From 5f51c105b28a09345dd24c08b0ec35e4e8a93fae Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 30 Jun 2026 03:00:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 30 03:00:03. --- .../20260630/20260630024004-Config.rsc | 3690 ++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 16 +- .../20260630/20260630030001-Binary.backup | Bin 0 -> 365817 bytes MikroNUC/20260630/20260630030001-Config.rsc | 4959 +++++++++++++++++ .../20260630/20260630030001-Diff-Config.rsc | 55 + 5 files changed, 8717 insertions(+), 3 deletions(-) create mode 100644 MikroMaster/20260630/20260630024004-Config.rsc create mode 100644 MikroNUC/20260630/20260630030001-Binary.backup create mode 100644 MikroNUC/20260630/20260630030001-Config.rsc create mode 100644 MikroNUC/history/20260630/20260630030001-Diff-Config.rsc diff --git a/MikroMaster/20260630/20260630024004-Config.rsc b/MikroMaster/20260630/20260630024004-Config.rsc new file mode 100644 index 0000000..c04abc9 --- /dev/null +++ b/MikroMaster/20260630/20260630024004-Config.rsc @@ -0,0 +1,3690 @@ +# 2026-06-30 02:40:10 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2442/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +#error exporting "/ip/smb/users" (timeout) +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/727/203f86a6\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:05 29.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc index 2acd04c..3ecb38c 100644 --- a/MikroMaster/tmp/Diff-Config.rsc +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -1,4 +1,14 @@ -22c22 -< # channel: 2442/20-Ce/gn(18dBm), SSID: vados, local forwarding +75c75,77 +< #error exporting "/ip/smb/users" (timeout) --- -> # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +> /ip smb users +> set [ find default=yes ] disabled=yes +> add disabled=yes name=vados +361c363 +< \n:global CommitId \"main/727/203f86a6\";\r\ +--- +> \n:global CommitId \"main/720/6faffeff\";\r\ +364c366 +< r: root, in 13:30:05 29.06.2026.\";\r\ +--- +> r: root, in 02:10:04 29.06.2026.\";\r\ diff --git a/MikroNUC/20260630/20260630030001-Binary.backup b/MikroNUC/20260630/20260630030001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..398c9a94c7b080d4903330e87c03049c77313546 GIT binary patch literal 365817 zcmeEv2UrtJ7xrutAfZSX6vcobSOS}#s3;v#nlyV!g-9Tngk}S=VMFY__uf0UYwrzv z?;U$r_@A@cP!zr1|GD@3?*D)0(cP0}%9%4W=e%>yWT#-o+_fJkm>_e6ke2V8snF_F znlv0Cgdv0&$nc?7p-rmLW>shpf{x^12r)3mj|s?=rqKIlYL(7p@qXmJth~J3mZYN) zLVhTcLq%u_hRjhUhlUUxAw6v?qdWtctWgF3MKsI0M5 zm4{G`nOvciWT^F3X$!J-az&;}rqIQcg{P8*QxHO5NxD%L8l=4qB#scOjUlv&q@6H? z4wC7eF@$!KbXPNkQc)x)8DSW~ABHeS1O;IXOG|_?Pz$)2BFv4V*3c2w*guj3;*ukb z4s|`IA_nF}Lkz4o4Ka{24KYmW&=9>Dh7gU0*rtYR9#JdEuT?6eKxG&OVRVf<4Ot?L z{-wOUyrN1|g+5uKW!oUk%}yqeOT>I3pCuHCr7Rv#BEk{oW~;=T3;E6Y^5$$sbH1{< zh{ve$DR4e0l4D6j1qi*NA`H zN}i;~#`9}zJpaGh_#u^zAF>Ur7-n=BrqF&%=zQON3_8EcU^5TYs^m!uRzyG)9bw)B zut-ilR5k~J{=kMIghn8QMk0hpA%w;tgo+SC3WTs^gfJCCs274^jW7*DC>3zx zlz|8l3TO~K8BBf|f)FEbC_)SqC90T4HVC=FV0N?j@D7iP4~Y#82nuQ3+`~IDJh<_2 zgxoAWyaQvygTq211A-cl{z1aRZxiN24a8Wj+H;$#^c*OapY)umTq8?SX#cTZL;vz# z!~Sc%cEZ|Z-uzL-d^3;-D>W@0)IaoEm_ga1Z|0l5BrA!PuGM7cu#z+^nOdbt)01lB z2^GwyHHzeTmX|S{ndN2l-Am-uXH-N?sA@{`FByVTDr!uLhEpG;@8Mqx~g3uExqAwXmOh30~iOF(db~J~l zOI8O-0y~6gl%0g(v0(}6y0l(NodVJ{s;0eD5_~l|*&%+9sK~8ZMnL<{z472|aeP}T zKRTf;H|pxg18~5dq}veB4G@E3fH;H%Nb_#cFa*SL zN0A)JY1EF80#Fg5o{1Cyb>zvibYFv1duY=2DovUWAljSq^71gU%D3g^NUBfDuY7V?ZhNB47(3 zD29+5O{)s??&)P^$%o3FzVCWGNZx!kTiKK(33JAy=caD!I&3C25i*un-8TWpceHLzWDq8$O{` z?x84>lZFu18zH1a24w@5Jq5rw*h&RLbh;TrO85ds8jL*yONUD@5FDGsz5&jF4|KedhK@I;fsUU| zrny6b=frXY0S-1t2&%wfJz$3rh?u|vX21d+Av$!Z6+#SZEpn1t!(VIx3jp*$4sd}v ziX4G*g9`;NFlYc()JDjSVr9+%Yybd(s@5b`3?$Q3MXE-dQ}mB;gjMGV`z4NOa+NOS zpW%m6ogd1t@uQF>YyO!YqgLmK`b+$nY89y(y<&Ft9z*09LUxEyApe(Rh*q5=S`8f4 z%9O}8I)CEoqs{nkM42d3B`P&cA(%DV47EaMT<=#^kVYEjiIIkRVx&(IG+~Jf2&-0r z5pxaZ37y34G~>_*mFWgWxe2{~Jq(G|lOaU`Zp-M`YYP3w5CQYeI%Fs$c z3o?@>I;JdHl9r^9H)E!&6%w6-sa5Fo60M%8PgXDu{t2ckjj7Sf6)(9bggs=dFFfcBFSK1v zg<=rGa4;Bbgcz=Tgy>X+C<0Rb3K3$Mi9qm#dFYG~9nV0h3wck5zomfvUc1EZ^r1nSX1f)I*2~QFE5rqk|JAx3SX^3hh;e_NYQPtU}i! z9dNxf6d4MAPP#&uP0r+a(x(Q>qZ>)X%rerTAbOI|0sVC)=}+b5NZd3m{-qyeZH%Ph7+C?1RCjG%(T+f6}eC>5bGRD_DC26f~?Mc7y>!X{7=8jB%@ z$v6zrADbZb7DEj54nqvid!RmGh04hd7LN*EB!|Ez=^K*DlO zR$5gV%l-}-SH)vQ`19WrgkOX3m2{*K?sWzg1XAH(hbV->y+#BM2oIYbJgIQA z!7`q42-fo2bRG1P!9QsDfb$6|fe$#StdLOVt~XLR0uQ>{-12p(});^LlLCq25t*Cx>BW01yv0Gj0~MZ3xP#&O%#%~ zf^dv9q!~*-2cL&AAOe98W1s{)lB>xy1E`QUl4FC=5`$l_9zr0D%7F}g5}_*SBT8e0 z=)1ibs7Zyaz$Hp0+@5X-vE8!Pjt^~I{N>p7Jn!1>O>&dE7M}iE+vk8w(W$Fl9&t}@ z$CwDQZDQ+&KVSXIe$mqCiHC$E`@2Di%|s$kRi)L)4YY;uyVk_b;W%0aHxRq2%1s+d zKlj4!vu~!$ewy{fOoz`y!it71Tq+0~xeRhWc)@8R|0N>n&lYh^~+2$WQrc{E8voZ#K11jenb*5Ml!^M7GW4 z{zLQuj&}VP$At}UoTyq33^7uHp&n8R5jpxZjvxeC!BMs0V+tIZRB}Y|YSklvDh;ZI zZ1C5%@{_6O7aS|MUZ*z2>S{%!DN_t0(vE$6zgLpy0a5qhh27Fufg2b81_K=exxgv*-9R@3PAQd~Ms(V8>(;@OpL4~X z)17j53MMytdda+bp<|%Sj00^>52P7n=X!FBWX1FD1Cez3@gYm}2Y^${s@puk^9Hlp zS0a%Z^@%Zl4R;71n;63@#9Svd3E^diK!lBRorVs6mv3yimffDq_;U1-HA2Yfq)69l zlqxl$yWw+_ob_9C=rPK81(!#qjt1@n#$+8aW=gypN$-Uhv8(BJmt zrmf1@C>R`yGbvf{V}sZk;KU}aC^)St9`KcD3t+3`2^%d~P3qsc^r1 zBq>9o(}QFyi_|4cv=vq{h?FecgHR-=*aG~++lecbOynUHVT0gDzZ_3l#NzHHd;kC+K;lC)R4`j zBAW@vAj$9AW?DTPOgBTbOn;Qa>_<7wpjQciW(->!2OA6tBMpg+G<3a@hCDE88z4ky z4N6rR=?RWOy^J)MT}eN^6W9xeluV&b1w;fx&=U$LVP+h;Ck2M!G#I|f5M-M`K8IU2 zNdvBXMq*J&Dgnkw-mZ~p;Lm%=h#Tmnt0WEBun&w|gor2qKFgu0du1;1QJ}$<&IPvN1WW|H891fQ+=8HT3 z(sUpVxl^Tx*3zzg`K^`vd-YzE{Fz?AVb+V;SNmF?2^WvK7x6@T z<|DqUe(5J2&R%+`Zgo`-PdB(mEbjcQE}#vSuc4qjbG?pF1QU zZMQLUb8DYA$vGqW#igx2*O?!P`x9-eZ;fH)G#ZtHnc~)_)P(x>@ZAKbVpus|A0E`A z)uuVjKh&sm;oOK*eA$=j4G%S6mH0Y3v8o)YNeGuy@a%}yd;7D_yiK62c;l4ty7T8p z_fDHFU0HZXb|Pxm1Q%<5^V%%@b)5p1|NM=G-8XNc;B~s+pVx25jh$CN?B&l}7`eXt z)BMu?Z}X@ALAjr>xeyl|!FoUQ-hDL9ZQ%s3W-rTH3`fWYh7AnP0tm(q*_;gYz~5c} z|9jVufhj%;Avb>oo2OLDByzqK$2oigu{`G6k;KcD|t$(Sf&*5 zIZB)(5#l0=gfHg{1cDI=v1=UCBcY0Hgxr`C9?lU+B^-rPAQQ?sxSWUcgbKbwz?TTb zToK+IP#vl8G_aWv^o1I>*CoWoF$_wQMk>i#DB3Srm81$%X!XqSG?_h$PVmdh%JPw` zl2kHeSW9fq?<2KPbRQrq%nTD^h#l6}|dk51Wa*8dR}UMULu10@aKQ*le~zGlOd8va5XkPq2`WxmRsCW`d~sm^H%lF>^{j zhN0UnZrN(DFIjMQeurf-^Tt?Y6&;?pu+;9vq%IhPc?=uBI11k!_daN!3U!!yd$jwt zVW$3QAmhXdmqEL39BL6h~FUbV;co#i^Qf9d8n^XZq*ukK?hHdW-d?be{! z>BI7!rQR3xxqY&yb{dkL*0mw0-L9zJ4?CycN#B)av+E1?Zpfu2!8RQ^OEa9$ou0Qd z?6z00H`BNu!s$Inmh{-reDJQh%i2ctZ*?-dhdQ(SoOZ&ov#z?|Pd(vKx3JgIvg7L= zG@ixT^{VvKS&P7u<(mUImn}=4e;9af`{<6XH@Z9w_nw!2nN7R)eqHTX5#~{5 zOP;m$>%K8}e$n35UKA>Zu=z4v@{R2o`ZL=@y&l6)JRPxJ`C|TU7ni-0*ZG}Jz#D*R zYDja&YvEPY0t>+Gw zz1h>Cq?oyFzxw zY+d^L$rQ|P<)MNDQ+Pc_o3}jh=-kAKsn@}Ff`X{9oqOU!jJEUlgf^(>Z*D9jaHMjMKrZF*g-Vf_ z%aibUT$vDO3)loAs!7oTBC7EZ1WLk1T&V)*3&c2&!xKo^61I>pkjTV*v6w9r@+5$g zeq^uH5pw&^%mb9F1_?+=HO=C0g;ZgjUw~A-q&)#rm0PoQRUs7>AXQK;0#eZ>2<`qJ zRng}dma0{Nm9G)C7!*txCq5!BHZCBpO#p{4;NToQD1gmk*MPK+(eQlQAv~YDhD2JH zZ+DnBO{Bc(vn8fk!(%U$RV|&xe*kHPafn4Q8|RX1U<1;^xg4=^5!~sQz#bQ88xUO+ zqil@YH;luKkBDQ&#sx490%C%Mm_Y&TKUK)b-rGo{7j2hmo)yI=?oajV+s7_(#LG7y z&p)^|X2-4)-He(Zlv;uI=adcorTSpWCcp{~P-mlO0=9AI=qDRatWO ztghW5VnSG8zj=pd^uJ#c8NWJk>XJRQKeA?=Z*%vA?ad~6Q(pw7pKP6(aylY>xkvXu ztn$BxE?KS~e@q%1m@)3dv`^i;uUjLz*Py}HT*j1#exC;AhN8d6CW?I2|C5!{J2oHp&H=wn^#kg<|e-3vj+gOZN&Hbe^ z)VLp%!K4Xr9&TaE=sC0vHuS5Sg5hSSCP@P=F$|}hngT(oq$m~7sNYOX0)iI3Oh4*9 zSv9$z{_E~fjrztdUwK^db=wTn86z%q4jT3>G9t0Z%02rxnlODjoi1B-@Cc*c(Z1!hoxk4pP_`y)XD>#kKYQctH9z1jN77jxL(HBpXT>OX9WC~o%1 zZlS4N4|ok8STbPLsQJ@l9~>xnD(u(f^NWPeBCX9uWPdV3cV(H7zohX%)r`#I>&|_P zN{*a-o<#jh>+Dv0ZTaKYH?HQtee$N$xQ139O(uFq9GN@ze#zz)!}RN4rp}*w<>R>> zgZ*clO#uiB3bg`)_L35wcW~eQ)^r^HZ%y}G)A|0^bpIb{x=L&=6X6`bQmm8-_)57_ zCgw}IGKokg6N&^vsaV1n38j3FP$(91#eAWdE#wKfN|}hwmE%$Yhc6Km*t{lNOvq*9Ii~J#03Jt=6?Zs{Ro*)Af272q_dNO;`{=% zsy>=Di6x5gi<4>edYxRNR#>5Ezc5X(L@v((eMkfBf3XjS?gChONQyL?7lBCzE2Ft;jZrvqkJd)F9S0yk(4fW29mhDC720#L!K z!WFB6D^?ii8^7pb@Qd!p^C>G0XdOe}pa6W}pz7e53^CE|%}A-S?QvVc#b);AmBM4! z#hu}yxxH-_88!o_sSlft`x=0>_peHl@Rf>jF-|&5!B;9|bGU3Hg8z4L`DfmjUA?9B zm!CTE-n$%jp8q~CyyGMHLH3LGGlQ@egJ0es5q;QFAt2NuP3%gRM1bWfoQX z=2Nt9C*1wP@;ZqrxAV-tysn**CvM;O-bel>ebmy?`Sy1=wO&dc^l9GC5stlbuUqWh zRL8;O$m6|BXcJn5_TyN+MoRZXqgAPbQMS&T&#tT2bA#v;Wz>nY*Fw#%o40z>t>2-3 zpVu^vTQE+lYVTvT8;PDTl%P*>!w+=aC7mAmj!vB+jTp} zc{)TIo(mp9{4m<4HKX zt15K;%`gMlhfv;kp*x6MR*mgdhVq(E8)9aY0EkJKT5Yj6nNRB?*~f8mahxf zURd?+!gc$jaW(@+gr1)KX|qpL+vP=Tyz)LioZb16aQ5=MH`MEgIL-9C~acm z!8^OYe_Zb^5ovUKNNl?$B8~DH@XKHVs{Wqlf2T6~J()EY1?Az#c0|O5%k_Q&a11l)t8yL0=VAys%pEBP7!>F|2-BoQI zM5G5)!C^5GY|K8@FJoa;`#L|A8UevXY@EYkb8sP7*xAX7 zBL)aYe*LfW_h(x9&gcH~wcGx9aoAzl+Y~J7R+_)rwp6cfx$nEM)^|SGzQ^(foJEph zo6@X@p1~=TKU`3CnCmR=)=Qpq0PD1(CA+Pt-x=DOcHR$}JzAK}I~J+C@_JSD!NhZ& z7f%}g>GksDl7>S&d7Wf<6|YFs4yuQ1Z`_>s=*%sBMx7l^X7zQ9r@34R60c0~-haF9 z_BXrlt`dcFk7W*-Ee<)eVAdNjA3k>2+I{Q?~|NVorCj zvsiWAjO%?QX5z=i@kir_#)K^W82%IRRSCA}na7Wsm3zF~fBf0@qT<_wg`pYmzr$uV zgsK-US?PWP^IJ5(Tzaa_%#q!-YqEpyT&=g7@wH)_Pdl3I+nPYzXfuDb*L910*{Ra& zmcpEXF7E5rObh6`DE(&1sjQ<7&!U^^MBiH~E2~S(cDW6Vxn#O83coxXsy2ubIqn{8oh!K4Kp4>lG*1x2DeoyY-ll#9mxho+TU&a^l1R^<~ zujGpqJh4zA4SR-x4?a;#8< zpMhcqsq{HcDB3SRS;0(*3yF=7O^Ay(LMm@STf|d>D6<+XT-yxsK;k z50KGo>}x9iW&V-&OI(WOwfIz4RpV!Ag7AR_RbW{{oY5IZw>Pg8B-?=qY|_l^Evm?q z?TXhkAUMYw#me@lE?z#H% z?Ar5vh2FMJ!!C;t6gRK4p~s>f{b$aX1#ZfGwX{Xku^(=0PCc#7EMl~}{ZN0{dBfNe zsr*XreAAZ&&b^A z8P#+A^?e5|Z`|UnIySyV`|OEHBTM}f%Pdc+tX-^Mdp1hproK-L`=krHH=x!+<=V#m zID=&g!}nS386S_=v0rhvzi{!BZq3#Fu2%vs*j-*4ZgJyc-U!BcY2ilYNza1ggSV`0 zy+CYzi8AYnUBtwGuTxBxcCS6?*p{T*5AA0j>ym#qV*Rr&<=5}&Ry1tELc910dPexg z@Q!tJ#|iGYA6M&jqyF_Gor(`X4Qh01S3nQ{rNO~(ratH}Y*tKz4)IG`ebvi+*TyIq z_d5pq1l5h$@WL~!(xAUZDR(myS_7f^Oq#YTZcOgcD0tBeIAmRe1hzKWP!&#bjo?AvG0ee34p`Dp=JLcDGV6)U~9a)yel*|A46qOWpq1*+)N|oNAiuayiIx_AE+5he-}EV_SL+ zo8bMdL32zvFY`-W%vT|yI6W@nlr8Y;wim4rH*V( z|9t3l$ZBUtd6Av9&f91IZI7rg9iP5<6H?~B{)unlnM)xOlRc9)OER@%MvfA!-eqNS zqW9?gi!=??i+W4Rb3EyR^t( z{d7>$kdi6w^=r3I%^O~xn_Z`CPTQV7qnQf{q@er;BY zd`dbEI~p4>@$s9m3#IaagnpwtQ6^rK&irF*X=iW!;DysS7ag=TyYY6oK+ievy=ToD zi<>hd_SQT9<&J7&Sm;3CdHKuF%7WAPjV@<#x2+u0cVl|Ns#bMQ`g>pea;Ru~x2f)L zWAAs|-=KgUR9aB~!hyn;LA~lPcD~-v}tmgdrpJ6p; z_}#1pv6OQ+EakrWiPw*RH(TGh=ayyIkZjoH5XSvx{T4*Q^C_+Id~83teltl(EPmB} z0iVBjf%UoNA=;`x0{zE-VHL(D7G+!<)?pm@ofm9efG>RV>wkiUAN*wZ+Tu&wM{Ke9 zY?14B=EcsPy4T!pb&GkAuOFCRd}`vm7spOnY?E|pA39(bYj$a&%+l$pS^C?PgMIu5 z&3M>4AhpHHvkM$L39@HWgGz1e)!OT;3Kq{z*%)*p>1xArYQ6clTm4F$e`pnazy3;_ z1s~_`zqm>eaLiVwk~S`Gcc5x-QIip_ps>-(;#ca{c5P3y#Cy#dlXY(j1fvSPw%;!p z9W!LH?BguXb>(>Lm&evJ##~b`|CEwDhk}chUH*`d-ZCrZ>XLKe^PU~NdOAGU3EOgL z=$NQc1x=SsTRLL@X|&@*{OxJ?y7XJ`Vxf#9 zk%<*bfso6VR3%ZQc^49nDFz+;d?s0l;-wW-$Q|aSiCthv$Jbvci!%Y zlM<(nSpOn-!SNkeIqZI8Pu}cd`ypjnc-PZYC!C&lN7jXrxiL|CtDV07q>@G@bXuoV zQ)<<^fBnnerwxi;R(jRGbCdme`&~avPJ_jl@Z5dnqRAL?B|s2E%u$wX&-gG z=uMJYokJ}{`&eQ9_ji1ddVdJ+G|gk5%}v_-o3C<9mYJ6a))zjTa8KUJj+rGo%V{MV zm@!HBDS6D=qbC~dfBI?0fRh8(zBFTP`m*cDf?cO3o3t%{?Ceb`+7X}4aO-{cbpQI7 zYOh%;@jGRX+`k;`dz2v$v1s8x@O}S&oVQbsbS&)Oq_n7$PX1A#@9sJGt*4ng+o+tezyJY_w+Yzs{SVx*6->6d;0&^rhg@*sCNIa$DZ7+j4Ln z{1hPk`4+uBHjzL64YJ|IhVY(VdhV*SYQJQ#0*qB#VmNDuauOl>S?6P_Gw`ZPcyCrJ z{1};dw=ePDtRMWg!6_&pMi&_n#R>{w@!5eKeh42I2IE3&gzzP_m+T=ed|k#osAXzb z=-zMFES)cF4=u#Sf58$~Z~H9Tx{Iai_U#wG9Ou3AWvT3Ge~&NEBTr8i zCd&Oi>W%c9Kj>=9!p&A?j>62vKE)~T+RnUIG%T>YP8_~#?~Z4l{(BZQR~*|9S>c6S?xO z(j)9;*7STfl870JyT(pEw8gA6^j*Tp9!uvczB=tb-tS448kLyDx<|X`gz)-| zRGgW;YOyFYG=WLZA-XN6;Q4ygV%y^b zuXGQex}f3lLYt)P&B~V_&0XU-pG-OQ_WAUWpcEes+PI~LUX=GXMYM+6$X+7*$ z|FJvzBiq&DP2E~Kldnv@y1ehW<1Nn)pa~yjJZ^VqX3CMt8}W&cQLxHsQ1j0db?<7; zyr($vW$N>j^wr|jV`lk7XT)m-Ib4TO{iaz1XiM^JIKx)ODpT9Mv^)|ek%qZ#dBPoZ z4t?$ISa%XXdB4~3l6pHv`Z>`OFK%Y_y1KrzdTjalZKWf96Bz?}SJK<>*%8iI;JEN! z(4CBRM-LYGq%H9}bNWmJ%-p3r^~{dystNCc=smZ!&9`(WZNl8%4LI| zpZZd7MG6|2eB^ZCnNEK!%Y4RpIXUmx>x7^(r_;x}Odp|6vZM5UNXSTcx z_Kh0~O}uM!-51_4xBZg7xaB$Aa_y8DpSUM=>b>q&e}3|lLqiU2Ti=~>R@qzLD%f}A za4U(4$0C#RuC~|1Uvn4K)>+S|pWBt~cq&4#EeZ2*(S1$q`NRfK7`#GoG_%Z}wRlU@ z&%4^35X6n^dGs2)upsDY4_duGt@9Q%xqH8GRY{jdL)#Rsdq3pzdxuL;zNQ47nE7zm z=kC+f*I&KXe9y-|A-CF2VD=YpEQp!bcv47H=LPrhh0O!Xg4zdY>*j{d$L`*_XW#d2 zs{c6GcfH20?LOqw%0BUq9zD%|dCjz`iYwD=y!~-S=SA;YoGW^-nVAtn+c;tJHyup; zWXWszlpUG7?zBDFcg4sTzWFE9=yL_8l;ydu*s9GRIxf6Av*C)}v~u^iZ+EN>!Um6^ zxGxQ^^WtL1H)3=1chmPcxYC{;(Z3z^KEO?HSO0@)*4Hr?55%?Vc0uz;;!}?{4c~f= z*kg0#kxS5SZHrbM54XDeTJ~7{Hf-mSfs1raJoXm%KjHP{?$hCWhC18x!giF;nz^J@ z)bf=7R`hk=*VBQ;H(Kvq^JqnfiIZ2!*45JWXt#8{c*3q-vMGrJHJ=+Vb|`&jyS$C= zYqv)9_fz8TcnSoous^!6FIW#bv!DC+O3NEJioLT}t$FVvx|?ma`Sc5AyK$@fZ@2Il z51jS2fA$Bl)1+;^Y>73~s4HdJAP}UE81y{dyV897P#y5R4=y1TS zmGQKp@4Ohbj9v`zSy+M3f?n~i?;rRq9E^N?@362v%emt=*L3D;uPs+Cws=MhC+|(| z$=#aL*@4zzVa(Un!@CwPanEkjnc|77=*5bT4UAIvgZ{A%Qzej}PP}$`kY((xz#gyf`mN1LDc`!i1bKOG&sUzVOPMr$LwY@@ zQ`=W8%{#H64jw!0w2MdafhUTC;xXlyM=*xs87o(Hvpm+`)xE!B3FFW@kLyd$&uV-# z{Jw)aHCULRdE`c3x_hv_Q^OtY?e4U&VgJ!``x?!~^VhHy=g+=bqz`%2z00JT^?XjA zcs96ot-0s7`R*RYEq-~TUUtJ>3%cNF*@cAon>#3b(#^_!3lEI3-MMe*#Nl-}=?b24rp zet&gd_R({-kDWbsY{VB6$~*NRs~xGi`SiuY_tO)y!lzEY*k;VDXI2NYc-FanM>3W$ zhmBB`2)laTXm~znx5VL9lWvo356?T*`RPoS-JHv}TBUA!d#|fc?xrJ!`^QSnH;3~! z%?&>B>5_|6{%!H22WMKP#vNAOU&x*0`QT~$=3@>=?Va>cEW6K`#hy$}5(Siau4vt& z^wy^J?`7;RCvJIWT-zD@BIHTekH;qE9emLB>Zomg10Rjpy=I53XDvScTs^PO2cLIo zKXP-2ZXXs7xO;ua_^CT2yYJ8M5@fTWQ^N~SoIVxq88;eN?A^G#QTW~={wX@u$JdK% z9k9|^JNkVMUw>Z_oo3x^f$O-ObAc0tiL>@`@6>(vIp(8k)o#scX5FOS!M8RKDB9O2 z%a)%~5WbFS)qTT;H(nuYYPDNucO)fEvf{{x&NC8cN1xeumec#ys6)w9XO(+4m~*12 z(I9osQ45nUqwm()9qhO6N>B3^c;&_Y5q;@N+?c~VS;M__9tGRQYIL@%?G6h%wP=I$s($;VxnDotbfNZXsqbsC zVeo*H^(O8Zi4Vapdug_Z?K!&aCe6B2Xx4bghcjDzm9@O*tvlK4n*Z}Lx9l?Z^;^FD zz=b~j6Qjc4#NUkCj4jKg4qnl0*B>`FG4Jb@i{sk%-SYCy$Qh9dFWZ;+DF4Kf>3}{jg`2iL2U5(6fJU{6V{my_u%lh_$6#sN^y!nQ-mO=j zGQ78JX8y=}9b8JB&WIBpZ^-NY?)({fo2^$4J)7@>chdwmT-k~~dx68A3mw5>Q3o6r zj(9%ym2_D2Ig8gGIdVgpRIy%g9LgAn%s=&Zq3vJ9}Q}BUHy(XlU`pJBI z*6Zi)(9dC|fc~U;Z~xx+uZ|eBLH#I;x7I0d7-h$x!04kETNhre`(@~X`AY}v3o&>r zV)2;j0bSafD$a@FA>*t+GuvF8eyFc4Z=KR>-SagQtGz|BCY$?BZxh}N*Vg^+?3(p- z-^gIEiyfqMXE)q7$FA?T%)Fs1F0@{mXxsSo%Dm)pn-1=LGFNL2Xt7@zq8wFMCP@nTQ%E6 zvSPmr_1Cvvcz)r6(b;!yDbk)fH#sV+Keb{l~lfR>kLS zx9J}3snh#Y3k|39e$TG;>aKfyc$De=vV;y%UY$G&OiQmeSb64B;}5rMQy&hDIUC6= zrqahx7yZn8@q60*o;E*l`u(p@8-pw3HwONVfq!G*-x&Dcj)4hR1|R40!~!Kx$(BpF zVyR3f5c1g^woHyIr6QS#E9NTMQjUZx#}&9jCJ{*GN`ZvUmT+abL@MVPe)eAz?gCdv zjd%;*h-o7X2;x=o=6nR4-kd0 z0|J98&e?H<<$^7qk9{PU3oT9OCf#XL_U)Fzzh$}LVmyC`YWW>Uf4WpC6^Bo!9F8sc z{JhLL<9zpJ84KGrnq0&_wrD`hIO~4r8)fb~-Kg=Lw$tyHln$`sm%YAppvAC$A8v{6 z_sTysWO1}dU}I+A$1W>l`q$Af7`%AZQqlT@8~M3c*^57w4Rd|bJoIprgejZs)SO)f zFE{vhvlHx9`FfUbdHCV>i(8v7wouG=xKOlIk+*$IJ1f7rg@P_|18xf*ZTCu89Upq- zN#Moc|hvoblb;BdB)1>BEmJoiCaq+q>G9*4};%1jD??IxUq4y57z3+c3D- zbN8X^-{rQ?58EnwdZ+f&Co347`Wvd>W42?9Oa^%&cH=p*s=+9h`b0PAa9nm^>)opw!V5{&9lHs zjP5V2Y}MtBeSMt!t-W6STu2FD=;e}-_h6WHSb}zo#%MyW z3XJ=y|JSEX<%UW=k0)2+JfV=IWGitFha;0q*&H#>R|v#PT)>v{6kH*nE9Q%Ek(9%c zaoAiQhbL(O_Qcg4p*e7tF~XDxp(KP*3PLCi zAq1yiWxzqy2%#J}=@cQ9hlmqJ;We*lI6`OyLTDsHaM&OkO`c&thCHVp&aj8G>-`Wy z0SKW$WH>XKLmnv2C+|Y?-W-0X*%B_Th|}uJ%UhFoe>ktNJ!UxI7s4OJf%S$nr->th z%^{Z)S&s3*>N@0iIJg?CM}C0=Y~iF;;)KCtEj#V>Zc8vnn)k_O%Tps|^=1f!ts__EQ}*vT538= zrb$iBNK@%m3Z3z|WaA0kaPNsCIW7n-!H^4zAkZsp+}6cHX072hK=AgD1>HXNgAE>o)%Y5E?i5?SqUsxs8nL#NO~ zLqUZZ4=#r@rM<}c17|!pB561i+Kr^)IA~*fIMUfjg9MB;y~?5N-WWWOhy{vwsK9XM3u(U zDI{81GE1k>!@1YQsq*BYF!U4*I*?mqvIn4~P?FXV&m%d|Lr^*f8(7-|%15uz8AmzUFu5Pc0XIm#HAc@bh@CeT!R5n&vD zka4XcBO{v-3*JG9_}2E{x1i zugvfAgF-0P3gHulm=T5WlLnwj4!tKTprRLVJdjP0C&I^iB3d58O!5#0WmBrNMFF;` zP+~gP6VaJb2ocSoLR)GB-=;kgeGLs6*fA%+Koclc`6q@~K3Tg7>S-R0@;XMNIg6sv z?l;lsW?)PO7iK*X26Yfkr9egWpHu`a1CO+7JQDR+Z#uyN98nJ)nJh_@DU;OXC~RJ( zGg(zSlX&$$LPTe_AfJOWG}16Ej5H`iBMr*XSSB1~Z+vb?f#-%Ez=$3&A=_#W%|u2~ z5<{V?C~2H97ME3#vuC%&ikx&pK#+q1jW*+lvG@W3-nOEn{fnarQKPXj)ic>bb#ya> z7NJ6Q@C6F7ghJQ?oW0%g`8F%B zO06(New@|xyR5v*T47}UIIG!rSw)qd15?A8_504DLsl5{AT8(|VP&N-p?;i`Q8lLt zCyd2r!>S`oEt989^vN=1l2P{?EiveRqm>OOEOaENV#0!QLV1Wm1x75gb*x~CUJ@hG zCxfA?nu=19if&8-BQr}a(Kha?W8CCMYu|sk2P8 zb*wmrjK)N6=3*S)Y!5FgAm*JPiu^u1rFwQ+hnN6PO_{+M$TfO)wr^^RghejSjFzY_ z$t2wC8uYedO=C_>2NIN$ZIwtQGG&qx{P~bs;SN@t1{TW%e#-`y5=1~OjNEKHc5Gh# zUoBYIDfGUobUjO{QtK63C=(19fIRrX-J!Y}A?yo)Q7zwBtI5!-(vpa~u_<|7$-Hpy z3If9n2-6Zn4A*Gj#vYY1;4BaZ#SAl;3_6BTo;ijX$O1zQb3)iA7;0=8$?+^NV<0A6 ztT5ErJd(pKFQc2gy0!;l0QVBPT&pu0w3cM$pdn#-2_G1lMj9Guq(MF{N#jaG2nsC+ zxs}7>u@NySF~ehXis25n5!!EnD1lY-?p`8?ymSYmv4%U8U=AhhULuF}Dct|OgxX{Y zaEB5sez}Adwus=tnJfYBP=Y0tu)-D*Jgl%q)p-Ch>SW0Zd4^h{1@VFDSWk)$#?(fV z_C*NIBxw*gtn}f-MhIOb=_D%TCGZO7gBjLmZ0OchSY-nJpNcsnTlFQWa@>W}-x^l1SAG9ScKl&3$z_I=v#*S0~e|()G-~ zOl?LQGa!E6-RJLaLs9+q}E6!YVuilnociKs}1Q| zFg*+@t3L&9YXi4LDb@Zq^H-Vnt(j?NO-zSMQWVTUtxBF`5Ol-pg7yV5r)uQB0gmPcE0VO5RAx}JM9&P==%L%) ze#}jL7%NbtCwQ?Uc`-b?ScQ`ZT!efvM9J({mW}2qTOQ-c3W=Nz&rS^d~u&TGAa_Abevkb!_BvqnP zlcUu!AhL!(0)mr(%`@78Zx=H#`>6=Q;+tUwdaV}hDYl{;jY2ImSZslEH1uP-MyuD& zAdTi4azeubU^PiYjYb-9qLBs-Vx&Ru8fhrnNCT5b+Nuf-Cdl~Qx(W>jW*u2C7$m3z zJ^^%u)}TlZ=;rcGL`&As2*DJ<`Qd9~pv?OwuVpM`g&9 zbQWAN;A1*03klz$1&E1Q{8<5I2R=c2P-29S1atuf)>JgYedrEJz;_7Q8DK3Kc~meW zgdtn~5AX~2>M!t0171yj#w(phpoKEGzmr|eDBi!wt_iSf_EUDL{~~tHfL+E<*)?FX ze^9z+zdmpoz^?gE*#$iIcaPm_gTVj_0q?=(r}NAl*tPg6yMVI(QFZ}B{i0g10Cp{Z z%C6Nv&2FtgruaWkyxS zRAxjnBC@J$r+WlRevm1dk_}nXgAEIY0n-Ld!8T#|#eiS*V#5XvzxmBDV82RwkS!1< zjqm*2pUB9n>fWIR0Zuf!G9&KKx#ym9?z!ijd+sm&X@e_Ul8dm~F9O_eoeA!@72N;w zt6S9q$sqfmi-7wrHFur~@n2Ag;UL8TzYfFJAStTlK>^zteV~-kvofi$r?tKnbt~Yn z*!sz=0G|dOyn<@=E##Z|lRx>Bzk*dC%0gfbXQMb&AQ+whKzhXAKWJ^Q{w4Ca{&`Vg zL}~fjrPd$AD@n@ApJ}ze24x2u%-{Gr6r0vJzX3gtt<%4NKL4zAjNLWwyP%^$ANpqN zFXE8czm9L;!GFIZ1umnRh&-xfCcp;x(zjc!%RfI#;xg&*-s+pUBQKi{?tgOc3CUQf zfeF-8RXo)|jK8pr0vA8{dW&=>K=Vyfp}vlWerb?olg{DjWZan?7JHrH;P|)S$8$35 zmTCTL>0p#khq&eV8?DymU)fHNiu}>@dml9vxC0mKx5{xf=>nYYI6*aNgK8E?%91Sq zH=YUZUkdJF7t-&rck6ekyZRmD)bB8n>UXHV`u%Ty9pA}uK}`k=G*q_a630&+t3xs89_Z~Rw(R*m>y zP2=D28(;Xw|1HgaHI2XLH{SjkH8XrQjsHy8_+OP~-?{N$@h9|W{l>rdv;W|~^IQLE zC-mq1#+QEapV8fI`Z=d@?4XLI%tvs{4#)_iO!|A$1pfXWJBI%Tt-8PW_12$bUmy7Y zvRKzH>$CCEfAJX4@E5zuKg&DH_u(CY>&}&0^1dqhE}WfAAY0NTE~8|)oT5X z_gbxg^lkqBZ@t%Q{q=v!-+$-5R_k{mJP`5n9!I?3^S9n>wLXV{L0|8+S`#VryYIDH zed+gazt?I#f%g!RG4Hin&%`wT@4VM){by3<-+iyu`U8a5v|6pd`(CT{`_j(8_g<^@ zXT_}k_ugx@_92{Ft=8Xvuhlxl0@G@>{`2=*tsB5WtJV7b_gby*$oK!}^RKu5@ult6 z@3j8pAAYU%X9Pv-RZ>>i4I{wksMUJ^pZ_=ib2@6Z-v5Q+UroQ(`s4S3J{WDVHqTl| zV552uO(drzgG=lCd6C3}L$Sh{ zH0v+CFg2^pewq!<$zf6?1~7jaZIX-LvoC%xGA|d+Fz(+uaDLM2AZjLHn;4?2bZqASf5O*ndWQomHD(7Brgd>Do(H$gF4Ivu~L9hkT8)L z3SQ8>FSL~cx~8qg7ir9(y909)7g?Gem}ocaG=6roT>-)Lsh^!i`FJu)s^l`p_rWCthMb4l+8R$| zm|51-0~w7`BvYI7*c?i>@;MbeiCL*aYZ&$1^Cwt2?@h}p zA9FL1=H5e5IgL>r8*6}(#h|^y*mW=CqOyRSHVVHqx^%QxX&tboA7n$XskN}FN7FIC z%%)@0z81cGnpD#QgZKcgrTb>##ri18O#9Jv{L=JIk2Pf)3mS@g(Hkl%xJXJsIY|dc z4C6wZB4ZDnaC(IdWW{7?S(-yzxfcmMfcC)o%?2*v0$ z%f@dvHV9dH@~tbfh#GX2+Fkz#YzUB@Ip37_AUl4VjPv8fRK+yes4d9m3ku@#H`=y> z=x(AOuRuLszanivO|VRI57IEnUwOSbW(}ysiWwbN)udcsUM}*oOE%?hF%4`8!({*Q zNtP5QqSqi3*V4nZD66MamUP5soA#L%%*MD1u4^oM-Ye}!9$(QaBouy-oPHLMrpZo~ z7tq5|QMY2742}l;u{+eO>Cc>0N=Jjiq@_TtcqUFT& zsUs2KN`$L#HXKE+k)$)`$}&7CeA#+p9Vz%?_NM8mO0!Odd)YfB#?>b!M+e~RJyBas zch8FvHCZm>hM>-GKEM@wkr|d1t0qx_$EOKBwk`QUq+`vP0FPl|kk0}_2SyW{~cCL-@iKT1}v?e7ob;q|>FiMuSJd$O?$LyzvN~}#>`W&^1&cP7Xs2eo z!93-VB>hIqo>~voykpuPmud|T1}ll(l@HrHq;=9W`Ti(5F)!7=D16Xh<`e^C=}9Vl z*jgg7g)p2+xo(%%QYte$yn+RJKzc-$Qrl8oLtSUm;K>v`wN)r8Qec<$_CpI%NEg`o zNCRSWi55*httQi|j}4EB%g!<6sCn7B6Aj}k=G~Wk8s^JR#(I?xiqXD#!NyGKg?#zs#ktFi z7VsHQDM=PmogIDb+xUqcXE=)2WFB%8OYwVR$OeYvx2!NUa5Hl%ac#rfkePMLRT9kb z@~p7n=+WjEkG$wk6$AJv8N4m;O%W>m|8w3T=@aq3E$1~!-+3ZtbIjVEaC%L`(DtC? zE$uMAbWYOhFrQYPK{5JjWDpSw*|XYCf5ej1_Bb9t%LGfngI8$@v2M9|&f`YrzCx12 zt0BVUikPKsqs_HV6EV-2(mZz=BlgSaM^`Qv=ph4T^lwE5Ig}T=~09fx73q8wI-yKJD;P1W{$O+`t>YJ!* zya!wb8&2z%;yT@q7 zqA$ZF#_xD9pAs2vEF{Mxvuya!Fh{*O8}`HJ;%24JV0`2OZVdBUIa)@1&Ed0nv_Z>u zpE}@Pg7Y4*xMkDvo@;h-aZw7+GzT09?S1s!?>1A(ou;W!MRroP3Mle;;4+YCvO-B%Ve_{CuJEQB>jc1!5Z1Nhe!5v(>Dqj2D!MnxB+K2 zCZ`E$U{Z2v_x~l6(88BSh|er^O-)eHD8G;Y7Z*3K1IruMy(9#-xVZQMpAq}7-dEGd zUsBV@{rn_@J-`e$pIj}?lX!3xA0(x3{P+)|e?i8NC*S!UGJYWP1ICYUHXA?w!ki{y z{`m0yE9S#SC$s&0h-rIG`oY}KYbitFZdH0@p61gkDIV|0Y?sE^GC!UJ&X2t^XML!z zi@x-lj?>s&T^^?85ork3=_Kh>9EqX-JLC9O zr%Zp6^jCY^rX1x}zlg_It`5dDaUcvnFxhJ5oALshAnhw$myBx+i@mkkJl`c4PKU`5w47#DZiZB8 zP-$D`I@j;~_8=ce1Rb?UzdP|D>Y}P0=AHh{?#e2ROP1-XT&V?LF@CC|jK7~3({adf z$7ym><&$*Kog7ZSU-egetJhZ7$lj`PRY(ewR>`1(%`46NUzjK^#(~MD;e#?auKByE z*-!N9){P&ZSI9);bW-jm(Hn1@?6g=V5eCeXoNo|n_=I@9aN)CuVvUNG>9}W|0ElijIg0#_oUs?e?Sc)s?Yyr+3sxSGTS#Hng$O3%u6dl9*j(#f zTfzxW7<%K1I9l;Hj!*H18JJLrMXa18gLFSlh5_wgj-bO6zSyio-kSAaQI+KvRb|=S zMh>0n#MeV>DUOqW3(u2dwEDRRSYOi;_v)Ws|!TUYK5&OTUK9)P|4?;bW zKBbjRODcgOpl%06hRJa{NIIawC8kGiC)_d8hOHK1N{U2^{9U56$Jwx4m)ba=&Dfwv zYT3lCVb211?&>-8NjS{ z6dKjr7)b3{9heI-?_|Xk$iokgqt7|O?jaoBJz97xY)`XzgxRQV?5x>FX;cuz2ljEg znvCE5g||eH6;*-XPdh=hUUUJ=@fBL<0vz}j`smY#v^0=^O*VG^`^$Z^ACF4$rGd`f zvLtkuX76HLsaaDHf6>srIuJN!nam!IP76WtTbbghH5XQKvBocEU+1O?TVeviclGQY zC&gY~CjBhetuTav^Vx0&IPr}BitcEH~h8M^gwzv2cxhu{dByIkbz3QupDLK{K|D!CyTr`>=`HHn4;`I&Q7PU4I;H1C zs5?@9mnJpOv7Gc(DR|K-zQJ?r)1=wvj~^AI-~>aQiGm25L=yrV?0vj`UD2$!vCN5@j~esApL4Ll|gcsSYufX=zT1 zJUcLO1ew!(TKKbDQtUB1|E!^C`{)@?C)pjSjPcoc@{k5c7AOx+GBxp%;Mt^RN808V z5S0^vE!g08>HG~B9Hu3bCUJx$ghXwua7@r?mW2p*35FmoZM`LvWbq!N0=k~>oV%en ziGU>JC>tJ)6Y|B92qo>UAoCa5aDZcHB)m#MT-E-(oi17}PF>(fU?v>Gj5?8ON{sD?JvO-uVSmF^p+H9n*3~jmj!h57!2RSVLm-{84phQ}m9R1+l|b zUd5x%I2pr6`qC_$HIl)^GIVsrjmaOr@gl9m(Kn9YVPJK2HN*fubu92R))l4y(2I4i zNZ4r&B#`CnbfOfrAE%>axXugAgQC#!IKWi#p>9aIbMJ&|5L8R+APugjzG~PCv)QpE z2LtJ%c9%0Wfv~WXr3Pdd2HF;Tw3W-uJ$!hEn3C<0LAB^5WJMJD4CJv-yN4~-eQmnd zW%8;_%SuVwjkN6;#0yETFW+akJKr9Us{(GNer$Q*c<0e;&x0#X-8|W$_THX!849td`z>4n7h`Q5OR{I z{!t8jlm@nN8iO(&xcV#t&^aJN6XO?=nrNR!woaA@iEWrp2oP0znT^Gg01zaY)D4Qw zWXjr45o`$-uI2Sx!UmTt=%wRe-i9F5=<#UC4tyxqtlV-0QU~g;3tbqD^1%^N2<7Q} zIp<}S;>fbIpAae5tQJ-`qLVBNz-(w-9U=|Ow5D@s1^9yY1wQ!EhWChKrUHt)KonmM z>d=4U4m+!>-bV1%>RB6&*cjA?CBRz?O%S_xz6FbqIMsI}&Wh!xz+Avo1Nve@51}V3 zlz=KyMf6fS&8TXe-FeEOBFQO;T~OJ%d)lE*Flz?r=3MNDP+S!EwOap*U_OL;2IHPQ z*c=WCqcjuiCx$?k{5856>g2;qhaS=jzvDu($ z=0&w>8|f+Y=WaT%fAmx<1y;nJw{t}JR9cn(hSZM1SrdRliMog6yL)=?k&rfRd1|k8 zpK13&R2Ew?J3?o92yKR7Dh3uN_UWc3u0=}rdJzUmMpjP=X*E$F`HDVi;Fa_#B41wSl@Ott0mcm zi2~nD&^}f~V{`BNSY+3Wppm7FZ>rUCSa}dM8>u%3%Mo{5!tvd~Qr4%h(+PX9kK<8) zt%t)1odh$}Z_5-3{WNQ$yV=&&V;m*P5|bcrFKv^T$N`<@CuZyF*i>ne47=Sf{TL-N z*s!~sJ)@KwC+TQp_Hb@OG>^Sxl%Fgy@sPe*jN_40mvvVuTra>eC4QR6~NEqcdWUms5LP zv7dN5K2|Pm5e1GS-Qg0wDr@X{KF5FbZS|b~dCzm|t4O{B^*{cv|A>OT{@4D$pdc@# z@qr^XNbie8(0&7&9NK>dx9VT~_Ql+)em&^dGBODnTo=Q=9G8~2C^zFuy?HTL>JK^9 z$-23pXO*e)>EMu=Xq0BjW#^kvll=v~AZ{2>lX!S)HFUUd0WQCX(Vsl2e2zgKs)!^Z z`z=b2^Rfb`50m{gONJ(;EZv}FIh2SfEj55^3l47Xh_QH%vsJmo6&7y-vy#51%*{K~ zarqgJcAe^u$#u!~eYc%#s%#4^Q_HPPy3zs|@BL(NdLZiQx@+_a67KLjYRz2HO;5cN za{d>2OT@G*Se%6i=Uvg!#be8cAds#o|lM|f#EHm&3#T!V-1iQ z7@9UnfrBESPB6KOUG4bUVUff`biLNo4xqy8s5=A1v_2HBX(uK5^HlqMdH@)I;gb;-)lfhVOY)A4jv#aWV1%h73f z7Uztp@|pBb3$2GDth;q2^0VtJtJkjGTD{e~$q!a~w{G6PaqHG91;Ifdzk;gQS8rdt zdHv?vHNr-7|1ykdAs&qu14>h@0!qKs>%)AUyw3Oc(?LQtT*Ln1CI}Q#p=4YnD;Qjz z4|K=CKFbddMvfN5^;va<~Th+J`B!&`&A#tqY;jnxw`Qr?WU7-|FoMI2UPEa zOINPwJr8m$ziXc4Wtr}c5{`K-*P(pxjgloZ%CmzGVqcaFQjMh9!4k+U8RZikig6>L z<6wy-G%yj@2cBIKZ26uhS#mPhv#zdq7*Oo;PYGk7nkm=WcAmk^wR+O@iqgSg6*X5l zXochzi1T=@IPH{cgJMnd3q{wmUUj%u_)kF{et%F}sJoSVcUxsSO@LM!{@9R^?e8&mvJDZ z`zAh)(-BCGc0X*dF9mc&6eB)&Io_`lgou;Pb0Iy*@**kCZ|&#BAmQ{vzeR#F{2-z| zC<9>$=EUE4bP}JI(xLXZgq>kVvNWGo(jkZC3yw^ux!K0%OrG&p6DV`!bU!)9$(OBc zFq#gNttToCl-zhkc6tfBZbE#9@(|G621l1%g@DUagfIxT-hN)Mks(aS&VEj12C zhT&kVaHarPPN`g{h45|Durxd?TzhQ?I3OyQGT7dO37TGKSvS z<})mFIzy4|I15ID@P_--;XL^0l|OpIFrslth2=bTOSF@ZJ9@rjD7lEBR>nmUpTZ5! z>4`|xd2PhVBuiT+Hd=UGan7{h*gg(hK|)) zs~W8`adv73l&s8c-o^VEew^Qpw`{(>oW1S5RqL=Fuah4q#V9_F%*!QMcHgPZFQXqd zHoCjp9WHn2R1hUA)`Kge6Er0Ro&{HuH$3~8yZ9_F5Qe*Sfq~X)vMbN#5=KyPE!2bu zue)HuAEK$9AB&5q2U@Y^+v(;Q`Y0fqan3Vp=Qs40O0N`JBzVHKv1hc=cdbX5vB$Gv zM$v9IOpa+C?whuJCB3d*<|!xMlVb7Z zd$6fKl~l@ZU1sy1F7V=i6CW&`=KTJ$?*$Sg{B=Z8L9>Si_m{;W$bNR=qrd)7)m;0_ zGv->*yl<@iE62A#N5b*zk8jbb7vx!ovG%EdBKL#9&IMC#_ymU9|LdPz&``@<3pgNL zgre(qTFVP4Gh?Iu|KzyKl5-H*;KB#5((3UK>}n-0CLRNYKGY)Dt&N48@K2}NujhNF zy@Q(*QQWso?WeDhSco1`?3FwK4RD9*xV&Qda6f(Z7LxPJ$YoBiaTUTS<{dt8op1?G z!egJ3l$ik-2QnDmIs^YST~Us0q+-wom8l=J6q?IHH6N#ZxGIHB%KR#6f=f^*k^vd3 z0*z$j=5{u&|Qt@87;#(#8z2vzE9n!wfdG&EpJ(=!pVJxnp zkCSS%C|q~7rt0rpMN#!|R7o*2OjNA{V+7sc)!x(OIMv+9GQ;$ICn?f+^oa7m)SBD- zEGaf&1`ApXGvo?Scs0ZKvoBnY0QkGpbTq`2do`XuhGS7dP_UmI9Uwnj6<1Rq`GaXu zB$@ac9XY#Bcv%hHLBYU+d2rPpkA^cCZOrbZ@Oj25Z!8}t6~CB4^@DN{Pm+gu@iaMj z@XD)l?=VIZ-=x@{j;eGr@|&~oo+gt~Jn*r0ZlDyxQF@(quot z#)A~@&Bs1XJS3~jrzvH?(9zm)t@Z%ZCP>NawD$Uw#2=u2IfIjri^OMpm(0;?dVBLX z{9juL(^9BDnU3QO`U5Pu43T@eRX&`KMyL1kEF-|Re(f!m%EuE0?sy`iL0=)#fMAGZd)LhQ=$B; zb_$o*D|JjdBZg$hSmr^IHmfPkpJOxUV~NQKlw1P z9Fb<9+nHDsY{_8;%?huXx)<8qM(0i>gOU`6a!WxIfta>aESlzBpprszVoQ5Q(g+!e z8W~83d2)1sou&kJ!6?_%G|4qMYv70wlp!XVLj&tGNN!Nv&rnUN{RO*c3Fnk|f1Ulj zKoaJ-N?*1%~QEz)gG<|1=GJL9_^RKgt=Oc@JV9_&MuLP}=M zE0vbcH>>st8m`akY=yHq6dDS!cS2|i1`LniVe*mtpscB*hBufPN5EI5`MY34nKO60 z?Ep3zw*Sl@xrmO-a>5Kr=`Syd8<*b9&^C2@dNClZ1sK zpV@O0w!(OkqXo0#hS0wdRzZsCkJM=rKtTbIVuRo-LEyPJMgR0~pX-R9N8{kLgMtFE6I0_>~?usvXRX;Q<%(YVL zrx}*HO`};#!8`tbL%4{wAZ$-3l|X8q6h$VpYZ4M-%P!O=u8v=C8R$LXf0-W4$Ks4{LiIPUanS%8Nl@?sAV|{J=eI z%~oz%$)$;l%POrQqu8NKr+ks4-FEIoqUc#^qjg1(rnIA|N@oPyVT+Mj&||<_jd$nd zW)Rfy__s>$jVD%YJ$9Lsn?YjAfhDllFj4B6GlUsuf;Sjxz!J-xCXh&HNQca7bsNd4 zh6foax(dnX+;X~E@kU&eu)#FYT}Rn;9Pyr$_gFkbckD%VEb|$4HE>=Sxu-6i#-811 zaa*cD>fA_2PwA$+<|Yx;%_sP=;p;qdqYcBQb)(v0p z_wvUG$UYOjz+BK>#r6OyC%hyl9`;O;(F@%g>)YK{t(wC&k8Gjsb=$ckiD#)7%9;h$ z)HiV0-a@9gO25OOZ?#~$wJ7ycWe{ii0>VMw zX)*WV=he2sT*bY3D}7_FMqQpJje1{bJB0ul>8#s5T5KA3Q=O(&4=4*YEey5RnGypE z`$}9xQE%!|+9BOr@@lQuXPWEz^D)1!a2ch{6+{SY%&!xy+~~|M_4Dg!KVpegn-aQ| zSF!}i(sh1IPK(kOE?m`_L$#`Oenzjv+$w-WDKWp6P<&@UEygEt0SsHaKwZQ)lvQQ4 zflM@O|3zAED0@cBVh8k*)Wo>+2W@kPdsF0%+H!eQxijFJVehsl5avU}R^N`@!8bu- zU!r>_F@kNH@x+JpCY#gnh1;V#abx#|x&f?j9H~M3a+L4I6i?|Bw7%6~qo7LQK6abK zz@P0N*FEA^>(sD*YfB&TIRPj(JTq!%%f=I0y0h_wEXBcFc4e7{4Yr`Su2E8jd4^a; zb6^+2BB8~HK?0E4O^TvHFSIel&YcKbDfol2fEr4~ zVsn%t^Nimg4uVk8Ikme8XQp<#+Q>PbQ@;NJ-8^+p-}i7cz@YNF_UktE9DNcOLx`mH zIyU?vL2n_21`T7D>I)}jx;n1~1f_WmG_9f+YKK-%uOVGkQCVhX9zq3nZ*iT$C~mRt zx?#Gan0dzFh5M#kn8lV?_=roxZ zX1&OUWmT9_k{wis{THUK1zB;;renTleYIy^(rK)Iw0Za5{Ra;}{$%UdfAHz{qsLGF zji)=$o`3ek-}ueH9PbT=$^OA%`uWjloaK|>F3M_peDdn_C%u)`wQJXJ+`M(04SjQ= z|0H=uu&es1;JEwT-wkL700RjyU@aglTMTm8W>M}JZU<$U3xO!dI^Mo&rUQPr#kKv3fkmH}&d>?MvQ`vY}I7E@(5j_mk3iP`+BRm)kCS=9VuRLnJ+g zBPj2a-BVpk*<^~LGq~(#`V{J=S?HM$JrT9a&3b!I4fS^6-0r2*4Z~gS?4*ciD;p+R z^)#Ve%nG92#Xcz#Ts&eo`j#ziiO=Ykcdx{%BYA&N-hkFz2_YFfA}?SR%8#7_EMhup zEn~3DSZFiOz6X~Lt(=r=xGjKpO(aWhn*ik?3>E?m-Lun4@))Icc`5+gdz`qI6dE3xUe1qS30 zrP-`6^E`wafJez`WZFMSPAw`Ct74T9w@tIPHF_5`%~(nLi0 zCA@=iWZ_hiPKUOT{K_-1*_TKc)%II)hwrE#7DvCH?;)Tb#PNB)$LIXjkXm!7B8-!> z?`eSav*HxdY?PP{nYhekx;IJ(X6uP$2^>mNt}-cbxu3)w12V)L+W=wuK=u}=F3y{% z!Hp0%YIwKlAiZD*x3=WNenh@oQuaDtM&VoAY<1B(VV!HT2S?zUr*m!{*QK54Oc z?}8gaYODou+!+!FC&Ne=&{`pl#BfdaOq)Pam0y)7S0s>z-i}|_Ul|aT0oHanuH7nq z@_w$$rwAbp2qLWFO|~k0@_q;RjZ644qfitUi8oM@JEQRh8m-+ulh|i<8>%c;BYmgJ zj#;^(N*8y?AOtIUpjL{Kq?LHD$?-tIj@Y1qH}R*l#fb1eFQC32iHM)8<9eYG~O()MMF(ww8PM*z2(=qfd ziR&h`p_!-`@rb!{L9t_^n*c%zDle)JQGd}$TRT^F&~C^o&Q zUg|Vj(x!1sa2WxER%IIj(yz5gMS5N#ScBBX%4GvtprN%hGlv}WbcLs$aj8!qt+S!D z&<&vAZaXQ<_#pAOh<4sYw{oeK0}gkO^%Q>aTA7?5@XI}y|CvI*7?nVEge@HFV zwH>{cj{&of%)Y9X?}q9%M+V4t~^ z#NLWWL)joz)$hg7@2G`JgcP>ecyvptQB zjywhTpq^Kqu3_calZ` zV%L9=-`n0)`c>SZd*S|*!4$C&Ed1h8? z-FbH`;pDfwqBrcuYEm9Q`-j~<@xjU7z4}*W>9Vq_Yoe=^xznas))UOumge8Gr1FUU zog(i*kVH!U=-v1om5Gh)E5gH_+8wd=Be#4R4>FVTpy`rr9HNBD!b1|Dus#<{U9)qT zPe()C8Id1(Sn@nNq$ct3WK~Ft>a!T}zrk(8@LUC+r8DN6RWEzcQd;cXiQ*&jW6`yp zkb%rUpT*%j|7l4z{8{o>j2es{HKJbMZ%DdkQ*Llx(@GIac3#|j#49h(Ap9UXrCse# zl@~B)yOE?wj83-U&YkGqBRN8E7pr;1JvfZhjE>(olXZ%${DXWv86{P+WX5SpS1oX1 z3m-VZ&E`2&Z)?q=`DUu0u?=H8aZ%DZ1Nk1gg+%E2_-1tpE25M}oiu3BTtp{f*D%Mz zmUrV4my9rFHWjd!-3LWHSfKmbi`=vcKOd6QcAAo|xVJVhk9&l(mJjnn^7W8jR2K~@ z#wedcHZ**LIDYwSGu@N{+2Iy-4_A#er-US^1q`I-lXFeeJ=KIK%)*m|cMO63*|+_k zZ|OyJVV`cGVMFm@5)YH2v!5oTVSnKZY}jT{Y1#f&NN^IX3Av}rFK|d zjR%n8cHX@fhh^14&gZ_XrZ#Az4rAyHx6GKk$(4!QJO1M>cQy4@4Z^BnHBRK&Q|G4m zDklv_^2jo+^5XQe+Wf8UvdYc)2>8HN8NNwBI6S26^>*qMNj*=GpD&gDH6z;EdHOMD ze*cXX>?BD^3^ikXE`KGO8h==VtEPxZ+i5zg(yT*Q)v%%+Et)S)ME7OU_ROMLKNoDI zS!?6ZJLzr>2t%~Azc%7Sl0!08NGc&sG8Kplxkb7`iK13SI{TWCT@%c|6h6mww2|Id z<%oG%^P?_DEJffU>c7Cw4_OJ*pWsT2KJt>9g)ag*_6DX*JH6*K{h4e}NRz!Ja=vq@ zj}<#5;F#G4;nU{zpe9B5BRBOmPQt95X`Fj;bo~@^Cc5gjVa>_{sgLwupfd6jMH%oZ z8>%NxCvjO$4vV-<`cV`L*DxDEGj`ry+Jw8&nTZJCo_7uNmkZI4>WfMA;}^Zo?Ux_I zgeA5@nTEQ+_f&}s?s3Wrw{lK1%c5=`X4#Wfc#RA}XA;8ZsRzD-3?K6O1G0*j3HDT~ z3)MwEg||`Po}?GFFn||O`fTIYzRDYu?YKhb-C2{f+MrZfVGYjhW}wQtyA43H2N9(nl;iy=233O7*c)d-_NJnP_?oqhGR@N*zkfu zo;4RiL1^|2HjNKqEQ-lMT*|g??hMWZV%6sFOn*=4q_MsN2vqWbSPO#o9|fKmadfDs z5c$ovI97E9(w~|DIKEfJ3tfSa=6qikggNI+tPjnK`3CCbc|trF$#hr34pQhBjc|HS zyCcOT-iy;p@-b%0_9gQ{DAIy~Rih>)gl;@VZ9(fHFI)N(s6HO$o?D%Q)VK!Ou?2|E z9SLvia|u>ZY-?m&3Z;RrZ*C8W+^uyabMOzCSsi^VYzMcOI}5I##8s6P-q~-5Y8kv_ z`l*FlwY8$gd!;x8LS!RE|AL+9p3W>?BB3ps3&WIZ?b9hPmnmW%Fx1uzEK{}mDlAlv zL_sYIEdT=8;^Y&IK7oOP`BY@_8wKo*A;V4IN;G{9Ws^m##YW&Qtmn&Zo3EI_9QGHBjBc4Eh-WYUBHBjC}%X;d=S_yT&(JD+SeH7x!5X!(Ci%R;nVsS-3Au7Vv zL}&;#t=y2J9gZ8mNH@JXm9;aGJJfO@dYr;i(>a(K8ZghR@_e;{IMEJ8MIenuyRcM` z>2nCZx3abcTr z6Wh^clFbg>9upJcChA1~Zk6N@zlh#&V2shI1+JxiYG;UDIE)L)xM}Htiv^V6CC;}K zr79RMRGqv0JkL^zP2&I~Rj-6a8&{v&A*z6RoNsv7Ab(8xsWrIAP? z@la50a`PsyQe5#uZVis-@qHT@T%eL&UTE{EzckU07G6UTy{2JEh|z+^Dp9FL(jnw9 zNU)d_5;)Di9ll_72J7}j;vB5oS(&S{)^G}6FNRqg+l6rZRbjT)_dDa&?dZ1aH}Y7- z+I4iC9u+y$`(B=pTu`CA?QbyR>n3QKVuT;l#mO&V?!Y(JtZbXdBqZrAzSZ9j^Zk7< zZEMt9y0&zE>E_a{rIlV(E4;mpUNtt8yIp8g6P-J&i|+f{V!b9UtH^9k8=viM`<_^i zoBEQDS}b?*4@WLM{LpA2X=dQPxwNvfw6e6ebZzN|h1VA6eitM{Gjm=y8p zG@Fj52gzhm<;Tfj^U;I5n@^uS-TckxkDh<}{No2t?mc__*@Ju01&3=oD_CPzRXrvM zXl&beR#rVpx@{KP+t3_Von|j*{~44pkAqc z5IcHq4~P8slTY~Xc+7vxQd{KNT|Z-~^xWi@I|NbIDrR+kCqASIYC9c}W^YC~2fMgH zpKDYAt&#`Kdmyj{)$RsoY<4`keD}EOe1R3h!n%q)2`hA>1srypIm|ae@p&vu1P#t7 z8V3=O;Fe5qJa3xyzRkdl<5&F^-1!&gf)p*rCU&L`#S7`ni@IS0xkUstPfFft_DY>h#`MJ79vE=xZ$>Hd_SF0 zh3=OWs{}&p|ml7Sejv zHSh2;3z3_D0jYLHHTa$9U)-761x<#3GjaoTvlG(<=02UFl<5BlMWL&I0|7GygyP5P zhT;K#dxpCxeSr^{v{W_)w1tOt;?jZvb!ovrJ@SGGVCs^-EP3I~fTgZE{+4K%mPhB2 z9vYVEw1W)E4(K|Q;t0xf2~JyoD~dzkjnK_fTN9xXWb^2ZZp^Eb8JQ`q)-WT}=W7HQ zp7qy>z|%YU&I#>XxIt>Q~el99!~L z1ih?5*7W_5SDlq$e<6jqWpW&IXT!9_{crBzLQsn!I|yQ3>CRyWB`t0BC6i?F-YCru z992O)(Lm@`LT34geEJg~nn-+Vlj*%9x#b7intMeOQ%EElHu*lGgTZkfw|Om#2ujWD z(nQP(U_2boK`}Ma8ON_W@Seh4+<1(n%By(P87Jesz!}kHv!;@=7Eu(!7ooH84QA~XPR77(W!#G@jKho`I>c!V@(OhAIQ)euNMgG5+;o!+2h zF5OmP(5MieF=OXQVvsJ01b^vZB^{6nMTGjPec{s|A*fD$^|=zUO=G47WmaS}2`c6s z0iGkbH-CeqHWS#2xntUDR1i_mM<(qr+!3mo&bGH61(iR#U}Z6j!`d5Mpj%%*{*@1F zu_M%^H8nk~e$k3sBGpDgw+BBgaye%mI#7Z_KTO%T*nCo34CxxhL*hh$qSl>Mu`|uU zG5NUdX+6F}h7dG{%_$|hu~8mEoDA@j9BZvO1{&)tG5b~*=diLOK1n?TV>z&hjKLj!HVy19T*DW++=txnxFZl@#&F;-r3uNtu-X z^wj#Y;o&~=#grn02{74kR;kXzd>@mhl@lbegIC^JZ_O9s3gsJY9B$T!iHonMq>vP0 zt&J&j%$gbA7~>~uR93YWi6{M>XUrLLpOlXgo=+7o<#be0mQYqjG!Rx#aB(oKyIWEk z41#L}E9?uj6{9|RQ5B)2lX9m>`C)n0mWS)Mu?>q9tI>1Dl-VXg08LPYVOzGxpk)k# zlXLVVVpdi+2#eewo)Ye8D1Lcbk7p~;V^;(64)O#T@7w_xi;@mRB%-?jv!N`(u;_r` zS=42mTlH3NJ-VPtukAd@9NddXqXg&E1JYm`P}2DAX^QjAu7q{Tafu(s1?BPcN}T5^ z6-gzjZ}n1d*}7i_cBE4{B6oL(AMWmU@n>Nn9!(D8*Lz77zb*!^cXzvsc>a1e2Le>m z&}Q@~hh#~Ia$nNp9le!Olw|GHt|@}mx|+pwt~Xc_@K}=sV#t{nwYP3#({P3DOcH1i zXW9r z5LafD#ARiW#xUJa2Syu;M`?AsXbQ$p>5xys02XaH5@(*EjYO_icG3F6JM-pap1C5t zpMHk&^PzX|n^Ve!G&Oe%vqFQd24aWq*;Sd9tv^lL^M|JQYJcC49#tRlbX28qA=BSw>3wF|@tSwb8)Og707I)xSz82A ziswg)%>{6c06e1^n%(nSxqesB7#}{-v z%~syX1UP+3L!6u;%I;9q;OXT!_x!;#8PZvZ@W>gAXX)T5sonvSGbYR`*!~UV#tCHZ zlSE>DGCh1dytt59m1)v~SP+7#r`h0+ks=(~I}lke+$eu6XHWr;92hBE<-@cnE9u1n za)Alr2I!`EkA)Z@Ax)dR5SB-bXkz%HgRWcbIvHa8F&Tc(GWU{Ys#3{~$>zm8X zjr!Y@8hY!RFC%AjIDB`^Zc_A+#~iwuI2W^Go&pXSE4oYxSYmPFYkO+5i z!Zl3UwNW_wTT*|F=VEQKzKYd4h1V210c)D+$Y$|_f~hZiB@?LB1*^HOtt?^Q^2MGK zK`9>!40PRwJ^H4sc~o~OJ56bUcA8xVehUk@|iu<-!rdCB% zfXA!cx$uHQ7_|sDA`*)p((5}WOr(Ms!%(M~0f#7xs4qxT z_d?mZKJ6dPne|}WmG=lJ555i$K!>b5I1T3W(cvLqc;O-g!6F-^l9@Y>3sA3!`7Gg5SjSRNt{w#1rFgL0-uk%lFiHB4iJd;aI2SOL;qGUQfM1OF6;tT zD-Un3LGshEnN{R-$&2&=m!I@DOgY{AJQ-B|_R5ACb9Ui=dv(K%((I_;UfVEbI!dyt z-@ayO2gYVB?eqao+whT(4a28kd>&p(7+H@?drM*2CSqJ&gf^*C{`tWUcag^WN^Q zo3+=|iTCn`eL09nNj8iN*Z1wU-CNha_rm$KbNAMoD|8qaNbx@?k{Ega zymD*1w{F+UrCD>iTdv$FpAH4w+qZUat++QuULta-P)yvuzkBPReVxQbb?AD(b#M39 zefx4hEfV+c_O;zjH_ZJ}KAD_$C=Aig!tK@FyKWW^62{Vl)!o~hySLq_4$-SZd)sgI zFg-Zz9Ot7dK1e!cdZ6=jdvkZwjfoN`rrAL!$&QmzKJkHE+ud|%LCjb&=8J@d4zBIq zb%2cG;vnhdMVuWZok3a*Mt)NdcQ+l$aM2fg{x*d`|-eoV)Od$T}R|n7JvMr z=<(L>-A&gcw|SCghzO%58B0~39ZbFEZ{OPWL7BwG(J1jo;mv$GNs_@~XD=R&^4v$n z>h7jDn#xk>=KbB@tyVmKgc=NZpd-txzbpyrM zE8M!jd&^BuQ-zgYXU*&3)&pO()fuIs`P-|J#1g z?kzAh=DWUVKFkY$J$B1xgVInUa!C4USSW+_H+b*DeE2c&94zU6%dodOW0j(zrax+u zja7|LA&Z_30mHZrt{sas{)Q>F7U`vG5043o4jG>*41}!zgbvzHNKG%G3AckZ=pFLV zybKdNc@+U!FcZ(S^wsM9oXsk3!0VM>Q0ZwcG#-NJc`ri`Q?y)N}MA zDW-d+`NBls?QOyV`Q6@q`m@^OKP&uamH({qpKJW*I{&%Bf9x_wpXj@*xA^&O{===W z-sNBS=+7EIT;qpp@{j>od%#8Pq9@H>W5BL+o$FlZI@h_*b#8Exn_T237rDtrZa%Q0 zCS^Y2b69#8DT2P%aTmhqI5AN?NxM}tN)C#6jQp`-Hjf#To<5Pi zu9I|I<-_S{bb2q(vSff=s_jpNTnG*`i+u$n!p>CK+OpcI1KjSNqtq*9` z`GC%;c`DbkIWrb96d|jL21n^2$x2Rvi~RT_++R$`FK`J-EvxdJSx3FS9J^+yY*hKx zts4>x;bE7JV!-XA+()gC*CH9w4VZamo<6%rdf>fJp7M<-0xKE3UfsIkP#&_p(1fx~ z3MR{^L*lXN1R8mVXc$5q#2=VJMV%E#=L-{7=i4|t@o-oqB^Zttf^-s$Rs1840!1`j zl+k=4?aiAz_aYdiL6jVA>ri-E)GnOWJt*QqvJW{9+aHUq5LZs%Q}*^xrUwbm$~kY9 zDj{^a`#ggXuc)}_Qa&yoL0zs=h8)e5chxJy5u6|tT|vk`i{2P!SyyHf%m;7ZHH<`~ z;)2HL_+jv5_PF51E(c)MAQ|weYbrTA-U%OG7N01~BNNr`TIEnRLK34}k0CGcQ8db( zA0~wLCQTAI2zj^pbfq3MuCJ=hvd)<8d8s5tHLO{3dap&`6mCJ)ohktsf!{z*?&J*#&Srg2{ zbKaO(L80Zy7rBi9dhOs2s>Vub|p0L;$_}f$ZDj3oIhfzprg>uuWaT6)y_h9r+K7Sf1#`> zLOw*N^j{Ns>C83lfM(>sQ{;Ig5q{)8p zyl#n6ijbvuo>IhZ$a1?7Juj1@vw4tY)wgpr<)doq;n@aPKq+kGe|s6 zEatzAivetwgKAoEl77!sD5YJT{4ycSERcVwK5R6=m!Bm?x*t}q z<2|T|I``9JGaIVh30~Lh?o9Xh)9}V4HE{;@W|$;+i)7uwgF0~wavPPR*|TdwQ+mEa z&;JB3XS}fCTQUmP?5aTtJ@Bw|npJU#1|gzyD-*g?LXqXDX$npBG|wyZn-3y;e+*Rl zGZrU3QB6L5|Ar^;(grz0v1F=(HZjPBm``nv8dA2s*j5IYe8tK!YMF4Rr=K?PiEl*Z zb03s}fd;TSq-%__Q4Y-Bsrf7( z<|U4&;OYi)=sTvT>6N{jVn)O`3F58c-2}#FzStnOoX%xtSXm3tykIioT2B*Pk;z3o zhaKF1MOp$x7>OY=IMlemL1EJ|VG973_k*1Ld{9~t+So#q z#BR?D44fxvmJ@CU8`Uck5_Fjbz$yV2>4Vc^B!uw1u%SMp5V#S%n0KTUDomBoTkSryy7jgl?5ijm@)Ppiqa>QBq0XwreKz7m{nbvOyQ`aw}(8wRYB63ki(ktof$ zb$!rgm|Y)ACbJQVyr_Q}{V3!HoN@EGoavHVluTfJS*x~4nyK_?l`p^6R<@5!ob6fZ z3~Mxj%850E2kp@#OLBa`_EB;oq#cN;!(=$cu}yOHIN0Q|AA*UDZ^ubieTnqDdxS>6 zd$tY1xwgAUw^ukUI7qbJIx4g~!G;2*2oZ4^^f$>z>EJXXHQaBvb4OqKN;y7r$l?ha zN?{X8_xF>6Y*IYkK~NVX*^crmnW@sMG^GVsW55LbdJVUS#z*#Z@+UmoO|plPi|Oy& ziPD2CFUa;*H)(|<^EQQBr~)Byfx#@9xTJHHNm(V{jW_s6IBa0v5~y`vtn6SVsX0_tQndWC zo|K}`3$s4Rvt!)bR26YnB1EM>9$v@wHHV3ubsE86>x0blfZ7EVc5HPj^y$!>EkZ>( z9bcII=)xkTHXzcdCv=)KZ(Je={sQ6*S}?UKtIWD*v(9o&itcJg|9Ly0)>@r{W1%wYks z_>m%ZK^ZTapJ)HWhsOxj2pM?Ts=&#jIMuuO9evZ{#e%1<{RWBG_jiI zbe5zH=+NcFoQ}t*UEJuE!=ohW4=9}Q`_^F1AE(+B>7>%b1_GHk6Bi$pUA)d*^aKUX z>yalozLJ%T>@k#>NP**aXE8gMur`OV#a4%jGWj^prtxTW`hBx=lupFMCbynnWwoRa z-QcQ8Gu;O|OYICn__V=}hmd+?tB8-kFiDn}N6AU^h#Z@EYwDw1z@1rC=L)S5@^c{+ zMV;(>Fh?=F4~o%#0I{Vn<~D2c(zq_VfV~kWFy-cU$L)I419IA)Ul>8-QE&#t;?zTC zzt)n~VqU-25zx5im7Ark#+hINzzTA$M_Q6(#o*qp-G6Y1xZkdMkilS%(*sFqAYQB7 z0IG1ZjPcZF&qUZ{_tDQf?$II}=DZo>&sQ)gc1@eaA4`>+*-@OwA)e~iz$|_uDR4{A ztXz}xf9Hr>H^xBNewyb;r5UA1iDyo-TO9~fZ{_EOUy>$shMa|QS|Wnpl!wV)oE@0H zx!RWRR~L=$Qo_yAxr|3sJ!2W1v++<>PRh#-fo;0k(Bp-LXm@o@t#-1TUPs8J?VcKFbdtUOmwS2UwZF~xISM($>vDlZf?R1`&QFCU&RDcb4MQk>628m?ya z&R^wfcL~VHm&74#*66_N*X!5dCjZ}AF@D4 zPF|yVfOSFfAhU}p`G;|7_L3wsF%*Z8i%FeLMrG2sL0@NqC^P#OovVXb7K)n6cLtSv zGL(SiM0oU_&A<4_>TdlWk9R<%O@=sxFW{Qg8DTP$s%nYk3B0)C3v}BqVKSS?O8qRb z==+;bSK#rEiF(~0Opc^PkqDacap2=fB9QGQh1lBJK;Zt$JTnloqt+}Z0c1#nBq{x6 zJs2kyoCc@)6y`>9Hnd_B&Gi_6`HZ5@ys zct4xW^?{R&7@hv(AqTZ*1JfK)J1;X=0U1eHfrhCvdE?-^rf&3;wKoLwxzJFzH(rp# zc=&{*WWFe-nX%YGz(;zpfvgqoAyBr#=M2=S=7!)!Jig5sEE|FW$dFb?qT8oS1d6z= z@2CaW3r_L33J$cH^*O|;XbnbACi`J?mK5hgfvBS@XXs}j_2q5UH4+b$3=I+&jD|^} zeXC_nRtlz`ndW5RA2mSZ4_pIMT>X2r>DOqo+4tM&0n?YPUa~@SwNLW{q{-A*?3+-F z7>o&0plKPC(lZi2Xqluwi$1U)3U7-y>-^zPYoWjfpr z?rmBtDeT5un=VJ%pg+wTEa+y-&PF3fy%Sy<^WZUnkO*D&UFChRRbiewirL!cy7b$$ zPdj&9eBhP_5c4N+vf`rzqIu73BVsWrtD?aw?dv<<2Gdoh6Nt1^r&(i$qr{-93dhHB zI>LP}vwN0Ctrs6V!5-u@#Oi>UtDfL9hc;a8Gln1p*hDfOMH7&ofj5BOb?+9F&B=t1 zhK!ZLn^7nvZ$S+^ozI3oBihQLX-Awd4!S@XyGrLHXFhkLli9oT?CdJHF{%5PQk_l2ar@dS_P&6P>jbL`!BcEeZs0hFy*0Q)@I0olWCq| zVe!@VNU|>%$#I&TkRl-FPgWE<+-4^~PKr@{x&(hiW{RYPB|IqN_`}VLrJ3NowBSd{ zL0Ox;Ax>V&>e48!phGocys00cb~oG2q``I1_VA}8_PC=!=1JdYNxXL$Q*AEkV-I%M zVmOV>WMQK3ae8lA<#ZnKX_&f5hC`YZiALdTe(q`uLxfkHif!$!C+ksiQW7)t2)5MP?ZunWcWolt<}g;sqUPO0FxEm6djW=_}n9+6cK1E|J3xPG*xA%UX=N#TAp& zj54{8vj+$}G*O6P^F_Gfo4*S*Z*VqJT2mu)^x!xtPR;%J)a)dcg76?aPK!LFLkpk9 zMG6&-Zl?3u(VYmf1M}k~LBxGHZFiE2NA@5)2GNp>#BF}ua5VbShF{OtR_lnmKWsE+ zzpeP8d~r>nYNOBJcv5Hgk z1xt5N;iDoNXTg-CTdajh1P^PYeCse>FbJ*Fyus>8Ihy-?>o;!XzE1YdAejIZ@)Tjf zw8qH9(oyP9^BBQ2o^D(>SYo1a^nv0$rrA-JpJdS@xtaJC9am#hHhYe&njNXKKTMAA z;&i?yQQFPab0jL&FgdN0c1Ap2W9GA9XXQG_?S zsE^SK3mju#Y>~ttq)hxkACXvAt8}}Eo@;YL?Xp|Zt)EH>7t%~Vxb)4|A7B2Kv}-kr z-~Gn+>UUay@(;h(`g1LwyLF1DyEiSXeEfdvk6Tr%)jDdm-v8TwwE6j{)q4N$efRF? zUu*sG`@i#Et2J)5zWI&cZnfV3Cr4jv9kg1Pf94oxVfI_C%YVjeCTX?IU;4(COIQ5p zMw~V257v=6uDVI`f@T-Zd52N}^R(Ps3Ficuv4f>JOPmYDc<(>{1ZUXL`lU-s z+Dxt&weUUUrGty2W(48c&v^4O@%z8eCFk$91zEXYoN&{8~B$DG@A!cd|6# zO8E#4UDDhE`gr5grMIQsw(ZuV&;{EfZ0D}T261QWZ?%*ge?hrXE@Bl<{2Dm%zyF1Q zkb)Dx{DZ%rf)oFy&xwCHXw^9J=cI|G)w=v$MXaWN_&|rsb43>jZ$MJCKL5JH^5+#6 zy4^RqmuFR+W=Y{ohrfKAVfyagKOmU?mcaD&X6f*YwWc5;{@K@LE(Up4Z9O#6aZ(*p zvPl2=6BDiU!29%X8A-sbR*Q-s|Ijahmsgf)r9}$JWi;vWj`Sp%PWt@&i8+X?C0ZQ&n_Dzx046geemD2suB zZ3_uPyh6jW>Mvt?S?%13b93s*j1<-ISd>z_YsI zE(8-79ZEczG`5N71adsV$?OZk$m&QljQWn+lphyuS0}eD4~O!j5$2|H7VTwu=r=(6 z@P$TIjhiuq=hXUfT;Rt=M}xFnjo{M@+ai8#2*34zW=67)^WpO5c4zAeO9r3i{@efK zes{}x_EvB3 zId1b2X%)Ywy2YIjE?wb&v(aBm>J0AR?5^AfoHjtr3({HQ^C{GbED}5%O*Hj+zDFiM zxI)ng>_T*ruZ-H?jC;P^ix^=1eOS%(Qro@l{J-qI34B~vbufPAEw-|6kg$ZS(ZrD) z&8p2FTPCt4+e)k@lAO(QcEH;Bm|I!=rp$lQznv zMc09GLr@^!+kMbJ&CAg zFo607z}>gf7D8v%t8ZED_ncAzQ#w*YE+qt7_Ckd7&T8_({<|LCFx6w{6R(QuVI3X+qHScOnGdU3%?X&oi1#F0Nw?05KpQ7SES z%$=o`;r%s#-f=B|nWy;v{MvJBX&k&Ql)ZthhEhzHtswGet;niRUoDmPP|}Tvu^KRZ zLkU-Lq=OG(x}?4wge7*VcnDHVlUO76ytJtaP>UVz@I-MBZi6>e);GE37Un#=3EynD~(`8-|m zb$LDy7XbuWQMF{1NK4|=5LFNJhE2((q>DW21hVg|cG)GQte9pbxqSFk}W zKS2Zp1#E^e61~wBSJ9z`B&8wI8ySI-v6xx&lpz}{ZDpTV$*)YPD;oyX57H~^#Q?YKi-A`MoCkVI-#i}E z;N(2mL_?*z5P@I`EpOU)s#Z~3LcLvD*l8bI5+H}men{Nm9Hk#8Fj)kF=zt$8b%dcA z6b^$^%0qw!q$n#vQkP^I3}{W~3%KHst>-lieXcg7L~l?&FDPhM0@^D84~~%OU0qMg$z7vK`+liaaHP z^VGADfFo18Ap=Cefivh~C;B<8QXk}6lTd6|_itigMp&)j+yzeIJAHAuh3t?E46{mo zNr|;}jmR57;lOlk_E#Rg0Zs(DNJK zzVI5hw9^DTxFN4_MaPqLG_@q!#a*aDZ$fJXyrTdb`3hyf_>ky_LZp!bXAC75fI(z= zPOy9ECVX&7Qh~%`JbKu|x6!%UWZ38j`W9)F#d_U-RY=nWBomGlfMxqsvi_(dd_pQ9 z)FF^X<{6x2k_1bWhCn-sDO&X?c`9W|d{!jH5oZZWZWZe)Ry4sARm1bFMU0!PLzV<( zT*V7X>WMj;DB<+iI!2DdBc%^$Xc3{MSga)`hyqp~_mZel=T@iX5L+|RfNHH;JZFUu zan}jo@J*S1KlspF43v@gV949AQXrV+tr&5BCb;@r>NWBshbk_}pqn*9EdrUw+II32 zU=amV2i%so$-HbUU7!(saM8m7aluRY)cIqAkH!Pw6O2lnjtLEFyk_HlF~nuXEkp*qL`oeowUV+=#*oW#`!Dt1d=Yzz@l5LhK*+Na=ZIA|z} zs626s`X$FU@m6GrS?FuSdl_&P*{r6NiI2nq&Cv$pKn?|(N*qxW8I~-69u65JIg$81#RN!IcWfUH z283_cSm7p(xD3*fo}MVB>Ty!5_!FjBg;lEtDjQxHEf$jaLm`gx#j`phhKu8o&quW< zb*@;hC<&UF7FM7lypvfBZWObI2V+A#iKLJapVhTD;*cLM4RlebsNtnO7($6rgb{%f z!m#KDulTIUy>(U~vbZld{RG?uQu*5ej2N^&7gn#X zrIb-miMZQ&0+_o~^SOG(+Y%y8IvHxg3&?L5XLu!e+t7f}pfyherYW=RhSqWz=TYQI zokp2BWXG*+;l$f80ma5SRi)DgARZ$BCyeeM7pi;0jrPQiPEDP;C2RwhdWSBC>(O{c z^|k@51F8_VW3<&^0poTA`pX!hz~>FS1kUkBEI07UU^n=u&N`(XLLe8Bol`em>1B?0 z@*^FR+9GteDo3YQ3Nva1o?EbxMK>w%h@w#x?4HPw0I)*_UDt7U@}&AMzK&i4rl1Pe z!_+t81RX>a^`2&E&19>LC%UXYo=891Esp@;VVt4Qi-@8ZQ!r*Ioao6xI8mqp2rO#! z4nmAx8_A6d0Yvf;RWvwra(}q(xL_k;eThh-&_IA=$<>F7|2?5a9ihNV3YFPcu6grv zY}eMz8bkodm-|g$z5;B*coO+epCFw1f`kwd1tQ;%)!aE#){Zu;>mgbl{V~K=wDMUP z9+##%zXb+J$Ia?TP60`EiKgU`qN51{W8|A)w*&dNtf*~@_sbM6p#sr+wL>pu0E>7? zUXy5zc>hBkyUOx5id>aBW$+?cklo@&?+y&KLa=G)v>ROSNKQbwUo_@Iv?nq&0Oq0J z=diknfQEPI7L79RFPFn!Q&NKv_YRu2@@vV(#usuQQY_1=16mT(_2>sy2%0dsOQpK) zLI4ynD^(v4u7bQ1f+*PS=^%WD-JZy_ z18=aLx{Pv>b-*D;`-D8~J+7xP@gaae_J{|(nzds3^G>O+>Uh2skm7Ud5D0w_!-q&X z*uVhYF#}PaG{Ho~GQ>{dl7`S0hH{9`h&bc6m2LY zRnjkT#!;vPcgd9zm|-i=LQ1sgNZ|T0(LV&41zeQ&4gyXYi~_xK5GiVvxaA3ks7o6R z8xc_pbdMQMQ!f$|&r$DjZ`8NggKyM(Oe}~nu^(H4r&eLoK(GSdnQK8Pmt_QMd5W9I zt7g&nIP6GcG%PpVxf&$YA?6p(rlt&r)b4~-?zJsyQY3T}gC~VZlk83IM~8Txd^mXA zcZo^FoCsJkrhjzNbX|*biAHM&;yToANK(bVQ2`Sm38Ssbmn(K1Cj(@^^e(o39LEoh zV(+}+8b#l9A&$%_hF`{>2M7W%LJfrl4#9oQb$qAjlqY=G3SUtiyVnqE@Q_;`v?1xD zcq(>(gx79(Kv!VJ8}xGqNkHW#;cBy)Zh(~;!}G+3)ce8XMMxwj-**P@X)dvl3YIeh z7S%3P^LP-;kbrAD5`DM9m6>o~_fgpX6y7S%6V7?>UKA@%Dx$O* zESO<{{n`e>Y0Qqu4)!RXVj#opeSoZzQU_Ug9~pkz-~ym zZ^+J<7=*TvKpyfgNE2JaC6Fh=+O{1ZG&YH|dc2cXwC%P#M3!dB_}rQeH`(i!$?mdkqN;Z@&QoB5q&SH4nb+(05Fu;me_`!p5CU#BhW|=n)XC( z=9pPjdZD1d(2^cBWj@zHd5oa37RRj9z(LbKXxR%I?nUaAEqejCnYQt~(24YcK~S$Y z!Yeual4_&)1o!kmJ)%c>23x*{m7e7MSC&7S#kDk01xC=Xv z5(o*wb{lV!;u7J^l>H@;6c`nrK^z`{?;)L{9*kjNp+?%t zG6;woqKJw3>XrD@0fJYwJkN3QLUAo3N(X^R1x?Gsmkf{lj>F52ji+vdtC@T`G)U^~ zb7yvzBO6fAZ6l8i+Tjlt7ftA^{D)0ok1*l-t0&XRpyo{%HfFChfL6YGCz z=m}V}qdhhR5f@o$wU6D&(%8wn8m9}1;}v|m%5&S-mQ+Xy=m#e;aOn?oxCdF-7y;%R zUJB1C)gNO+dj7pRZ{uA&fh&RzaDhiVv~QqORp7COne!BGhQPiMNDeYO8Yw5_cLhay z1-(R+QYwkA)32WM8)d_-q>5#yxDXKlQNCw+A;w4kYR|HZreJPCk{E0bbB&ZB%J@i# zzEQD>E9+YoQ8qD+X(1r-{fx<-8P6%3K3v=o#{g;C0d62z(5H`?=%vC(Fm30zaoU&Y zOA;#6YS6XTv=6Zsyp=|zTu(})a>}#W4Lsyh6W1-a`o>gfZ+t75ab?jc_vI>a$GMdx z;=$SNHkCrReuoV*=*B!%sEjO1Bt2>6RoH+=H@t*?X#2Q+e_Bmd8vL>zt{SdSJpfK? z^HR7Z`HT_VaSU}mzz!PTahUjtAYdLKix z3)WdUj&w^Q>Som6DW@f(LRi^Q@4^nvw!~COuhfc7DaR*9u!o8TQ8t&aDyHNeD#00- zF*UyF`GHN|ZH6ddyU!( zq^H`^1U;$>dOmy!efj_11^Jdq$o!4Si1;IJvU z<59kXH(@tbGJnU;z!TNE6Y{x}|I_m4O?T7{kT~L7px%N^5m=xtnWJgyW{UJwBy-9* zq!0@jKw#y-h?lFTGb=}&07ytT1q=Y%-_5gL`{}kXq?Hab?bwkTRqQy=2G&U_rDaUT z>ercgC9E@Q8xp=re3IBj>A81{C66SLn@Wm`eIig5s(@NWZ2}=6J_n0MiwL|Aqw4|` zL8e0QF@p=*03SuGXsJ`DeLR7VsgN@krzH+HwIwNUTZm3n z5F@@+=L#W8R+r)l$>0*4E`KMV5Z!Howed!4^SA{bD?9~)9f$05m|Lj-mNwX7cU*Bz z$n8Kex8pSEuwk1#z=WmR!MQCxBJz$3!Bb9$6==&Dtkmeh}5B?euW1Ha@&%q*S| zNrvD5EE)ayG|8#^hf{knF?UKFY#*!`R$1rL8{RnFO2R~i78uY zyrlxqb!W0&nS3_i4Hd69XFSU{3ur$=X5Tr>pRdiNi%umoW17q6B9zkg0&b>Y$#~l^ zL z+8|}RxDp}q0*G;~cO_uTh5yN^-|AT0|1WY+Q=~sukt>DK?_bKTAkY3^m1I(iNz&JL z+vTIdlI5#>wt6V`fVnti&pJbPv0N*eLu0z?iWP?FW)`04EosSV@!f=PxIUyQcx z=P9lr-e#uf(matXC3suOoHc4?AHsU!K|9nE)jHEW*$G|3VsKmys+i3d@V`U{*Q(1) z96?PFTIovjWEW4Vq{D4a6=HdevZ`AEwT+VaY49!ZT`-H?a6p{V+p06s;U>oLR5WOJF^j@|~#01n6ibR&*$3QXF@>(R*ar0!DcK$@{UK-UtWt%XTA zW|zhA)IvdCTi1jE5tXDNJ2lo57%681Sc%`oqQIJ}3-AEY?PE^ z0fZxSl_}+ee!JuPmBs4%l`mGqV#6~g?izI56W1}7s_U1YKX$Gh9uzJcvff}^y>a6T z3f2uRconnsz^TR3W29zGhiG1%-0 z$QqAeX#J@Sy$WN6fbNrsBy#@3D)eb*Nf{QdkZJFSz|Hc@8dC+nC6Y#jYF!a?mL;r< zsGV@y%s`b*?h**fimHOT>sE9pX^DQ~!lB_MUQ2-v;zc;3b?s_SIn%Xmuhq?%I5b#I z(pxT*TIfnC%}GV-=yPo42k}I#vZ2uyADs{$T8NHTuEx4Iuz?1ws_un8JveSVVlG7@ z>Se^eF6@%Bm?nma*_JgZVVdcT+8*VZWPShg)Q>pwD(npjnYi=KQP3cBMX65l{K8A! zZ_G4lAb&oFVN+1ZEjc^YR&+SG~m`K6!?EAAP1h(-I$BUg4?gz%GG@3;%XopIFj;d-{C z=&v~nk+><}bSp>U05A;5L%)PzGt`GQ%ZK}~9vx2)4~>kD^9qha_>*uGE6;a}FFnF< z0IciFPKY} z%*71UY^A^!3d;3()ir0W<7#XZ!(%+LXCYwE1>qT{F~RmRZuQC_{X`OKkYmg99e@xo z)l5Wg$}*VdV-PcC^5VQ%T;OGAPAp%=aUrd{Z&+my9nb+gO~6S8Y?{V9l^BNGnSE;^ zNEKt$e5YdgR#6h!R>G&L1Yb-i!|+2*&MZay(fa_YQ{YGAnD@~Rxz9?d1?57>f3yRx zi!Yiq7I?1_*wGG&`2y8L*bikJ;KWh#%eV5yMZWLQ$ll4J(UA%G(b^i&8syeQ!A+R7 zQ(PevdK8o%wrmS*dC;mRd;_n5q~#qRn4Ex1_6{fO3W3Oz3`d?-iFq_J@3>$($fEjn z>DpuBx`f>IF9MFDH3aJeOh$V&J~M$C{zqz+8581?f`PtTEctv4y!qRnRH@ z8f?_yRs`Ur2Sf}ZNGc7{qUm~Y-d2S8dAwxJ&YG@RycyvL7Hdcap{YW(=JUfzQ2&NJ zjk1Bzd7>wsPv;Wi->$?F&RaPpPDEb6mIgZ0xo`u>ITQ`Y4LwfpF8aezbr@^O5vU@I zCWL7Px)kWQCCAV4!v(y_C4Z|Zz=%jBwGz6SDzLnFIbI8Lz3i9Y0=!T-K z90xWi#+yGP=S50TTT)C7a`~d&f>lLeIVnPWok|rp<3MFxVfCC@KI8cFa`_~>pWQ5s ziDdmE0wi)^RWy2;r<5Ubu%O7m_~maY<s)vGHOcGp2uCWXw1aB55 z{u*;U&w~3{Rm3fB42o?*ygwO=cHq_qq(L-~`>@&MAa#ljK)D$eY{IppR)^bsYHLd5 zZm?{MBMAzteV2lm2Uezy4;YKa0>spWO5^dQm?4;!M?!=eE+$EY&?l&*86nEv6DS5f zfVw6rS9=V~8c%j2r{lb#=vVX@FZ|W(Csz1lH*;i73As!LquL`r3Y;wju%lA0cW}$D z)_f490nm=3Y7JIRE7&F$9!O9ruauXvpurhUAoNwJ(957b^xGsn-%Y@dA8`i#wIXO} zh9)G!`^1D)m;8#L+7+N8s!_pqeWm94u$gCY&?hm~6j3IsaH?r(rqwk*rHyJW&8MgA zA+%E?E%*+=yHLTfxN zUWqnCL;|HDBFmZ!S8%;zOlhD)kKaZuQ%^g!pQ0%+k6~P`t$fUMXC1e~#kmd|B92*L z3mBZJIRY)ldtHR1Kr9xjqhJJz2`QE(`BR5{0URw3s{y3srlmf`m8VZsJ;Ix7Y zgBNm(U_cZQYQb;_$RG76E_fZohty)3p$0LCHY_t%wQQ|?0uN3F%4RROd~Ta&3C@%P z<(tQ=WvgiU5Y~c8t>F4xICN@*4@r(A+&2wgpd+R}l^boK;W#xgPGBE{G}a>!PJD## z;=O?j6=yH+97tr;bSqWV1Wng7Mb3Y1$s~P;Q3@P1baz2rJKnsrlnTavie_P2;kFy2 zs~Rx!0htXs=n9T^t!jy)Q=hj=<|&6PIav$_5oc24gFp!gc9qg9;9e4e>m~_C9xx1p zmo48fqlHbOSHwd=0}?xK5QO8KHXYC+uV9|8`3?BhVZ7%-T$(Mm3`I*sOGiSkuXxJ9 z+uZd5aIaP@nw}@}V**RU5E{@!Q9~0o!ZV*(R&*P)(i9(0d^6M`9Kwc;UlE2=>JVL& z9AJA6=zo@{sRVT_;#49@x)X&raRp$BDlqRE~L{RcN8sba`%`J>gYP`to$z;+P7FhmhdlkaAO?B zE&%s8OVBh_*GvkI4h0x1`gtdeS(7J>QpK{bDmfLyvLQr1!4tyL;E;hXlAKm*_5N0VWgpq~!RjEVkzgOfKFINUmhJE?}f z3_jLH%c*(gWqER1H6*YeF;$pzP!T+HPR$>4P2Ll_n;l+a<~-Adm-J2q?6tKW&iHV; zjgCcts4p9ypYqV%1u7|A$?23AEqg9ivOQtMoU)E(r>d?q2Z#^Rpb|G^(x=Ff;BLt9 z6!auhc(Cq)euy9o5!qTmD2Td}?qZ3cM{wEC(X|^Pbmo~T zNyHOkV=9y+C}>xJ6v<8AuC@|-iKz;O-!pB$10x{8ab?;3sE*%9C3Y)(l0>f~4Br(Z z3Z3u}+4SM9jJFbHK~*F~5wmLPi$D-ouC7Fw&FJH(=dv38(~8M}gF>ibNk+hAK@#w? zM4?!b94q`q8jF1KmCp;QU962lKxgmEAhz}?u4WXER4Y!>%lsFoq zNML{Z{@mk0qNsC;BW`@ra4p!ng_*%N!GbzELGcZqZ&pDOnuJp&pc@gLShnSh`>jiS z-gLpJa3LE5TFr*MBmf8qEDo^+80-qo)I|T+8SbRv&Y3>$62Wq6n?zb6vH3XRo47+R zh+MP@&v>$7QOT5pNJ5Cf$e8w` zsYu*%!=aV2TF6->L#GLy~PPt^d(j_GL7w}TS7a9$K z>>wNgVFhs#QKOG1vT6LE#_sBILb85@GqovkfntWiveU)_79YkC91Wl0J$ib`p%WGM zqOI*IFdFnr(m=N@#8qihFV(#OvCj~j}%+^bwdBg^Bowj zXo3BQqMd?c!cj8_0c#c+n;3yw3Ck0ULA*&g`)ff=6NZ=Sfn^|d;!pz$iMAF`uOfO=PN;u{Vf>$sts(dbSK|QBnH1K~A5Q2X8m~h*Y2zTRcnsZkT z0GgS>QqzJE5b|{m^@A^o+G*SndYtrjP^lIg0Ju&#cnV?OYN+5*Cg;i+Mp#M{Zva8g zQ~an(`HV4h=s~36L1l2m1gTp1TEZWB+oI{FrJX=AcI|x1PU-=pnqDg$BxPp~;z;3> zz^J%@7F2;CJxhhcF)=|4Bw{T)Mk%8TdKhgQnU9z|9+r~i_cv5nA_<{nVEvfi)_#}1eR>w9| zu&v9Fhy>ber;yc~TaWXMxtt1Vo$KxG8UMv@eXa6n^-qU0>G(O&zu| zqU`|3y@PX2{sPO={Og<_F8Gd!drV-|t56{|mrftgp|To!qL5IuK6Yxq7z*)mJO+k(Nl+;_}~Qv_ndUV1X~+$rzom=A_%pWPfQMu@mzs+bb}3D zVZ?)v(KeTqm=Sq5f{iv5vf$?Oc>ex3c0$m&P~zakMa_3oq~XGKj6(56{TvTtNIeB! zDz~8YRfNDpVZ^ALhEAwyXJCTcW`zAnr(h7A5VUN0Bj(bmC-ex#15~K1R_>qy7Tl;u zS02-G7;ta8cm=FhbkrMxh@eSl4=Fk^7fo2yC(7#y@Ee1ZIj&<=R#bx%;8m89xT;S; zN2#Wxv zZL3pl5)#!+h;(vM8w>sP0xLy+Gb7630d=y``oeYPE=;s@Tx=aq zQGuG~duy%>OB~oWfjOgDDWn@}gVb(7i@T{i)U}uZdN2iZgbxNkG@dO|erncniFm;= zi+9$is>U45Nv469XX2C#Jq$L%LiC0twCD(=`VCS+Klh;}f(SQ><_+yZfq4V75bQKm zy^kkG%y|A1woIX8O$P|m|}8B;XS@a*g*M5K;D%h6W1~%Ve=i-9z%$U@Q(77 z5ho;ym0#`TpDVu^2 zL`a_q{?=LZQ8+Y8M@_}8F#=)Xys0BLgoT-j@NKlajagZ2(+Axb?sm5pEx74BSWh7t z^vD1u70Def^vfWin+PKUFQwKz?*8d`Z8Rp(9gPJVUEOiy`trnj8Xa+rkbKAjhMj7l z?7-L)pMVjGebNwf4s@1)x+ysy=Giks?%Y7@(fI4?*>AAIguYgs1|H&0QO2yxS}`5C zx0bL0GxWhWx5Ne?ZdDOFR0p3ii$={e;T!-toS)dq)yX&EDhrV--qDB~%3_qk6lOG! zc`)`M;sWLX@*i?1io@wDnkL=?*9E z1@Sa^m5%|@75)_>Eu{#d0h69DVNA`E83mK{2fz{&GSFxRHzZCHw^H?hAo>ct`TB@; z&%WZhtq20)Y9}6Bt+`dlGvRz_81Ep>tl0U2=YrvjL26nkx}V<?33neJC6K3#z!wO(tQ59rh?IguEVGKSN(E)a&q@SVo^n!}77&DDk|3g)M%J5n zg<5J|SyfXbbt8NVScf+xun--lW%?50+KNDmhFvs~dW26^_@A+A*sNi1#mIGlPsx*ZGSsqD0s zjwOX>9^$yvJGeZUEw`>|V zFsE9T0F38hDAx@PPdmw~@hovbl;XOhy-GGE+|zkFOB0wMvEnF(lhPIyB}tU6DtDfk zfw^e9%Xp_b@NnS`)NC=`_0_@W9Lb3BmVot zfbm$~-m+6G9dJC~ED0A+%q+2dWKMuLBo;Bgxd`p>d2EQgPR%!6;jtsd3+)*cWH>z) z{w((DXDzp~1aWOLaXw{tQ?tS$0B2ECfjlbsSn5_vN+}&4vXerHU|S;ChEN+AvXm=P zWY0BYhsFj{BZD_gruK}EPNpXNC$8D4-RmV6JNAqKPs))6_YY|WBj+3VR6@58rV?5| z@@6@0^6K*X0vRfx&LZnrvdr;kWZ=oHH9Z!wt?{*+CxIQ-%;lNeF?Dxm;rdiSohTMx5?K zj%bX!M>R^*Q#t}gMRXcgQfPgmt%~V_b|ciEa3%5`rYW>?e1>8|_Tf!j+H->1z9q31 zGHhILll+n>eL|urI;5CNfy=?r{B4@rNt&f)bAwkLIJrU$1lAcg5rEZ5KS9XvbRhBRnD`BH}!1CBcsd>GT8VoIh&V|6abi%R0LaZ#oDg*BeXETAKDc`fRmO!*hD z7eu~If2|?1m6u25GhC+|5htO$5sim=29H$S8{)Ijhcm~Lc5ka`f$?sTK z@Ptz_l@nmeb?iAZkcDj*RwW=^3>e9xAMyZ~_-GItgL_d>B(mrvoy3TR`HwD8->h~@ zeW+fM7E}=_jyi#K+6t-dqZ5RQhwTi#fJfTz-@II_s z2(Ph|DLXDYqX4=@1Y{kdF-TtvmK27Erj4w55J^2oZps!Gv?n)$NmVJye39Vep`EuN z5tk^e_KGmsy!879ZradeD}`8*i+Iqajd?>5kOE?xWN>x?AtR z7q27MO_(?u;jku_!>oy>=R*=q;6HKm#42PC!2wueV=5A81*+Byg~Nr8PT3evva+=t zLX%Zu4>HTu8dEWx6nHDb5z$sdK*3f~rizrb{}Y|xI7lfk!m-IB$qs3f!qbm?_>7aC3}=-=IuJx05H; zcky-f8c5cC%$X5quXu9Mg~aq**ol@7;`_j*X*UaxyI?8=t0H4UAP7+tPju zW1D}x(8T5#YuSi5fy^@2a+cnX$r#_YUd}6eN(&C((vjSbc8E!jd zoNkpm@o5Y*N5jm>VM2322`Wlp1dN_Op2^q=NJR%w0T*3#gok-Dy5RK?!y=Hx65%VH zn2lOfs8HVw)+SwWsCv+}S6m9rh}Rn5O#_f+c@o2^509QD{$2&OW`R=3U zK=~ueX6J8})OxX`*8bttz9l%Xc+m2EPp8*+e(<+QuYHA|Bfb79(d!1CUe5{F2f~d! z0@6Ktd25U772#5n>x`0v_arE7kk|$fw*-q$SrX_<%>tJvxI4I2!PqKbQ4|I;Yq{nU z+}KVzdQxSW5456`BHmVP=lN{5Hv(C|LZ;*tGqX!67>5`{x&pp9VMPEN9=%3|@YG)-E18nW0S0Me z$Kjkr;O-GG;F1CH0{lskK-OL6w~;v#sS9>0Z~%V$?VR4J>hfKC;7$h#A|0J=3DFj% z5CVW_99La-AW~xC)-AXm_#HdpUPrTREcbP1vlX~X?RZ~zC_AWFQ#g$t5=+dp|{xX`5BVks$?HZxZqfv=MxQo*|4x z?@^dMdc7gLWFCi%gC+BLy6pMF+M*JQvfv!_XwBz2xUNhI1JvC1nl9W?W0XB1fdbPX z-dHGeg9DqQx|Hx11lNtir9wfieWqWWKTw-9A(u2MTU7o)tzy`KH;{s5q$bY7%9lg4 zlk=uMD25RD3oPKOn=z$7APw&wN4LvLZcC&Jm?e`@Ub@eeU@DsFw0g& zccBO}!AxYp+C84g=JK6g-95eAcccrM{ylpK2KVhhFm&}b2Zu*S$F3cpm^^gd^*7vj zlQB~)nX_~A*0F_h#dfNx?Q;BxHilqN&tI;Z z&MY9Rxavn6)?qH#cv~`u=5nH)Cx`GRK5+quU8~d|Xp(uJhY%F-K?O5#r)bdGZ~A*& z!!FKiBa?s*Eqidkr5w{?UMM>DqUrjOx6t+=5k+66)D2UfH;=1w$sEsu43*8n3o+3g zkO)5l5Aes8wl6~i{>APM(!^lH=)nF`8ADu%C;qLFYz1^r4@P_yhFd)BZf2O#X$R|LJf zs$R@INp(?0@S@H#AXPF>2(@p-C6>J)Df9pbxqw+?3bgmekG z5gfuMaAm;JLngWuuHaMFWhh6+)*%2q1U1qegbjGwC>6mWw=6wD*qsO;YHLdl@ohXg z)DD$A<&vmF`bHDdr|~#Up}~j|4;3tFuTT1YA%TxkoJX|dmJJM}WO{g;n{}(ngEc4t zAG3VZ?E~dou$Yp!$ek(#xO(tCT`e1ytvC&O*|Bp#Ox}k0ncAI|kkmvBEERDKdMel^ zppfFBSYIKDz)Mj~UHGGQmq^HaRZoQ;V}^?tf!5;$H*MctCLDlCsG;lba-3bACzyH_ z#z-TStggN5*rSZVX($V9?N5i%VL35a##uZMqD? z&?NZd3<;fWMJgsH=DS49^PUwKYo#HAO9|;C z5G6J^`|Csr_PKU3LW?h0oDF&A4qCRU$q~gSh@zG1DY>+8;6N?7Y)LqfZc6~BYpfDl zmdYR&1$UG5DI;l!2oFlfdpS|vBpuJPw^ z%$a1@ag3jsg6tM15SnaMenOA9-clG-=K-OSY^aN`BHI+VcWq@;?j|a}>^4r6c68QN0M7o}O1bX7Ju72g^3Mjnm zi9@^|9r1MJ3PTZ4$ZHy9q}ydvkjk-6!mVtI zq3r`+3t*CJV#tvtP(s1t@JT?pMI+r?obbX1-HP$S@hF=J&~F6bN*T zTp6FERg|sQmQ-KW{Y&tP>cmn9k&1c)>*-X=Ga8a>1TugbDF7EKxwSFYF0!(_YI^WQ+Y4Lf~;Nq1$os387Cl5WrMk#rk^d9B2| zO1SBG3XYopM&ey9m`{Uv8$$K>L%u>40tOd|O6f1z5kYvzx z1MFCh;0drQg1G^E3C(b2edvDz=B}2@tO(AC9=3MOZOD-RU&7thg8FgB-5_u=x}OM4 zLE99f?GKF&BzT($(x`X9Y80;Y+jgGIX0yT%+YS{&O{G#m#E@sPQJc^ZFb&m8xITA5 zB%i7QvBA=~3D7uCF$UU;5p4(t0Y?QDWvk8owMA_P;az#Tg}eIrsM$?2AnY6&5N0gR zrA&KKj|6-9jaMCmh|O0}1Q^pJz=DX)GpH&=d~Mp4p&Rl{7Y+}30nI_Fs_PtIhHm(R zx!l)({r>5LLlcvOBjOglzC@wBJKNozXkKF@N4|UQFg>84lIzLt z$o6jU?#`#g*BxCu)()rx3Q#$SlFIMs+TN9-uf1KlHN$R5!EV;gmr`u~2(RKbD5(W=`3M{+VDn8< z%3PvL86_YfR#ulckKT0EF*qsk$!80>^GcFCP4RN)eCRsVn8{en4>Z{U`X1gE?is$3 z%lMUQMh!P*R7yQvY2R?ubGM3YE-=@=Mbn=TCdEyA5v`q|9!Re#+-!mTK6nmRz2vUr z_^FcRQjfulvNH!)2=pzR9{1)eDbKpq?CTn)5+i9a2fl?+?@&4 zYC^!d=L`ww^EEi3Oo>Ec9#ObuE2C^RnaaG#_(ZAL1;Q z@N%$217p0atCK%d8$ers#WruXjO+LFYYz?W)({otPILlcAJ zB&zUCgvQ8DS$C{|VuI@4>NpknzgsJtx8AziMkWULjt@>wUo&_kH8XD515RbaEV`!O znV(p$%s27s^;@~P%}X(Qj2jb+o-1X0Ne^Vp0o*k~a|k~2*d zH4<8K#+V~KIz2J_tSlpL&W#qT!odPrWMbZ_l}p^4ca{oJ-LH9lbk;S|+?)ZA1D2N} z(5YHQ@6Ln*a3Z#${_FRPvA~I2d(N_t!yR3aIx&IA9of^A)O?C2HOWMsb5eWDmTCLC zesaZzy{MmjHnkV+;&+qyJTqQ=UZ~`B&>YCo*K8uDd$Pdm1666hQzbpun_AZpciosLye0GWuj7-<`ppaxOQkEU})lQb?P7uv1^HD%(00R zM+HMDofW5M`(B_4rsf>bP-m@BWsO0o8l@75(={~%0{e6)6QsbeTtTi9 zkcq}4;>>~ss;VW=j~PZ!Fgu7E@J(SJ#GplpIS2eh;9f(EK)w$d29V@5#DRe#19O77 zxInMK3;^~bdP{IbH;~XC3{_uovEazFb-1)@fDybqW{NsYYo6&MlYlP`$vn^JT&Gs; zTXHSmtfx#~H9T+0aZ7zw(_1jy?ryycQU+lg4(W8soJrLzWK59mmQH+11vH`y34N5b zKQtgf;oF|wz9UWt3iLxzvcfu`##}n3A_xs_*T-rbzO`ub>n+#Z4<>TTGu=hg<-#=X zK$c8=Fdb&CfmIEpjx2-h>40rD;HSO$bgmcZFs##ut4G8}owR`@&h@eeE%!}~G0$`> zbM8?lJ~z<6O^mUt>H9kE`v%6?Fg=Ib)Aaoe?fDk%c{B7tWj?fyu^ZTMeiLJFW9$re zf;F=fO&b{7!ZyR7X2!N$bS7h4Hk}VYFJx@<$&)8fHn9_1U<_NHydEAmG1julH_Nu^ zpT|zfuUD_WU1+Zf+Phe_w|>^ILSyjn8e3WiEsX^&EiEl!OG`^j!_hGT^y23VW7@Ee zvCZ$^%vjKv=gnhdo;N=oZA<`eBeZzNO3iM9W)GjQHG9U=(o)Lv%Fwj@UN_dp>jGmv z0~);~p*6bRs9HEyqiUV@Shqm4m+H-)VN@+OR{HLp4k&bNYKCs^ZPG@6whQU1JyWoC zm`C`@WRO*{gT-?mswCnLU{I=Z}w@I~KB? z!_|rYz734EoacH53<8h1XLGsSdX-e8iLo4vCHrI;%Na0Q*E1Mn>ziP>O-<}C#$S_6 z{CKj^lJIv5NJt+j?L3i>vsv+FyU* z3txQYpIrDif3no^N5A^ui|$yz{j0zDozUIB|58lyr$+hpv_q4s| zRi*Zxt}FlYaCYAM#J{}op$89+eBJ2iaNX@cdBdJ9&wCNu`huI@^_zDt{QT(q z?z!XISH8bz;lbbB^~u_yH~d}lz8@6^jpvPA@Y5&1@a~U4>E+*l%ZqY1+;Ptv;}&M4 zT9|eE!t|8;i#-z)v)#9BKR$cq{ww#)j4WlYymG)EzG3g!bxVuKi~aqxv&&%NH+w{>NXlo8SM@ z?DN=}@4WuOPrhSg_4^+j>ipu(FZ}b*ryl+C`g5N9o(-Gd@{jqq{;>Mnw~Z~CQ#)>W zWbxIX*|T_aDz*L#zufsBulritN4I`v`4Ok}(9-?K&RD$gE8qS2GhhFqYm%4!!+SPv zyFJme@b&L}V%?kXoBrli|9;z#N8a$Z9lihinw=kMFa7U(KYQ)HfAGdv{N`Wpnjg+x z`kr^E_Ppl6?azM4KW_Q;GrzO$+-ICaWELm}XOZmqAqXDE@ZTS97|x%`*z*L93d$?lx zx#GHi`oo1suTC|6`&V!O>_wNnH`DW%>vz6%jP`rOCwZf?oEWatf-{@ZsqKk~enKK11E>o<wOAHK5f z#;5&!X#QujPrC3!zdNV+yT97|p^=T3OkeZV@2uO8Fzko=*1890ZTJpf8XtIKKS0ko4ViorjP&o)AnvW`G|Mo z?Dem@@AFsw?A0Is^~V?ct@r02{LI*{O>e*dpT70U|NPxs=0;xn$*ps5{nC$qcl1v` z|MdHImOl0FKPk4}|J>^F7y5tny>H(BgOB~!*KdFRcSe`C7q|Vdj~?ur|LoS@zdm>U zX#UOjyyN`Jo5sF<)x>4FzrJ(!zz-j+9Xk7gzqsceZ|Z&Zvp@FMA5Hz!hj)B;>3z2! zdFRBC(`LT!=&OIb%ewD<&C5^y`GIr3^8bC|yFd8ix!>7y`J;EA_~Okwk8Zqg@xj0O z!KI)3?B@3F%kJIZ@#Cl0?)kp=;_)N7Lw9d@`u=a8al-iE{hbd_5B2^ovE!3}d-q*O zpMU6%pFMPC{*1TZ`kmtB&A;)EeY1I6KV$4}_MOh$K<%IA9{lOXFW+On{+V05i(k%l zeB&!W`QQg$cWv*nU%cWa{k;#r{ZGI8Z=b&KH@Qv!@s)EQp8faUn{Hiddgrcl(mk*E z#O?E6y8PDP?fv@$|90onZ=8>||M?9MXP@$oKYP_5*Piow{>G<|+&?gW)!xiMS1-S8 z;747bdBuI-e9OHrZ2ei!*ahEQ_sU;<>VJLgH#mq#cJx2x-92+}zwF;SzxKkmpFVoC z`PsSae*Tulo6qA9@4W4!KYHYETgG=h`r|v>e))?JRA2V%J703!Px@bV(ab#$8GHWX ztX~XXb@C^-R*{>=C8zyDkR@$Q{} z@yNUW`eTRB``nceeeU3uP0xSehxUE@bK@uOnrpf7;s5-@-(>sm^#10#|G9U|AG~Gee-Z%Art-E*lvKN2-rkCIRxj&zM&QHJLzq0M?m3dGipSAqJLwEn}3m?7lL>z@4UF6+VZ(LepvH|BfK{lT*z{_Iz}Y9D>)Cyv@r zDqZuyWmj5X+1~leo7bOn`=>v6?bSCw^M_CWRO0Hcul0W7qo6@Am5asMIdGNkBIQHs z>%jfw_w|f1SUUIspOeo|oIH8*e0u(hCU`!azhI0#kFj&c*z?x23m9V;F~*?GS@^se zbn`K`W&N4(2ep=S;oC-bV#~Vo$5;zH5B{7z##+|p_p>pU16zOr(>>8r*FKDEBaJ(z z{SDCmI@SLANc-J&?VFMDL)*{?$OF}WQ+WLARr?#l?Vr&-H-Br&D6Tw-ChQ=laUA>x z**MxOvF+Q@_RnX-c?i0J#R0H3fr`1bw1gfVDfRBBRfB);#|kH(2MXuO=WW21-*m1h za5rNN(zLB(XR;;Bo^g(+I@4X9EzB=gQx$KnO+0Kbh-^qoL)oz%U`7%YaRy)sYYFxo zj0ngOFz`%V!;?*Cu#=n5VJFy`?BwPXC%3StvXfhy&SNLHtlPv+ZrO4nI|=GBeNLWi zzU;D@W_FUIh@cVM^fM(BH(Qee=hk&o@e3GRm!t0&GPbTj-`~I(>t@6GbqsK}iLvLc zgE6mL&)B-N*$K2H0hH%6whm2@gZ(3jh&ig%1gO0ZDl(>5fDW<3^;DrySD^__6Y##(76@NX*{&Xetnrc|Pdu`OG{B7xyxV^9qm zEBY0uR4bbY2)Si5uwVc@_yFR|=dgI4^c)uPDfAr{QR&M2Iu@g2+5vn(BVXO)0>3qhT(5ya(vCSX9kg@X^+p_TjpoNRz&&BWu77f;6 z3j)1XwW}4`=Xum8{Cge}EdzH0tP~RYEj6pS;F&&@hZQSPdHA=)hVvFc>+qqyJk~(N!YCTeeJv)-MSYyv6jul)`IJd9NK#kW4TQ~t{u5- z`j3F5U8myM;4p(h01uFK2mb=uY(PMr%}(IZb$kUBK|Tj=iW1^00Ntooe+)B($($`_ z1d~3C^mZt65zLlk)4SjS0icb92mG^xp2MPmzX(3Sht8qrF!(Q0o5+`-An~V{P#Kuh z-%wvLl-E%iurA(Abzz}DMeV~vouuy|13hX7XnGHozmPHZ3VIH*@@rHc2(P z$|T&n7-K!qFvFG50cHUZTu)#u%qD?0~V+bC4N|1fHqID(BbAw8jP=p?NzhKHuS1Nn_tE!X{j!O%vxoCnqEELC z|6YNAFJ$a(=dx$B;XH8Zb&R!4LRe5ClR0b@;g0E{u_J};*<4RY?Bj0v7_JvI?NVWT zRz8_^9ovUTo!M*_IR8a^C&u?pPmUj&m>e9K9vvUrKQuA{GWrave7QD?4U=xogjyR1 z2KOA=uNQl!R_uJERI%)<%;QF-S~k-~rvh~@7`VEBWdG=N|G@Cj$n@ZF|Ik6bfgY`a zjo1KGx;Rt`Vj!*`9UoY0J&3y)=^q}{>+RC|yNJM82c5I_jgO8@4vq{=9~uvhcAHjv zbJg+uIoAX?V#}tn{Rc)TCiR}S>t#!ZZ_F4TLh;P8(TU0Z8kri>B?@T(fZv8G8nr zBVt2k6L`E~Kj9hlc2vCG{NXcEo1y|s=FEAFy=^_amJR3Equv76fY>@>E!nyGqMNpy zjAt5l#c|8#a;`fQ8jA#0*?^?f`dUuJHkmthlX6+LHUn@siE%cuV{8Tzv!seV!Hue) zf@8px@OJA~^+evVm0IQ!YPXbAxgG&S%S&}aX|ZXX!lZ3g$FlvjH?PX`M6-kmaN=XX z&u&@E#bRu*2yz02To2-~{GDP9wD~5`WkBm}VXP^^SQF?fpre45u#pr`+$?NW`zcRi zZ1e9+vdcB1)e*PxdXDx7jnVUa&yU? zHELx)RdmggY5SH@_F#Aw%P!#GX4p@*il$d+=4#pCI~Vb{kRBOgyCOiu0+2?+uuBEL zo07w*<)zC_o5+ zJtw3I7Fu-5wTgfseBkI9$%?Ww7oc7vPK9lF^Ob1`+Ai=!zPqO~Bc|e-7&B4eHM?wj zUdr>GYSk1Mu8gV9m9zkj7Avoe$|!jYnuNwWjgeHfkL6a4rK*|` zj99rIO}lZ_g(Y(a3&bI6RQpg9mvpdQf=sA4>U{+K*a7DeJ*vQ^mWA&dfB`%e&wPx$ zA4Jw!I#bySn$cMs8reVV*j7!g+W==nK^@yLwtooq|1C4d%<@dFR9bFO?ohN`psF>o z%SiP)gQ5VHrnN}~9)fDs#H8{xNXpYy&xlc;n%MqWO($9Qgz{9j?Amb=@|017)|8uI zCZ{jS*TqTlUp5Izt~ym>oFm{cbK{ILW0_tHKVX)t9xocMIcGsU2T1nf0{6*rIG2uFZ`ZIF*hnfoqnmqL0J4!sE7SmOMPb z4h7l_k5_8N`F1{6Gd&NZ`66nbRIdOyFD)8G9;nef|INH3oJNAU^Vfi#9gm1shmK;{_YhHUegF z_MZN|*NhKNOimBg#HZGfNs5R$`p;_ zJX+1?+%T|zdT;;U1B25CMukT~Rk=bNt720nW*8pW&> zAKCyK-l@10n0`=~#-}Q8#Nl2-Z*eH<-Fm-Ly^`Ksl!4a7}-H&UD;46Ga#-mc|Sfj82~yu8-q|6YC@| z6!;-o;q~TB3j8r8)JAJn?m6WeBqkRrHoRIDq_)U$>lBSLaq`0C7Ag4YgGh$BKJ3%XbF*K#h zhH0cvP>*^m2%--N1fSJ$IzatGxc3<52bwSYboA`Aq+=5fTJ5C=n^_^$Phcp`&6mbc-S+uJrU@X`V&XwH~^F;g^3rDa9& z&G-|J0ndU$1I0FEJa;i#z=JS!DiGmD)C4RH>~2C6b(+&zK{poaPwUvF!uhlXb^&z1 z)RH+Py;cxPs)v*!KY?wfw>7bBEHgPjz;f)dkO#1B6uqCeD`W#Ojo(IGAs-|K3fq<( zV=n-g=Y{*D>MWV=Y^~e@8UIbU>RO(e!drhjxKlN4?m0ELXc7^NsCUbs$IHtrhHn+= z2qc^V@J$ndNZQHaOVqJGi^yNy$tYVht_erg6~&$bj|_J?ESuj* zX3ERr&6I0m$!TkxmaFxt$>uY)$EQze8{@=tb%R(?tp`bO1}~OP14x4o7zwk*b(Y}r zjSjqH3y#5nsUg$+z;APp<1Bc*Ca&nPxq003e0Z@}05tHSg}suRxuIKbf`U@|08i6h znag)Zs8ua+h-O!}Fi3^!5Z81)7{M!4C++KGZVZtE9TJ`uqL?UqowepP$D3ew1%3tW z+e}wX-vFj?1u+V)?r6RuQ>=NuQ^C{}DJYySW#FHbtdsWUgKBVovcR*w-NK1c$2@jy zFF^hoWFTT5IHt%b1Z)9PrtKH_?KG;^mduQ0XTa@CPb|2BsD-Cyd34qpHN4UcKe7|9 zB$Y}J=Vo!<;fcecX&g~kD*)nYwehsC@Yiv;p1RCa-a+LUca5dAKtnh{Mngse_?Tgv z#akC@I)!E`hUc5Ofdo7uG{}^*;v|A0%sWe9vlk1-|6%Xlf+M-I#IORoo866mkV6iK z9PT`BSCa#B76nw{)j;m_3=2R3U2FhVT~+92lQXKx%Dkw`MpkBZW){$(Insv0Qb=D~ z$$G6r-mt@R#QLG|haHyIUWcr;E!*J;|7?Um{MfKR^kIJ}{P^=KhK_UYy?JkD-o%T| zon4znMin~qzVA8bo^$Sb^sKX18TvL^US2#~asBcrOA;e5Wj^8~8VsEHfsOjQq%&)wKo#1r@L(rgRQ-q! zN6~TY)A{4%2`~r}lwZGIh^#5%H@$psRWMJCU}h+Lyp4w3WNa#PC=ddmW{?Ue3p=$P zg8&Hee*>5qkg{OsOYmj0=i3YcB#1cwaPlk+)uS|E{>dvK-GlMlW;tLt&z>;Dd|9{8b(M^r3)x=uANU zju{2c3&NeO_kD}8LZiSLnt|gU6W=4D1135%gu1kEdQ4v%QVUX8#r#$ZAFz*E$D31d z0B%vop19>zuVdNt5r9&6C-^44LRc^b<13Z&qADL`AYAY+r)@Sio+Hb{6~}{@wPFCY zY@ZQqZ|BnciGpgoa_ebhuhm`O>~g?-Zi3=TVoGN}gXb$C1x1B!aQ0+BCd#QnA7vg&xW7l|SwD$Sw}u z*L2YRNI*A`aW;1W<17LRN(4w(@Ga@!tY?TxY?BUsk3<7ABJ{<`hpcX+z&SJ{N(7ja zXb|}0{s1$~E3HtwPiGY%R|vhR3V^MQDgoz`h|3bnpKt+AvW&YjMJ?k_hzb%0Nq`J* zl3O(7Z|W4|e!lX>OTz_X!yo2e`CUehk6>P|iTDSA2-n12H*3M_zMD;lg;YRaGwOegAg(0E(Uh-6@OZRv9;dBEvCMheiD|kJf6zl((Fclg6 zYEmA=&={?XKq;#jA7oSnvKW#L z7=b~GWuwf5Bn@{67-Nv+eP#SFZklVvEH1W6h=Mgn0uF$@Uv{$W3S%nRyQ_U zwKlW4wtUYXJBiE7%aA`3=+F1#3ftR_C*Ac2we^SH%|@%c*W9RfYKaDb0Ty&LZs6@? z1DmytTC3WrH;}OqU4t7}rsg}znyuPaz1_*yRgI#-o8``JQBU5lihfkPFkYE2y<O)=WYe_CV-d3Er(dH7yxncwTp(}3wTh#$slRK<3w7NO<Zy`2gG>XB75Zi|5mr!A$rFoZsBuo|6lNJ@I*EqqLF7;% zv=d5CjGZF};fGA>H6y_WnV!a@adZ8pK({xrKqoElVOcQ2?VIxX-?h%6{N5Vx7<}F%rD^PBP{H*$qbRwEh$m=nb9K z4!s>~hZY^zbv$5maH@&XU7WJr&{4L3D5PiJmqOa0?~gfcqwanQLa0)k_?`<1e<1=Z zu#HfP1}Pe*+>)gyqY$;z&G_}!En=(*nwPhD2g)FI$My~HnN z#YzbbjK*Lm>kfTnCyqfnbu3i8`ov`D$9W3083|}O9wNIj9=X10hjZe(Ti$XXBSLYB zI3HzK%jJq(2L)jP=SxG=Gr>2+12#w_urk*h1{yiyDu;;#{+_r4S|nbbUoh}Xn1*EJ zMJ^cP4>qCUVkE#Cm448e&%nBqO9u|!_Lz!<`DKrzg8X-LD+?9-5#0VSRv z5t~8`Yn!~^8%M-4JrYoRECv9+S&ny1dQQZ9Qm)3~Q%YXfTl;;%d?*+7pW(H9{0@9~ zy8XbkXm>;d$F~hqSqfpXqQQ9B^GwI3sLlcEaYSt}2M5K29lL{q}@{```6o@ zR%3UoyRjBK5kW1zPw}MP1A}34P^jHxeTXOR9=Jn@!gpG==5}?x)_qd%Jm_vipV9}a z`=HihXG*o%RQNQ}1B4S54NY@*mL}vX_*v3VNxbrd2<6zT(427C=8F<3ZEXwB$>**y z2ZlYcYDRWRKCH|`1ljUz#aLQgm=`5~5?TW~H1D%qF0gJlW1%P2tE%Pr7Pvuxs!_JO zyl`(7>R)fwHtOwkWqCecLd7_6sZ!e^=a6JtuiCvXa25a=P~#ghuQA8XjN`*qtWBQL zCk_}JOY*+|@9uf(r%dW*Th zeOk7OcVy>m7w*l@D_vi~hZjHgZ|RQx-{!|YAG0|0cR(!-*5wBdH(9gBaMYS;bPj6e zeLonI-q>;3y;elcVcNEwx0$jAy(qVBC+*JUT4gs1Nv7tEjU7O*6)xj`4s78;TKd$vRcRy-8`DFRy zty@wM7^wcV+&$LIjv-J-4;MvfIyGq48gk#YlUTU}c6e49BZ*-mKrhcq~z zg%lUr%JN8=z>5huAik^EO(c3so-62(1n0nH>=yaIzR3hJ_)Q36U{(g9uKtg^tN{GR z1+KxS5Da+@jcsTNwj!=2#$>F{F3eW46N8J}EZJ8K&kmfP>6xU_Cu;Fo}n zJX<#O43c&}iH@a0MMG25h-I9Lk2nJY8>OI>K@^mmB7}n#mdzX{D$FtI;j0FLEMg#y z`X{+|bIi#`Fxi(^%B#qbzE<0=?ZA~6WUY#?p{R>W0ZByCS3v(JcR+yO7~iGI+@=;u z-;?~tA+;huaE5cdC-8Ytc|7s>!d^bF>X5d|6{Ng%fvy^3Fw~8bacK4&*NKj$MS}RJ z2Px_x$(7{~M`q-(7b!gq?`PIg5i|e#hZoO*u@jaIfl`YK$-OlQY`YF&;kkidLIHEa zf%?(QTQC4)vDpZ~Uz`BIs-y0dV1a#f@V&O%*r;`DyN{v4Df$AOH|)SXk`O$BQ3jZt zDeV%JV=&wKp_r5KgdcZvgMP66V-lB z*2n>ISwQ(yWua5Y%tE;W?)NdwYEYm=1Z3Qo5Q7+yWiau`Ny7$~Jpmb3FT9>9P(|<$ zb1&6YFVIOezh^8R1Qdga$e_>dn~@*P1$5+xPUHvDF_bCS!9WEny`!nbO(mtqfImp; z1O6r_`@f|p`}){ovy$w~LB@aa?JW(*ZsY*l3(ImnetmJY_=XNG{#}k1ar*)*_5(_p zBWH>EHq8+AqAV5O3NZ$i=YTNKScrVuzVF&J2-5~?ac{|!03M%F1&?aVv^!bcYz{ib z@8w^a)lP!9=^mNKEJRWY)ru?S6|l`_*v4eI3{YfB+{Q)b;;fo3NNdV@rkdfMb zxf_!NE=0MtT(RyFddjb)Fs%jA}uC`_FlS-&2DIUWZg;I8t`p zt!t0FqRuptuZ(ikiAh`>p6;~lE#j2H=gILB!9!c5qQGV7gaK*^5(nd7=9 z+4RSrjVihnGsk-XBPvDAQcT5lH)x6TPb>=J0GA<7Upy?Gw&@hpg*y(so^zt(u0P_u zBVPGX3s_TQ?BQ*YM{RP~AA#!8bg`QDumsSC)R@Aiq=dn0l1~)qyq^ol*hPjw2>%Vm z=rcuU79gS<1o(;%b(qXTxl)0r6?n=(l1*L4p{w*yi9!dLIvYSuzARj*D2Wv0Z|5G` zlZk7a%P<4H1wdPZSlZf$5Gl`mHK@#``FX(0JJ;In2bqE@9XKhdOp*owYJ=5Y0>wdO z`xcMg@JA54;g4czj)!K@U$TE6jEZ|S=mR>;@d=1uqk@4N#Jnz!@o(rb{@)NsI9oM= z@tf?QSsNGE=?|hK3g1LH^}+ewr?aGHhR1MoDMCAfSm*jjWN3mtyO6T=%z5Q{1{|@o)sd@l7-pV0YvIi zm2t!HjqfvPT9ycj1prOw=jRRR22joa6W$Ppm24LfEC0t_Nm6B{)c|qBaY)C*m<4`? z{X5A4zdFsZD2D^q`wA*IVv*_fsTTnt&h7hQ=wO1uSJpSHAHur%g>lle_9I&gao!DyR0}>vG5glfb0Xi&&)-Z(+LIgW4 z*z1q10ksYw9c+lKHpiXVsRV**SHU|*|?Z206>6LUdOgL7(x!J03RXeqAtJ7{Kt{txK2TtFN zs61Cr_ichuj37(iW(F8@yonfjuJS8rz@97dJ;GmsyfB3V{>BFloI!#Qy}|Dh;5RNH z`B1pO26pusw?K#AxY%WwSdo`F;3eQUF7e6}+G};z^U8b!LTU3djN{eEd;Ed0Pwcto z0qwb_br24y8HhzN!U*h%7)4@BdvVNuQ-|4qB)DGIxUkEmt<(Iu}@kk zhvY7^Mkm_n{d${up9Suwc@N+bN&rleZRYD9k6g&i9Jsu82#% z?+5C7gb-_*sgy0#wZ<-^qh`-P%(-{gFv`f(vp{r466v(GX$g2}{5qnXGlmw5E35Y^ z27bk?w79#4w@XWl27VzjVau%A($W&VSelEhk-_mu_j+t6Uu(n+Eg^#YXr2bUh?Ml- z`ZEE|Dv~2@{(sKIc1&W1D@H&?N`Sr-QE3m0s%YUs%7VQm3n+06NE-$P>JPSpPzaXQ|mI2Wqc_$e6p-^fUFCiwzbmOh7PR=a+2LqRkSS=5ZUNjzk)B@Z?Yi71%I+xJg_VW3+arI2v_elFpf#Bi%Z zYd^V!`IxS4?6zZ_+$(+GJTi|}vuUucK&P~uPikxJdZ(5yED6@6La;DE4$9fF5XA|W z(DiE^*J2`cDGtH91Zun`ka7%S+Or1DvO`H{IWp z)NAAqhm_8-)ku&oT%U`RuD5lh>vsj|!o~&Z+Ez4u8@ugpmcA(xE>AyrZD z2Q~H`H=^Khm?d)}Fnwa83I}n@MF4j+;EIiy6iF3_V1ASF!uWb3kxFtHm?kK@=2$X; z!gpb2_!t@ar3GVY0l9SBQ#pV39GH9M`CW*bO)!V+zG*Q*gNXy>Rk#gYT~wtD?1_L? zBI#_m$@_5iFa(Qd2($>v0I2-|AIM#lH5QDOr3L7dNfH{0TY|wO{@h<;>1&{S6|e5Y zC}gV}z#}wTo%<`iJPZNT{(M?2m25K{pvgmVh7`dswa7d{GCWmGt|V4w=#lX3V=r=e zDqyJ|zC^%evoJLo378Bo0FJgGqU1Q->P3`yB`M-vh+jzd#p5-r z^Sd}j`nHZDiCBcZb3u|6GeE`S6RsIhIx!*f6(xsGI5u79Go}_u*&3ut5nI3%%Qf^p zu=oJVrM+ihZcg}}WTseaIRqwuB@y8?_?iU|0b9xJM%i*ApViP|<~a!(RwC1QCnzok z8Omj_R`Lnp-72;MP;mVvY=jCuh zcB*v@6$4e(z$I7qO_wFKd=>iGYi&bJ8*z^br6G{JV3)3`gG#%p#pyBCKwJrZwcbT7 zuBS%ZN%WNUREz6K(ln{~S&3oJF*mO{?sFTHsH^+|m>+^{dAes-++p(W=)X9LuuT^3 zYk4g4d~6=WX&(<${9#mPAxAxcB`m%EqBg;zvE-#jWnp$v@rjB@dvTKZj*cW=t#De7H7lfJ8=jQnM;9kFzXpURoxJ1k2tt$SM39>Y{*cC5I3N(N2<)6p29T_r zG}L78#t|m+@V&1(pdfT7*Xrbuf_hSxoJ<1CC7+z=CN+N@yic!G<`)e7ik*5gMmgXEOi&Sat-a2CGH z3bR5am7kI%yBCE(yC?o85RRhzqPy=0M`mDC8~#$LAbg@=43U7kqriXR$gHsNDT(+} zbLB4)1^n$i`~$L{W=jz=QhnawoPca=ssgwg zPV&v2>iUEFZmqjrtG0IQyIVL3rD8(#SSXiKX_>8+8lGB<1@(D5)6tVg>tT&W3FMOk zo>eT?rOG_UL;QYDy>6$zQ)}$0L%pk1SL~~~c(2P-D$L{TeWWIX%iu6N`P%;Q5DGeQeg)%54y1igHdXz5k(X5uNTOankon-YGy?; zrIr-RWOB1i%CTDv**S>?Yax)tuFhc+aw)2bV(hUY*rXOF`2?EGvwwf$?_K8liUI5gb@ddz=}6$pQHaO4NfNR7R` zIDhvYogn%46&6;DErQ_d>Ns0w?+dn!!dMB6b`!okEKxn^+|Z^do&GV!2eM95N$OeD zDXnHr&w%kAL>?ezS(Llcf?0}8$D<;@6Q47j#~O7Ti_@&w>!(u75~7@OkkErix#7GC zD2dv&794<5bd&D{9n`&xLrJj8$}kC!0U-#kwp$=<27%L(cPB}yL4dv{AB&LF{Ha1o z4Z)-&U$ORqobu!J`29NCz&0T$FS_d?WPH`(exs-5G<)tK( zeY$Bs$XkHVQ!?skd>3*}1R_nMOU&UonM?W9IjCnE5w2X7UaN zVpf}V(pFM|qgDI9dFUg$MSc)~Jwp`076oZsQ$i(w#P(49DuyD+OR8?)!VDcyN=zR? zoHLF(4XY@pr2R-?*=nV7&%iGc(L;CmVV;kZ_(ugc70pqGcj1~U&b-73Dxk%XpoH&o zxD7bYX3w_+D#9T8{dc+OH<5_a^^Umv%tl-T0r}THs%>vS-K_6+o8zAAgac}~F{|@l zfF4`do>A95-gi6|vxK?!2?>9MEmuauRm{1iDa60dk2?6(;FaDg>pNP2;lo9GCH`@7 zl={9-4=-Y3iRJ}PZR(tE5e>MBR_e$S^;7qHObGjmllh3gFQj%Cl}|@sz8i=P8DzqV zvUr1u@U|r#nx)WwdZoMyhwG|xxM~pp1n8ExZyMAnehE$Rom1f;0i1}<|M3YCaaDEG zH_)`@L&#$4%%ZOnAo2C;#!h{Ar&`~Jmank4ipueZH2`lGYDyPe;n#QCe10Z9{H?Www|N)Ov$;mNC6&J*oq| z9{HJISqQXt7-7wGXqwx?UQ=hp z86AvOLSZOGKy@po-kj_Aous`STT_)g)2uhX))3t!;u?I}@UD%&V@7Z|F`zDqcLH;H zJ%Oc(G6_6|%sLXAv0Ub;!LB%@Byj}G$Cs<8Kpqy(Vd^k;;?Q(*R*j7SzXhUTYpHW> zrHrXzSp*O)pjqIU+;d|?b(^scVMSmm4M^oAh(CWBD>e68+Xmn3IX1SJL+r7ioK0X7 zFE}``B>`m$JmX_4@x6*=-egH3?*cUCYy@!EpL})LDUVD%x&OiU^R98(lMVrtR6q^wELmE{CG8dicti4GXm3iuj<`jqSw?RH);3OIQA^mI2?vI*Q@If zYTb=i{V_B3eAjlukr`P78q6@3U?%j2qbM*(_Dpyjx_;m5tEumjH=1y{EN&6c)YJoI zArdoymc;e=KaLKN&=b3s@H*RtnS){3rHK9U>Z8=jjCr(?iCTD6%&HZ;n zZXTKuyuMLyH>;iX2enogV-403aHeE2H5s40<=)~dnllaH&nfGETR=WLdH}-S+ODs) zYP&n_ZhLp9*P;2c}n`dtF=Sq_|emJ*8 ze#riV@qS0saJRkwptiBMjU4Tn76lRwib3CC8DzVrZ8HXRyRp@+H@lCktuv1p^6QHB z;(fXeiP`GA&Akq^g@VDE2B)I$<@u%M9i#+1wVg)mX?MH6Q$IT#Z!6=vRGD9amR@T# z8CBV-?Zn9@&onSSGzx{`nVM)Q1DfJV=;oN=%gt7;x(y4z*=p>ZdF55R_g6nIZ3=@W z_zPxxTeSM1R^2!U4OLezNkh5q#<|F7Uzs-9U2oIvrA=qeug;G?e%PrTTU#GJwrXpS z%a3c%o0!yHV^4CX^;Pq#4MW%pv2rTY!so}DYZ0&9V5MC3ElvF!Rpb;}D1QwCCh8VA)kYT#E84`C9Kj6F=`**B1&^WDaa(%&v zI(@;_!o3M*JUvnP%>v4hHYt^ugkQoiup=6jFlx~K3MrK!rB+a~%#gB&B`|;q@0Y>I zbYOzp7!67xjY@3%LcfGIs4j~xlX}%1dk*;XcP&R%Dg5TIelUeQ-&AC1GjL41XH?KE zY0~cfL~D-pYqEx5hT=a`1n3WAUCT#>xt`cs~70irLFYxTl+Tx$KDzC7~f`MPQveK;; zn4cXF%@=b+qz~9F{-wWfIIUZWxq1($)9S~FeDUjwJ38&v@4d#%$^--n1r`|ki(C-k z9Nv7;oZC5WKiV#_C{EndTk*NnN5K>Arc_j?xoYa~-E%WHNsK|+Ki1g%su3GUqtVfv zB<34{dR*U;R+fp?OuT0LGVLpIbQ-6MsZ*dafrM??G{1DsMM5kTuky=7eQZ~=UMb3B zoXYo1K}29Y)%5cbs}=u&#j@%)xJ6RJ@M?yp3Nr=)83&spBq=gs3TpE}1KQ&?_XCoNJ4;c9_h1Q-A~?B{vI| zbCA!^g;ns8Y8!(r3m}jd`Po68%@Fh~SU|FxR;FX+T2(yKa*!l-1mXf{FaQ}~W=RUI zNmie)7-Qm@t?P1T{8?)!dX6vBp<^h^Pc zI1&(F3@9ySn<-3I&TD{?b&cww2%8y$TqlnPMoDo69 z-PhL`g7+7E|G#EP6~HS&85TV;V3yLV`3!W@!)xLURJq2n<#j%5z_3xfwG^_d{ zzjo|w)DAYsG+29Jt$yhaa4bw1%v=|kIS|^mgI&w+%U$9WBqNU8&Bc+VI}`vhTrs@DY%YB_dNe|FzcnZ7a5oDuy2>QeW5b^{$95vE>Ys>pIA6Mpgk)h= z&wz5cet-ulmE82oGPq5_SAO^vZaU5u1FYd-s9cnu!OG1NprRiV>lXmZ?%Jpug zRHB~c+m6@2KfTx4T$zR&Hmii8#UgrtdR;t#RO;|g=>MCsV`zQ1-q~2|R$E(mX*y~5 zRLk?sX!KzcCheYj)0wH24Uv$laYG433geqvZ|rW?x4Ij3ymIGvJMzrEj8=9)h)$1a za7%0hnp&TfQcT8Imw{1Z3ddbog#Xx0RJ1XFcj-a)3JSm}m(KN*ZcisM>`V5>>P@Mm z7vnc7_c*}pX-VUfa4{a5FKj>X9IsCUhAo)QGxZOJZQ$#BajN;Qj%t=JvnwdXS3Uwk zJ5?wL3Oe*{8p!ZfB=R{0Wj<=1$4EVg{-HzhNH&AxSyGRns_H}9qr`-u?yhNJj&CHt zZQnD4V1~3zpguFCaY%!Z(qM+{c_Van3$XQ%z;6X!V9O!%lM6}b@x~gy@9b=>VS_^& znSjYNvQVSGv5tir)p0Z+^Rs0vX^x`-^&-dOIZ-@YR%r(Qk!y;+nMYlk{ZV}G5}T?n z-$~wg!us9{s14&V-B4H$E1}VO=u{=^)Di75`|!C0ca?ijr+{cKnp~cggG-&a zE9LUSsaIf<2pdEpiTcSVw1V)FoUWv%eAOYOgW0DccLQVpxL)`rd3!?L(XR=EO$1>8 z%70U(q{x$;EsDVeruvnxLSS4!q(ddN&=ve=(n-ksCX4t3zZ&*jZ!YnDd2D&q520Ds zm6A4$b$0Q?<~`kE^Vc|wjuR25OqHK2C*;09@cbhe0ub}_1|zxyo%Z|)?2|Bp{>U{W zNEIf}8gS~tOwQIZgl!5f%(;auJ=XSvzUlFp*BK^%98w%+D$Moi?madg`UZR@s4}*d z;Jr`T1jNF$pvx8x5H~}|SO-W@W6;5pDWbA8zfd;t>xlM%5&tWHS~dW%hk+fU%|vd9 z(aC}uA?(KbgX->9ZKuXvDBswr@75bx?~N-%$8&tuIPw}eE5ZFUaI>!})!^J>qk$@t zqn$WMvfKB0Kmz!cm}!n2AzA;B7x*Ai;E48E;=jMd*~f{(4+`v%A;`_LD377<(h^vj z(=a4OW3^na6jh5b?&o=WmBO7jMATiJEc=#|zc>Z>fsO+F_ksez!U_uT0P=wHM1L4N zizf!;?uh)1WnOrZ({p)-t?JPH%=bupA?3V1bi8EnRNjuB(GoCVC}5PtTo`Hsb2SUb zv6Ux!INN^duyYj*UhvBtF#{$zqgNpT4(u^%o3!YkI@vWUuoQe7@yxM7qP~~hpSmc} zZ;oRZO7tIo*?p8yhXmk{N_d9sFn_%z$0u4z(0d*nXUIK-uj)c;bC#~0~i%{a(QOk8kAuYwjSERn{ z@xzN_;##)gNX5j&=l80tW$LX%vT4nYU>>TjDABhEti^k0f+awE3Fe6U z|11~vFJlx-p~j0N7`?ZC|_(+TG3icCFj2wRY<0ZGy_POWum7 zM&yl~cmtYf?d|T?TJ3Iax4O1n!}}ztpep~QbJ{nc1}3tpb=Mn>hjsKLf%2+*>8lvn zdd~B0IydXBpquBbP!qU}?q*|~yAwe@mDP}B4Z>v0`bn~u6bEL%#RwAo#w1Jf6reTC zYO&tpmkBf5y2WM(9FD7z{wyfnBgd#fmhY^Glw!Jfe+Do^}_olKnjukzx{Teu70inF<=Ff zpHo*K$Ng22_7#stJ^uwT`e|K#TpnWEiauYm#y;*tbr>a`M_W71=;*mU|H3No+Rug? zPdA?LJY9RZ_srZ}sG(S**X76UsTzG{j#*uPT;nBruq7t*Y~jgL7>1)GJKEjbTsU?< zYd?PGw0h0{^PSDrM~v*HOvwQprqIsWg775jrN-q>Fs86wZ>~35?QWx0->UEOq#D(2 zjHbgC;%Y>@q=%*IrOpe#uk5k1UaA*5FS)6dJkw64{mf7AQHYtmr0OuoyvlBEtaYDM z>z(dKZEX)-%6L&V(9UZNv_Hg{Ly#a9?`Bxy5#bo9>4AkCXT=1+5BtH3PAk)&oL^Gf z6kdM3pbCN46Jxl^8fT$$m8R7g3OI__dBOH}7d-gj)K-eC>7TIpH)QdLwWq1liABU= z-(tnp(CQ@H>I7WkUL=7_)qyn;G#$p!HC_u92?yR8D|sl~Z>BX3Q<}T zeDG*nWk`5=6$Y-XEH9QZO2L~C8hh>9!&+6*2e`Kd8RM z?cS+v)T^jRQFcRJG`R+^?$kQ1`g($I;=@$ogF*E-nSnhwE~|E`Yt^>8;VKzOBJ^u& zP2s`H``J(cRu1f4wMKoHGi&XK^(Gp%Kd!avn;4^jx1#!$pNXU;CZoY4b-gYxFRg#OO$;ES&3EmfZiOrD%>C;8NRm?xl(W3-@S7XnKjs?C1)TL&~ zBFKEBRokvr+coBmEYjccQBkF<4?Dxn=y7vnzV=z<>@@sV&sz1PPFNjm5;X{h{f2!e#wcSsy8L-q^7&ba-1Ij&W$*x}5paE1$aJ6$KshDEC58gbAgc7L|uS)I+ivbouL$70Yc}}^RRv?xO zxe){a0yDmV`v47*k1H^{Fc}s*TOLp#h@=U{RsP_lI-wOfBef2Hkd#>e2DiJ=rmVP( zrk`1fHQ(+cW^@0ySbhHZM5k+*7l!-)QV!UUPx8Y2GF=p6>D=*?&e(u9%oY2epKq!w z;KP4$U-Pp}^+H{oJXJ+Z(5IOcQab1^P}WORYK6{RT%+-UPNVT3O)(o9*00c`hQ2$F zAl(~WLxSmyEAo8XzBPs`O!zmqso@^o8HEPU#5H^AYsk}FxRH2jvh519h8)dn{JL@; z6Oq&8Sgw6Yn2qqYLglD@180+wdiVbsQ;{>fc;l*^$-(>Lqy_uX=%!K<`bFJbajx8? z1~lx#!yV=P9NOXE0klxSUui zugoV?sA%?6t35FYXjib!I6qI;51L2jOW|X}K)AG>oWu%5}~%=wqSkU9)LHdaJ% zafY~_;E&O(d44HTmT4Od5^ExoZxt0osx^4U)d{ILTytQMWKTjtkXj!$Hm(g&^{YgA z)!A+*U!}zSgmPCa(HjIsem*-XsvAVZzNyC8DM>v!3{}b$;-hd65?Pg)+|FFi)9IYl z`fPhZPoMLi}CrwUFE0rMXJQI>rIW2@+V&ycG zNJ*OpCf|hA#}^V|d2dpzG{~2gQ$>@YaEZmTzrwqmr3voTavi)jZ zFA^%kaQ)%(@!;U2!OoNVgNJ)7Tg#y{zqGy7d^&jaY;hig@9M8`(x?c>h+c4Kd&i&3p(6jTH$b?CC@H`6s!DkoK|IK`8o)SH;} z-BRk&Ra}|?n!8p_-RN{~U}7yEaax<=y{d+8!R zGXFo)(&TtbN~@u7KljKevHUFvB3UiKim}4{&_SD~(E)rZc*}Z(ofpbalBQ03mnUu| z&e=06sR)tG1>wg_T=J+<*(}w%O47JMeJ3al)HWjVj0VWF&dZ=iN=8k28zeH$q=iRI9}uvQ*-i# zBh$(pde}$m#DnF8rV=L9eDa9#nRs68WpaVEq@z+UCl!b}z^d*nHk4zZ3^u=8FKKC* zh=~h=@HjprJPP0M)J5tou)pmF)b7H1Chs6W=7#?8tFfBZ=cB))0;Ej?YNLs6DWGbs zm#ffiK)*zwml+*UelG?}Y+XR*wtvLIGVuF>IUK?b6I?&hL+V8(J8%xE2UfH$cXrO) zH?j6oR{V+;tuVX=$m4}`fl#|BIykJXtdzlqUmju^I85vw*QCQ~cLE^JpMNy~=ERO6 z(1p2n=qeGMjC0AoigX<>Ip(}*|2QUtw+~H-rfv;r37!k0d7Y_*)RNa|WMLTwqeAfd zPfrL)1Q`zCl6<0Yg}I8Uo?usy(Et(kI}&1hj(6lxn+5}i1~^if`ehi%#mQ$$2dRHo zKx(vqEWi~0CN7Oah#Npc>e*y84hP`P>Ff*0gy;g8`gSz%JxY8`)^-s2BXa1NLc2xw z1AmAF7gDs1BZwC;4gu;zXE<^xdC=)JNpr6Q^?{Wk5L2CoQ3mj%{o~nipqP#;H>?Su zkM{F2(PtMGK{V~di7NrH8{hEZ4(SkMpuAiv8Hx1AJjjvwC!Py{I*tb}(=6~s zA5RCzBi?5{l(REPg6*f+6Q-d4igV)fMLap`5i4XwwBP&8TfVolnnYY2eB!Xm-#HyJ zPD7Ihe&t6$5(}J8Hw{QAZUNXY;@_i}zGVu`Av*ozTy(mGoVGC4yC$+Z!b$OVqgmU1 zQd?_%tWo`5_eaz_qP^gS8kbMe{-!Gn?XRquFj>VEW;fc)T`*ei)^;Dm6l7Vc37sf_ zQ984J1M$gqdUNqu;*(Y*aQsy+aKNtyuf_3MD2Q_t*5G}4T0T3VQA7h*_Ey>-yRIU7 z$l+cb(dTrC{vUEgkLM|H-4rL>5$*A;5TU;x9hm_oHr;nTYLmdU9iIf$qRwH)Wm7S5 z&CX9b2eFZp)NBH964(}xH-T_xT~ZzTt(5OUFqC@>CwW%sK#yMv^0P2qLJIitJeW|@nYBNSZUQ%_fxm4S0L9tt4t>0bWYqe^->&)<&HQQDU ze`mtyt`kvXZf@?q0~&bLogD@KGipU$+X>!7^tF4SEtrJ_!sD{=F#hJ;w^?V1-I{uc8oBz7`j!q!k?{UE-Od*_H@0 z%D0d4Op=tw&Zj&?4Dd@(QKp0TJ?cdvuvs>+OcX*&;*^Nx1lHKeNEiye<(-OOo&ids zxu*x2VK*ETak@}9OA zW?y~da-nbsUJ0Gg-#UTB>LYt8T5>il{*$1tIG>AC*LfXv{R19Gk~J=<>n@Fs{NSK; z~-HK(=<1X3QZIdRLVa2#rTv{-e7Um*rWY}IP@*}eRJ$aTs!3l ztQ(LKi!0?7q4E*!B+G}`_bl1$Y?C9$bx9w>d*CHJ3E}=ebo#*jTQuO>G&*&cv9u*p zTwGi*78h}-viUs^R8iE6NHn0NMuzB7(u(C3Ug38xUJPn1=AE3?P2q3mm&oe=dMO9v=+f_Cg+*1%?5RBP1O7W7md= zsv(VFw$rBTijKs{GL+Fs6uV0{oY3sKG$dX$A{O8%36DLCDOcl@9-0T+5YVtv((*yu z+Gz9gejuOhcABZR@uE=|TI}NLADXT~rps)YsnhQ+*@U2dGzgs#H-^IotP#Hli+Ql2 z?{S^V7%WP_)5dXyReOm{3w;ZXERNf(%bYs{JnG)gBU#E(falcj=SHWSD2x_xL9m%f;d4(BY_bcRr%Pa~%87Ecb~rUo?QW*AZ8L}Wk%RO3%Iw`(7F z*SD*6%x--dnv$o}ZX++^yo?dZ`ItX)<_0D@+r&ohf!W!amFMjwez~S@9 zDQ)QA;-Rdd4{`J~UHU?B?=&P}uH?_~2=KV913&Wl{Q-cR@0l*sW%AI)4hOU_3aB|m z0)iVA4$UAUoyXw}e+9_c^I!1dL%#3?YeTvG3}{xW*yPqSFKEiQJkVm z)yKtwiixu`Z=(_YQ%vRb!u(>nY_RWq1u8CxkurN0n9Mb&IZ}qi3xm8=teXA?;e8$x|v_DL`Idp%a!m-FLP&S)i+W z=cz^|e6=5#`=)2=6~f=jRu(E@QBhS0zcLz{mW5GF(k9-Qy?wi<#sg8xO4DD_IF?q2 zbju8==^_G;j!@C9H_gV1DoGWpnAcEf0$m@UaLo1J>{t3J0z4ni8qzLX^9&+&NHAa!)7br3c4OcxHLHsO;9D1psPgt#p27IjI z*Qm_TV(dk+8(Uhk{sXDLVLLSE?ZZadM$e@bu9Qj;q8C8zDt`m9KeFe;>q!YnZy~vo{~7HGKL_7oD9^8{D2%e(SX=JJT5{Luao)8 z5!(z0J>Lv$a_EF()8#>g)8rljIbW>tN5HjkYN3^Jn3^Xm$B30jQkb#-Ica-zq;d$G4eQ1wbipaX84~{8HR!iEyN3suDnSQT(}!6*NLeNwu%M z&*qF}L7t1vCxIyCz7&@b_Y(vP8wm%)Zs>eQ4N{z6S{|ZM$e}Q2f;#NRrcwv;Lb<$Z zES!>HIZL|5Sd-T(*>W&pwM;%J@d2Z^FoUmf_IQ{J3u1m~gdRFRNJD6I$m^17!pO3W*5N;qj;~k3^ku#)Sj~*pPAiHY1EL6SC*PVq+Iq1`k1p`<*7c=ejcs8+BIP@_nm zMhr;&@|p2v<6^RS$$!m$KcIaxq6Ue~{*2|CVK@^8R(EJxGjV0gGig58%o^}I&?AiYQzCnfqr9JG*0F6-8JzVX+H+=7D`fZmTF$S}k z;s=;|>`W1oJh5_6W4%?Yc50*pVPr{tlk7G+r1o*W-DxNKC-3tSu+y_o)*#Md2aE6S zZEuSk3sRm@3gRAh9UH=Px8AQTe~>LdO{UcvL(}Spfd#)1HC|J`Y{dU%YT99Rftmm_ zAg@3AgZ6CqcAduqpstH zGyu;tAlCQ@IdFd*;S=&1=x8+?SuR&f_&+I^4g5c`sjTtw$Tm-DTOE0`Ro|($o|1>P zr{sO0iZRN~2vlN!*q{$Z;>h6`fAJ}UzZniyGcm02zeE{E8DUF6p`o+p+cRiO_@7599c+C=F1Yq_V1+`G95=nI7BxA5dyIeu0CShc^Mf5ks8EnxS8cMvGWx z0R|18?=JL9-d}(^Hg9bKOWUKMWDO(M!6MFVbhxaHauMbP&q@Jk(XpLHHn+p&(tcp} z*&~=u5FYY|prd}kN-wdcJ6tYV!SP64fhEyj3DTNjJ4>)kOfSj)jjQB_tlcG80US)c z{!2IwXx;O@7i#Ovalig33bC~nd=&a6zLP63xkJaJ{55Wa(+^m0E6}tbj`o%1ScMkC zQQ$p^{YD}~2ft?F)vv}@b7_09~(pBb{(+^BYHGi0N-UF+1KJ(XV}fL$n7i^k5{ z3L_1P>WUl`3F!$XrW~He9665#pC+;bz^x1yyjU&xl(=G42+u@JZNQO$Fze9Qz@=p>#@j?kI|c>hui z3PscN{0MLR!lI$PAfyP^A4P+F8W)C-tja#c-q>-Yx>qzvMIg2K6eTdH+U9j(b&3Wl z@);M?4G>ZsJ2sRkmB<#;iIY+(xyyw7B3-XYJ&=NmOgzoJ9XNLGJ21Ro_gz1LUW0zm zgj01MXx%)}{mKWKK^8$J3Z<)ZDaj8=)ullcW=o4X$4ZOjY<{7v_Rr$Kl^GVP?V#Y5 znO$+;0cd|p&7d8bLA2w0(V%Fkq7JO|XwdO}H*!X)SGds19u{54I{={g^k;GfizCyc zE@3}zUg{em0dTn%7U~BkWVe294dT@`wn&Ob>G`}`Wg@{a#Tu#J_k>W z!$BJ6v1K4Uu=c3NsR{US>rJBhnm6QThn#=fJ;U25zH(CYk<0L12x_H zVPhcyW!Q|eQ{tl;86ic-3rExfq!-jO`O(xW4$aZX@%m{%5g&DZlJrG<;*~Ue7&|Gu z_wXr(5gn!BPJVP-gw@0z7W)CEo_0mC+@a}?VLwISvgAiIarm6xYe4PO`-~&HB|j=D z5Fber#3x-UGt{DgNP_^viy$s1fFV`5*bf}L>FeOC2$W=DK8aq06pxAqnP1F2evu?D z>{C3>EO2@NX(9xlB0n)T@KXe2ctD;00D!g_4l|2g-1q&60yWQWRuOGSTK*9ErvkBaoZvX8D3F44#g%pr|vpo0nd$*YfT zh(nv{ZZsp8pZLfU0gsxZ|11WHPn!0Lj|RioC)0_(Z4F$(CvU1Rb*TjGe7#tF&omzu zuIw=SdZ{#P#6R&;34Qt3izSvO`-vATNu>YmESY9*T3T4_2mW}p24~xOPX%!73nHkQ zM-G+KKa3zyou0^Qk8k#g$+Q@zW?n=~{q?hTouLDV{Zf{@PcK>W->K$`krSa>q1Z;d z9a8!+*`Q!pjT)2`oW!$WEQT@%*@@CYaTHK+MHFnHWH^fK!c?+wi>jC&nHk}$7||i5 zZ-=!{?$a5SI_U9?ckK#ygVX53k`DKT@HF6k2}{x@|2Oj^c08NDpaEfFN&~P| zdvQ!q@l1RVeR)RyXzZE+F@u1Bf#_U7O)Gj9;y!}RWgUQ52>8qN(YXtaQ86CUp&2-k zwYmAYg$Z$IW$)p51Z-1CdVVw@9X|-bsjCy10FBIVW{<^%sk0%5v!o8rPP~_pgw!0m zGz{Hi)??fE%pjN{Ez`!|ZHN7W3q_0KL*no6Q#dv;29rx8$|sHNcce)9Ok6Mgl9&@;!|7KHr$9Vo;)7)Ke>lNW?1|!R@m;)2 z3(Q{6iH6VT*o~0g<%Wmg>ipeSb#1NQ*?AJr;$O}&9^9*Zl0CT^D|ZY&GwXY1OBP#sw-ok&&X%bBjsO5wAY0vKbu7kar5Os zX9BN~vfarIEv7PrlP}dF^`Cx^Q5N`($%b@DJx7SX0GSt<)hq1Ji_?mGI$H6&JaQLn zTu=(eM=>^W=pQ;@F^>L5V1CE>MU2?W`843O)|^PNa$v2Jb}D5Z%%X>D#?0k1(*;)$eBVGvlDtE zb^-i5Cx^%Wk=Cc~JI}}FG334ss10sQ>_-jz!Jb?k$X7H#e&=6+Lc)MdcdjF2Dh19V z#G}{`d@m|NbXN#L+@iMaMC2%NqKJABV4*b*(`TL%B#DpL5BmI11-5x=PYbnJ$x{wT zl7Om{Rz?R`E0uC8tzHfx2e_Fz&tw^V;0O^ue(OvGbfWMM_a{w-wAMsA{E)*A{7Uj@ zjvU5OeWZmQB`z1t)Uoh~N2O9g=oWj+UtAoLRyB}Bih{Mm5r~jjXq;@2R;}G3EItp1 zB^V~@nbyG=B33vc=AwkmC15NS(4ikuUMfvB6Ofjkv;u12W@7dsq76pqC|LouA$6Ys$itG(g4;XJ56Y|&L`dHunPwYB_cz4^(r9lP?Px3frT-{FM%CBOn8ViKAW zAOG2{JPp_Ff|}{-I{Ft`;~vK2NIR+Dh~L^h2#_JX>65jx?&@m2Ri)lFYhZePI>gTO z4(n=FI3GlpSI}DxWXCsKjlJEC^}RKgo^oTY+j-hVnekRU+@a~X5bIvlR$JA#0a-ZM zT7ttBEC{rrh7h>Cw739rr)B^m<5hA1kla}eAh}}MDF{dZWD5{{P_&R(yKiUKK=`s| z=Ww23h@|w%VW_KcmAWR-16YXHlcQ)qtnX&KZz*&5Rv5a*+?+EsN3-+=`k{kJ2yMNS zY)eG9({Bre1rY0UX?1nsga-6m^GIoc4=Nl+nL(wNxxLeA@~o`cd8)vAX>oZ8#`IQl zQdnO?EC^Kjb*v%+?ah!Fn7zK^y+}sQivvDfIyyQ^ z2E_btawGI#%1I&dT`7LMPA@Qn^|?cu#3+la?4{{nR6CwOUpG%T6! z$nh{lLlRgwwQVaQBgFXFlE`Lm$DQJvi!%j=jw!f)jq{g+yaq;nrjkWu6 z(|FQn0}Y(;UeLVz;#kph8}X3x@CmEwq7&pM<$%=J@xTx=v5hQWB-ZUTIL7K4%}|LX zNeDmf?yJ7rnleB(<;vMohm~m!$kBZ`*>D7~{Fx#c?;)N^emVViXq$v{=F}$PJh{)0 zo4j6mY*d`D{%|>^CeD9#m4%haj#VM~y#4e!k<)%m>+dfvGZ%iFj;LpcUEgEC0-eRH z%C{)PDIXmjC8;)cm&e7bP|3&}7SDjCKvtCmV#yRIzEG~*6VX$F@jh`1fCgCV^hp?j zk0tZ@dK_67-s?Dfh{%E^FpSo$J;%wL5|<@!iIgtYPI6d%E~u&IHY_kJSt$#zHTdv= zt7xFnRbK?YAF=+-kX;m^gey@yu-SZTu0% z(72Vf*IV^wr@L9-t^qM1@7lgKhHKU?EZMuFFmvd|g;gg6ABWkXB-=g9w0}r`I{W^! zQUCL2BijGG@9cj*^7@}!Vfgv8@N>uVKYuZFKR@#K_wj4~gX{v)7b7R2Az3Kf=}|HF zzOL){;WAl$D=d$G0m_!jxsQF|p`;XnLf$WO%@`&NY6$!Hd1B&b;79(?jJY|PsMrv% z{2=<-9Pq5KwQJSZ$Gcly3?04K+J=sK@>Vrb^S2QTLuv*uy#5>yK8pT)(8`;lm3FPu zsqb#JyUl9nfzp&@crO*;t_`@?lv3!%q3IsbV|1ewama3}y~Z5uZ9a?=!)}Ob5AD5< z2R_Ro#7o3gZi*_PC1BjIxHbIkleCtTh2P-}=0stpz(>f*M5z>-hmXIWffWST?BgbT+aA)Rx6$^Ki>n&E5{}?L@Bg|4@gS?l$Yg8JLdxm?bsKvf?j^5wU zvA(~>^#6g{6XtM0(G4!~TD3~6LSd22xMBujI>iq0!F9aZ6l4I~*^ zYCGKgAag3}7nUDX!=dTf2072ZVa?28$XiIM!19hOakS(d~F%X86i1SIkLdUgFlt-Dc2<-zrE=pRsU z-veP-C^O~-IX;b2$F-4WPwiCOomxv!YuWY>l(sKd%H=W)6qwdShf6S+Hg6fJVgi!!T`f29JCiIR`YDwFYvH6w;}fW+)MT zJ9ePT&3YS)~>4k<)0bm*g;F(hcfat`77}pE}_{WP$G&u)li)Y7a zT!x~{0*w7I)Zo5IsRTTr_D;F@IDtI<=C2xNkl&0)jwG-6X5OX3G%76x6}uXG&WJh~ z_xASA)Apn7u1K4LWOQf-j%oMc3Qtra!NbqipD)%v@z)pkMyut<;%Il@Sy`|j?DcBP zjmi-aF5Z^VGpKE;=4WIxI`rqCj6ZTeX}U+N8(Yt-&&&2_EBh}#y7!s?sQw((grXwfjXFUUlBUmigvO)fB90iPx>#4o z(f-P?w}|81SnEPisdf$Ti9~TQ(-A=YIxpTGdk%QNb}a{o4K*9v+tp6JffppA?yOSx z%J4XRj-t~oEWW#2TR*A1XahR9v9Xp!Fb-A_vsjGn8fL!kv6NsiqK&p?sk1m9fNv{G-XDSX$?Rr0&Rb5r&`~}WO3cv&RT7wyHo2tXfP_s zS4F*Ref8KMf0(*tyNykN-*dORv4MQ3s5-AK=(RSGrBb~E-70m`vr_l|DyWABejln_ z$8N;co#;Wu=*yr*#RbEn@Ks9;N5#T;+iqcD9XKSmu2P=I+c!3hG(e~;tXrdRU?;6w zbNgwhky)mtyk$yOORtoAEW~*AP3)<&-R?fFwd$KsyUp5}7eNPP>XC41iShb3cB&tD zTebGyb_eq&ip@|{23`SGBa)uCnyvcdYNv*3x%Sg`r?%7GsJ9=g5DIQA0`qQS%`WpT zLl|xDt!>xWPpYqq5Fnm_2yr{UnL#QTOA=S@9*PDcub&KB&jCIzsidl!h-HXst_(3* z0946pN#2%Mkem-NDwWyAS-im%XS`m)q8M}I;MjM`i4@60tp3I2j{7>fNwvE{uJqy^$nox+bM8%?m01}UD#fwI~eNrHpB zyr@KU03{HcNzQ`e+cdms*Oj-ET37XHMr~BCoFa_fC8cwGuxmo@l2+}}UcFV@Fd#=^ zeI4>55}`DT3!S53(K7Ie4{J}sFY)}WtJqa&WUqA&DN(Ih+kK4T{p_&?(m0M#f zGStjnNbh5Ylz>Yp&wd6OviLMWT{xzscT6nPbwPvhb4H@jL(PYJV~>DC1@LnfKD> zD&*srGCj_CW4s~GkPG}dp+_oNZijZ+1DIZDRmXT~mMAMkz|hXKe%0?gCGP9n~}lmQLGg+192YZV})fNxRm1Tx-1)s6lQNz988J@aJL&K`GO~15V2l_yotwx7w1^9$7L}E3%sN|89Ry&EeU#3&_yhp*8Y}eOX z)t1OwaF=ujPN*b-?Awrt5qL+(I`}d@$6~fY`YfqLhV2q+Tew34j}yTU!8Or$PU50f zxd=6+%`>^l$iM>EvCq(VgIJQ$xI(;jmwAf8uXKfoQx`61MVU9HCyh=&T>8R}!pV z^5Ov|hQN^#GVm4Lu!Px52FOjj3Qn8wbwqh~+6-98i$$CjoQ7aj3HQJpAi)vA4N9Yc zS^+g9!9$fG1twf*qptyF={SD?fOPtD07&5mAw12V$*tz)`XzpsLmT{RpzR!fiI9ns z1+jRA{dsYq`-u+d{y_|M(2oE+7UzN8w8iN#(WQ_C)bazH1|%{a*N4~);LdfDf8tl{ zbjX(_b~+rHeQFSqVU@j|jj~xb&moJmMiN+}y_sWc2tb|^0jF11!E^w=zPxkd_RHKI zz!eTzh%JBdOxQAk0R%wpbYsq=FUBFNm`PLM*OaI5gki93bDM6pnqc(+g}yjLg`ZWjs@R|xH|8!u5%X!Y{9Xs6&hYOF;|hwuGGs^avfV?^2-`^7kRaW;8%VFkM$fIAPg8@gg}I zIDuV)y!OYW=XfThlbvDWr$@agoWblWW*?ry#dEceChKn6P3`FDXjZHQXqh1T2#Clb z!nqu1DWD@igunpDiXzGeQ!0N1%5XjOgFz&jGe@Izd(00E6A#Xcc=w4@1eYg)AnMVn z+d6(0c#-LNROqbODgy#Zjg@?sLaLQAoImB2N_@?obNpZn2%*??&W$m$D$oApwiYn& zw%AMtUxt?s_(eZKR3-}%mW zzVjU~YQ?F#0I5x>%GXTnlX=Acj3RcUf0=2-u$60Cu@eQ{Ni|V%h7)ZM6Q<)g99tYW z!F^Lya1nBpv_sjYjZh>Q#c@^g3FUZFBOESp^XREzP6As=$L5mY%w{X8sza8`1uT(6 zF-taNR4+z%LXEvlnW8|X+c{nthk3iOHBoCsCE^vY5E+OBkH69|>_8tPv;W!E_N<5Y zRMh^AVe+L-xt2UTo^!m*nue)#=6=oP{Gq|E4kp&YGK{#(GfSSW33~(iF92Du*Os;~ z6~)2^@06&Ctt`0s`Qa&%0B@aO3))tS?LfGu!M63m6TrBa+K2tvOZS}n3QOX9dl9Tn?5UgX>>#*04I;Vsyo;r^jEoKk1_ zi>^C!0uA*V-i-36?feZSU1Vxn&XrqL$IZoF&gM{wjK=mEHe)5S8cRYtCSau&5O2vv zO3Dw1#&C*AF_%(td}Mrdf*z&=p;`?m+v!=3?O+0JPw-e*U?yufWU>T>lXTTeZO;Tf zDP11+QsQnx!`knH|LIo~y}tu`9zf{qqRNBVa)NbWEV(C31zaLA*}$pY=Bi zE`YaYFA(f+5o}^$tcS6IG0h;>HN2=Zs&_qO6eT=U;LvvG&a$yR9CLdP9$womv``)% zK&J+|`*_KBGy>OmUiI0gxmx1}l%`w~vjCS0?BIl~VC;fCH75MT~4w|FGrr1Dl)uNd_!=6{3GbO z(^ni?Uet0T+!#!XGIP9{r;c-$DI*cyaI9Bb zRc5vzQJ9&l2{T2Cn)BoaGcl1{2PG-gn8-mOO`th4LPiwWxwo>nIzbOopRIk;-P$oo z9T-Ct@;9s8giy!sHbHAr4(fE1x+aaBeTer-J=lBm^Wu6llwkRp7O>*5vQ*#(iw+mbQH zl&ssNkfQ+}uk3}gYOgqxu_gq@RCD;10l$GXgzoQKCAupXKR}=WP*%eAPYV|){V#6J zW$}k{aovy`T)*u^uGK2H12|ksFNc~5Ap*L51G&)wM)RFk}6 z=ws-_QHI%z1`eai!vT*CBsTOoSFiJSUw1}|q&=$qlv_s)5t|WZLnMbm>%0fg8Y$joon-q26v8h8xPj)Tp zpkdiN5MfI*p65#_;wIf1S;XY2lSky~j%*rgICh}bo`#H4*1 z-za4Vy$gJqka$FCR-)A18qU(A;_8M2B%DPfBI6gjlCi0O5Xx69IyRGChZ-M^_WfX1 zFiTa6(tg>YL{HHtdP@5riK1fRyFyWccWS|*l%H*x0B@b(8qxU@xsLL9j1#+1elE(y zcn3Ic1V#UpvN`1vd?N@|imHpL32EOi-DUQsSKqopY3 zEg|JW^wWN|2uHeF$ghGluVhA)Ok{N=n}TaTeJI2drsJx3O?48f6#WRbU}m8*Ha1!v zoe)no8)A+`$OwgxOk@yBmya}Klx9q&Aw0S)p&oig#wty>0$fD5{i~we)wrcq=h8pZ z)iqwB3%wXVX&0=v8!uX6gL_yGEpU@qHX5;Or~}4AqQOD!bJI3CM^~ z{htOXiJ?Xpi4In)KUY2-t}ib*Hm+u{pla!6A=9H3>EGTV<|n-Mi~>dab~)wr^oRs_ zBLVHV^+rpP>o>(@^Hn+76xcW`iHKq0YiqL62#4E^VBf@8b+oAB+7UlNUXiDcQzR~m zH8=CeRl+MTgbfWRVy6N`i^rj3NBTDb#+d6itAqk#Yu@F5B#(f zTOaQfHxQKm`dqQHx(bq$4KS$gT7@zyZtaBkXddC6$r7Gyf}%aE3-v{|<&q<-lQReR zV`}t0uF0{%1J{?vbRD}~szb7(DmCZ1izG4!SWhAz087dnGmC*xKhPm>< zD*!!Uc?S{@qW^MN?|9~#Z3Ba?2@rjt9PuV(o@6n0?Sd2W(DzCzMr|q$mZ89o=6oaZ zR-ITy!Ak&2-dK+3+O4{0Ic`$+bt-uh2jdi^-&E!c@Puf)jVP49%C-`yWn|Ra${W=Jmht&a zO7&NLq*fIwunV_R(fVUW38z@>ic72a7bnhCXJns|N_A9e3BU@wEm!i;QS%>xQ;9q9 zq;pw3q%2+Z;}E=FV{oJHBM9=*_teNy*$t1JIeG5T z+2d0u$l=(zBgamiAm2YpE)y~thj0UjADf(c6udOuR1^4#zqySfwe~odRAGAhx&sH= zCdy?}31bI3<#ihU+jRKEv7;vs9X+VLv8}lvc&SkCYtub2T}t)T$P?;j_^uFcCeBTh zAFiZc6S7Gt8ryM8lE&!FElE0@5a{@^nUfEnI5eXX$joPY?nXQMu%L#MZ_UsDom9Q<{IiKC5ZC9))vOMQv zS%awDvK(_2kpOQpx2W5bsZlj?qB>?c!!|**_IdGW-n{sw^}-*KZoHZp&j?c@H3ia+ zQVd3jU0_P>#SRy@m&=*2=y*5R$nO1s|B{A`bU6*<57%oj$Mo*o`(|Q+qJ@$hx ziKN?dnaK2Q-g}1fVV>P^a_XdTB`eb<^P_2yBshwm8I9v1$*$JR(gyH_tPLQhSr}4$ zF3(7CV3F5LbcA21yYuI-p**8x(R*WMC%a(GUj=zUoUQJF__4hC>%XaW9RW>EUXyg8 zS`p?c4R8{1xLJK+20MHBz@cJ;NAs~Cn5bP`a4b?>$*amR-PA*WG2$J%Dq~J_9j|>+ z>^GMM5td|wY%AtXKU_+@sL}G!YGW%aXjm~WnE!UK1f3V!ztkZCTjQ%yq-Sq8~PbkVg>+HODh}PosX>^os4F5j~B% zx%S!|`7NHRqnnrSo(3H;Rg5Uzu#9W(Orv_ll6LEvV zy6ki|wZ@g%%tb&t+l{H(Ob}dQjcS!Fvzfe6?Io<>j5TKw@Ea>E0zN7w_W~PZrIOO_ z;3OHY9TwMHl>)cjbi94!bMBl+Rw(C`n+9_~e{78?9#|wN)O=8_Kkm|}T!p3ph$hbY@3IUMfGs5YgUR0&x^1GHw zlHWu8rIHEvdI#up;{^7Cl~{ zcZJ{b8>c5vOido#pY|$@9x4yi-J8D!{yNDgq;5S4NjyaJO}(G?nr~!LjW@Euxty9N zd!MxGb?0K2$=k>@ZDcAQwOaGxBa7AZuY0_4Y~;xFQQNOKcTb)_93F8iPo9-d=INFY zg)!)>QJi^&^r|4(ZQ3`=#2s-t{mRV!Muudn+(PIB{n>4F%vL}}zRnS@G=>{`X)#D4 zv=I-v0Qqjxt_Ee^mfvW*#{SV}kw*qYbBS!%XR~p`zlK1#68CJS1nf4E_crRVj)L+T zrQS{+P~rDbHpX&!7>kP+6V>7Ma;7sQan2Pb+?6eXUljhMvW0Aug=FHDI`XD$Ia#o5 zk@;mfWJLiN_;59PV8TTXApoPc@@~ndk0Q5hqtklOu9Y=Kkz1k|ILt>~H|OP@=SxY} zYmBUjP&seS%Na%PIXgLsw%N#Q>#fJm_Ij-#4lTntM7LMPC|i;nvbDCHdeYX73ZPCs zQg$%ciYpc)w=CQ+)-+IPWlPY2A~-pn0KaHGjP<`WdoC0wOtDVhzf&Z@TN|8gARJc) zq6cIWymb;OUSS=*p5fw#PL;B8@py_3OH?`-iKu6PZtkIEa#eTYCbCPZU3d1HY&U`-DzgRIUWhLy6nY z1FjWC#bdZrV8(BUHZLCK@uDBj7pD`0&$I$tl-1pWO|1xwTgNAglZ}?+O~_^dgvx+a z4Gc*=a)F-!t;_IH;+$1{?i4$5*~x{9%aK2&wW;(UtHe)%09_iK9%U0(y0tkywNDha z+(H?It8Ov%3#ZKR@GYan^s1bUPpDBAdg%1rJ8{_wJC#kyfpWOa@-kNnqR&i9&?i>29B&YYt-4s>20*{iRlAGS?sHsKg zb4-7>CQl+oo+^Rd>^9_C9*7tj`AXK9(dL<+axp6?`AMcuk>+YZM`WQ-yY`WgD>bG22tszuAQo8@~G{L;WtuW9er7Pdgy8g07RsbhKOfz zRVUH}0SFh5&?#(tMCcUo)(V5fDLbwy?9>(*3&!(SZj=oHGbAgcBVLZlf#%etGy;9pAfq_k?(=1C}eX?6a>H zV1RlwxP*4kuL|uh?;9ZD$@faPfOsb;X$8(*QV({YOn`TiKwl()z3fh$y(v+0gzYGv zjpU1@L=m!fWIdIKtotRhiozAT9&ws;rGSTIuIS;kk~k+NJ=4e)Xvfk2$(Hq`?-gf8 zx}&A6Co%g_&Tev9uSiY){3nd>6yA#PE|@DKRjm*pG7`pK*j&)V3LHuRhPfARqUfQJ zxQh@&k{V=>hprZ6#t;+AZf1-*LBwq=LbyHK+{73wFvhA({NasF9vBI2WQ<+I*gy|1 ziYRP`p~fH{D0EZEFSL0SmvC0@dR=P3d3Y`e{lJeb7iAAJ#@-;y#v6xpP<9_~5x;#vyaP0>HV*ueThd0WLs1aHCvjTkI2Hn0gUb$iw^*1!HC_1 z9!=>nD@I~jF%@w$V{CbOnbl=xvl$DFu{xWs-7ZcyvfI#`KE?)?0c&&%jZ-Y`V6Ov1foCmkQMD>lo|*!8#nh8~z8)Bj>CY8JPXU$$vyKJ=g9uIn$t+3>+*XO3>afAipulMl~uuQAP| z$ZGQ9j#kvX{}#rE9-3&ne%*45srb$exrLuPzWx3|#_k)Ot`(Or^$*^8=V{P}7Y9=9 z8a*JpIV!se%-Ju$*BRgIjqeS{_X7pSa9&`&L<+!K00YS03sz4I0kAZh@i;amI`Y6p zMmEpQ)3tk+FAZ(242SLE!1vu@FD4IRxh1Syp@izHN?5-_3AI&~uwjJ~MzSUJGsfCM zGqf6l?(uhrgg@SQu<6T0u~fA`A`YCC1o3Spb0ku>9UuNazKw z^zWD9|G2!o{E+^nf1Wti>x`@I3q0?yc(qofHLCY%_gWjMRywk<>3Yh^OSywIsR|=sB z07EN@*1494-QnD>FF zaO|t@yPe;8@jt9Twf+0=U;5Yo>8D0t`{}oR?2f@!?AGUb`KJ+>70%B24L; zyiq)|6!5Tgy13wkaoci>ryrgy-W&3TiDKox`+%rdSHb{eL%o%YVn zQ-YOh?qO``#%ae6eH_3q9`M7!7Y91FFgA1x8fmzVf>CbhyDq20Q=7~#Z`WW`fFfSo z(*dYSooi1%pvG$>d#aQB%ZK)tr}r0+PfeX2El$lSU{wXMuD%oruszjkMFMQRGQJxC zyKD;pw5?NK%-t-&2GP(uaSKe}3550xSDwm;(7Fx?y-`D`k`JNL(aQd_<=34pA3O`4 zL2Yz&ME|CVT(qEg@8rYBaW4>jo;2>0*ft^n_^MZ;;k&n%f$wXtvi;q`ztQM@8vd2x z%1}Q1*LT2wzlQ&w;gLL2&co2j1IMQ%glhuAuRt*xhE+w>3P*=7+lKB?>J`&j8bEu7 zM@BS&wi4%iZke$^SY~O0-p~OqlN76~1=rNULlRm!1iiLW5@1y`2$wrxW(&H*YBQ2) zZy{UX*nYtI9NV$Y`R!ffElh71tzUIGqL}b zibu!$r=!^z3vTqTPqwp5$ND-uM%`MuV+WmRo~#hWd}nlQt(j9D%PYRKW3sBp3e&ag z7<;b3Zea~4nlFp+YDt2rgwino7uY%$HR`Ex?eFOR6Ok2Lx%jHUj`DUT+QTwb_FXG3 zJxK9UqfR2ht5^C4jI|U+0L+`s=9=S_0^}yF9f2krsM}CH0G6bZ$kM=o39EIW0VsnU z%N?(cRUq#eKXtiA*i{YGpjkN);Hw8p^ySqn{S_IgtAgdme}<)r^j8JTP5%r_6P72g zh8b_}faU8YFJEbry&87>YL(82j)BwvA2K zpfJX+9b>E?rozxWTqk!$7~9+@!}`)`YrQhOSEcQrt%|VOYOhMWUX}-)@;Co(ya9FR z258!f)3s|EV^G!J!C2u=#tL_lhK{szTL&J%f?OS6~&GUhNe6T zF5#-k&}ncL4KT>)1=sQ-6%M^Z9XF_|0Dz$$&y}%*tisSznHk#=wik!4irbQo;}>;F zP&>$6vkj%MHbYxUD4JngF1J*%P>REjs~p)pIA>eu=u#vYsQ5|a0iz_59|tNodYeRq zx>R%|2^V&WDi5?O_S~%R=?+k%T)*8=Nzfy^6hH!q52u!Cl7#2aR|X z1KrWPWPZHgC8VNfde~2vmzRIMyu5rPV;?TCK{j2xNm9kFjIlm;iInx587ts2@f!q1 z46wUE3Pn7I80){ZJithM52b$LIwV+=ae!&J^CI>ve&`cTID4{l}b9TJ@$V66XVh?!p+=$n+0 z4>Q*PN1GU%l99i~*ub_&W#Hp7@b&Wj8Q_pFi@Qa>?~w01F-P<;jgtfLb3n7j-SWLd zzAwu6TTtAa0PVz`Cl~H_8&m2C9TX*q2%SZR@9UB`d?WvB}OQUv;m&QkC_mswG`IueXJzAZu^D-QS zRm!myHhD}^mRdKL>#lFlW5s$iAV!ebroV{)Jl%7Jw87R$8|-qlG5Cto#z60#z+}a# z|F=*DOOwR9&}ywf5dZbZ;A^iMLEPSzAVRCPdUCkED>;N#YYoJJ-TWbJ_7ivr1!=nX zln-mG6v=lDg%m_!LX9iQ=Sn{d+jPc#5b8f zr0Wt?gi(Ijc6Bhyv0I_-dU4tD(ju$f3OmAZ$v5t?R>eY4Q(>hLF$Z?#C#k8G{t@{^~A|Z06qwS#G;w_cE zGk%U+ZamjL-hm@%-Q>>v7uvj?#NTMvPs5jKK&p2lLBrB0k&``Le@=pQ10a8=y9E4z z8}q=AMPaJ17)TXCQnRB6(u~Rsj~Nw(3y4((0<%NG%^2+OR1?qwEG@8-_yt)dicrhv_fWVJpKRKe`}MmR z{d=Ln3frVL-8&1cfc0cQyHxm<0xSHFb*%6=>saBtjIkfAWBo6ExPg7wnK(jQzEI-;2co+2Fw(@E&C!2eGra5yhSrV-*jh6lvy1JNvpD2EY`SxYiO6_XMFI z`x@U=oVf5e%>@;pDKrkbCM@(3BNi<>u{~F^Y`4U{ICK&Yu7-QzqHB5Og_sArMpde2 zMynkpXoFykhO?Fm7m(Lq2-F2tIvi*o1Qu>$P)S8lP_`_sfO6UDV8431bWJ;v14BWF*cBUN|F~xZB#vk6BNF6UsrZYn&39uByct>W*)*3oN zY78>?LeZHK$g~?t;QCEfkW)gI=w#Q3d(@l3Lf~p&; zqS&~tb7CbBS`DYIK}yi3kh0_1e#;Q{sCuih&?pBXpLH&(>IupeE=~AV1atwR-|}^J zm@*>InVn7MEwmuwVQg!GjSM(j^=QrtlNlEiP}HhJ$kk1SupG7O3ct_DYVkfJww<04 zW|lCnM%5^pjwq;u2{79cdN>#a^u9iF{rC;APS{8)wAh)SncfeBgx=|yBgdu>p+j(1 zpjQ}xZ4}Lwg3wv8VxF43smZ=QA33urs*j?M2@-;NJe$m;fGB=@Y6uQ37G1M$a zBW%l_(;zf5h%F&C+W#c0!TX=sbghSh4ZtbYZL}+f{o=d>IA9eh^maz>6lmgN1?&;y z(Syf2Jl5l}0gqlh`taz-V*rmqJT~HigE!!S{bzfK>(E?!2sg za_d4Im+PTFZ_G7VF!=%Z=zKY?3sqI!Z((xP@9 zs>k7MREpYldDu`@jw!I2EIu(vRHEOgw<8)sm6G&S=$wd(xE6s`Og&aRIw}uD738VM z<$#AyFlXw|Fs?GvYAoo7a8JkQ8#v`2_tsZ3S? zpLe)OI@LYkpzDWLIrf8O-ow~Xs92Bcf`9-N?(x{k=)+J5By!%?iyFud6yDTY8Vri| z7%uPqLT%veExApLcdKW*RwRo>Y}OW7jWzs55BITPIR`f&MIMHJI8khS{9?fEm^a|q z*O}!}92Idl$I?-T`D!m6KJuun`zhowJ;&%-Ap_FQ%vx;Pv(1v&mp@IuB9zh0;GK64 z$&+tGDy%jC?~Wl1?@d(Dqx5`)o;#?r*AN4}sX#l;&oTA{g`TA+jvQadSOKS|Ze*;0 z<8lYZ{&C?5&b%opyhQJtyuD2GOC83UN`Vx*XK)t6O)vM)36ql{VriiZ$SB9&lN@Zks$!axrj}FIH zNJbFYO~%A2_Jn}zLz`)zQhK;AllZWUv7sBvsc=$ZMO(=?sE9~fBZd@K7kN#jO(#%J zf|T4_&iRgx_f zg&7TP`f}=!O{N@Z_vRFGQj62=N>Ah;mAnFP_z)i{utKfS1!mO(8`{yZ=fiV>6`!;A zK4G6fVeNIs>JLBRPL54J5={r^&yLsjJYFfVp?<4{ttZbd7Z@&ag+(=Hm*D~%x}EN9 zm?)P+-h@YtrBXGy27GscT1>J+iN2qr>23_)xJ!x&lu8Ccj3^R8kQ$a-#T$;+G-58$fgMsTczwtt-(BEg*=m?te9{i6s98T; z#FkG;@LG*x8(bfnT3SQvEg3+YLK{SV+PqhR} zwxpqmDe)#ejg(?b3tNzwGl?8erV0%MNXR>xbgD2j8BjcvtYz6Hx{*Y+OR4Augs5G< z$7{Z)*9S0o%alS}1L<owO|7d#aTRPEw@DO-7c0NjXS#!55;UqeoOV3^AFlU5HL- zGop;LR5xWX5sB)HLP-^u?A?OPsKVlltpxAPT7qQ%Ri%fuaqFDb)+#74f~XZ`Xd2RS zyEUfTA%3dU{ZtstZ^=#p$|jW#l`H#RH$ig{tqP99AgjB`MmKz@=rj|742gw^vD`wA z^dg1ZE3IKt3uds~ROW`cMhE(&VsWjc>L11`6>01lb;KDBf=rJtwAya$l;F-Um=cp@MifW}sJ+T5H zb;Dvh3=~9RK~SpuejLG%b_xD86p%XL8<@KwP*iCULS5>2Oq3V`GEEgmu;@>s&O}3{ zuaQX8Jn+ug?NcoQSmD_qEgkg>X@lPVh3VRx8GEjW-N+2_WtdD7hr@Q6gzo2h*sZzI z6JwQ1rF^>?*CF`;F5p}L3T7HOIL}yNp0UEyj1}I(7#0_g|BQGKo`<9XJw~4kG4e^A z_!cr22@Pen0*Wp|L=K>CHKIKPI*bkNQeClvAkwCfu!AgfD_TNmIpl#qykxc9CUOC) zuudX>y$XCFJOmnc{lGp1NoNz~^S-v3#~2tz-zZOg13xic;t#xBedDdtVCPSLLwT#dcN*!TQBmP#b!H^O0Kt-?QLguh^Xzi52_ zq4E6^W3;i0zt0+d{G1`e!?TX+;};lR??!)LH0u2lV_1{Z-&{*R6H-!am|{6pa?{AQ^3eBVg_Cr0`|HPWBy zLtZ*Agw={%vf#u4S$^MaM&V$Oa8FZE;p>rQv-T~uAr-y_;hV9t*^sINK2!SP9HcYq z7DP>`C{-FY>^79P1zB|MA^Z_y-ry_OVpd#}V~*nd@V?s{@KS zLXuA)>KA3y#|b_osl3l4!Jp*j{UoCPR7O2dd26Y>pF)COnIPTT7Z3#j2ax$xD%XpM zdWY;tI@cc}>X&5Hi*UB6JMt3XJd4tvh3c)RI;@a@==QUSZX)_6fdtTyATz~&4zY7O zw(pQf?oCny{CT7~Pib(KiLUqy)F#=JPsq9zjH&c5BE>spiZ6)jadnTb{!2*kE;GRf z#|zqV3M^knqF+{tQcZZdvkA3y6TV_L;bqZ;on{lhYBqrq^hsS!su5o^8}V|g5nu0Y z#7Mdk-!L2TbdsC-cVQkCEcfWQuR+ zwBb8Q@aJZN-YB#^D?J$BMXJA0sZwqDUS}IJgYkW{4d2UY1ISIcff7i2$<$bY@^l-% z2a(fyvK{Kvl8}_~hxdRufIF}rlCs<=feH-^44fy!AKq^i>4-DXto%GKpN0D(Y?uwV zqY}5GxKta){nEpWj_dgGFdgcIs&~s73MihMDIT&S(qm_WApc^^NaVzpH|bUxW9LO9 z=zU&jsA\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ + st=/app/config.json list=awgcfg-client\ + \n\ + \n#:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-am\ + d64.tar.gz\"\ + \n#/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-003\ + 4-amd64.tar.gz\" dst-#path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"usb1/dst/awgproxy-0.0.1-0036-amd64.tar\" interface\ + =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ + -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ + xy-go-client\" mountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n#/container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/container mounts +add dst=/app/config.json list=awgcfg-client src=\ + /sata1/mounts/awg-proxy-go/config-client.json +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=2G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroGig-1 +add bridge=*107 interface=*108 +add bridge=*109 interface=*10A +add bridge=*10C interface=*10D +add bridge=*10E interface=*10F +add bridge=*110 interface=*111 +add bridge=*112 interface=*113 +add bridge=*114 interface=*115 +add bridge=docker interface=awg-proxy-go-client +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=192.168.100.1/24 interface=*114 network=192.168.100.0 +add address=192.168.100.1/24 interface=docker network=192.168.100.0 +add address=172.17.0.1/24 interface=wg-awg-client network=172.17.0.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall nat +# in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +add action=dst-nat chain=dstnat dst-port=8089 in-interface=ether1 protocol=\ + tcp to-addresses=192.168.100.3 to-ports=8088 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260630/20260630030001-Diff-Config.rsc b/MikroNUC/history/20260630/20260630030001-Diff-Config.rsc new file mode 100644 index 0000000..f18f7c2 --- /dev/null +++ b/MikroNUC/history/20260630/20260630030001-Diff-Config.rsc @@ -0,0 +1,55 @@ +25d24 +< add name=docker port-cost-mode=short +28,32d26 +< /interface veth +< add address=192.168.100.3/24 container-mac-address=00:00:00:00:00:00 dhcp=no \ +< gateway=192.168.100.1 gateway6="" name=awg-proxy-go-client +< /interface wireguard +< add listen-port=36008 mtu=1420 name=wg-awg-client +38,43d31 +< /container +< # download/extract error: unexpected manifests array +< add file=usb1/dst/awgproxy-0.0.1-0036-amd64.tar hostname=awg-proxy-go-client \ +< interface=awg-proxy-go-client layer-dir=/sata1/docker/layers logging=yes \ +< mountlists=awgcfg-client name=awg-proxy-go-client root-dir=\ +< /sata1/awg-proxy-client start-on-boot=yes workdir=sata1/docker/ +4711,4713c4699,4701 +< \n/file/add name=sata1/mounts/awg-proxy-go/config-client.json\ +< \n/container/mounts/add src=sata1/mounts/awg-proxy-go/config-client.json d\ +< st=/app/config.json list=awgcfg-client\ +--- +> \n/file/add name=/awg-proxy-go/config-client.json\ +> \n/container/mounts/add src=/awg-proxy-go/config-client.json dst=/app/conf\ +> ig.json list=awgcfg-client\ +4722,4724c4710,4712 +< =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=sata1/awg-proxy\ +< -client logging=yes start-on-boot=yes workdir=sata1/docker/ name=\"awg-pro\ +< xy-go-client\" mountlists=awgcfg-client\ +--- +> =awg-proxy-go-client hostname=awg-proxy-go-client root-dir=ram/awg-proxy-c\ +> lient logging=yes start-on-boot=yes workdir=/ name=\"awg-proxy-go-client\"\ +> \_mountlists=awgcfg-client\ +4727c4715 +< \n#/container/start awg-proxy-go-client\ +--- +> \n /container/start awg-proxy-go-client\ +4819,4821d4806 +< /container mounts +< add dst=/app/config.json list=awgcfg-client src=\ +< /sata1/mounts/awg-proxy-go/config-client.json +4833,4836d4817 +< add bridge=*110 interface=*111 +< add bridge=*112 interface=*113 +< add bridge=*114 interface=*115 +< add bridge=docker interface=awg-proxy-go-client +4850,4852c4831 +< add address=192.168.100.1/24 interface=*114 network=192.168.100.0 +< add address=192.168.100.1/24 interface=docker network=192.168.100.0 +< add address=172.17.0.1/24 interface=wg-awg-client network=172.17.0.0 +--- +> add address=192.168.100.1/24 interface=*10E network=192.168.100.0 +4863,4866d4841 +< /ip firewall nat +< # in/out-interface matcher not possible when interface (ether1) is slave - use master instead (Bridge-LAN) +< add action=dst-nat chain=dstnat dst-port=8089 in-interface=ether1 protocol=\ +< tcp to-addresses=192.168.100.3 to-ports=8088 -- 2.52.0