSwsWvU z8y+9aw9;NbxXQVADzxGAsGZ#NNgO?C&tG$CeBqIijSXKeLxdAYzWotpf)X@rYoE6z?*v&ocZ$<78g-8F;zkEn~?tlkU;9Tr@%Xgt&#Y}X1()SJPeV=j@{F`lZD zs#59H)rfkN5gAm7VE9%e!k#y^Q6Or2ScM2yb0C@^wc$W9l@8RLZpkf z`jga%;D}NoGDM50jT#ZWSSm!x(IUD^jR-C<6(VD_h-Ru0!GESgq=YD5PR_R7rA7qj zn+nmaC@E?efe4;E9#Ok3(IR?9O%dFFDnu*-I||9)?o~A+_zYEu{t+!juc;Bi;iy9N zTC|8>S9cM3D^-YIj~dY~RbPXvQ;nz&$zRtn+wMJe(cmWqqKWe8*ltg>6dhJ0f|FH+ zXm7NLepVxbhgOB?i)ay@RwIIYSB2Qa4D1E~pUw6lH^)yjqP2aSuGA$*ZG9^o+V_2%1nK zdM3(RbM;a;NJL!lh+Msjqw6BBHEN0wuAxG-CR&P~R*MnDdZ-XR9cA^;*{7xmfg(Jj zIs2kSG{4D4Ri{Oi36E%glPGI#ev=neh!CQpMzkq9X3uZ3RfP!gEowwtqDAzg3K4>1 z)QDb;4$;DMYGxy{hDWsUk0_aa@BQlPM_3LJS>+-7-ut6Ov?Onzs%VJm;Snv#i*jbX zB=3L<5dwnLh(3yrM@#ZPRUtw&ks8q_(IQe$`VoqxM)Y~Kh}5-)I3_isFQP;ASdAJH zf}nUrkJUsu96fe$v5H5Cpi&_^cz=`>eXj0n2)|Mx`aH_Mw$9y2MG<1Rctq>mQO+RO zeXQmY0>4yd5kk&*MC)IU7Ew^$X%VlcLKKWr_1pc3 zdfty8dNE4d$m{Kws@f4^^ms(C zw|^+QqP^b!VHF|-_^A;+93`UNeib4_2Le&4ENWlh9c8V(e)wkxamW^0U6{4yrW%m0c)rb(t$s>AyWRx=dU{CdMgeXuR(ZQZks(uFttCdlNkg5<3 zj#3#t__NyThxk(!qMz%K**O1)Hy!haegv&52-x;87NHN2oH7s^6izqeWG4m0Fx2(wRq9aFwLqL{Y$kwQ4zl zKxq}KwUR)I0@c;kLsh&&oHdW?>gplU7O-4rQ=vkbHjk=YH!)gNv*)S{h$wF!)$F;F zE)Yclmz_|fLXbF*YME?xivrd9Kh;eXG3Gp~^?yd)L^t<-Ma3(GsPm{c_m%{36jW{P zt)8PG!ktI8wfDhj+5UD?Qx#PRkmpgoozy5=RLf56xr!Hkh_B~S;qOrjnXSD)RiQ$7 zK9352j}q1Fxor}7su0}|RCZZ1;O|kQ>i7S;`|>C`s`K7En`RLsgak4OjAk^#mJHo9 z-80kE(?SOAgJ6V>;jbyamwG1XnAs_GdHV4KaXUYNwon=!I6k675o!G3mdu;V3m zoZ~GgUc!qV+r(L%I8LGrPGbB5hj5Tfc9)_kMT(?!oWe z%R=FB01E|rOsHpX{A*4soGoCXK#vKvp?e2sD;!N=p+Jubb@L#`Y^ZN>w!%Ru9_m|hZMEazcfP?&g>zIa6zDOf`s}4&=L!RkVX;u4 z$AsE(@H_3SR5-=OLV+F=>PMS5A`)j{b{qm@p+Jubb$sF5oY`@PjD-R{Hq%lK zp?(n`>SYcJC)jwXm*YZh=pGwpZG{7HEEMQ56}&@V%{5*)KgU9W9uw;L!k=>r;`kj4 z1$s=Vo01pZ!YYW_F`Rg%|pEszXSP7A1f7(Sqo5o zv86iM%|hXnHV<{OJ3dsFg~B0k0V*3G>S-1VXT$}lr(;5mK4QL`g~AbY77Fy3P{$Wu zx|D^&33V0<^!QMBvQRkSE74bLLFZ?nTZK?*L~}6XQ2>QfrSD+Ce-nT zmvQe~pdg|$uu!1Kgxb)3xRr%MPzM$Y^q5e`7kLt!rhy}tz9bb5=T2qnTo zfexwK4^L~3qgr*Bidg`}AMpXOY~5|>JA}H!F%TCO#w< zut9f$sz()9T(|4c6=eybf7u0fz~ORMRzgHV0i5R5LR=ys!gXH1x5q`iUO;4#5J$yF zg05$1lNCE@smmAtFc}fkg#|mKXxJ57 zuN1XQpi!@_o&hCJa&^)Ra>u>i8RM2s00uxpAM&M!2aCCONbWC&2h0(E*o z?$!w&XKx4&g4?h-9WzEnud5)rDg*{`aafq{$%?6&mZ3;>Gl1*}!9rXe7OTB9Q)f>| zm{N$w!yDe2VQS5dQ}dw=T4}b*CW7YThs= zeWVWm1$8-LN+Em@3)NA`%SzIV3C_cWgt*jW+cEwaAN3{`z6l$LB{y$mLWXrIPf&*jxp1_C2M^q#qA0Fs} z=}ID>D63A=v7|yllS@)rDykN&kqlv+lpS5slblrGom5m^n^LVAUZnSih=kxwtVsP! zgASAOb&EjV7a|VgL$Ts)u~bE~lD?sB*TzdUSKWMiSBMmdOvOskS5%E8yg*Vhl8S9E zk$;c)dCBB6Xhx6)WwU$V!>?z{4kBdvGNEjO9#TXuk}OM_$qWp0a*K@T1;#8xgy90i zNw3QHPfleAQlW53RVk{I>P%Gm-53oOR%Q_tjFs$MHI*J397!rkX;Lal8l;F4AsHDOkD*N3VS=9Ce(j}xb$rkPxBtZ7)!gRn*A{UJpKVFOuN(uy%%)(uIC z-6n@++WN)OJ`f@l;uo?)p?6Vepm&j4oIO*JSW`V1A{8PjvQnMv*adZo4d`a}8+$@B zwQ`ZxMX@S89wG?BI6@HJYtM4DnNaM6Jd#QcB&rG(bt5n7NjT@D)0*z6NCm?MLm{R?Buk$m z`lZ96DlAe6!mRT8P{0R5L_=Urh*t7)?RC;fW(0XZof-C;`=};#^WwQdn|QmTIkdk} zH*Y?eyMfIc1o!mip?UMc+zm1EW*{_gaM#IVgEvGF^%){>azP8OYqDClwQ?~bP1GnEA&>|k*s7P zspw3}7TehRBdf47e^JS%9wr?4i4Z{%7?u^ZS5{1TbiLAmSI;%B*(1 zeA3Y?%Wcptoe$cc!*tel%{$FNkCsDhF_mRB9z zU5NW5V-6&G*zXnlSWP{DHbfYN9ELDu&kOI00%ONcUW4k6W zd^MHH3}upvEf>A!BhF}X=ThWZMBjR?%jVrzeTi*d5W?9P7p)8Ek*!N69X=|*H^e@O z6YVpkGgA2?Gc|$1U_r7SJ#s|9VKBVgvtN*bUVX!Ajv&>(AoT8=5Vc8tQ(nn!gGQul z2C!rE?knjw=tbu8y!n#UU}!`AB|!~V1BBD|8N!s8Q{P}0PKPTTa$TW%%s~&pDBE%P zd@4kE#Q%oyhF8Haa+@04)*JMUZadJp_F2MF>a$|HM$9)@D|3x2 z8P-=pq<>b(by6ywrfuwC%rRP|jrfZAXo$sd)c`BZKv6ZOR4df4bKRAY+KPpMD6B_9 zWW&`5tZe71se!?ffhEmc_s5Wd)u&!#IrPhC&S9Mvu3_-yqNCbhK66fp8C<6|oC@!E z)MLDP&-f9RG46Z-~w6eO0Q)J;Q|J(rq};JLIlKR8?1oqq*QhYlP|H`+0kiD zS7gajk}=+WB`v)O_>SA2=6GkNs(!;#sN zO=Ux~r5@wWyZ4`B8RLQ%mNDp&j585)a~}yQ54c4J3@xuCIx-ZVkBf9uLW@QOWLQ5L z7u&Gnt&{acQJ3?h10$p9;bc)(%1PM>34_fn+_VGXY|rz99+_Fg z5t&tw@#fuoE@m0yS|64%=#h*w>F|MJ*c2J=4)Ph&fnnU$j76*)mSM41O2WFvxZsEt zc!OiRGr4M6S>npgWv@}!`WbrVZ`lmR9ZbHs@Hd-xU-{eU3{7Pk@HhK7M~4fac*gsp z9bG0Bz9r)wA^rxpO8E>?l3r&k_7XE>1NJFROO~1lRz<2SU$U`?!S@|t4UP+~d@)>u z?>i8~;7ji<4n6(rXIRF#J&R=wdL-lQz))yT-yULcT+!t-guyRRbU9&9XiMFJw64Cf z!}b8+Mli5;ytd_hHI>ecq}bk9oSDmw^*Kik5YGPM2zQzRcar(iAj?6IVfm%E=|d+@ z{1cnyxB!i140l+S)d!;F634>zYuytsv(+7U6Z(SDvBQZc zUXHHr150nqyZ1fF9gM<7h%95!BN<0ks<7&g+ZMsF;`#Uf$*JMxtL{-yVT*mZ`w@~& zd6Eq?^9ReatiSa&Omx&QM2~%nEkwAm(pSJOM2~$cGB1Y*!Y7sLG2Xmq{CzBA+>XgI z20fZ_13l596W@G0%NSR2vW!8GW*jjSQcvTd6DPK^jB)QL&-ldF7>t+RFW9{Ms;5}S zxMY-N40uHTDO0sKLPq5#Q4;X+g& ziuNw;l4B-IlBOq1?tXq@wLIXlT1+VkY#{krqaWhV$>PpcpB<_N=$z!|i>M6$BLV|f z4_x5t14EA*>A;0Mu2PetURm3`=PK@SF7Ac}o9SS#_$qohH=;)t-uth|xO?9hrdj=P z5iQFY^ysn{(G{%6c<3{q{sPMwx8AahL62lS98t*YG2XoAs`FXKxMG)O40<%>kQ z#zQ9_<0fZtpD)W8^k~Kd;gd7<7>~`jmsyQ*ry9!`^hn0pRQOzSJ;vSp-qXP{#!ba6 zW6&cRXBsNi4{@`lxE7gb{7{V9(gsXDbm9aTr3rU1vy4HH)Htd`Q_s|!cVG2atf_I~ zGs_tCNXD6T_|kkm#@+kg`%RWHZkJ{mgC5PefnM#{d^M#%2u0OYeep?|YDoafVB}S;nA8GR`#6AsL%*&$AliMsP5mshT<;$v7Kv zKC52g8k=wDsuQjs7Z^uZr)&fDcx=9Xg4GyzoePX7qBU+{8gOjBU1b^LVs(MB8qK(| zJeFC;xW!#yEXQEH^wH_qd^>lh9#_T-jOm&B(5_E5VpGu~g^P<4hx_RT#xzP?1mmUm zxyI((i>#^BwTz3=rfy()Xl%ZHHOqLgmhtLn#t|d;dZymIXZ$lP;~{}D=#h+v8|Z-y zop^#<#u)Y(-xjRIJrTW(F&uH+q@KoO^X(d|aYkSadZflt=Uf(H%w3EyQp=cLj1XR` z8|ZTl{qm#Nuo`Ct#-K-PJlt44)>+1*0^_myc0H1DwxJIFN8iFS&Iyc%PJHw&k&K5M zYZePEHPlGl$}-+o%lOu4jT=}h8Jq2^ zu#DgAF}~gJ`povxi%&u|Zlqs5HrvP5Je-JT}{Bu^R8LWo$)j+`!mrY_^XZE$*ph96efWWFy7cY#-Ol+*`{yx|f-0 zq*&pRC9Bg`)V1-n9EEz(4n7e zyPqx9SBi}1+U}1m)x!<+xyI(&xWaW+E#v6I)zFmUY#%pT92XhS_C=2tGmVU$=GwNg zrrs|yo@?6{ZR*At-@`J#x|Z=h(Tp1zw9U0~x8WS9WlV3w3GIP2vVVPSwvU^9Ip{Hd zd)0wNPrgJg8!u9ixyhGnJjU;+GLD{n$u!cvoojoD&ErEN+PGkj zhie(rV2v5c=18PE1jMKX@ssam&i&9`%% zz3WBB^X<`{y=(*PPGhru+^o+HBIDV<=vkizXKxkO)HjNZ=i8M?Q)e4kKp&fHyNhM~ zJ09aZ{dzptc2^|h;YQ{%=i2UL8Na2L@qN*Z8yPLmwY`~Td{ZssH%BvWWJX}F?Ln6D zTWc9V7|pnmf%$A7H(!0T$auCddcL}$<)67Wu5~&hGM;OTZk-yMZklVmn>F<kX;rZ(N>e)VPeOw!qdQF{c!PCBU`!@IqGX`9W8B~M7U`WoWioL9vVBEH-ovf-s5 zNOGQx^WxE=GwR`L$q2rU^*;yp?G;#q_;OjFm9k@ zJKM+2R8NYGXZxaOs-uoEh816(VTk=&y)?RstxPr&SLXG>$Mu5Bgw^MgC&oQqeLmNV z&9aohEL%dkvlS`q9A8Nk)g{29O|w&~VYJ>vlo11i~ddl0A?{&}4d0BpC!v7JJuWa$OjJ)Q$WcX01CsneOw7T)%8a zO|~w9wIwbg*bXpA2z>Zx@8W)DLYITE>?y_#3 z%&@-FI|NagKxU1_&2*!KMo6@Xt{)7s>79b07dxedsTCCWgjF%GC#F@cII+~LA^J>d zrlgh~t!z711;1)zz6ck)G+}7hb>W3v_`JIq@z8|>9gRhB1f^yFwL68Vem)R)FZSKF zK=fYh0H|YJo3xDm*Y2!$`bNB5=pF&hzg#Fl>+bFC#Z^H2xA*q;_J&=xb1wshF44;A zVsc7S4BNYVX60e4Vk7wTbqDt2Tu;|^yAEk(DKTZ11q0Ht@qugqvy<&Q+{eJffS|*G z?aVbuBrJT|{R{x)!?gnPa{2yEaliyMY4$$5ch7!S%?B7Mp(f}xYSsh#^ze5+$pSqn z0D&GC=o2i^L$yGkhza!VudzT6*8qL{Yc)V`<*PWgkyvQoxml7KoHf;uapo^Pvi#nPOaq>QNQ1)WBuDBB1@QBU?&JCSUU zpX{a(R`2szJ>c~L&UCbr>S<5|zyI(7m}aG?1(N1@Y|iL&0`^%0Nvo1H4MR_s9W!ZI zbhRq5k%xY!kVbHH9EW+2!-JmmXQkqBAWDeP9}*$caUg3`h4FY)Ekko$~W65?H)!koA6_6oA`{6S9@m=yo+x))jj-XRMMJ zFB@dxJ|)0)6*Xs~lCNuGf(s+^G=q%x5p>#!?5W6;*IeoLEF4u= zilHx(L}(w4^ewtg8q3wQILs#cKZ<5AY$ceFA+^K(Qi0 z!im+b2U)=XB>;jh0-kYfLMqvgYQf0$L0dS`&(?spgoDJ>$&D!yc0vzZf+{ziFVj31A z?$s^s&z5i6!eaihfC;*Yc?JLtUCN`&SFa8|TfS*C3;Ly6(9NNsVx!@f&8N5+u3r{F zpW68pjp54X&6%>Ll~k)@+Zw$jv>xunIeSmC!hS`-1zi+Y#I0w9_s^f;%I8-FT+l__ zGd!1ELRAu5I2hsm^B?0j^!|wl`mpCiK^H++OQx1&fyJ`LYQLq`U5@PjPAl!-cX~}y z{Wh*j-51i)Inw50-ru=`Vy>79?(Y;E&F1T_JcAHYR-Jy?DH%#dSH}n;O@xp>;{ItS zglzJDw=nP92qA;s`xS(c_1^DxCjC!n`tfu#ArCZ>a|j_Ffj3lj2!7=-SG%MFrn5HgriU6jC!f2K}=p|_;f4Y{CZ>%Mdx5?*->|DJH zx}EB5qo3HCxt@%t{RAMap!`gemFZ2*Jim6D#&T?INrCC6B}bk}ANK6_Vb2b*+YcGL z-Rk{rC4_v;`wbi3;{ApVAM$>~h6V5U_ge^^K-fme1IX7?O=l9)N!4gl@#{Q7ddc~C zbP=+pYdqca>Zy*VrlzL#c!zP%&5AK`NsnSoBr2A^ZNhO(JJ;VIGB)d1%68&tMYU!w z=_wnIR=~efN!`Yd&y0zlD-KKz^`w4C#y#oYKo|+rgmiqd$u)R$h@^y6CA}X)79?HI zOY&sHA_GKLEoa*efId&fqPJtARg(!QTY?Rn_23 z=#4>l?LS1#_p$n%TEjTCwg#LE;RdUY>e(y}?6ddqA=f6?qy(GzQeHhqrM#uSlx>Sk z+1c6I8A#cqlx=~*PC85B<6{FsodUjMas2n2rWxSxi?%{AXTlo7Ez_JNh5C}TFD}Vj zzWSx+K$16v~?H@f$B`8#&eS>Z`B5iZ-x|&hTD`xz!h1NbeK#V^5Nl;WBYey_uP8T)ic-bJ$T*q+ppGlkB;R_dw1@-(Y)&5!EGPVL>Tnq_-h*-YQ(}R21%8r@9^-8K`U+S5Ehi5-HZ~r$MJ^weH zxBnZ?`*JV+SQFllr&|f3?NWQ-qMHfnM3B$UE-FY9AzRKJPru>SQ*~yQ>LN6UAk@qn z)kSCtL8zG|s*BJXf>1NLb9vPcO@STS>L9Fh?I6zFp%`1k{gzR2v~tn^H{nQmT}5XF znc#Ow@UPcx;omQl@$_?qJV{&Z zCkc6;{{9Jl{xyC6Ieq?&K7UG|e@UM|rq3VI=XdGzJM{T&`ur>U{NMEXE&BW(eWK_< zr0)|#))GR_CZq|yBlJ;ziTMK*A9NERd4!M)@&67&{sJ$5fX6yQIuV4fQ)xyM544I| zHcP&0t3B25?`m4|3Cf|@9U_EwSQMk^r_Xrl@o&aW56~ubNg&cdg^)FOUQc-)J}JMp*=kNfdhMM!Vww3^2n-m#fZ=)aBtivI&&fowq; zg;)2>EOO$FUQ(p-e_LKzhQEPZM*o&-Kz(l$TnMb*{6;b^rs??IW0(IB$$aJc9O_yz zBhW%PDC&)?u+2n-Y6esbpgL^bD5sN-0j!oQE$OOSxTdBE$yxx{8o&+uqSe8Q6s;9l zH1Zu4Z7?azRL$`QgUZ>Oi#ye}A*b_JV7D!Bq+?NG8SZ>RIB?f7VoNdSZ=Kf* zMCJ5Zo+## z%I^}AA`ioB+IX0Rq>u-M5FP)26ps(#K?}hh_;ouWy=zmsp=>T&$PG)mteR8RoRn4Y z?bv&N=RGH%{ME9mIvK8N^XXM}O)6Iy$SG>Bkjjmwa!M|xQcV}0e_^)!!sXTUP`IWo zr(M&5Ty`KgGLlo}+|Xbyo1vPLJE#A3=Y2o(^0b*&YSfA4D8_q4jXRryGTeH4)g`WS z7p`3Yz`K_>8`Gjvw2lUPwVhtQ)}(Snxe+;+%H#$!xx#R6aD-~wddIrVe~m1!7up-H z>59{<>Dp8-HIPdyxuH}pE$7k$IXO*LU7gr|Nzd1oH&eHTtJ;2gRb4|>&F17(E}O~? zkLHF8uBIJ-a@UPVmN!$!!ZqzUy_&k2I+)F+3OOa68!qHhgRZLC4L>-tc6n8m!&UA4 zf1zqVl~W2ibu_08s4YA&4{PUrG!Zm^I`xoyj- z=4-xu*}CP;)SJRJU3q#nU7N}&L%EECzXc_y4(EnOX{P>Vsr1S(u2^1G-x{v!8K+&< z5jB_1=Td4;&gb&koSdhses{;}HGAH-yyf@ia8Y`sDIv>XqTD zo_TszU6aZUUKcRC;qJSBy{^d}bHA26>{vk#+`|sN zk3i!l480%x$ckH6V=fTc*otxY8p9o)AHmT3A1-Mo#|Y_29ba*4F#6u#MCe3jQ!w=I z7(cY$dN@`cPv3wL9rp{DD9C*)5}oF&1B&%4M@TNzExrE;EoD9L)_6 zg$&PY(o%Qj!YzwcR+3vdtKd-53w0b^2ZvDslkDz+4(C8BMVl~nu)0}ia!elLWi}c&7gB3^HUlx0lH8_42kGBzCTUjk8@Kc*wv#X=XJXsNh@@K~ zLrynjN$+t*?%6(`uvMpGc5Q`t_KfYQrGD3N{gR@%`$0B&iH+&9Y6btZjfy3!+cv+Y zhgD0SP~}Ow*GMa9vgD}SW>h;dtvM4$#YxDPzPPqN8|ZD>^2RMaJx0YbE6%oxty(>j zotTpJirVwm#G5xNk|S;0vbDRbtFOOe=Tp4qFiaPeU3Q}*W@AjFdr7I$A*W>+PO?<4 z$VqJFs+g(;5n0>4_9BsrEuEK?TCk=_xJ7X%UALz4|Nm7oe1-SGGwjiH71dzZ)nnKg zhmwbULE-T$`S|26&4L~3e7Qp_OV*5+rCpvSX%*Y0Sv?y!Zl&dL6NTv6^yMY^wcqV`}RU% z=71y(ZEGc@_ng3WF>VW2YxH&olqM{GH4`%MItbMcQ7v1--VEAHYHA{nKKOTkH}#`0 zy>-i~Gmma6ZhoxqZ|}S0+?!wcwDjg*eDnJ!e*I^+&)@ag!RLQ7^7%{OrLFqAHT~o3 z+gg8g-d{|vf5#8+{N9T%{`9?_J8t{Ovp>1xiGTaO-`@P(HJ^F-o=Znkr#`rH;+@G4 zz3_$7{LYr||Klegnf~s=Ps&}N`@+BjWaU%WfAg!KXfyxynJWf=c=LNc^xeeIo@-fk z|I@7<|FCF>&%m3l_h5e5`IXd#nm0O?P zqP+6OZyo&N-H(6Z|NPB6CdO0eJ^crX9gmLPaqlO7(D~cTe%XBH2CTK(@`Q@L$k-A= z|DcV|Tbfc-6Y4QXQKx(YR$x6s$#yjVH5N{*uM@_UYFV11`ed~59(hWa%C`R=O>5p! zZM2&74~kRXndpa0_TORQ*8A8rEJrRomhRKA*vrt=V*wJDjXg?1$@}S{|;z$ zd0*01D_{!I>04RX)UxC6Rif+R%=;sTNlg*ZQ8FmqQgvx2cpWgIuYJ}iFEp{YvmmdP z6|Ed-B$8cT0VbB+*{@yl5nHWFDKU zpvuwrD4G6S6v~2DEJNK!J@sim6shIN-h4G%}12#Js1j-G7f_=cTvQ5|iBw zzE#mV9Jyr4dfDkm1Op$3miv;$y>lUSHBpjqjLc8!ilVCtw_g@m1{Nqvw%6_UQ^UMP zOEM?0p%5F?`b$!^+#zpxYTh_jg~Y}So-CV{l3Mb?Yv~iJq&pLf)3t&mhv6TssFf-m zn>_;lG(Q9ZIPKg7iWC^N&gVS;Ith3I;0Sn?kl_=CW1EKKg890l>iYy*x3$1mup}XS zSdwi`f$9SypM5~q2}5ZA{j{X(s*)&T=UU)Q*bk?RTHp!6i|U^U_FntE;GDE#$#nNI z7S*z9NkJK>-vva9;C}~eR7s_R>=Q70(@dNj4=Ot9qGsBv+^;E!-{Ax<2<@IrnN)+9 z*ubP&*tSFeK*C8)k&Uur8G65>PHA!=1|(#NthHbaT~&e+u8)VxrK^sumSt5uUrZC?trg@0jD}Zg-bu)kt_DpK zEaVdkn$FaDNb6I|)dCLX@LDsS4Ex^apqT;(Gd?1sfn(==4N z8(w2v6LJ$D*<5-^Y&s^_#!!xUSM75kyKs`qQ^J=GW!M_-FPXaCZ`o63KL+zY5iKdR z_uI|?ew%GP;BJ{DhHV!5C97I~;2A_ZS6zkuO)QA#v9ER}>*qy* z%?q@gjIE)dWljdYaKVb2t=Tn}M!%MU@X|P{g*MW+lwfL8E7>Kkmmr{c2?}z;DVc!_ zuZxnmt-xOk7I9JJs?VxRx2ts2F-8~JFat-9Hku(7q_QK~0Torn8tyNa%*3rmwPON@ z!+cb2O9i|86PLcZ1UW)-%+gHGjzXSOvS3AlHqqaGk%G^b2GkleE{ zCFzPQ8(S|ui%>dOsl^Z7(p)vAm-hj%OE)Tk6J*^I<;<2pk;wIaMIu$#&k8T!1HOF! z7=GUOg=~+M{fhcXP8zgP{#TUhR05xZzM3T|S|uqB3#;|;*ts-;PKf*apKHe0nEIp_r7bGwwcCnT%d zR-$>aOL_EP0wuuME|<)puLc`n^2D^XDalc}){_Dl@}#X5xEf~LHH{HAh2wOwuOKwX z|1ox>YXLq1R&*?>P|%HO1O_c=!Qc?01SAK(w%S922c$GjPPiRP$FPL&H`YxU;NSxt|^xR56Q|r0@f}ik+`9JWXq>RzEYrfJK<8pv#FuG_A{$Br!>lk?7#-s%=ZU zRt!ok)bI)3i7;O*_8Yrw7(uCkd-lJP<)A%5?Wv$EFH1p20j;*q&R8x1DBgwLA2ZAEU{BvBAJQ3s= z^MRsS%nSl0Oi%aI`qs}Vh+0u4@HK|!LGTe*(W$=E>4Yqqq7ryps`FB1U&3?x*6+tB zw!=(pz;1S>SX6Cp+6=Ph9jjm`>`H#h&?}{CeS?CS0mLdE^;3SH!m#wzovLU-FB|NG zmo;S>?7ca_k}d@f1TCun+O|xwZi-~ZKvNN98H^bm;F1(wtInsOQw|$2*#a=$K3u`5 zF&|f!YN!gENoWT-XcSuCTC_NL^^xWaGc>88F_}z@^mICbFbh7GTjtz%XxR*(fKC7s zmnyoWB}~b-%?V4ggDmqJAi3Ipp}1jOM%(OQkd9hF-zv0@1n*&LW}H`&eHK%pak9>>o<*V6WcWL8@yUJkU03C%Wi2`;3*95jutN|RD`FvxQ- z4PBFi&WT^HT<(rlDF-8YRH~}@^s}mDy!Moj&<&NcIRwvf{^jJbJ9g!+Q&lUCAF4;m4 z3vbZ_FG=NMbru>9+;zK*zX394Lh^>;s1`%OOkBkd7H%LIxF5+^9H&|i;9>YTv_Ug% zAsu+zGj=+m?pOx^Crdiuf7RKT3+zLigM=UAu-?YW59`IME%%F$}BWyZl!mbdY zcm?Z6LKhub=hGxzlLCJOW4kk}rX5r)xL!*|><867$4!UH!8a(Y?hr_1gIw~1{`ltj Ezak&(L;wH) literal 0 HcmV?d00001 diff --git a/MikroMaster/20260515/20260515072001-Config.rsc b/MikroMaster/20260515/20260515072001-Config.rsc new file mode 100644 index 0000000..58539c7 --- /dev/null +++ b/MikroMaster/20260515/20260515072001-Config.rsc @@ -0,0 +1,1247 @@ +# 2026-05-15 07:20:02 by RouterOS 7.23beta5 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/interface list +add name=WAN +add name=LAN +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +add address=github.io comment=github.io list=Trusted-VPN +add address=vk.com comment=VK list=Trusted-VPN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 log-prefix=VPN-all new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack passthrough=no +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260515/20260515072001-Diff-Config.rsc b/MikroMaster/history/20260515/20260515072001-Diff-Config.rsc new file mode 100644 index 0000000..52a27ff --- /dev/null +++ b/MikroMaster/history/20260515/20260515072001-Diff-Config.rsc @@ -0,0 +1,6 @@ +1034,1035c1034,1035 +< dst-address=!10.30.30.0/24 log-prefix=VPN-all new-routing-mark=To-VPN \ +< src-address=10.30.30.0/24 +--- +> dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ +> VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 -- 2.52.0