From 60f8978543b4a7f2546219c5a0c8d6a885a3571e Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 3 Mar 2026 08:40:10 +0300 Subject: [PATCH] Backup for MikroMaster sucessfully creatd at Mar 03 08:40:10. --- .../20260303/20260303084004-Binary.backup | Bin 0 -> 290359 bytes .../20260303/20260303084004-Config.rsc | 3978 +++++++++++++++++ .../20260303/20260303084004-Diff-Config.rsc | 49 + 3 files changed, 4027 insertions(+) create mode 100644 MikroMaster/20260303/20260303084004-Binary.backup create mode 100644 MikroMaster/20260303/20260303084004-Config.rsc create mode 100644 MikroMaster/history/20260303/20260303084004-Diff-Config.rsc diff --git a/MikroMaster/20260303/20260303084004-Binary.backup b/MikroMaster/20260303/20260303084004-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..19074dc3dd331e20979489b283344aa386188e44 GIT binary patch literal 290359 zcmeFa2Uru`voL;AfFyt*ARxXX%`UK;o`?kz5D`Sch6PhL5GlbVG#i4VSg~P6#g1ab z-o=8wcSS+5V(*Ft{?BX@#P0iDfA`-1_qh+x?#Z%ecV^DaoS8YZJ6Wq177F6&$QU7{ zOh{0vV$Bdj6ogOmZRegmZRfg3aVmK%n)KCCaQ8qEQFlt@@QEC z4I!jX(0Cz)plPnZ3B6X^s8$;uYq-XwR@<9w2eDbGiUNWQ_7CIQKTH4< zS)3$ZsgTGBnIg)7Sra`_aBPBt*ygB;LPZFfpen>dRfxomf)Jy+y1JS~55P>0l}ThI zb*ieXt8Mi6fTIlxVpC8R1I`BE*QVGJ>9r z$rP$?I4LlkYC(4C|Rx45`Y>Y^~Hl|(5b501RkVk8uBTM#MoHA zt^>&>HINxWhifvDj~FhwwfY!KC9;^r1Q-+zp^l4E571-ju0PghU!YEu{ycD@p$)ww z_2+@}{Pk@HLMTq(W+H@A_3c6`LhdMtZH!Pp0yY8kbTou#FzraZ03~BB5gSivL1w;l zF%XiREh$0 z^nx1zEVSh0WJ^><9)IgGK%<{Nh7NG8VSM!%jV79Wj7Ae3S%bG;o^*sF$JGRY{SgAj zaA(s_@bD`GI< z_A;k0Z*QEejF+lX0BC(P^g*OX$yW9xr~m5C%lSwk#+n+1AHsU~6xjYbv?YUp=# z7l=TtOs-WW>iWRurxyb_`k^3pJVKN~Ab^Mz2Bbs?#emL3h)E$3VlYe)QoxTW*r{Nb z0K0*pT5vXp3&NPFA=CzSHcS5m5ZH8m8`RkpeH*Tys&9Ky5t@a9*p{R){(}$&2A(9G zF|b%8gc#$QlOs*_I>!njCe@(sm^9F*)|ym}mWXqb6ADRUtkwxYaYhJtt}`vV(f)`I zGq%)wo48cgtL-{>MQWp&4W9TV9o&7mO@Rw?LI}6i+Pb;k*>NE+sJf}BpV1wXU5zC2 zIAwf#4O}q4=wZ_hDhZnoCX3H7f#B+3LL>mzuUd+lSi2p{cHcBKg3)Z*Lo3!)pO)J! zw)f|BKFIGQ(E;FGUVLYunK-@8jT19l*I6(Lp^Akj-b%Nq3LP{_ zpAsiKtXdduHzudC*(tRHK*P|fX+k~qdjNe!5m5BxC;>ntx>}I{kyAe?9H!A{fKo@i z-nU|7OV0}f3I;t!&#&2&Zpqb@>J(^@dee&5i5xl66m#Hr*2+!?06T>TT^n2UngMhN8_ zAzKv0HbICqY!E`E>H-7DFy|m-PHM~Q>S~iOuVs^(xw^XA*l;aFf$PpGaAU)@dR++? z3**c?p&Xdqh=Ndads0qGNoYh$D#>YenO=1eLeeOiDqi6kMZ^S=n(9RMeiWNf00`6~)5aWF{kfVy6p2;8Nq-%$eGmL>VB4-u7 z_>=4f^ov$$H3=%MXPiVCZy2esNB9UrOmi4v!^IkPQi58gFkHVv4?P@Lpdj`fgeXY} zp@|5gNeEHK0fgDGn~V_CIvQHjVK-B+H)nwibff5?pAG*}!@s0D z26p2CqtOUCn=4`^nrKfwXw%^IRM<^{-B{RV!7decwJA^=`Q#{N0{s4+$)YwLfC$Q1 zk`G~fpr->IAD|$1ebR$~iJ=!2A$x@KsK_2gYqbetPtWA!WDin4waOR|nJUh+LGAyj zRf$?cEmcX>a`K;!q~)B65a0|HKn--t7F0jXKNJN*lzIqJ91vo9IqAvg45V^_ohvyr zR9DwQh?xQ`L$QXP4P0$t8m5k8tbkN?b@W2cz<u8d zJvHEXMQeK!z`^s+gy*fJJ|z7 zIxZnrk#J$&-qMG&I1@PGN!;X6e}r zfM!t;Vw%C6N(D_#Zx0+%3?c4A<#5VxrH^b(Qn?ylxQHFW`tI9cF+ItjhX&Xy901 zPdXq8wKf4hqoR>0;}t6S4VzD`qt9oCBEhEu_#=SmLI9t%G)eyrbR8+b z&=HYe8wsuTPlID?-2_OY023e(j0w*f!O)K@ID#;mq+jR^^Oasr!OR6w8BcklQf|Nm z1_w4c+UxG^48L&}q9IDB?1%viSpXi{Q5LHt;^Ny{fLRZmYWkdR<*z zE!4N)R99EC_3eCwP}|QGW1M!&7Q{*TqsWyry@Mw-4EwVd%`R)ej&taJ#dqTeD7G!@`5TgM4*8qE#Agyd;hQ zo*_}y5b7jC?WswW#uHi~4)Dw(Jx0L6b@lBH1nLvukLe ze`we4A$7^2t%*u8sc`Gsh{h5U4PiskJ@=&^H;|1N`t}Ee&>MZ5O+~0e-{w&fs?@jn z)X&!os0h8)pKnb?=(WDxuGaZ*a9zPjMF@4LBJ@drO(ga6vj$O74LrkYwMSAB0*ey1 z$y9`H>-$cv)ps!!q5Ar3d}yEBooEQ%(_i0(_PK8e4WTmq`EVLSuk>vfTYw>mT^E79 zltG#s;O}PX z_*#OCjFR=IQy{`dnH!l3M#;*5bbY|&qfCVWA8GArz{d&#mnJAIFyZt391FaV3%j|n zBUR5(XbnNg*%}vfg<_#X%#(GLV(j&J@b#$i9l_`^3CmzT(uzrxt8 zLujPGN~2ZAOHw8O0&7ex#KZ!Dn2?FN9I=p3VvR;5Kk^w}p~sp^sxMGp^!4q=?B;xd;w*1$EKP$=pUym%Q#A*f? zW`S?8UebF1FR`Wv1%&tbU4*T1F^-AZaxoVdvt?p7CYG^Dj4j>0TRH7}`$vbm&CfB0 zx$YZ`yH_-j|7x6B;a$Tz1$6Ls`hC2uNW6t&87>y$VxCCMQ|QoU>`m_-`TCEd-Rb9O z!?gYl+S(zbeksK!LCP?#QWo>?#+oA(;|j5yE#@i2I7f%Hu+iB_>pwfzvY#Uj_RBX& z4_fS{_|;hddzsd;xD*%56=FgpmSbW$PltA4S;grK49cIhNK`*Z8%(ut&`!V5>z8OZ z@R!6&Qc~T$*_eBRD%O3lDoLUxVkPe0@&9J}QV?Rcn8y}N2{A_@#&y$I6*Y8sJKIlx zl;`{YoDN{7enW?ryPo_~)Ga#th6RRq4RPmjLoxr3ziqHs<6=2i%$LKTLM|qFVy=i} zg7a~4pY8*F0Pt^B6{S!2Ba&#?v%L=5)$Q* zLH{p+83%9IbCqZZx*-FQwh6Yfx|i`*$(6#>E6zj0?qlshB4ebGTxOZj^7^ z$MoVB82wQN7x;6O!JqsFzy%r|hRzahlZ7R+C=yHRYiGU2!N zn$9jika3e1VEJd2SisK*8Uh60;5RVz*H#OIv{{0QPFgD8uL2MyP zv+OgM=Ti{5ob)-izz7QS3wPpqU=U+q_VDi5HOxJ@yAMf)tTopMh{7SrV2z7~La~Gp z%jIG|CgzC5Jnm284&Pi$syf~6{s>`QzaosZhA`!N!Z2$H1F<1JVWdEqReHjVt4)|= zzaR{`-0mJr#FKogMmd6n1sYgC!^8hr-=z;E!J-1ZN< ztMnjccn=asC-sVRTz=UfSL=@7Q|m@GXhLlBYc!d#^7}=tWKY$*??JE(M*NE_Cy$IK-5n%||>P1)%BD_d1!Xs*n@ZN7kn2ej&X4ujo^-G5Z zAh*U!(t7)msOtYs4ymrwH){vv5&|r=KnS`(A4`T~0SaR47Oia&qSzrsuKhO9WiG+8 zEG*N)Dl4Rpkn4D`Mh>ey3|Pn0rP{(`HLMWmb9b!u!6*nHQ|#e%eYhT0ydm3yi5luJ zfMsu*3%TO0TbE)vI(Dn43l1Y^R-8nmCDa`|`Gkpb-k%BLU`6vVa# z3><2u<-!Va9fV+w9#;67G~oWJDecd}Y9Uo0k$b0v*-q?~N+uHxM2OL+XcsjWa#F0i zl7V(cjP4{YTG#yy5DiF0rj0RS9GI{m#;B?WI#=m3HfiJ%6`_qL)VPzoQ}=j6>j(rS zCFPNI$&8Ev)-};~SZRq-%4Mo}ty&f9DJPPYGD43wxr8T+RVCJ}$Mx0!2abJF5ZDXA zqZF-fS%C>_3QS6tek@n&j~M{wLU`l~*g@(Cv|#NpF(E!7 z&ae;&>rJr1(Ndpf1EF9VLKGOO#DpldME*I00oJKtgJT`t`WK{VAtsrVqsym*6++ky zNys1vh6P7hLo+-ZSP-r3wYQLRcKJcCpknJO7pD}e(b zeaBR{@iL7E6`0M96W8*nwWfsGB<06XXD zuh~e2^JJ&us8!U`pkht>*xoIT+ar3Q)!93FGqva+~%kXc$w7R|B4@Kl6~m)fB?W5bOS7q zUqm%$0a@yh_GWu>@1aio0lOFxaS~-L@UVm>1U(TS5i{-qaix-Y12K-0(EWEh0r$DIQhoQ)Ts$t zW8@RuCKP9nB4-H5#YqE!f|X4txd7*5GA>)rmg8ium@+;}8%>aE)+3(KLiUasLXdw5 zs*z%h5My0sGo=YajJ0_SloJtRJbP%n9wrfxV3<+85)oqd9)b|V2%)0Jpo3vHptgio zCPIunQZ?uk@F*}p*mfbb8Ye;rFD~G7*&;rVhg%?o<^ z-tx1g__#V>b$>D`qu<)Q9TF86pY8E@=~{gDhH74s^xEu0BQE-s^?xU`mQJ%g&8_n> zPVQ%xTiw0rNQ3B^otJF&@#m}Edt5lHZs&d`eNILH<@GOZuW+F+Ip5iScl&95VqRWP ze^=q-*lou@RNL5y;%@AY9uCJN#38fzF?SxGsJz?1WQF^1rBl(vB}>mXHwxX2ZTFd0 zdbQh!k{fM9`-;PN;;rUg5x2N!84y%iDnG5$|3- z+aY3n=u{rqZY8EUdr)iB-ErceRj%8PWqCY3;~IFzMReGgvXoWO;nF~}aa!2|hqg0H zDp&Y6DYrN{`%#!xan9MIKboqd3-W96J4Q>!&^(>i23-nc*X+|-S}Ecbv8mnQOalo!nMBiAnK zEZC-9e4t0%gfi;wQ$t6F)3RqRiJy9Oon~#rBaG0}yO}fjJ91=~=UA-W9B^h>tF~7h z5~dI6S;|jcHnlSJs_xwJf-5ME&mjwr=Y3v20Wazrnm1uLb9)_o^@XXg!?X zZMf@oGdoj9%DJ069S&X(@AtIZ(91Iq)@4oKRqv(s^gN7trJ_&5!A~;mVpnW`I(_^4 zSEn*!Q<@dghhN&!S$uspN*x`y!Q^e)>$EmS7nspLb}Q;U?A$ZCR3w=H;Nno_+Er0w zr@T;IICo$Vwf|-F97S8&bHBAdeLeP8m-pV(cg?V9hvX6CKN^n@?=#8P^zh?;emC(0 zq2o}q685z|!)WHtsz#%tvy}-$65D>b9l49$w(UE`p64ANX5MW4nmK4jrG&V5qC;WB z_=Ob_(Pf!uLVW5Jyu8-4a?QQw8}Tduh~~YyD)Q{(??b*3L`o$>@9`w*Lv4cjB zSP-@^L;DZUHsaU}FONVU))s+pUVOb7-Z{yy(*vHgljQln*l*u*bi1%IuI)xNGf%i` z`$}{5LX_i`G59Fsg3vbgEQqkVOgx*llzM7^SGOc>#)6^u7QWouWw75rVcVKseZ2N< z+J+Yw*4$lMydm@4Qt>*AHaXlEUQfD&hzs0gHn)184+*RqJ1_T=tL)O)-8&lu?;k$+ zO}43NS?Sdx+@aj6o!>a3(HY~8XBu8~eNfA->Ifn|5Lo-EH=-S$jjr zk%jgR!);ARrnZX9Zn9;QZ)B%SPsc4gGbd%CeZ=&B_dVyQG)gUulqtuaiha*4A97>g zxwf)yLk``MI$YcQ#&uFFudRE1iVHZrg)dtyFjGzcFmAsfoR)B>UueCEZPVvWYJRX& z{rO8`-P>n&5?DB|d%Bcy$uA<<_i0{y%WY>%PVZXdwqy1YQ-m-VBP_$n5zC+(=h3JX zD%Hy9dSteR+T6KxUJh}wXr*`RUCi8=*V(aGWi~a5fjiBJ9lBe2mTJV>p|`6GdPx@#a`l z-SxlJ@mL1Mr8ZC$BSg!fSRgEe!lGtSDCpcQ#nQ4DS6sU;aL-#xbKAaX|E!&JhRn`+ zbFhq|y!`R<_~px@Pv#aMoN)FIeg2d!-jzPP1n0&FKki>vEsb?+PUOB4Eod?OLEnKJ zZ->V2FiTt8YRt>WD=ytwz@!gKS&jw`*)h$5Vtdcn*=4ln^RoHn@$)Dj8PrK_8+V_a zL%)5!4%c~dc=A4`DWOeF#^|{@6VC=~!x9cZg z6Dy4GYcnTf^m44CyYeL${^d*iOyt95=Ro zSe(t4`OhZV@3Vd$atLb#7rWB!G20O~XjAhS?vqsb{kdIMr?h>4t-|cgS&U=2GlfEL ziZ#Yu4Zkt!XghsExEg1BC_Q3fHuX@cqdc*eaM!wYH_RpD*UVrI7dz3-Fc!uzHjYX+ zqfjZBC!B0VZ-zC&-11!VoJKp=dX}u#vv7>#Ayda<85AR9R!d_FopLdiN~hA(-_X-v zqUR_H)gOKSP_vb)s_isYN{b-Ml$9sl)wso)ll>CB-5Yl~bRHqfoWmXOyCFoUA%D!5 z>Wq#Ajaym57Z$C;VATqs(>3 zZ1&sqx~G4xkbG_@%#Z4f_UxJHS^r8y>iMV5caPrBbZ9tV*^xEn;erbEl0sI3RjP z&Y}I(%Cb}E%p1I4URFNBYinWqpaou2b~0>Mhb(K@hn_iRC%sEpQb32-DVaUWY?m#t z4#{q1X*9;-@oD;vYL&xvp9~}KuCsHW)*T-d$!1JEPED6gI@6(Iy7}{|d#0|oeA#lB z(H7O&=OcS3R-B~M-bf$pYvDP!>* zi;yMQj$qSfA!G^mB(&52>d(LW^RNE=t3Uth&!6hg?7v>|U$6MDSNzv2{{MwnJOLr+ z_8bvgDkEeLRBiQ zQ!gCiukbFU?oD=mL>1OX7$Y7%BOsz$J$iZ!L{tk7B(1C+QEiim5W|m-;6)UM93fXqv;-dcMT`}PAUwu`(1kIUL4BeNUDQSUtk{7GD>hCUbgli{^2{b) zUpX^a*DoU%`iKL|+UZxM!RwK3CY@$&R+~U%RD+9ga1KUp5Y-T19Gnd?4Tx&|AB9SO z72UWxtC@E7?&(#nZ#b6U2}~?#WtH}LIgLG>Kl9OjJbS72MAO+GjwdMH+H|?oES}jN zU%Aw!pZb-%$-bcWUS$;5Z7G7+4g{Nfcl4ln^rxd3eRfeDWd* z?y9dOo!7>u@<37Kz-y*69M&zk)#Aaf78hq7nmeeVwbsI`Wc`5M5rM(>6(ub+eaA|O z`Bjg-mK_UL-JV~G{5DkA4{9OXFiCOHJ~QD^2%&1Nz0+x=1*2C#ch`CS7gyacK?~2m zx>Y~u#goBrn$Ev-BG-M!{_U2D<1*`a3NB^_Q^?%INRKHmHV(1C4@NL0Eu{Z7?un3Z+bn z;Yi)s`|gmZ9=4fm%|=uI#;%*F5H);ZPPtwB; z&&w<0N9FgJa&v0n+nWziN~i3^skd(X4QVi-rPJEHlQwsJ%?I8H9lhk`RU4ZXDqe9@O{PC?Z+UIY>_^vop6ffv`w8ZR z=+|-rLz<15J+*4(i0PY+88+|!897|rzL*hV*0t}MQS%ObD(PMNBsJbODCfo0^Rt={ z?E8?qx5Kk{uY=`IL-KFo2a2MZ{^KuiOUXML+6U?iD=k z$+1Y4IUdky`+;@~td2OfsXNLfbK|=gLf2J;Q2Tpn6aBau1A|Z9s3VKquAJk~v~;No z?6hS{V)(IXj<;GpwKF_K7o!yu?FB{qK+6B&+YbBV^;`NBa^5Z4;L@7}>ZPatF<(%O-E&v z(uYuModV)z)~IXuHt>lZxiU&ABh*^>ijD)A_BB`e$Eu`~Se=#cBwyO~dSjhs zZDx2N5C*T0*}(#%skPa77XXt~a&%tZ`{Ozj4erTI(FE$+E8WKp(h^5i3nmOimMIinAS>2#bjZFw-ZCG4%w0VV1=uY97*^)bfn zQ9ASF$p$0$l$~fj$gljO;*imXq^7pnL*_f?412Pr(_+Tei)#m)iHwP~&ixwgw0l>u z`$@A)+O)wbvwLSo$M&S8@9Fx9e?RbYTUX^H(_6iRiiRZUuH2(QPPE;|&@7MC|@uz%+IHfOqj zVe^0Yf?6x$M*2mvW4VHrovf``@2_{v?Hao7RoNQ)>(o@nVmJGbfh|WBxo^90sOr_; zM!k-0jmsUZy*I0QLETNa67m+F=#n*i+Jq?yK$$)c<_sr|Ve12il zt*}>=a>Lbk1V z`EVA+YW3l)gR{7i6IosdD=y^Z#Fc^t3JSttfr8R7SfGCeTBn}B(kXuh`maF$?-l6J zrV^LK6-qEd#N~2j0-;RG=JN=QCzSIDp@_?sa^*sYQ z@ZU`HU{ifz66j5;G!vakMM0#U_;~RvqpenIHt2}a4>6x7>)}u4$j2{5x;ehU#YP*6OL?`bQTSL+k0=T z(cI@vJ~7su>oq0g$?Is>`LAw-tn`oWm3^;l-KT^HhgP1k+E;0s7hUMVdeOmVVf%?a zMN!vRX0!~CJH;5|d8IsjjnUQaSs(T{l(#<~db{5_zGhGS*`91$`54KAt-H#Y%K6s< zgu4cw4LH7@xpeN?ikRUGw_ZQhrH8wB#w%@T_5jKHcH^g)%!`=kxMk+jTUTD*>U;jo zqX8c*or=n>>f~$*ZnyjWW!Hvr+bVl5Sh9jSWY6hEhm2oeZQ|B4}@Cu5&N8>|_<=;WFuO^^G&jIoNynA}^_`cNt@;OJ7vy;D^> zyQBlw{#!fbOSgP;ExTmv)b4h#tS+DHpBi7$E%4Qo&=D6Oel@@}NOfCf(Uo$CC=?dP z+D$ISsz%t2IeC3(LFeH?-5qA_DosHfs!uGK(2r|=^JZ?)+Y48>HB3xNZoYh2B4f2? zUZLAN&p6e5OQU8(<6ie|86vun>G>(3@b2Q35sn4xUu@!W0dM1XHV z;HH}jEHbOhk!iWFZY135vyzrLB&*}G@X~$#{KwQ~;)7jEViuGG+Czq}(6x`guNQb1;RF%jFXa8JEB@iCicUisVv0&gXM^ zat!Bj>R#zs zwdBy=lgA%78m6qXn|3<4UTNjr`HN00VQt*=rc4W}k?Xxq=h}Hj zEXt}UWYESA5fvY=TYYb$T)E!)WQ#??GsJt2mNv>fG16~;=knqE*0eqM$g^vkac6fj zOt=VLq+tr5w=c5mZ0vqG+_9ir>_vLqjGN=BE4N%Znh@H0PD53}-sYE$Gj~VJZ?&S7 zjo-IwVTOEnJ_j@Yw05t6aDCXwVpz|?yX7x5*N$c!&p7!sB)D(Cx(z3U=B$~uHDpp^ zuxk4F_rn?=SvJ#SvG+gL<}+l)t6<6E-0wE%TET#!rD-b0$AvccOckR(N!%5ep4~Sz+eJ^Zb=z#=GE96-G2f&uma;an z`}!5iZjW3&gnhhSKD_NbZ^|q6oHo6$7t2}7yG?SBdM0fhcj;gh*Co2ev?DWbOBOXh zwzT~2ey{s`GzCkZwY)uC`=NL^y6!5koRjWm+XNdu4d!1>SKy|9<3?v$o6KPAt2)v`)~330ZxUG&u9zjgliF!Ak18IhD!B zg4=dmp`01G{z#J@P9_Tm92x25^+{UUIb+m1DJ#Zkie%q`uC`t`M@`DwwP4xuX4VNq z_fL!Y^s;1iNw--~?=h?&r?$8L*n4-Ai^cPt&HA?RUNj`Mk2JpR>dc_dm%~5BWk^mm zeAy%~IIUw~&IT{sZEHFA_NJ#{YwEOJ`E;;y?X=?I85?($lheAbZ|iY-fYGe;VSa;e^?Sq09C>wT{q})P z+_i)BzM^$x=D$WwmDdP_pTvLAoTxc`-d(7+H@rI~%BI)CXIyl^&J znZ_#i*Nju#cTSjkVBWeX#_x=WCyaYATXuJ!w|(Tj!s+L4kF#$bWQVcM-rySk6Iq#dSbwdk3U!o8n;qu&du zRjG9M+@epts`ho8NxOe^e9^V2)K5V^gy>H zf!Xq@OHVI$J!{nZdf}`iJ6let8dD!7-h1A5r1Z@5HT#cE9<}$K?-=jk%Q5A7bvGu2 zZ5(#w%(eu-4MkQZ6Q{o#I&1FU5oF-=?Ku*)p7)i_ogoCc6Ffp{KGjH=k&TXs6o~M(H8;A?@h#CjWlWh zgbX*?fvq2H*T3;ZXN~xZLvGS`uVzBGj&b|8uli8=>3)aGrRz3QbB*_oX*blg|D%JW zPVCNU)AEIB>k+cYr`0v&o!hBa^4~ojllP zx>472h3|dVHQUs|C)~_wexE}ALdJnvqb{}LF&8YZoU9q$V}0R;`K+L8GalzSACRBy zb#rE0uYcri*qYm|CKZmB9(^voIZ9hH_E}8faNEp{A5+&k<)t0y(_qhbQIb(vf3~2Z zok;>~R=c&L&f9+GDf|_gzampBrf+!h<^Oe&(IsyGwSE8EzJG1szqarHcH5Us>kvpp z3XCUU%cTOol+VX`QaQ$!aHU)VMoohD_ft0p zN(YdM+7`H`_QJ$Nh>ZBu`IiaWo`&oQ-9n~6JG@I+Xqb0cCvP^7&&Jr8k2mg)e+~5NX0LY{x9mZEHF#@CE7#-C6kpB0|M7GRf887DIL6VZZtF5SFb-Q} z$ldP!TS+Ax4A*6jv@p=du*&Ptb_(wj<`f#{?W7}+6Hv&>#~c5pUv&JfrL^m^9WvG9 z$)P=pJal~eFyfOoxw5-aq+DQi z?}xnKQM}s?tLpLez{_DXZ`r)I2|Bji@`de#0+(mFOI?X_a+B>TS7tW4HB3>E*fB?Q zcvbb&eynl5eQvH=FSdBu>Eops!Cu+5QooBOzE#6qKTW>h&BU?W;>gDVe&K1YvWj0> z=gzF>MZ3RHbWLf--n-VeXP4>z9fmGCoIC99`JnK%9cJh6rSD75z1ZpY$+|aMjF|n* zC*f4Pq?j{Z0t(#v?=#Q%anq1w&+WL>-+hTwcm+PGURkqDD;6?H0EabjZsG1>vOzSGEKr4Nmp3=nyaXzx%#VQ z63EHYd~xAdVg-3o{%nvUtb;Bkyfr4m1bMtX&S>0l8+9z_x9$;(wSjv$(fJq`Gc{%o z7~P37`co{Gf|(c_!OQZLT5ru8-k+z|v}j)mCh18|ex7iw*-Yikq1sPH@0$z>D_DJk z__RIOICtEo2%j;JgSzyHT)nq=laZ50?=#h%U+1;Bye?<;5s%KTFD-wg%4+@*Yv(p< z$NnutrkS)_J0>QH^B8pxUEh2D?QN%Dmff?cy8iCKHcNFnlOB0$=6nx!;-ph^dY$cw z4;N6<*DK~F{kziZ0#9^q_TSpA?~ z*|m(<4`213>T2%RBBybeqYJ0pJ-=nu8107Vaf@e{R9@IMs{I0!S!A-c1rFs1$@jrQ z$r@5!{%Sfl@2{r&tLZ%dYP$amG~MSlLzxg`^AsY5jL%cZ6*3V|%8^NgGMPZg7f3}C zo=_m=u>}H=fFt4wM7V&<=O|=CoFm7id^S%aBJJw$&DEq`{k=I_mjfhIfCbNIOL=^Z zt>6kIQXvmx%h(*5Oo8#qmm&X!<@KWsAc^rGO{(_i{4iOlCaJn8=zTY^%-i!mK+2Hr zQ;|=>EWhLO-Hd7)e2H$M?n`uxV^p#hs_tW@4GpHJyUs3m2Mfa8pYv5(wGS1`pti#@ zD8+gs+^BnxoiF+?;qmq_vA9s+tHxNyj25Fiooqv=(f;!mI0x1ia1I9fMr=r{HY6YM z^gsVQKuE$YjZH|LsT5qprDD)Bagp-u8F0f%GpklHXq1P||5h<-+32Yxv&B>&leU<~suq z)*dZdG{Oifj#lq{5!=qH^BH&1ein14=2aGdLRQlqce5sjWGezX{I^dqUxj{j6U?)p$9;Z0 z$9(0Z`g6j&g!%gTgmv=f2)REC{S1TE=u|9&T5SmZxP;p`jQjLnQ7*r=cW|ejwe{G4 zhsuX95&lQxJ{&UcSCaq<9YV+~!(d$k{RWYw6NmFo38zti?fgQYf_VRMS6 z_~gHwbe!^d%VlLxnZ-ZWIg%&V`5RkOade|-mf1TK>eUYK=qF2+D`VIm@ismUvP?|o z9N62~{prb%LsAw5Og~JllCOEpx|@>qvslGn(fli#h7cu<`acll{C`_CKU+F{k%*A< zc~ZHYBj*tU5hf7u5NCXlNnc4`Y=wd?lu9wa5R(hoQVHo? ze@}gr&h_`yw%)mBvw2)xh|BqMgzb*_Inz5U3!uKdHc z&u=VyedS!&eChqoPyFj2eCfT${QJ_mX4kxrGZhS+NmvFoNpIlL#Lw?8ue%~|M>Bb0 zL+1NCUxm>B^EM8-w)H>jS+jq+#J#Vkrx>|gG_L9wwE9Smpu0ww*um>C*S%I5V&zwcas&_IU6>*?&uQd z`|Qn%^*PwaPhGlCXxh1_&CrZ_Cp1&f*>*NIn-Fp)+mX53ZsA?$qn}3JvD`UwDeFK~ zvo{(Wn>Kz)`^VUfb>;@GweU4t7O-&pj@;rx&dBDOzx`HF?Kr^q;$&a37r8<+AgbAP zRh>?H|QLZn1qj-<9_PonpCo$tL zS>x1Y)WMQ>yqif^%9eH5ai}9>bQ)jl7I8J!+@?2g*NcGbn;RY3VD8_d&1}ydeRpg+ z?{sr^WSC#QlIXe5USb#8;^h-Z&A&D7>eU%-dDcrKpH(J=B=~#R?O8v#D0_|ZfgEc) z&jyVbB)%w|G<%`Sy3l)2RaT3`T`iruUwUcdd*?>SR}aSIu&33j3iEs4YF_ntmu-Pp zn7&I&mu#KW>w1G>p$jJU_Q^_LGQY_M)#~f!2L;0()224KlN_1!#B1V#em(jux}u2R zz!ThIZ~j@7;;+1Z`!e!hdHpM||C93i*%XpVIWn14D&S)roZt}{&JikvaydsNVRIBB zIl&bu6fzEv;BsU*&gIGo30olN@+CZp6qiYPx(_dYPfgYe`fxZB1y1lK0vwl!B$!mn z7V^1L9GAm~9SPo#-z)Zq;`E~hp^Su3O0!J2_Z7Y@rOT5Ss2($1q( zbn1BC&L?d@)F-3$U%skq{O!BEWLX6=TEF;klZZ(RyPW39KF)PLEMC*&W!E0H=}3!0 zn4F5GbXmK9nETn+-Kncy*>!&z@uA|*8Iu*OC*6{r4Bj)nfdx-&>yEvwpXJ_u@uo@r zw``?i_50slG&Hkp_qBKXd5e|?ZRr0f<4N)BjM@9Bce`(ygz=A320d<8bS&O^>GY

!4yg#)%R1nYs748i)pL;rvE(0|sb1kP0`WD+?~ieYS?fP-TgUnY@oITD<;|oj_#6}1)O`z7GMicF>P^pt8YPmALrV!;5C~<}m zd3-_-Vw)nArF+lYP{WX}ujT~>G-*s&O@*?_RH)2Hg;HKL7D8Ad+{OeRq1H&C_#p*q z1X3vIbgMHJ?u>Z&p!HQ|nSH8JGq1!38TieurT+e_i8-0QE{+I9 zdpI9XXml&?bbaH8D~Fw*2;R_g5{gopC)B}EPLVia{qIbLp4^TdVfpn=r}QymTrvv~K^S#oLDzH_VG_T9Dsz)wJ36Z@mMq z255Y)kK?zbEN8XU=Z1V-IFR%Mn(CtfO51>1C%g)>k57AsFEI?b=Z5;D521a6&io8(WJDDGb!7b_@WhQ3%hT1 z+wNN*V4%OZYkKa@rqzQid$>N%_;Bz+LX&<=9vxq`VO6ySF3ymh zD%2wF*)=rKKeTK25GeGhmdKTf8h9wwakbGu6pl7zEypSboHs&MWHO5dLMU0OCSnPV zCPA%IC}Rl&ysz|K;Rr>eZAo~mtE;O)@dAaR>aRJfqBPbOhlK*Gy7&1RP!O5a=YSIv zs3m z!wyRPGDxC?D`V=ynL4mDhaC_PK1}G0ppr66gmHN|xmZm9@+VNzL{2CqiLqL;rYls$ z)WpXn)D!?-uO|o`*P|e|Jwo|ZvIa6)&l!p#LnGCiBor0xWI2#EFj**wZ3*R$9UWOf zx(2#-H?o#7%yPQ&#h(jCv%adE3+OosF%08Kgfff^U#aIy1#G^8E9c_^j)2SO3828U zGc~vi$q?P861+t!1z$=7%C5g zO<<@>43>eR-HB}L3Rs(6%7iR8Y>dz>Qe?9zr0`P6y4XW?MWBJ($hyo>f0z^p;Qt2z z-~-@6oA2EhO0`PWN_iBKpi*mVN+B=Rg9e1j*SCQ%hBl}dLmNa|UlkTDqaw6aSAiLZ zg8~B&Wo4n7EEF`i*GVtMP_w%MLLhAyvK=UjFFKui{pVFbu8ogDrA|3M%r03`LNKpFv%v@X8E z|C4Z10Z!Ua;WQ@U4DRmpKM5zzFroYuR1n)l5N% z0h{$VXKYY)76tXALTTY@N(_~Rio!&Q@()53P=8QX!wJFUf?ztL$f*c5LkKCTP-?oG zQB`e%EKxO+(wmByj0h@XqW)CG)J9SfVNkvRYmQFVpnd)`4Tz>_j|E&N4B!f@Ua5ppEzh{{1 zj)%tq45W}6qiQD21XVNYpei(-f}GJb*iEK6dFAPi!wg$9w5)u-CYM|JSze6QpVxS%{F)-}^5v52Xk@WdY zl^TWx3j7H?VO9oV{XU)y2AvMV2sR1e0+Zl(_@9)R&msUKNty-JuXx)IRpZ89GwZ}J z=X+Cv*#DsFJSs9p$;x=CD#e}S!Nr`BR+iu%r-^E&JK0=J4qSU2^WczwJnUOV@^AT9 zKO)Q;VgG`vzv5yNI}+Ijpn43tre+?d)G(&;57|*Ct-sBT-w|dusCf_yGq7(|NeS_u z8bX~!s15#wRIkzDC`Cc+vk0NX2%+Z)QH~o zQ57i>x0N4Gfn9B)PK=LN#z%p1O^3Sx4vFzfS*&NAN}j0mnP4J<`2aRJHbOycD(MQq zv;)jZTC4yhO`%Qrd<$8ul86T<@3%ZQnDpQ+L{FI{QmN4-5;gvb!2pCK5FcV^6u_Ij zTua0y#7eX^?%j8<23wK5S|cM8B0mEL+jl#FAE1ZEFs|Rd4tOAztxfof2eQaJlP}_- zEEL4Prssik2%!rI!Dy4bu+j*jV=&4(o*-RVU<>L=fa?@OOh;f0%31gcJb^C5t^{`1 zb(~XO3O~wVcLnCDGhmK?_69{5m(Ss0T($@ZtX3rglXxnWv05F+{*E&Z6fpEu>$&20 z`qh47Lab7w{cZOhXdO>zJtcCvT4V5{y!1o`2f@$=lgSGOv4IUi*RvcQt4aR^jCzK_ zl_J$7Rrhb`PP%-g&GtoK1|s{WLf=&A3zHv%#XwZDFN1V}KKEtmfdtYJ8u06YYsToI zgaC-44d`U*&rhSk`5?9jX_i@{Aa<1Ar=o!i!K$Po^nr%ZM;bz(Xb4r&5UK{0={kRf zN=JxBM~F^G$cU~Jz-KfB9LuDUq2~XOy(@ulqdNMtk`Jw8=e~hNj)5c)JGNsxP6$VC zC&W%d62j3IWNB@S$dZucIHAyl`znP{D1;IU6dLZcrG*|)Zs^w*N;!H_deN36q!bD* zV1K{=+qb*#$*a{$u@eZo^@HCtnd?mpt}K4HSj0yfS7%A;8nsaX`8@~9ZcnQF)Uk8xZ$o~n!n zQs;29{i|qsV(ms(au{EmIQ&HqQG~-Mdx*Zx;h=};G!A2UJ&VI(57Fryj(La{bNEyb z(XkvBMeCJGL|^qb*M`_w5@gp_cHN(Pt|$7zAfg8c5j`}B=!b)del&<+t}=x)P9J2L zI}7#_Cc(epgZMAGfe+>MJQ2ng}n9`V$eXYBu3Mgoyr1L{}?BTNR>f6ryh`MAs^8po8M0Zz%+41U*+wbfZG_LNU>| z6{4FIqMH>+5&SPb^c{t0yTZhTZdG(nzfB>!Lm|3TA-YQ;x?3T-Mb z<|UhgTq-v5sAQ2xx?dqhlt;+k4-`_;WfJm;aUfkL4S9S*k!2F&1I7t1lZq&lj6G^~ zZU2oK`uEehiKXx4)x;$894}dt>9Lhe)jL39siw4KnSDPRv4K|*z4snqkh!oQPPhs z5JjdW`%@luRjG?#BnSIcuuYj=3LWTD|K(zvLjNhSOQH8*oBoXJKiHpkwkd2q*sbZd zsi6OM#U51*dz9UyBM=jXg<%{ z#e!M-ZBy0Bc4v_2GQ#zGcHPXbSF`Ia?0OHJk+8LO6`8IMMY$Y6yA*RqHecj&spKh_ zO1fMcbH*I!i?C14`6BF6%o)>dQ@i;hY*o=V%`i_?gn6QBsKNddN_ZUXg%bXU0TRj_ zXNj;k>)*u1-Fy+V!;Ip{tkI0xZ;UlNWa4NHhQ{nrFc~3P2QONF%>0FZn3SuR`-KBKHW*BCB@n0GvjPgkk53{Wb!IXksw@5*qGSKN>caW3qpOCsT_65 z(`62BKm6aLijO&D1cNkR#h1+>b>omR6&{pbE)E%&1}U5|eH5SN9c3%%^?C%u3;Fp- zeQ>GUN|g@|_D{QD!6Gj=oih024KMk?qp(Twok_@8xSz8U6sCZNO=>wy1z~{(92sEo zlvQl0zbes%Jg&)1`mQwE6*S)z#8Z^o(@ou{%iani_FvS5dq}VCE(y%GL?P+3&#nYQ z&g>-+OIe>u2~=0WOkFWhvM0)kAU=-T&7UTq{zb8bf4-JTwZ>BZrq!!g2m-y>+gvN^ zJ!HVce_ij{FBk5nY2RKgd%_Zgsr8uCt^d{pnUBR@+Mo${gS6$d^kApu)RmC2mHi`Q zh7rm19P_yd;sE{TjmA4OsWVXqMbSLgG$QR(*k|8}gr^a!?&%(sUGbdomG(ZXdN3~2 zSM}_SNW-Ild*_k8IilR#LiTdtvIQk-5^UDm)8H`)lI{H@^4JKbe)uS(Vbb7 z10Yp!oglse(j-b(u2Pl0M+=@SG2|u@=IX45$q-0GtqGoTIohwL~PlCYb&x4>Ry7WOmuehGYh5-!%t zp9?ht4ef%Lv<*P`%V>E}G%qS?bXV-#$X4gGFtQM_bXD}oOZMe}4n8-S?-uoFg0(NC! z&14Adropw?o?Cr;6SqRc7q9LPr&3zF>51Xgc!a@LO?8Jm+riga8TLE-7*^Vjv6~py zXV0+e=ZIl-t9FAcF8wUetvfp~Cr}~%?P}Qnsbpz}h zQuhd>4z_31A)hx!RX3*GI;`&5H>B=~A$5p7rw;wRaq1A=R$U(sX)#wOz&_X29^u!a z_WU~R^Tw}(+LNh3Djamhs}JlOTld7+I?SF|hkxF9b(B7~b|tk$FcwW|QFoK9eGb<> z!nMQgxpu_ojcbQTI|9MZ_>5c}u5Dz*3SO&_Vx-VOyebQoL{hOLWL+D9%-tiU*e)Bt zubR+Zy@@Wi_-p?4ISQRIBfK&NBJ9S9#F6%bF=}rT3>z*i>a-Rcz=!;Ar!Yi`v0;4l zjhx*p1HC>?+&aphTgUF@+*%S2Mq*td(<}zZ3in)d?R}=ntZ%}?_ADc*&0ZFs_-W$W zvG!a$Zg1jRHafNif?8`Vw$3TY7QE|gYYm2~qME)33ai29Pt(R~SOxm1+IO_w$FTzz zP&>|^W5@4J9Gk{z;6f_`ywqT2jJa9ISL5X$?XwEZ{b0M%h8=Iut^4og+*%flb;c_r zS~L}?N_1J97o^)+dDlp<_vmMMmrag4!gkd*Q2KE{`cY0 zIs@TIl`u!c=-lT?+6cbSgRnIE~Z5jYaLT_2RJ0|8_mzVlLKq7PfbL z5MUGR!Cj4hdrqCy&z!mkb~WZS!VXEyY^-WaCgW8C3xlQ8AEa^pBcH>$Sgssvq+#jj ztOt|qIk#fKIM+(BvfK8Jr*Rt?vMdk}SA|+D!*R*=CEs>E;y$x)#5HGUnRbp15dT)# z@^8K;4Y*6(u?JWjfUz-DQUjyPZ<`grNt!7Bx zVNTUPB?Iw6wv4PEyf+QRIdSnAZ9^&%NLICLsd%7WOU50{{Xs32*UG9HtB$W$k>v7^J zlC2?sT^&z+hC|{ExPyr5_+hpz_1pzSW&B(*g?d=tJ9et=+PN)g!QznC7K}yPoPGoR z>^IBg-yl&PJJ2*9Mcz5&xjTUu3EwABb8Q**;5b><@;JsC$Cx6ior(;0IM%sGRd7rm z4kJ~O1+NCj_Lbu}%5o&LEBA$?DJ>DzQYZil8|aFpkiiaw!|_xD@5qrn(cY!}yh-GW zyPX#Xx9;F@0TJ!sFcR>U^CRhzfbUIyAN9J6!$`n)H;0jc?{N+z0Uyp3!3W)g!;tYo zL)^(>B;b3B!(crFM)3_8Y+=wsB0HnZNWk|t|1A>m-NWILNDjzhB;b3J!(dRHe~FKn z6z|U?h%S|q=*l^8gv8Z~%~_jLa=a{OZDvf4ha`GPkcT9C!daUvf$pD)=r8;{BO{f( zm@qH>tWBK7X`E+tgF=c^B0VI_yM-sq!&$nyoa={kJk!rLLY7Zxf*&hHKjF#skRA$W zZ6Zk^66`(Blk6c`pkcZr3E&?{PrS#D)7+(#G%=EStn)H=^{7lM&E9bk!L(d^X(oFT zucUD4!eu=!X$NRZ$7Zr*d}k8*iWH)=@b=k6>QR}}nz6$&oio7~rX7c3`k1|5 zODr3u^r^GCm*w=6K1t6oT2}JWa<)GZ3~KR|UrVL}t&woDLkmqyXgIPvG_5O|N+9iD z2J1toKn$OLT^#fe1`+2oQ4WK^PGDS8^r} z7sbHpVJFIiUA%TjzFVb3%|@9u3n77FIJ!O%35V|Jx1wTvLUB>lD|k`a8SCt9)Y)cH z3$hn=v{_W%2}|ZTuUOx(quKPocsoOX)SlX~XCcR?7k$xi!qJ zWnuPOPDroinguKTU@Vp}QY%*s>wH(4NU!ZA53&Dl&fGF;d!s@M^q$zSs5Qp85>{ce z{)J}Mi?Ua}I=$)(n&z)q-%vR}64s(Ae>|bJg*W&^n5YL*;aIc^BHsfCpYVCJU)iC6 z-cyMEzhW4%|G6|&dIOowQY5oQarU+uk=`~-j$U|Izg0Dzhs}Z(qo6a)PV{9j=-Bjv zhT};s=%3qk_rRCdhtk%XrB$<+cAR}_7p_|Ic)t}FM{ygRU^c93>O#dVZ%Ov@_EAKE zNW`D&2&DX-fmEhRDYu5qAjN?7TQL&>0Y24$~BjoIo< z>1gY<#Ku%dINI*lB1z33jivm-SSS8&OT;?;%jUK`-ETEPPo(Qk(^Nr?2ATa)nyDtm zZLvgmAQ8&lG`Mp>>tWddrDi3{+*HEe3V5pD3XAmFXn3Tqh9v+oVC++7mUFP1a!!^R zCk}HfmGpOqQyu=+K**m=1pP3zkayX%yZWyh$N-Mwf0s+NS&hMFHHP#@HA2Z0s|GuD z(=Z?VuNoNbf6RLVy#l)o7QVtPe2k&9&6*7{Yc|wP&C1OVO0)&*8fR7O65bJuS4P5} z;nd+ZyFqCUWmPZ>KFm$QGZ>fsXR~KivBOZ>i_OvwcT?Iv)s;Ow8AnRAj4-k zDr?!pBl4>3lA{;i({Gi{*e@ecRLk@k>87X|jh}l5zPuw*Ud#9y<)*xu&7UXxt-yl$ zV;R7sY|Nk0Zc3b+0rbm$t3^fwXf%^t!2n`wscx#0yA_ntvCZ7dsf}?hxq&-mxAG|w z{Gm5;82(TLhClRXejonO8#w&G-rnBr9R8@cxA#^Kf85*Kdkcp@>Fw<`e39@u8aSgx zL|eJ@cZ))5;pGbX-Y6u}hqxFK+)2muJAt zA1S1ke5?>_(ogtzk3#C^UR;j%kXl=*kUFOdIH%+7YK7F1H46Fu;UzdnP2cg2c^1qw zPz4*Rr8=008!Qd)cD^O_qJ#wl&~!t)!wD^-C6h)8Z_cv~3s6Gu0F-bp0BL>f$h#0XK12T;e;>54xFSmxU!h%CN+z;G8a; z&z0{I-|zSmAC~%rB|dgaOZpNYmH{&@@!|X}oV_J1@i8~^w-r)uQiyI=h`ytkF6Z=p zCT8%`oeI%iihfqsJqppi3OgrDxlhqgb3t$u;-0bJ{|7>pKF%q|5+9cSuzYBopM@np zoVg_~@xf%lk|34^-$xzSVN}Us*d4kSXtt>>TcDL11XXjPT9&Q zkM5;lbM;ry=)FWc16ocEwPgp1(K=Nhzezf zEKJ(sV^_3P1|ks{yCaWXuxd#(;BSj1{Bt7_eWIC3jh?t`GRux+&%xD`i_9v5t4BdJ zH+S_YS1UwY6_TR4Gq`%_+X|8B>d7FpirvK0aPQzq^xYt{ESANPRmLm*n1>|)6REU9 z>_g~Lif>A&Dn?r>!MQptPGc7 z2tgT+1r9`?_?b7y5J)y4F2ktEEEV^HsLvqH4V`N9s#X42)W3Ey#LS4}y3WRjlY{Rj z7tz|M4jm?lMn+pf9V-9wk||<+)uE4cH>!{Fb)(v!rj_r8=)FlJW{^EeBc>@UD78Vy zu4wVMXsPa4Vx6h*TC`N&uAF;zkK$8aq@1MFb{kV3YaDJBpRGrAPbfY?IgQ4mq zue)nEjt;zjHmGlhkvQSyd2NXQP$br+s%R4(Jl3p+eal!SueQ$r~irOkBz= zRi4jNN3a~$u;CDPQ3N%h;!?t9BfY)D^-bSBs+TS3Vq; zEL^2Fr(YMQ{dz`Dzs6=(m6cnkU6<3Zi_?BxzbJ=#BW8qcm}le%>0Mb<8H{&f^Ek^d zp!Y8J^oQFK(1H)<<;M4)skwG+5mwX-*mY5nafAfENtskcR8d6AkRnos7LjsO5z);> zM01NsnO{WogCbJtL0lfi1wosXEMn0tN*Dj`=HDCn_vv`^3|!8`<$PQ&zy)nld=Vg) z0N_GEEJwf}3Q45}MdX{N5G^bsRrwB{ZO7#fT<*l>E?n-$g{24J%^{@+(BpIRiR{rc zL@ZDk57YN~GE*J1mBBC(A ze~?he$wb%!&OTF!=raD!p+xj04o@SZW)6!{O4E-=8}3q+QZDmr5@I7;TwqZt$~G2 z)Hm%28woCPkU)eN!XSVl0HtKC?Lg5(!6P*FGDQ!?g>uWJ)C6Vbm{liDnK_2s-lvdq zzaDyAqRYuHR0P>5kd;YPZolA}kr0}U^=Pb1LxKOA zn5)lm#4$pdVI069FxI!AKn1_xoZV@e1p7!yJY<{ao)doXLBR%|YU z?-;+7?vKvLiWLWdTvVdr-|8#h=-Hp*X(lwt010SLA^3YzK-pm3j|OXoNQrz7K;Gj5sw(}WB1@zh zre(sivC-Y+l9{J=Q%V@T_K9L3_IkoQL{juk8|*HyFx`-a&NPf!H-;SyULJHP8F!Z{ z`dY0Kd|4uZ6dML$p2o3j9hqsmn8i3&4CB}^jMEHNC6l2FZ%=>gN&5(j-4fs1 z|CXu`Vz}8+NqV!-AZ^6ZNLb1AJ4FrY9SEt+aL)R~-QdmHjUg14H%G}7NSMj# z%9Nv}xuD%frkktCFq&qRy7S&3W+{{F6p1@MIcItY#5ws~jTt3Vl1xC^oWYV(n`Mn!NUk2?iwFyS zal~@D?vq#Dg}F~&Nu@kfEsV7H1daNv$!o!0Bd=>5^sAsL2kdAAWBxc0c~6jPF8z1| z!;(b~lpGgg`dG70+EQGMf$vrH#TpAAPI*uITT_m*m%PcJHObrMkKhNoUdD57fHj=TRJ) z9u~beY(VbEC5^H6;y7+Mi6dPydC!Pr#%-XwI2uC8=7okNvZ2sUaI(hFu{mK{z#LPX zmT*5{3ZE7GR%E923i^rtzspDLzb>HtER4BqZuv9`BR03}4&6B5!Z^-e7{~7uMz%e+ zuP|ET18F)SO*bZ!9sWcp?(YsqTVorTnuNoqc=a)BR;^yRAXjVEPV%p?ky;NuK7!c) zeNu{anCTG!2qqsu3wFSzbiBQk?!UK7X%-7Mv&xjEbWEC*29hZ)5l*HD%eix-+R5aF zQb>RY`|#NR4C%jix67tKG$&Hk_SpoI=BD{H%_{rIq~T5IM@x1;d$BCv4Pv<)*B^am zEI>wavJ|PVJ0CBJye5%YFc9$v5?a6?)l)E7(tf3_ax}y- zt8!HGh-2LoCMTiEp;BYPiCZKD33 zgGzyPMgZMFE`H!_(R2Ye7C+K7YR+K-@XsQYNA%Ic@=f1Lnd`!b=nygmcoUI=jPLkH z#&>)p<2%0dT!x%rFUGqg&-89osa8l&&MMUm7AT5!rQ%(?uoUuysVn!1yFt5t#>7&O5r=PRdU~W?D#mTsNGuj_4FuQurywil{JATV&2w9( z=C!DDo+-qZ50~l8&%T}<$aPF6kfM$>b~=i|0lS*zw!im+`0a)8GnLi$OcM5K*+tdm z6idgJrX(*AvrY1nBx@20;q7wcTRnC4U~edj_%p z`h;_@h$`qW|IhAPIq8#g+OS&tYwKjWy)+)Wcd0}d(FB6?hdF%=c{D9mOC=8F9-Xz} zgtoXVkkEHSVuhpxdG%IliS=3{*F}=B`r~}C0a1ZYv2nXPO*E3d55#Vd zN%jIaXg3I4zebenyC8Q#_sKi2j3r7{57fxp+nRaXqme=ynK~>jXIPoLBxspVR2V3q zjB>3)cG=n82wKj*m`ocVch%NJwh)^%(*3UC4zd@x-J9^T-!gOTg23rXISjqV1kT#H zVHun5)(>H48WIIdv)s&4%g#uM#-hkED`vGt6i=VS7Lw+%-^d0BcEDjCCH$}rWS1{N z`ohVD)T2&Gr#WR&IFiy5{$si#8m6WC`skv0{y->{(2`02vL&ll`)B*7N?AHD>wo#D z3@54#l>Ac$`FCU8x|M(PM3n(nw9IEb5UK5^*vkFxN*CX+y0)KU(k0PncI~dsGe!BY zw3Wrpav}Hq~jn!3f@sj#z8fnK5YAam#bwMzG)oYUbL`k|=%k@l)c{NuOTkvs0u$wVo(l zid`~+UA1}*i+3QVmecH|>Y&{!RlArGau@7dM_GdHxXWve=?UA%Ak{Qddh-MA@wwE) zzS#Grp61#w5Gf%dMI)j%A_Y0#hZ89yh!kX%MmA~WpBqd18Se>xM)?FHWg?P&6Vbs$ z%2Xod5F(|LCyT5jqFF>Vn}`l0-$V(`fkMLTbBR*1R`H`7ativA#L=oi5?IiO3 z!%Gw;^8LP$C`RP_>p?_uBK0UR#e^i^*5i9mVJYp|cL8v`bT(3ov!567?_&P#3^3I`A&X=XfW`tP>`@wJr3toAw{=}%zo;GXK>jMbBg_md}GHF z9e}s}gbbAGalgci&*2V{$B$-umPnoRGu-j8RLrcl<@`6u-vlqAO2-hPSJ`K!0525a z1p+*uXz0I>A3j$hqIpC^ZyWwEfS7ric$Nw95&>=!;3-5y&w6qt%kDp!Xy~uDB7Hg0 zfxBQnJGIVMErGP<;Ms%OZ&4q@uh?e^yWd=kxQ-I)VX5Rj#`Y}V zP$CcJe%`fnTPo7tQt=jI?ih>VEtY4UlMe^AniH`8xSK81vIJBLq4 zN_JkhGl=LV4&O5YWVfZdn>3Rr%@E&Ww7sq|tosUsu^dE+%!@E5)P^`AspY%5RHF?fo5~ z{}z+)+r|7aJe3rJAmX)ANl+{*`_MhdpB<1i_0&3q$;^*}e)31D__P&7IzxI*peG!+J@WRWuyn+Y6#pQRn{2rG-;PR?ZAD{oozyE}r ze+G%a_(cJm4MMd$T-MzRJsCsV} zsSwQu8ivQi@ni%pBUMss#{e3qlIk7Leo{a+MNOBUaPkd9d@7Y!cLsv9t2b0nuij8S z%^&aBh(D(J1NHp7R{z$tcp}ybc$7-z^tO-6=^7uEm)12lE~=l~P(8P%deMEj`$935 z)1y8!mGwWpCOwSM1+`Umi+?W+XP#`sS*_i0R#R;^oYhogIP2OsoaH#24N>U=g$;g# zRl2~-hI`~Wuy16*p44RDI90nWE?fWrW%{?8oU6c?l0(Ec6W zYO1r0ZbLD;dFmI>Q7luS1bU>?f({aU+>V_|H$aoxAFNv{?!AQtC}`u+Vk| z&TYrf`{IpOXWMA?wvAT*S!}dXtkGEejj9q_snAU;&ETyx!?u+gY+I?}v)D?btyUTh z*77b}*dn%8k(<`4hX@krLo1bHjGum%!lvV74)7)O65&w0R=I3$3#$CCkp7TxC6dI#2mVCcL0D>3#a1YoV+1EB6VblNcFVi6!oE) zCyc|Ie3xlN>xq2V28p_fe7~+H+Q1!O8;N}N zrCbBxP~==>Ev5h6PL?)Q(Ng7TsnVn1Do})$@ z@yc+t2JLikbL}&Fs^7E^*6a&uPhlqYlg!5ih`WtHgI-q~x@+L0N68UZ`WCzap&>jH`T`j?Stoi)X4NEnoc2+iYL#Stq)11)f9AeHsQ!q}1( zXrcSEv=B=Hi%#j&LgdgwXeri0uMqj}ssGvSVoOc1X{nOtT7Pd3d(~_mEU((N1Zq9P zsI|Y=-yB|-h^<=D+9@#NA~e7<59C(nLQf=yY9G~H3+aRX1D6oGJXuZhnY1x zmol!`!FvQ^8$oQ59kI2GLF{Z}P+(3W*h`FVA<>&&@*zC>4KI~XJFV-O6}`O^f28)7G^_yXy}BCw{PSdBgEdf!gj>-HnIF z5;cd0lZ%$ursgM?EM0R-|+pOtQTDV?IbubY< zySesFFMMD_sJZr_-X3)kTg%3~|( zL2utjJo!Ss`0zv*_7R(z5V45RWiCmJ)cc?D8U_?(P1FWOULzx z!=R>d(Sn(E4GZfVYi5}a16@a_`$XAfZrn@4Aa+K!LCk(i60jY_0vN>B?;FH&9K;6R z73y+;%iszfm|@N5(hr*3u%`6mu(pd%(7k0?)19EM$F%YNJf_Vx$FyQL@2GFL9o5Fe zLhFtMgKg~xawjBK!|}lrtoY-D6?FqfX!ZhXt}WP1O5tWwJSUS{tPCa9<7E)_sD;Ca zk{VY|CZE3rOUXUuzF=E>Wo>)MX$3=#nb49n96l3=4>*eY;1~oP_3a&}RR)4UV^l01 zQK5;b7>J6U5Jg2qSR>clBGDDms(E{yz}o=r@kI`!Jx=DZcxd_*h3Euot{uJt3(JF7 zV6g@(<)!Rz%o|Epkm?<@g5VGAQ45FQPlU4<4O>CwG!&Pz6;xh;wxSiL1&zrPeK8F) zT*fw-i&*oSn2Tl1#k>X6k)ND~9DZpViXqeL{qv5tTEn%QS8f|>^blNO{fVB!jE5IrRh#e}%g{}7DXkz$$ z)R9F*<=)!5cEnypV(pdSrX(V=5VSCzV}0%Tz z)&UWXfG|QZ7fQsUauhFo6X~ymjP2`ajlQp=gto7HZC^*h(_i<16${wwE2Xk~SPP;( z%BY8hLBctK@)t0d5D_bpU?>&q3U*Y+ z1MM2)0XOV}l7j2pvK#ubI}%K47$)%}vS*cNmM9Rc!D{88TJGygYKh8-7D7lE9_g%!M?;g{;Z(4rx-t-n;Eg0|*_zZ6>p>o< z5j=zszQ^%edWaO%E(8fiHUo%aA{?Kd2*=lH8}U;&Jb*?>XvtV)y_T4sOa)Tm;1?8~ z>WQ2xdO5^lw5<5 z2$M4IBUEY)zmIUKV>paM!JK8P`G<1k`P4H%=Fp(qh|YSdj+jz3ZnK5978P$DCc5L~-?r2;lb0=1QlPY|i8 zKs6qI5SZyeToml8W{$#R4ZpH)8B*u9XsJ+E)c7z7HBpaCLmi4HtJ-6+_J{_BJ8Urn zD?`zwf60pVb^aPRGz!=V<~3<}a-&iE1-p7+Xf&JX#7BP223DU*Ly>6=iY9BSx}sXD zs++l4eOR@wT+p(r*$#Jl^Phw^Qcc_?X3ML`&Rwv4Rb|VX`OF+~g{&3GN=#%E(vdA& z*us!OJ?Oh`9T;N`kPR}CsdBA-j4_(SL56U(8-&LKVX295kc@B;LwLLviNv}Y&ZTZ} zmILQl6X$_ujf(=E$kEC$9q$Iy1YjCxVwz-P8qyh#M6^T|v+S!9YyqLDdC9V63y)dh z1~Dt*coT7jiMX^g+Ad+GFS*9IpNVg*+>Ar?dP{hV<~FZdol9x=H?bdJl{TJ8Nmyx( z>(U-z;yXkxZD~SFYl36kARURmnqVMh%2vi()E-C#+S#~5%iUmPz3(?Ls*P#rbQWOD zw8{-S*5~CWy8UEyC3+uKM!R(BX>o&+m2i@Y(rTKoj416Q5Dngx1cQPhuLDVujn%=73u=LC1E8iS1Ci`AQS9q|AwufIA{R)I>T* zMmn?;D`KfM#2d5rjDipKs54E(vt-2k8765}FcRwuwM7C6rsS%Eu}-wesQI|PNWUHH z;JVKRVIoGj(Ih;x9|+gB+0|H5h^mSu>mGHMNqDwQxD1N@)UH5iR#jAExsZm=$6tbK zx1}Pf#w+9TIH=4vsrYiGQVZumRyD^scaBNLD^nR3+Yke{NBS#>4C zmLFAs2cxJyTn6d8HKb1g9$=EDp2i~^PJr#Lua97Ig9^qIv9@qTGbV+{Vamp*Uti?# z_dG<$Db2N`7(j6Y$4G{)eA`S72k? zfpGC0#P1x8&X~*tMv##LXM(GkNAZnvEU`FxMEBXD)rvz}Tc9hFszamBz=bvbp+av= z6X0QZgR$snKrd#of`aDtw)N8x&6C2~H za4fnD?b?7AwrgCB4&ZSu9t(CrhVj8o<6EWXTHGpS{)hVM>$OBO9E)Od4c<3ih2y}0 z;omS|O!9#OqlnTMFt(DePqZ20WeiQ?lo~#H3{zf0ghvVYcfvyjU0h5(NS>k#f#Exa zH@=`V5RRsg?`&&VqJDZJ)&-C1^sd(S_;l{@LX8X;2EH-5g75+R2#6TuOd0Q=R$kiL z9R~QE&xsyVpZ)?aU-TFX7Lp2|lmZ=?2!z(B*$+X^H~0=xbL|jj8yWujK}0z2 zUcshIxUV5XaO@oC(ajy^vDF7$=C(D|zt309^n+-5Frx#bOEeWX#wUYo@r@=eWtz5x zDcS-erHBm*Y;&lh5-CHt$;FHs?3F$R8<1g5z?#DHi;4}N%z)zgy+JA&?mQ`d-No<- z<9k1S90C_$A0xcLZQ(>`cOao*d#E6zZ7gNe^dweDfZ2_h<2`H~4#!gsmC*n*u-yC( zjgH@8wWl3<8o>`hHl5olK!UBO_#B1R7Nxm%rxzxy5jy9GSeN+71K&7e>2yx^6=3w0 z@4>ZM#J6&M=p`Qld9l4>NC5%|3vqeJOX|jVy*#N^>A$_?8+q}Q%6ne&ZQc>1|L|Xl z1GnJ&{1-w8gROJtrMiw=IV-xle&&Xj1&xbNIcE9BHH%jsyLRsK$ii7ot(}YKFE~EF zY~{+sKd{2{j*n`?5WB|(2!B!mHVXo0L*4PU^$XXWuySRpap4ke?$YBIG@iOPb!bX! zJazrzg<3qC><-Oq?>sGX{NbPIk$+6s()CFx)LkUj9*&}+;Y>$ki%S76g}4;qf}w_dxTv_4;DV6{rDsgdq!tD{q?axJ4Z~#RJum8{7L13O z`B)^lJ}~NOo6g3s)6!a;k9#l))o!h|l2urRT{7Cn=)<@ZO~os*Orj;&sv??m9&Zt} zxdCIr+JIqC7%+JJDE@wvg8OWllqqv&>_M3qz>Y1#AXCD6S0S1@R*!=oR$Z0os*1;A zk*a7aUKLBU+hQnmz)<4~Ly-f9T2~l~9WcyD$8eO@4zR!U!FHGp1|uFk74FpdasgZ? zV6IR{5EDQ2&GZ;EP7UTav<|E@mZO31Cg6+ItkGFAg;Gqr^rge5STfZT=+qYRlA&XK z7*xCQ&WP#_)iWlqU4G2bi;r2pX2s;{4b|1GuV7UT55-{QRVKASBG^%h3=i0%-?w}i z$uVsgH6w&|GUpJe7$X@3I1MXI_<+-lr9W_*0fW;F7+nmWA82 znuGhirdxD)P1T*E3$*p+ecsY-H@sEQ9A15_zPc$=(EC?o}<1s zC^cUy>SSlsP3eQD%zQ;$ahclZy}{;trH4FIg}N6NipiDjAQZrgsM-5iL~N z9!P{VCVF7&>pAO)3jSVpzq$4&gAl26Nh#4ctm881X`aCXr=t5yiONffCY2IZlBVGCj?d2Ep3ta)+}sq_RchGJ*6dVCO-(@$}E1eb?# zN!O^%ZsZCPNvD&pBOU}z8VV=0plhQE5^1R5K(NELkp>+Tilu5cOz&J5fJ%d-2*}VM zSnS3J-{V;?_h9cWsU_ezV?K!K9PBlozLO1M3q}x4_gb-N)dE~2z?cvl@oF;!xX!Dm zJ;JA6xZfbaGX=O&fM*HtYym#ZYYpggg!_jJ@DT!hqyQf!z;gw7o&e7m-~|G_P=FT+ z@L~aO65u5Qyi|aX7T{$9+$_K?0=!&+R|xP*0X{~6R|)WH0bV1(#|rRT0X|NEj~Cz* z1o%V&{(=C1QGmZBz$XcCn*g^9aEAbg1^5&JUMIj20qzvwr~tlEY zz*`0Qn*w~T0B;lE>jd~)0(`vy-ypy@3h=iD_$C3qS%AMIz}p4*76HChfNvAv+XeUz z0lrg!?-Jm<1^6BTzE^#t1^6KW{-FT>NPvGVz&{b- zhXwc%0sg4~KPteF3Gm|r{Dc5MDZoz&Fq}C^$%oG~0{pB1|4e}YPk?_ez`qdSUkdPZ z0{pxH|4M*g5a3@6@QVWck^sLfz^@4KZv^O5?XX1o#~R-YLNU65w|Q_}>Ej zo&diu!2c284+Qu_VXXVFaQ}Z^D?IQcuN5|^z6~d#{u%bR6}mWDxWE6~Rw&=>w=J9M z@V5!M2ieE-m467w`I;hpyr8-2FG} zx1(S8&{lqb%6nq!xky=8UMOPYroemJo~?H(LLaG4_(RLCYtcN zhrYq#iLZOuf+s%y*FAJ2zu)qXRnFty@z6K<{f>WmFg;u&M|m3?N7v)-RQ&P!MD`-hG5nmllV-+Je*gDp5T*-PKz?`xB-`mQ*{dZ%}q1yiNh z>=&ids_&LY>zx~BSul+LO&ov8(boNES6J|%)n0ZuG(M%Py{23ovDSLW`y~rrf3gKv zwtGz(scQF{@-@BPYOCsYugSMH?Oxi#%QL3K!m}-G!PkW?oWBfPJa+jy>z&~d3vLwP zpaB1?(|YH@sMid0ekkfCBYggcQ7;8}d43%A(n%ctFlzmFLd=2>72wMS`1^6|omU0; z;Zv>quLS_5KS2d~BC>{~Q6nPJkZ~;QtfgaqF$$ zE)d|20{pQ6Z|Jt(KVYK;KPbSfzHHrp{B#ShKf{6-Z?fQs0Kc)>x?g&x1us0yf=?FU zr~qFtz=O}W-XAZ(CkpTu0ankq-aq0(3;vG)FTcdPKk8Bo{<{Ew{W9ym?{W+NnE-zv zz&C%xdgr>UEcjyq{=>D_{o}S<@SkqA;CG(2;0u0X!KXcM!LPqy!DC;t;9;*@@cnH@7{FVT}_r7(%`2!0+|08Q`yx=1*3+}<^txv3X3VOX}48cu@7MMC^ z`wCRL${l)YGatR+o=1G4;ah&zG3*-1%XddH;bA%gp;PepqJe z#5dj;Ot*9V@4hkEEdN_QL+C1g|DZV|O#jvFFN`qt?73HuFvq?3uO4CAT0hxpz5k>D zKPA8~Jv_qHt^RMrmTRts^IhD8apKDxet}Rs1VmxY9lkc?*sh;E2QCrzocZWhAG2oF z>V*rK>oN@yThV@S@uC(H5gc_QB0P762w7)DMDX&7i16GkqT577a1o{lKcY!LyRk_G|<E`FsV;n{S-5;(*8}A%bI6MuafT9v6rv{ZT>$ud0M-(sM2mRs2#y1edIY zsNxZKh{n8iq=X3mToKWjx2jzt`siB{A~=I3L?3PLiwH}2>C!eyVF4&+ufdZnAW|o} zYUxQH84G;S0v6vS4`Mo8blD`YBGn5HYzdLqH6pKs2;OfQk=JdBWVVLuTt?)QttWYh zNF{>bT}I@RttWXWN{HaJmk|whTQ!**;qjLd`Q0MgB$Wuu1u~+eTp}u#`3P$b5~2dP z-9JP|goO$TkM31{g^rVak3sMrIC*2}?N){2U zW=V*ia*gO=N!G9wCL^*L`P0lJrmri0DOU~aXcD5Q-InN&G9oO(Nr;|vi|8F05mxXd zM6bC;^nr{B%YPE0oh}j0`l^fwYlkADSzmRj_>USQcRv;$MMOspiMtyikNT(F{aCe> z5dHIdcZlYV{+q-{Sn?DR%^Uq!mx$VAy@vHt2~nHN#-8`zlcW-1u~kC!Uzb{BkzY2B zuu>}`TI6>rB29zk?#D8(h^T3>%kE!#hKvYn#3G`lXSi&mj&I6{u)r)L>bS-&qNij; zSe=#-xg8-p-j*2>OWP8nw_P&iy6rL|tc#0?)@^r-=svk>SX7q~-RH8`B8SNgiD`_8 zD00{ecOnwGO)e3Z^Cd*Lxh>JX@-Tu}0145(F1!D%7vvHlkU&Iq)(b8XT`>A?NoWy; zAR@Y8w98(*VD$GTLF=3xJC4kgb2YCGNOmvA^O@!a$_U% zLPYen|G8}J%de2TA7L9JqRX#viRkLNFGy8G%!i2R>bWjw##hgMSwe(>5gE}-?%L?; zxxbSTA=*Sn^jo)x^VkBI1wsLL7T9lw#=2!TNoqTjgW>^nY@ z5h1EbLiCACM0Y+aBSJ`$i0IBo-6HChg%W}Y8h!A=vA^PJ#+?D8;f0Q*X;?_h&zx<<1P5azjxv>%S zCL(%n?$z!}^xT4&R5e7*Nr)CiTq0U2n|=tllMt=^kxN8fGG`-JPeRn?a?E~yjf@C^ zej=jh*SH+BUzshdBSZ;`h+diP()4>}iENA_#85)C#HBI%$~&^x5Alf-qIYb@?73;K zW6{x%phg1$)((nl!||#_7h5q{ttDBii$04FSTWeP^MkuYM2Ltq5Mjjt&w)i<5>2K8 z?TG-(3}TC_s{X!pA}Rz_im341C93=9JSLS2@t7hiJa>s|+s>a$s1VL6qQY~Rs3w-l zgFm7{MN|{Z#xfCc(N+`7WQBxaQW=##&vt>T@~A_l5dg8MBC5)xrnoKDyx+@{c7(Eu zsOJ6tGPkG}9w`qeh=dhUEj&^;Z(LMx;qCG`fIwOa)$RI#;sVvu?&VTjAr4nWwX}Pg z+X}W91SM1m;}uc07o6-C)tTqX6+{%Ui0aJqbX&kh1-I>#Q6Y#}M7523-CUr$^JAGs z5rZtEy7Ob#EPDT($E3DG2(yUl{yF*p?4nc;&XMORh=3MRJviqTx6S^4L&iv@LIAah z>i>p}bc<@+&ZmzQhd#t#i>UD21P3eR1lT0La$jba56 z`7WZubC;+V%zJHr5fuXGMO1k164kbypGXx%+`Whj&t0Ngb=RQR#8M$_UqprHE>UgU zsn&_85cMyj!gJTCK9;mIHVw$AK6a~}x9xmPYAftHkWoG6wyh?XEtV>XEej$lJa<{a zS(im05!(to9z;}l?h@6uogWVqQDMV`hzieLqFOyueH@6g(i>R<& zLqvt=E>TS^TO~C+c6*4Z@Z2S;Z9D%ZF#|S>h^X+~C8{&en;?x>*lQx9!gH6X9z6bc z5-My}5mDi}OH|u-evEYEX3Pk7x`?Ro+%>9aq_)CF85z|xZrf_!%AY+UmJ0i9L{xb0 zvQ+oac}!vkY|{}@;kipx^H%<>SS%HG`G~0S+$E}4rc9bDqQWL25fz@hM73?_vr@BT zkCBK9&t0SXn}iBmlw?$YbC2p{2^DrY$*4Ydi)vz7Q@z+$*dQgM!gH4uJUud0QeN0! zC8EM}m#DVw{JB&?Y|j!=;kipxU#L3hWU+$S-6f*JbC;;L?fgJ06*h;7sPNo1sy8H5 z*jpx}dc!@cHzicqnkJ)q(=DpC?>{GL9PDfpQQ^7E3Z}brurW?VWw>)(%qG%ZOxRZ^ zqB2}eE>JxgmSb^go-VRA}V7E)di}x??3TXQ3kQ2QACC3F8L}wKmZ#eMN~$BfQwS4M~GlQ zrHIOi5OINO+fJ6F%T)B(jwzzTbC(s|wsVIh&e+Wby zsj!z+Mn&#R^_qkVTTx|HujPPBsvvf=(-0#kqk)eqm@y8 z;@*J#q(Uqew&A9ss&HMZ9c3aa?BbPC?I?4Ps!>FRO~7fW8r`G1TSSFD#A&GRc8O}% zW${ZyRM>(nqQY~RsJ89=XpV>qJD5dOc>AaMLJ<}APs^xw6uL(B ziNp-pel4T=#62^7B9#iex6@F$FVzktQ8q_WZ2p!}?eMs+;EsbtRMYkY-z97^TvN!M1^hlA}Tz0iE7)urhl@yNh^X+~HL4v_sgQC&MzzCzsYnuMWGs+Tky~;0mS5}_+X@K}L{xb0x`HGrFXT%Q zQEl5vIVi8eVyTdBK}NM>u>$0 zsJ89=$gZvI!qu^fQ{!mB5SK+(Xk6wEr|wjpi4Ts5+6y6LdcXMqAM{r ztqADUwTt~aMkL!6F^UC4o(*7{JbW3eYiW30SF$RuC4+pS-q#X4Hk1rU1K5=(J;e!2 znb0C-2hbicLPuL1iLKY{Fd7e>%7~mFK-SEWmA1!{UCBsSd)N-6^c3e#WGW-lhXCzG z9Ic9E>ZyPoPU}%R1Bz{l93((^>^QyBCF@zk8B8O!BsDpd3<*qtNaKi9jz|xkknt>b zz=Px`!1MU>FS5?{ZH#qAY%5619MB+d3eX(BT1Qj1t}7mnCt{(1Z3nQFt(h7fc~^j| zx>d(j+_}*vCd8>y$kqZ3!-Kq1?OH4xuL{N>PjcJLcc>H+y#US2T{@b=4Msn?9w(3= z1}NSyTBpkn&gy85#nu^^e8vs7qt&TWNG}6aZN)k&Ut4Q1gwtSHr6e>?J%!9PK=bw~ zI-0UztTSF2(W3TjO&w_s#LjVB)3!+DYGk+p&hMwzv7rmkQL5qH;b#_74Cb}HqV45-d?C=T)m ziN%?k&_dxvmC?{iy^V8hF57vMBRJ3ccDvSbEp;%QY8PAcvKmF&O zak+zVqLVm^fH%vQUVMPaJIJ79lnH7T&mCCgpg>>x+$So$)p4uL1tpa^r@`Hg?9VNe<;4HK9$L zA&l*5qlZ&dOl;F;1QVHm>m+8#sV0_!wMVdf*V^L%$Er9D%1G-b6{k(B6?!>8)i7R0 zBC^Vr4y=N-a$;F(L$U5?Bo+v{*2zwtHa;`9Z#WbR`R&9)!MbS6!@8)+OkQ9lv8gU} zC>1j8iKQBwO15b^D$pt7Z;~B>csSb5WHDV7ZgeOJ()^(y)3{L0W@;jotPIYqsj05C zD%2i{wFV+p?4-hOoQo2w42F_b!BcSg%ri%Ne5PMG``k zw5K-0R6U+MkknOuV@<82ZvLi2(;(9!2r4roOx4#rRv`luIJL?FjtDPsC>jzkqG;bg zLND5wz|4l3==<)5damxXsn98zdxNR?WLG%F>;>DtxoY-tV&5S7Bg%8&sl0Elnthy$ zzNvQXn{5safDDr$c*bdZ1I#uxcqAOuqRDWyy)v*aSsPfF+yygZyos!jOnuLxa7cNH z!foP(n_;5S?TfZVESd_%Vu}1ri&=Ts^;U;MBR3}sJ@Tu1iyoFt1rk+lRiTK$+37mg zerDyw^9OY%*$Cr|_$G&fB5^1RI*J#xJQ#{&M2~dkF{;nbzn1qplo1I{QN}U6j7Ksu ztyQT=SARF?RNkQ3k>li3aXuvqFtVr< zH|v>}3;yj61xNl|6#R$0;QMJc4Gnb-RiR|CovRNwv&H$jlqW-d?X=63h0A^{GAB~} zqPR0Abu!J5=UKH&L#^|y{2Yh&K^|ccoHI%1vi)1z1=j>7gKdFiDw1_ZKXHb$*@I)u zMTul*cZoGe5@Qr(@>EuHm4#|$@Vl|2x6`osrYt;K3WG)_WFWlq9HS|ZW?|47aB_c1 z%?w9H{o}N1h&4dEWf1(|<9bsb#m0tY+dvG3b^1`KZAifah((ib=-la0c;tsh;d^-D z57JdlG8xHpWYqOQ{hZS{;9kZHpMl+7e;(EBF4CdqCfmMy*L zU6BotQ5%K3)=Y<>{sHv@GI(CN3Ia<~>k_GWvhZaLBdKBh9UYP23Ew)}uIF9R*x#A$L zSP005>oSM3AvHeA_5d&2Sgodd#?0!RJlE4*ltHYIo!wFQj|WDHgBH^Cqg=lzi|QVS ze>^bCp&4{#SzqI9ci0i0vZ(nakuc5#0O6Hi)d}Od3&OJ;d-Gz49>Bo^AQ=2=l$q6| z12qkeIq8mRP6JV8P-fH{9EyT-4^Wibcj!f#W6pMiu}DM<;zac%o7-!FU0FidUqIK# z>c85dfH;f+1^fvw;OIb2V;!6?uJ!D!?r1(GEYPGOh@Lq!l6NM3Izz>+8ATZGtJShC0EF4SeaPsY&|=zTHrJcl<7`h zrqSF%7IZ!K9-2cf>}0y`+Apsby9H-*phR!Isdo#WXYH28nnuTNu_HWXVM~ul7zcoW z@ZFo^eD>7Rla+8o7T?^r9QXmJjDX;YSH&4W%&c?n#|&nQBWq+q>0~G4;1d+@WL~_{ z!ANC$B-lEudgiR!`l|L|C|VVaIZ^iG%`}UaFSvZLWh3kGx?<_pe+FA8k zI?Imml!c296$#_m7Z4uObSmePMTcf3+)(R0F?4c~;cOWYoYizHR=$F<3=O_?h1lRY@Ce2D`tF;KV49K7f2=$;|6S~I9FPUVm#pm4yL|ih zzh@;}pT&)5H>%Wae^rXJ$7x(3{7A$g{3?sHcl00DXR%_O;;nGx7YHtYxr_1I^mXeS z`Y+xp8!D$j5F9{;k{!oOhIp$P^^G~rTB~xajnljdXP}`tt-Lsm1F+WQ&xX?}(f|ju zp@8dn0S(7jerrrKvlS(SnXtuST*Gm3C}Ee;qk)>ndaR1%u&iF4tz7AIVSA~&>0?pc zadsUFc4GN@F77vdoL$_jbJyi%OD~i*M&Y155WeeCoiLtfC7eyDoWvcc@qys?A6;*V zdwu_jdp1-~i+wm75G7mmo?fzg!GF*%%le1yf}_KpiLSp>WFj1BhzcD4ZZ~J5>+j6k zm-W@oP9;0SQx-K}Ari*vi6Gpy{{}`F&$AQG!xF9A{`6Nw!Z@lCgfBfrCyeLW31{(y z*wwgh`}V^`!Z;Tagnx0QL3sONE(qst7fe~W><*DI4xt3$H{!gh7cRRaE8&J(=Qx~I zX+tLBu#b86#vh1;apENiZ@NJzjOQR+&=Om_7`p=GjR@^&C`D8_FcYXY->^ZqE|Z<9 zcvWX09I5KmLtf>spR{mV-@J1ltw_T z2M+iI;!!v0_2^SNP?5H)^m)UM*QP95CT-5e*`Xlwz3=fZU$l&E&dp+xIa~jBgv*vb z)GgKz2bF^G&!5!^<9T*o%VG-J5w5%Uo`*!jI29FyUwmFCjOSSi*JojJJHk^IE!$5d zj3Zbm}z5&U*#n8&2A24BgqCGxgQZ&KWzxP1h7h#Tw&q zSrERrQzwk)S!>)_XIE!s$*VI!ME_+#OYEJm919if9p1rAS zotNhA2$wCr^l6bWP9H{%?`zQs<9T+%d04eg*Az=mRvdKUN8so%h z5dO(CW{q33*Eq}mEIa0Ex~5nXCmc@=!oPUgB%EEG8uO6jrfZ5j#2O#lr4t@9^vg_+ z@jQEt^Kb(;T~n-ygmLgTYCLg*Nm$EHIKMs)iiB~>HwaIkW)cp%Ae{T`wCS2+X-_?l z6bIqQ4mSz2J@t-U-Iyh)CkYhIS8lbnS@!ExGaQox4D|GDQ*{=8i%EW@KbFj z;r8rJoyYP}(>29IMZ!3l9fa>Y%_KZDJK=n^)1u~kMZ!1+9)u6PTqlg@SqazYVS&_b zze!rgz?t(P{Fj?_!g%h2aPDfc>6+rOSYsS;55me%&87}#C7f-aO9rl%4n{a&qfYpv z<)<4X7dsfinXB`#x$6FL!!crwALN9WeM2XV=UHo9pPw8@M8d1Stk<~Y$TN%@N3s%b z%*&v^;Y5+}!I3BR$KH}xBw@Rka8 z@QGuM^RcU&wp2)RTzaNX_%|P#gtNaSmW`WaK+gs;e?B(&VBCGw539t zEuP2;-*}5jIQwidpFoPHEftcLxrGyMe%d6Q-O9`sGoOL0r6E&2U+?4EKW;YUIQx*< zkk1rmONHcaI^sf|@GF;`X%NotZps!qlA*?uFY`Z~@Hs_i8H8QUVJc6P$~Oxm^< zN~hucj1xY-={%#x>@*xlC6Q13defE)$@%gDCtTjj32&*$?tIC%Y@9)kCFje{-_V=- zxc$!8YrLf*yYrqWxHZPy7edyNy`Qn5ZO z;cStrw#;=+v1IK1=~kWajmKW3*Z7*^?8aVW9_vm`TPh^4&pXfRgm1X*5`(L=dwufs z-iE}czTg)+;dAczno;9W)~0UEV*$NsYvGw9;nSYi2|sh~r3Q1InU!#TKEBMYh3AQc zUw=U-{8aB{2I2Fv6V7M0xV7*Ik?`1;cvC;S#UOk{cEb611hy7lC=wp_x=#3&GcGp> zUznY6J`?jT6_UUD{=e&lPu%i#o$!{5?EdP!mVdSuO4=#*mQHxxU#>K2oLxKRaTv zQ&$^(oP7YvmY&actlmY*PG)WDY=JPggtr!6AQEo=KqvgzUpe8e zg%@NcoGnJcX{XcqAL#^ZW7o29nJMwEM6e@})OI27%{U83TE>_29Rgl1;3a9~B^jsH z)Ku5j%&H3HkW=EIjHI$vvl#X0^>l3|Ux_`6HkT!PYinC>u#bK~It^SB8YT8;T z9m7!2s}rue@H&GqJBA?xVcWb7OjuAU`DvZ@NmO2_7wYy4-)DuY zH8f(S)|H6GwO!lxKH0#Q#XR_SnxYfCpo*99E?&Z^QLQp?8f!cQdu3;?33F@ApSrE4 z(>{V3yoj&zB39;(q)4#f80Y{;DUy^eZX@7{y&{U7UIJtdHfL;$(x+A~taWk>F` zy}x{P2@{fOPkhV@JUUP_YZl8D<~FZTy^!y~DNTf&8o;T0Uw>XN)AxVw39~HR!FaY{ z6H)6qb?~I@sGM5s&JW92YyI}6{aDE=kuEtENLJS(X)@a=Qe`GhPPeX|$~D16Vw?Hd zskI*9WeWU8FVpm3Je#vMht|r5$|*b8i@an9zN(juX9shUfhu=tu*nXVozCqJ!{8fl z3}#(@?%yV|uAXD0Hgn|h+zWm%&+wRZ&Y9_CE4|B$dO0tukjN~*yqS7-&@3g&P}i#* z+VriSA*@a7ADYbC^w3miWjx##(sx+3w?-0IpDU(gZ#Tx&NF zv2(FaM84+mxlo#3aDjnd3kwx`T-)S zX*$aHIm)r^mq{o~j$P4Gxk^i{*AnbZ6T4PhvF1Hhv=@G|RWIJflP_nu@Eols9#&+F z2p3;nb6fNFkzwc~LzA>=j^C&3LC!fQtmUn25?b9-jao ztl+oJwWw|}kqX0=8C0t=@D>gh6yEZfZ+XPGa8#r4me+jCE53y@ z{PedxplH2SAif25{D1b|1wN9ax)*Nk!`@x9eqduB0aNN#SjpCmW~9}wR%@*-@5{1R zyK8CJHtfo#HB%$CHPb!r?$Lww`r3p9!VL*<0|dgy8z+QI2z-e#I3Ykn9zZ@IK*$5~ z0B)QIxdB2#NQixZ|5MNI>5;SxA^yJK*Y=KPx~fi{I(6#QsZ*y;S-Cc8Sexx!IO%2O z+N^V3)GgXb*dzRtXw=2q@QrfW8F0<)D0_3}G7@Cy0;XB~&GKzizjoR@V`$6ov)=Vcq67dwvgp!~PZdEB|;L(bL> z)J2zn$l1Dav-9}YjaPoi>E1ker0}B?Bz3NLCI?Y?1676!Rl!XtxKR}(&Zn}&y6hF{ z!LhaLQpa(se!NgE#Esbk82lNsMFojD7tg3|RNVE}%bYGkn2>wR zWllE*YTZ27;&C!8GCNjgV!#bL^Oh!$7rbbgj$~|J^r~TuL1%D^=e>wy&|&mUNks4$ zSH=DMCC50@*eMYHZiAr+uqWy;qtDb;UUq}F|Q2H;U2<^n9~I)0C2f3+u!97+znfq zvvo7z3YO^rYWPUo@T{ti0Eq@9+W0%*OcL4`KT5(=j5g;{XX_S178JQ;IW8RZ67PhU z%wq(nh*O#Of}15jzS$y;`i>F#fP4>Wj^T|5(pbhd1Ip|j=ss~l&u{M(*-LZ;$xdummt;%|HEvP{KabisxfIzonsu?$K; zc8uTos00?m8$-^HsnlIAW5&Isyyln{A=F|wbh1<9s zsTjdy@;gSbn%psh56kx$!AiWpxJwAbtE4DOT~PFGP7980Ra0=ont_?@F8pQAz$Dtm7P<}tV*>V1D!{p$zoyXtO z<#aoZuoWcD&<_%JI%za(@eE761s<^36-K{b;5g2&I*#*ej^hkEj)UdEPm${8bX6S3 zfgXmL=Jk%#^#;dre%^7MH#$xi*zFSzgp-&hq2#>Cahwx!IRO3f#~jBQa-1y(uW&Fg zliqhd;!!wKGaHwQM;vF%uRq0cCS>AU9cSy+x5}5d$(N_)-w$K*4kfr}%D>N%f3IsiavEOl|ZR4cBForjK0U}rp#0awO!N+cV4C7-bKCZ<_A3lE6YUk4(r+cDU z9H?@-31pyI_mWx|HL&y@81ZT&Bc)QY70(WgcqKf=>QZHBV0pgc7v?L~VyWo0l5haH z50ne#XE;vxCj7WseIe=fpyYhVxj?oiDJt2TX4dV_s}Yam0#<6f>ryAjUpyezY55&9I>am<%;;759W%Q6jv2is-@`tjzQe+Dw|tK| z<}UgD>_*3_XUw^7HJ?|RY~|^->e{eMU0rQ;U83u%hm{=Aw#jzuMjQ0wA6cUrS8C9)pYTFGta$Zm zP8GIi;?_-e6{dnGp1}7u?61;Q_|3&#g@)H`^6Hv(Y|gJkJZsd!aGSK3)N#%49k6?PQI&;3eTC)K!t7dL?9zP2y0$;E-de&6Z2@=)C7+Gp1nzyd zT?;H`RxM_J#?#i8%XC|gPaU{<;^195q_PjzZ{2Exzu|Ga2|3^|)!=u}h5-kUM8gA7 z*h>6hPW>$;-fW%BMHuIO5+wfiIg^7Mq!x80tRpZIBNN(j(aErI`-x*DTrl?Iz^~PK zr0h6flyLC(i_YZW7aZpo9p`iO`RDZcXY~1}^!W$$`DOb25`BK2KL3P1|JZ@m=V~&< zk&uGrXAm1IPdxF&6Q80ypQO)E(B~KF^N;BB_v!O91mR)=#0tyn^&0>hyV5|Zo8)C&ndjA3ok!4lA(Veof`w3q{)z{U zSeD<>n0LwVKN`#qWQM2}6jX~}ED-4`b~#%f8*&6LmoCf$mj_0-5-yLu>eU99 zjrq7-ag$eBXf@d(T;$H~;CumiTqfR*2UUS05RvaFBl0a9Qf#?%QeyCiznvirZtHSD z1v1EP&ae5hgW=8WfLEF4>~Osm&r`hzk4@iAzwV|Ks`ucrX*(bGW3hlk%fZ%VbcH7Q z#i;Bf8=VZv*@1|A31^LksvoghE1>%>SQs#DE+?%fYVR9}SK@>>WQVY*6|f4GyPL}0 zt;+2KUinFPhr!(vt^fB?U+9;ITR}ylecAYA zVVWl*^Pyld2iYyD(e>PXd|ff14|*%?z&x)ku)~IRrb*rqwu7VM{$crUB8U^OUKbs( zkM)S0>9^pOtAQm!Nu^;+VK(xsbG*QplPX`7Qk2XeGNBPCzIu(#0rR?m%Z?(y%2hI^ zNSVA?_kvixhd`fAc$}ygkmR$;JZ++?cUbSs!p$&BDnSw{?VT(lRvKT{kg(SxQ)*Rg zNzr4yZJ4*HwZfxhpkg3DQ@x8Tym@!UyE}=zAoj%VItm=fLK*6AWUp$y?)Zgct zS)7&?m<%^;cCe8F!D?WjqA+R7qC_+S90`%9-h&?IJ+AZQnpT)}EAzE5NYSCvh#*`l zwK)X?n^={w(eQ#QxI73G-B(yP>7*vF)WbPHP~||s>U^a+;MIAg>p=I?+e+Q%L83GQ z+G)4m-yJsTZX%sdwlqMCc->pkuXQE#T2&1eqs*ek1G9cm^#k3aY_h0J!^HNNU0NjH z9dmzkNfgx#Y8<@>Gpn~K&LJk1GWp+R z3jX41hl?F&%dH!rNePyrt@iFKD?Dfx=Icw1LUTTvEmSLu_d>6_k~Eaq4{!7<>h|%C zj??{I@|n3E`={6EWZ8eIT_P)jKZ34fS`)G z$ZO7HZGa{9K*KY<4t_|d&W6hdB-}{S$(3fS!5a#d_Vjt~)sy+o>3+?#P;M`OZ;Q7~ z{m|ZZ{Y2^v0;$%C3{_8aTu$+H{W%%Z2td}Pn}oic50khVCIXmhE5waTAbH{|dkQ5{ z#Rcr2&b7QqCqWYVbB$&*3YS*~=6Jv(PxB2xnnZ%2Y6BW3sZmol9a=N^&1M+Z^{9re z#&5>FGO)n4sKJ`UkM33QP}PE8t%N}mh4s|j1b(aYs+Rw%2-vfZyOx7Ww9+I80X*k0 z&gI{8ni@BLpdrMZ9JaZ10qsr2Ga@7U1gY;3>cP_V>U0@Z8(KJoq~wc>Q0F^}gag zAN}yVzj4P!$9iwOHaO}wrqaM*GqqO)xhuk)CZsPwAsgw-*Vt1N54}1ncb!5 zooapR%maV_{*T9p-habUe)QqSCyp1lOuXY;zw&D@`ibKYc;EVG{{C+U|9a!KuYBDz zp7r_7zxk0b4E>KUeEs)-_2+-I_^mrOJ@rKcxBumX--vsk|K+ZK{N62(zH8H&TT2J7 ze%anfcYftlZ~XDMo&Klmp7!zIeWUl+cYNisEiZk|@x`Bdy!T%pIrkTP8sGWkt1s$) z-{0MG>!Z(Hy6soq+5LNOZ9V<2@4R;Sy5c(?zUvJqw_NqlfAhzmF2Cz#zOV7aqRhQ-AT%7e02$yMN@sxrcA+y8g0PKCSQa zogX5mmIJ=67*ulwM(FL<|p=%e>Naryh6@`k^A@x#A(`TKwDbBB5- z9~yQ4@@K#P@}VnF{rd;P=U%_`p0nS6)rUXvi7)>9&%g7ZzPIDOub6%1)-MlT>hg0h z{=IMg)pYOem+pT9f9D!xrVdVe1{<;^<488u(-+b@!r@UapQ-0y^!-szE@^^i)_l~bUbpOM5Ty?tn z$-n%-t>4{$-P>Q(lQ@?=|Fu8*=2P1b0f*oF`sVj~FNpr>vZEi^_*;|3e>?Hu){h=r z`~v^SPe1a}%C~;{-T(ZqAOFdV-v7Czd-|KdTXg^aX%pWpj=Y@x?Ee1vrD?jtS zN56OE=0~QFJob0*{_d^peOLXM*Zil8_n!X1-a~J>?i1TD9@;mRy!1T}z4iki`_S@p z{_3hf-TM0v-1F3{e(kl-c^#6PJJLaGM)bISluWsvp?C8Be zzT=--tv}oo-Sx$XN_Tv@`r6<7_FumIxf?Hf>_wH0zkS0s5B%HbU-7;FHTk(uf8&Zx zfAG-5&wFoh?A0@mdfUJG*+2M+SKs*6M~hwezxBH+93S z{{3waAOD%>T=7TWy6c`tKKO@yUEhAe_y@!1e(CZX3a`9+?}i5-=sNqQ4}awg{rx-7 zeEdCQP3OMP{8nY?(nGh@uALsOT{-&I7yQXb-|*ot-S!6`|L*T^`TCW=@VuGHuiXEP zuYKyqPhE8Db3XBgS5JNI6aV{7TXrU=o_OQ(lO9U?>zoL&R+E|x83_Mr7yj{ zXUp>E-h265xw^GzVnyAbM;TTgMaZ;ulw`_dg7N4zxU@q zbnwf)*Ie;C=e{yB^R;(YF0XX`>ldE$tdBh7D_1=Gir@S7r~lQjop@{OUC)@AdFaF6 zeEJo)-t{w|tGw@HKXFmKVf>Td{ms{ZW8!T;`_ljT$Jcz}6(2kMk%RC2BhA_A5`>y}a}fGjHg6X7&EtU-C!whc>?X&vyUvPaJ*6*Z%$P@lW(``khPfeEx>( zvCQZua{|o-4X@I)6iCbj4Ia-!Ez@!wR;Iv9nvJHO*P%+NZ3UysQbuexL@E6puPR9+ zglX%f+>11XCbNwb*qi0g?^5Z$?IL^z(Yv(wW zU-|vB8v%22aLj=lBfKduQwF&Sj&DB#wtf~qo{5ibj?=eIxC?f5b&)H{UDa^DpH;*8 zLMy6|%_m7S9vv8nd8HNk$x4yd2sId;3e_OS4)s7ahzs|&c(l^bf-v!G`0F+Jn6Xb4 zs^L7FII*~kl|QGkgHy7`aL{qKJlZ9?{1(C#Hq(~^jha`l&w7=G3q}e+um~PI=+F5u zbSZ<*R2U}g!1&r|+hlT_E+QQfk;r+EZjx>eIQLfFjB7z5(~K06j)dV{ofly41c9uY z@MLOwD8HtoYjo`va@c>oyS6$x(VugKj@_l2dPh!93yMvZGZa&8IDRv=;f48FPOgFF zRy@w*-K-kKnF=zaLo;cn3=xC_-WfX-)-n*u z(jcO+!0Id-9%wY{@jw(WHV2wsdU0#*yM=MHHsD1@LTC2nC>=+Syr81xZeE@MXPah? z*#(Q#Y(0?|%xNH4MOztKvvbXq72`+J={3Ke@Mr+`uU6nEdPN9(o&`o`l!mR-0wMDxJc2<& z^>>EUO}`O02$IT>fg&^1Dutxc)XVlQ00~ z#7e4pLE^J_256m^1g?mC{1%g^&6*7j44BeFlSWzQ`$0|J*`OOp^Gks3U87gM# zMi#GSMqdtu?7)%e(deC>Yc4kH8gofuN~%`{ZuYp86ruE#-6dO4aI+z$?0XGZq=zld zLAFStnr;5eCZ?>2*+got>I&KKy56*%5hffZ$87VTU5eye3L9vWsuZOrEo~Vk+Im&L zg^^YX8`dI&D)Xv~)q!TjYrfjd7Br>z@(_l?9SeXcY=jy(1hm|wdZk=A;7T_D_Rw3DCj?$JuhgBn^l=jb?!LqZ@27_J6#ikVQul!FwHnIDL(@Csw_ z3fsPI2Rq5*gjd;;pUg9|k|+KG+g;qXjKt{`US+p<^Iq^G&!1%j%=0R6A-QorOz7UV zO4vZYqkf!_p1ghADDfvdIx&6n*!bij<}L|WffjiR#HiLqkvk-wR4iso^L}NXE&262 zo8`cnSD7CuL{>YC?l#$B0q z>WwZBs?3EYKUhzJA?DWjU~Zs;)sWgH3Aeto3=CS1 z6PEZ5j*aesNByiqyU>0u#gxpCu?CW^6jj!Y_@W=S;`$2n0`g8|JV+v+h9C3AX1fO6 zioH3E8NbGQ+35kl$!dPYm%MsiRYG1gtmX$*wlvQpP9tHgM-8tTHpX1Hk5$95v&8sw zY{`oPKbT|gF_H^i238vkJKqQC}nD{cf*n>3#Cc zp!zbTzU)$8hSitd>dPMWWkh}1tG<*=`kRJb*1*dedU;o$%bxc<)|0F>IlG^^clD0n zcK~v|?@W)&W+dOycsaroHgST10WiPRqOie|c_rULj`^@&1?l{NCA`rLBQIKEvn}`% zY9_jgeu}YRXo88Y$7c{IV5KUy%^7_bFhs}7rAD0U3BN`iv4Y|0)g$gzS7?~>Wj{{h zejpaG5(c?#$nCPTH@Pk^&dR;N6qOO%u)??Qp zF?RbD!0~DoT`60{W9mH+O7&(E65=w0oSoM>yk!q}8rv3P7~k8sor9gjJ+$mKnsw3) z*d3>s@KK0?2pA6f$E?=Au29<7c(ppXSdIO_vo){ZTv;Z~YxHf)qw+nS1BwjIUW#{uj=7tM7?}wPXxFB_u9Vx{Ob8Y5g zUSONelc$WOGp(sWrL%X^pwhWIs!-`{`8rfOPreeB&a-|kDpPI^H7b*P9ePxz#JUx! zOu7GGllsrnq_q4u3eXQvk$O_7QV?ju*Ym$ZlUkRmlb%z_Pg>8ZmCn;DTJ~SBAdS|; zIi(JiN3D6EK|NQrf3oRLX_60S@P5*1R(@wLAY7k(%GFMwbaNOd!e%6t(e_1^W#775X;_)l4z`;0OBJDJ-T88%W^JVt4*6e&jb+#?S*ZcF!no>ad}fRh7{v5%MoF0i;gEf)k-z|U^o!S0CsBoXJ= zPt5!Ey5D5eNfb6_d4%!B2216=7*7ZNIEnn(77T2ypvoiCnkOetvbta4LCld!{Y&Qk zSeg-H=9v>76|Y|BRn|iXIFMPdtfaRxtNQ_GD`Cr+&t~f!9e7U*HViD?Tv43GVS^6@ zd}*K-)~h@sOB}8I>vh6SypCBi?mP zFk%fJ!)_y~)bLiA7y0N+s|w0F8P8eZCBX!Ct%P|jMvNsK;SsCADhmZo1HL4Cf(Bzh zgXMmaGe1$N`bA!3F7+mk5e&F&mRG_CkFA$5&Y;ap^M0MP-rm!rO~10hdQ9tkPmk7l zV7-}P1y=5x>4Q~iK%12S1A!4!&i?eIz+AqrH^8CrKDhL;dAX8D{SkQwVdNiv{m zvJR5uw1AfF7tr)FYoleh(PZU2jolw^j67qeJ7!q7ZOoHI7gSg5#N3^xz|Qoji;FH6 z@baPIR^_v;Ip)$Z8f85SN-AH(lU8Iifdpc87TA-_3$im{yw1T?7!0Rhg-h@pa;OosNPo7{AzZc=s;$pFws;1^G z@KaMqnG46B(SZRSqhho)5YLCLdbJRQNr6OCx@L)ItyQm|QBA|_snt~F37_fO9xDKSu*}-1u#f3$$-r_GL^DttJ;?Q2wij62C zq27cc#}DRIO-qs2gsUFygs>NmRzr5SSS+4nVNjsHv;flY4)7G&P+q{sGmwN~oz=)F zRgIGZ{20dE9-AmGgWr_fBPs2&YAYhs*jTApDwSiVTBdkLV>Wg+#XlgI=O@PI1;Ppg zAdWL8A&ck3CDv-Pm`qC%XMP;)gpiE93TKKUl`yFKL}NjH%zBt0;XH7H@| z?-AhkkFnvBvfQf-cy=(amhgxTm)NzeR4m8B(ivk;-5Il4&I2~gVh&ow{c`6_@H?jJ zdKkb=C87;K3_u&|O4EY~hwGS!M~TKJe$ z7|-Q1Dona)tu4ba;RtFes$Iv*WTs@y2&h~UM(mf>Ie1m88cO$Yw{L@1>3mI_51*yf z$efd=wi5a7e}9#a9o(mNzuLzR?o*&l_T($LSLVQiHhJ^b9o7le?b~Qf4u~d*Q31{>Uf@&**AF5wG!V7yp~l46rL_HExbfQ<62?SPMwhdre_ zFF>kmSHir)q(?R9BQNG-F1SEoD8GA2C#|MXZ50(Z?2gb{V@&)3& z2DG+D>=1{HRcmtTO|uHzMb|;_BSR;TP9HjOVEX3qp^;r}t#Qw<2iAbb+L{CFsyqcd z-jHWwPet{8+qdlyK9I)z3YXDi*jR9noSZIzQ3_LKa0&W$$13dC+hc>q3`uM#rbz`A zLvzRK%%=0UwPFVicLmBuaMzO^!8@NM2>Nhd3pgA*GQ^yio;o7B`_3n6cUu?^K1s-# zq2YAmMKzz-tAdc=R4G#n;qgim?l$dd$l3`D;PpI^A>F|S?^mkPoIte_O?u@xSZ zPjtguMqIy2D~foKkOREW?Jp#x zM2-}AgIx#oC}Q5)=ux)s6TLy$a+Jv|hX{kaOS?yR?J1SS$7s1+UPqNM9*vEUkB^@x z@KWjgfrD2WcvWuhj=5z)nSM4>94YQ9?y`FzozvY1CGNS_khCLz^o!}9eQ}dA6<(@z zJmIHTw)MIXyz>>L&plfi2QvY1U?03#mV*xWqD^AjR0m=Zc+IfV>JIv=aHH+6ug@(g zJ@33veXz32=EFEqgF$O@9kKo|Jfgw|HL^4`)<)Jkk&-@#0Ls~Cf7Un`l1twsgP9{7 z@{EW%2qe)3n~oGmp6uu<>dH~|14cLZyvgbed}Js?U~w{~jlO$}^xu;oVMXEcuD!)_ zc~Jc$BhsqEqV2Shb#z8D+1_%oymzoz9@$$QB&kOy>V@BNMy%0+Mdfh3_rPmtx%yE3 zH6-4yfq47l{N<_?Z-WqT&)B>JwlB57n4s8;$?YEOgnHRA6}A!{-4uFJm0rWrMB0;; zz)qiLqfIZ0IdfHrA$Y;_XcpxL=6K?=nVF0Y$yC8*Y>P|<>UA!7nb-lg)c~*l9(Z_9{q|fVCr9QJX(w zg3KxKy)qD1VLy2bw_>;NoUkE{4VFrcm^HlRv0>X(M~n$PjQi;69@EpT$LdCb1U4{M z%>vqHFwJk6aJnqi!l)p9#K{>wY{4Qq2kWOYGO9)lt=b5=5cZyzBLt0L>CJY6DV`%|I#Ed((#KLX z5w^;{bKAG220^OEebR3DXICnn@-n4Uj!zb1#9FhJ%Gdw5SCjO8?*qbEcrB#wMfuWq zivj@gn_Rg=3en@!OoVU~7M@W=U!!`|4)TGpxf0CF$GV<=EX`s+494~p#ZI=)B0^^uVEF47MnFssJ9faWfeiCr zU5Tc6RQf0)aGN~3gI8i7jM3KPX{LmN$S`27^2jzR1GtgNY6eF25>qzw9m+f}=s{Ud zv(bCPS=y@-%&EkIux%RKnAkLec`pj%q9V!w$>S_e(C6Eb36}yMrO*@8(^&6mv9ltr zisVvG>sx6nz%sXh<2I0Rm8i~od)kmIs=#&Bs3LQVQCxBRSlCLMtz?Y0kd;(qGll&w zJfq2fcgH#OC@7BDkHS@eM-4yl>Y#ncrYT;M?GiEkXgdb+q|U!l+IpHIud0Qbv!2%E zpiC=7fz@d?nuL|8USp?)i@3!JA`6>gGd3-ac(Sr)m_|#mDcW^EIq%0JGpl*^7$A%` z)YfzP?FL(I-$r|HQaYOIX}?3h&DJQ==U*{%A;rWM@@hy`pnBx&`P%@X7chzbYuR1(iDh&?r87h}byDOfzYsf1P zmc7Bj>ImPvr&Ox#s?F}L)JBE}Yo$SNPie&ShO5K7ckdSDNWq_$fdnBD?9B>wyc8N1 z4QVF!(Yt$ld&!in3KsUevn{`#_(36wT5(eFg35dtVb&aDF1_Mam)&mrW!3JzT&8?ZIW|&>UG~5qjcaO2MO>D;GE~h&k zHsp3Qw!9dpuCX|;y-G~#9cvSER#mw= z?hrg30gWjb7mSf=u0%<;`9e@qkTl^eobnk|nuVl9)V(fQ0}WSQ;Hoht@}>e??_+1A z_(;FDz^J}mN8s)6gD=}-Zs)LPJEx?XGY?1`kG69pA|UW+(W{S@ag|7hg;h@w$F}#y z(a@vQ(c=Cy=?6z1XUcoomNg+eE4|E2TX09h`N$1Ih-pcg)9MZZ&d~zt?TX4YnwiC#6&>hcT5Qr(cGJ zmlz4g9@WG#Y9t+3&aR_mni;T0{_B~7j^j#IfLuIOQ8AxXsXWY9*<7oOg1H~zC2-}%($DWZJb~DL(q}nOK7;aUln2~1#b-alUbb7b9n^yOl2Wf<1Iocl_!b$p2h1Ls`6wtd@SNP`brgZ()Eg<-2>5mQZ6=Ivp58xeS_D?3JbEh z9WMnEV2GZ(uTu2X=Z7--lTFi;SBU+pH|`QNeLiSfuq~#zX+o%PVqF93X5Ybt`t~b# zbVqRo`Y4$~VN?<(`{UD+`^lJU!$KY*a22DEDpgTbCR35G&F;EqeRkJ7M5K;Ub}$SO z#-~-87hH)0J>6L&6RMq}Kn6-i?_i9b8Gxjg=MbwnAVM}Xsnwo}>SPNPH;E`CEZnV$ z34wegj1##1$_**Fn#+4fCIUZ^cVuL75tMr=uj!r$CBPKkKmb_J z8BFJ`CLDJAR1}gH&NX>4TjKS45$I09&mBQ%BAfwg@Sw_CF;>33G9R)6ooEs#K?EHb zA`Wt|%6gSgaTHgId?}0?#VV&@U;_sa-E`_maXx9(cTmxSDB6b#)f`a|=deFVGeiG1=OVAlQ+(7C@AO@vSYqw7gPVR0V8J|0N z>+TmU&L8KyZrQshSP7d;XohN|0(D^CO8}`*E|rFM50!^XdrP~A&i8PYRDcz1WNGMohMlR`Fy!Z=u+>E0W-C59kKie&dZ?r-0BfmMa9Fm+MRo*OAYe;9Tmt@7mdt1J##R>l zjaEJJ0!|^8ik%1*pOm$eiffSw8gG_};@xn0aM!Mp!I9D)@uFNB*|T@|$jBghok1tq zfuh5Mdw1;_-ZQj|sF7d4Y=+zG)$4skv@BK8op!GK=EDZRFRa!43a1hV@G(Romb?ae zB4mYV7l{giuIdj|Cy+fE&duQ%DAb%J#0`pcKr&uw%!YLYgG+OUMN7NN_zpjrpO$6h zBEqyrY%CoJ>tS@9wx(1Tga1LE@Jce#M3|O?yyms)iJ3ESJ*64w;o>~)lqmRi(Ze!u zvMK8|{i5IWYb(Vtnv**$J9en$vfMx}vJ+t(`#29vyZP}b=E~VR@27Jz1?-LWGaRAx zgSmdN8Lx*;M42)z5MBuf#E!JtkA|$#Izr~QInuuRSuH8>9qXkiN}>a3uTQK`ro}`#i7cjyeXPe$+1FQObnZBmVfhRS z2yeFN`E}wIieW|9$HfwL96y4Mc0e3a5;d@15j!bnFRX=8g$rW5kVbg=ndV744>%KC zg}+{X$y-rJpjCbS(E9`B5h5$3$y3pY74pI6g2Q23T1bFori%~qMYxGf1eJQL$|p`J zHddUN>0Y9)=_GsBu?Ub4GlD|Nb%4NO z$_uJt;~)jV!hy7O>ZxWu^r|$S#x*(<>CwG(W`ny$Ia0$+0G35@bh>Av%7esDFlXn% zM-!OazGi{!$(ESrLG>m-K%}pX^bpk|{m?QUNa~nw>*bwuogByKk;z@JivA3bOI9sTq2SMf&6xP>Qq7GY*tFLsyZs-63EFJx*+Y-O>c zLX=oF+8vr+nDhc~jz=9TLzYP|NVVqVJZA@6)lT?PlHGcuFt#^o7Usn2{j{d^3Ndeb zxS_7f5GNv-gFYm@ufm#qMWW7vfeSK)s*i{OuwqI{3HBThR&bnF@*~dk!k12jR27!3 zD(f9!h5hXAK9m&4L1<*4_^~i(Mm(k~Aqinrmg?^&LOGVSJ!JLm`}o1QjGjs zzx6Y$SMf>>01Q53G^JU_3szW#%qnV;3WRbVvu)YIVaOF@5C>Ii{v6%NSoc<3Hq(!N z_X~n~zk63M&@*R>)q$eRX2ha9XY&%iKzh3d=HHyX8gX&x$s?kQ+r20zWY4>#*a@9c zHqIT4jfR0ZdwVE~pfQTZXApv$kX+~p9T!{Da(_=z%eLZnFandOk)XNgQEe1YZ#K(b zqkxV=Vw3VOHkMh<^Xt4iDx3}uMPw4*K}I?9Ya%=-oS}OrsPaXchsRit{0jbR%QMvy zaU?`G`3pI7x@$F>3xA^f-MiAZBxz}xI(6(!biiFY%)Bh@QfdO1 z0Y{|Qh_PFB3k$vAP-#FX2UTTpy-J#`QWmy<_#0(4yh>SNwcQUqZ`%y-d*3_B4*RhM zVKaOIY=&dD&2W3FEG&lUH?S90|0dnX7&*E2LNR241hPnWmitiJT&M@aIvp+t%K)~D z!)3oQ=4)5AL(6`0{8l~jv^kk&ecbell-v`iTEQ*hEbEzuh{E;+4J6SzR`Zu(b)#1l zzCgY}cZv$N$k9Wp<}XWX_`%vj@P7ANR|&4n0KuM1CucuXiS6sB-@*~H9bxzAVHwvZ zI~Kp6s)Td$IWsp3Mh0i3O}6M-Xb>v4P%H;kh5MMzh4(JDEv)6Z8D_T&uUu9h!Wkn| zo6^_K*#Tc_@FWmmT_MM8*`q4^^gQAKs317%Ei19|2(laaRlZ0^J80)hpHHw4S1>xl zLEdS0O-e@VGM4)=p@yYwroe$#G#*vvO_@|ZUR0U)VNqyBB6>l4X+(+&1V!#OgxOIX&~4p=GV_JGMg5!1$kd~YFlhvz39 zl8*4?L~C|JpsT2MgeT+nQIZU(Y?{G9^1j_yRjw2eXfD|yHZ?oN7k#+hTXmqw>@<&j zuYRnB0CU;2+j%q&gG~w=Le~4ioa7ccAgq$<^!5Z(BGsOoT7JEXUbW|kspHtXQ8*~F z*$0v=`0|9g=oZ7wrWP@6qBGiF-FY+o0kEVFD z?p16Yb<$+3p7_nWjp-pDdq>CZS`U+H;HXb-;0nBM(O?PS#=%7vMn@tJc2~J4YA5G; za7cK$tCy4GcUoB{C*Yr_(r#`wyZ}=i?1cifNt}oex9atk10rMq$H_odZX!N-Y#K-R z>e#MNC6Lru2`afSDdJ-qkjg*BW1bvK(xVrny+ch%>WCi_6<`aI$%TWyP4cNm_BVRn zDuACyxGm;S1^)8j!O$KQr=t3ypduuKA`oF0Mj3EobQ}#U_RIhin%XC_sChP+AFweIWHPIylwv2tG|x|o<4#qj(px1cLjO@*qyxg+)S?vFI>zUCkW42w z7g$y+5`!2E7EmksV7L^(`jMXsT1o#`)xbOvVEV$G(6j)Wms2UmBXKBPSA^(q()lRy0_GXAfzr6-v4)3P&L~oyO9@ z&M|oyv-7!C)RRjLY?uhlVg;Qg;b;b3o|IhGj<|mBhFHb13csbxN4{7QtOO`m}GH{sca7MsD6oD2-YW8E)=a$ZPBT< zEVbAkU&0u})crU)8HABq1mWv|XbPaj)qZEAD+g`&m;j7}R;j#gE|?v9`b@SI9YAWY zRh|QrQCCw(bK88~l{8J|V)9Hljd8I>lucjfv2Z|;u?%;}`-nOKJcl#Ic|wKyul-QwZ39BUS=d47k#ftHAPwFVw%fmT|Ay8Bp0rjkYEfQtKOcA3L3%5oRtJq`}z|(RB|F3~iKAW1r-^it=j@B;{Bw zLS;f7fYzB>(Q1uAkD;9PFvg;^`JQGy*$i~_goI6MR+SF+0ts@vrDYzlXoH{wfUAM5 z^afI7P`$Kl*@i07X;umrh*;~&IZ`L3NB#LnK%jA>1D>=G9>EOf8NLCh6A+kz;^?MZ zn6eXOlQO1)Y_c4-hnL!@Gc_xn@kAPt$s(TIIB6>;t##@5!XzN;YD<#CuT!#ROh_S- z)?clLrHvVKgrsXtXUR>=EeC$GY#vsnmaRzhlbA%*7PuBFGS)xrokH1C>a_}8W3t-v zN9Dzcu<>BMJ*uEQ^IWB4S4zpE0_g_JwxvrNK`O|MdeX(%=^l&dtS6nSfV#adbNgH- z*9NKjRi5<$ViZ0^lT$~lCVfbmsqG=oN^D3(O+Rq+l#AW-)pIS6?9K$Wmwjdha1qo% zPwOFVrRGh-Il*1*LpD0fvFb^ZL+A?=GpVrOg(X}m@>IR-cQe}Cir|hzmEku^VREP0V;Jgq-ac`Z%a%1Z~|yz)Zx73u|T z0*o=Y;Wy)1P6zKZDPGjbbf+~yjjh#M|Kx2y=+nLQ*psGu+Qpz5u~~?6jLhtl-JXW0 zx<{};ikBtd(OA^^tj7TUHqc}!0#7?}*Ft5gP5qItoTR}w(UN}a_( z=t-M{Q`pL#cr6$^(oPUTP|zMq;=Ng{$jIWb8juMVK2gflg@7Q!Slq1{Txmg8GqGnU zbtAcbZS)XhYt|ZwVudzEiE!S*dXQks(OXrRFB)KYQr%7(zYNQNGaR2H38!42~mE%lc$o{GP0ZD zruMm0W}OZiO_BjYqe+{NDU-+gZ6wro$k!=xV+NF6(=O)X1|@8@j=IK!QuwvNFQll# zew=1KhDbUXMQ;z#EbMnd2bgNzJ{i#zbWf{8>{3F9)sTx7Ci|qi=E_% zi~vv*oLu0zdcIV)P(^do=NSl~ncVy2V1H|opJM^ZhnJxbA~=V*bwmg{NSKVdKm;{# zgOCo_(tXdG;~6vM+A$!*d1ts9N>);$nR=%r)yf>)awJKHOEa3ZrH{MTp>T~2ONFy6 z>~B|SsaTkRHtou=XJ0q1q#`GYN$1vmcU?72!6@G9)@e>y` z5?^nMd|smnAh`l3TVBreF0oy(C+5#85G`Pm652!zvIs5zrdTVRC#S~-oIy|-U!0xy-}RB z7MGS+UQ{X%4(%G=y=P>vh+ZVt}F=Z`VhNBmS+`__h^iq=&0t7AD3XVlu8=%q4%XGK)FdN}7p zKcX6~RRH|?GK&SK7$03}wpdM1D&IOC9$DxN9!Eql>-Sjnh2gBG~6QB0@Nt0K|>~oq_%F6yfocWF>6c9+WAFD~Nc#DMN@J;5TTy&Uti28`q17+w@-B5ip3wHKlTZ zvHfhMWT{`Y`jK~=iYz6zXOG}S@)1x(o@wh|YL^(*YJ*G+1|^Pnu9P$ymIZ2x2HKWFvloyj;MToN83EuJ%(u#3f4#$&Tg-#UKSH`OiKk(y( zN8}1;WVp30rsZrZwgS#fH@wOs52|4lQ)C4kh0!e5)2SNP1N^~Zu#%-`Ofp&E>O{}N z%M}JtW5icnY)AFeO{L4e#Cgi8U9OI`iuy=#N%NO604|9LD#CF{Iak3=L>`~0rs5Hb z(?!Z@1dj|gW!VEYs|zWAJ5dTOXvfw8#VB?xh>K8~lKViT5*xu;1`#e}wMflWzv4Pk z4|PSm!83b~iz-hcB>Y&c*o!$qrcXt6jaGnwN-BUf)r!Z^RmATg!zxZIG`tEEJfpaO zAqbb~2r2?k&w4R8R29dUEMTclI!q_LV4S6>v<9+$=u3BkB#+w)M1=wg!Lo?dWN#Uh z>$VDmN-4pet7GdYGJn!u+sgWfdne+&wiV@x*#Yd8Xz#%<$1;+6oF7fT|W!`K> z-E&Z;iy8*4y0PD_X;>Q#VE{7#9cxK>-<9vjxj9n>Zn3#Z+Z%23)@6 zSGepB!QeuSYCg&Lw=!hNj1~l$DIh9tSRHfel8?37l`39i3@JY>dX&dY&g~Y4t;K$U z9qya;DvrER%DBpa4Hp0t4KBLM(utdzsF+NAR+&501Oj7u4H2nz?XGLp+bZSs&4FAi*0xGW%U0#ARh`mwK^SY>Ii_9IBoI(7ME!nG}7ucYT3s3lK zAo7b|>*?N>XqOCrh}LPZf|ZXW=+O?Z9gu~KLQ@u-5er5MJ(OoD?P9ClnT|>bBM>|Co2}sGqQk= zou;KlMjA}=IQHgJ@ws+4y zrKgYW9oi>mva!8oHR&i#yw^QbzUegW%Mzr*{+=>qNP}L{S7azP$mhal@1x-ynd1~i z8Igy%*Gt`gKSC!!stK!`>`|efh$d@N-Oqa6yLv^qko!mrxsPVv`w$wU?@W)Iz6gWp zr3;TSmx?H}FYY{(n#|E~PS7e_;TUtN0=taV!B#5+bX<8|kqKQv8Wh!|Mj)l>RnpOL zZl4hN8fRA~N_mlP5bQ9bMdWiYxHH8Gusy*Nnr1jdl03SnR#$n}3B#~rRA947UNvKE zx|xA|D#i)QPD5GQbj`KOYDK@wkd%d#a7pE)=^}doRH``=6?+u-$amK5d}_dg;%2AA z_B3I&i1WgHwOWXwaj+S7JsTMs8QEPLNniD{+PyZFs9vbbqhZ>}a(>0>q8cjeihwgI zo19TmHJia{3RfF3k)6$ZF+==5(GWP)MYV_HG>HgO9#Aa zJj<9N)m&({RNI*P!rHz+eW_4h+eJuo#N`qVr8~Y_L4tPLVp`mxxh7?bYGFTc9mq%xUC^lAmV3 zjj2S6H7)7Vxg$_+%myT@&bcZ@D^C+~+~U!JV`4UK3onqu%cs298!GH~4;<4zsJ0y^ zpQkJH2y2Xkj``e-u=PPDY&7dU;r*=P#}tuQWY#Ex@lA)S1xW{H*QM5Ebz>mMk^ua- z9#&X|*cN-Gna&t@tpTscr&gEOqkTvvLAbLDUkb!7Pbmx8L=mezmBqrtI;w5i5)k$Q zDXCI)$6MDPnB18i6LR*JK^mCOB^cT=+OMk0Nc*kQpe~@J zv|pRMQ$*p5cr%QBge2`|(lDz{j7i8E3m^o7CYuA)sczD;g7mY_64aLO?!@%e5wU@H zXF2CWAMqH5m8&Nxp(-3hib3gKjwEl=#-k*KQStE59EInH#%Ih#qc&6>n4_5U2_J9; z4`YiASCxuGH~xzd?0D>+I1E_t+0@WE2Wyz_PG&CN(7cu9K(-nW;*oRV0OENHw=B*2 zF)(S#1Ax!u(j@u)I>?$8JVVb z`owA;jYv?gOZl*ePI>{<)*&e!tJ6(|_xHMYWd)mi_vun$@62_uhsf1T$L_FZw)M>o zEKU$twiRf#+Vn>I=oH$cy4w+zNykHLPO=vWI7P8`le7-NQd*6gnzNFNoD!*Si~5o< z0>O3Y9~yW@|Csa=gsjufY})Xlj2ddLOsNLx$zN(Rpbm@;9ca^QVL#R*>J6jxm8JSE z2q`m>B3iQSY04B&6}GXR5!I=2dn{xPG&MU<)xuU_c~&S=8UZaRoTIFz+PPXEr7}YK z6qr*Jq1P%3r$nk;X>{ya6?{wi4`%yy)oq3JUVt`9LjsVYU9V+T{cg(OFYWVcLkbH2 zgz!f$V}>9QU^CnJZu#iJpuhH(iO_3O@ze-tj#G*39jOUH+!H^GfYgSgMIRpHOIUV` zy)e0l$Cx342y5ZlXO(J8u@$L z=y~#yRot)SyH=r;GQ4^?Zxz!z*NR};U>5%4RnqwbzNGG!5|$l-hw;wH)T=M$Qx%3w z0gv=A88X*R$1%p~H_RS%Z>t%=!~jx>BQc!{)YLW>Z=wr8)Vc|wnp1~Eg?O0a2y-UN zTC;#m6$fN-*bbAlq-gduun^r^r|QWJ;M5j}SYk=&I-?!oC*>j~Gs4-W!%}gcR~F({ zBQ8QuC(SBf444iwohx^fu(lx?Ky#%6D3)lgNQKFQSDx$uxiewVKMkGJtQrtvU9KC_ z?ucuzrL9H9`7f*2 zs-(p#J(BIn>4Nn#r9>z^CPHGQc9rzCmBNN8hnS^xOMaUUTTz7{;|RVYIacY!<`&Y- zi5ztcr)54@7uVk3>z+9?OU$X;g#(&igX1M7Vnu00nbjf*H%kgtour2RsR<&bVXD4n zSobR{;>?_GhMHN%uq?O#R&lNdCaPQt;WSgrJ}o~Z8Nu(JB67miA_{=o!vCj zrb}w!Xcn)sM|9MYOk>ggh5fF$=}4U`?A$U-2u#ccA>Hn=j>h!k`X@LqQ`}`WUx`O9 zz4eX@9*MQ;7cD#FWs3GTuxKBijGTno8sZ6;Fc$WwJC~TL&q%2Bbg1%5+Q1LE(2B(2 z;4xOh4yIgXWOBBmdLgFEAc;d|UQ0^RbDE7-!e9{#q9pQy7meTZGhz)~K5NZwQ+GR0d+k9=wFb(olq^=}g1!#&_+rY{zP1THnC#78|tc&V^rjU$UNF%m9iExdJ zJ=i+XU8@x~e=1s774*?A(5fnjMt6$GxSH?#&@9*wR=3bvkrHkKLlcM-Iz$ZzVdl9y zHfm&?RHpQlE7r0kEHoS#W-*+snv_GmxdTVCYsan-=NV`SLD92&Bqf$~kMFckIv9k7 z*#N2$Hb1F{Ek(i{ISDGJmkBxWJMbYz{zt2;twv*| zh%=EP?v;{}0w_4i4H;>eQM;r?Q(|V(WBrZNlh>+~-Vb%=BGXA7=Lr>Z?G`rmbfE2c zwF>8&d9GNh;RP)mv$}yzFZfLr1XnP}PN9~JVUF2}C`eKV%}zxYLs(xs+4L22%Be*( z$c(5qn;{<48f#8H7D{y6Ce@BYD~ZS=z>V&RCeu|Vs@Ir}vF0x^+O%~_xlTf3 z>CMFngEDh12>IKsof+W}(jJL;1OkSbV;M+Vi$NS+t6iP)ty8-Z0zfFpnHq(vCuR&$ zJFEJ1eK19yp5sOG5Dsf}J$Xz4uagjNUWe12#c->lqKjqX>#SbbhvYl;n0Rv8>--ue zqDM1ajjY>}gsi<4YmE>~zRH!W?pWgkua4?;E+XhY>s5{-@jRdP0)&;`*(1O2>|<(`V)k*UH9~hac6>b9*3u3Z z4=lr9hlPhyjijLvS5-jsf-O`rIRahxx@QK5lu=GfvQd_qsnb%)hL|gtI*BG6Z;Ux^ z6`~uFwHZzjR&lXKS*25jkwOgx<+MK=R#*BJ*=bJ%ZvD`!^2ytImebC`N(j?qOX4(c z+UP*7ht$ZdBt#ReY~5qX()1BK#3mn@R~&J--@2pjj5wyR_l<-l5uG@rZtqGV+hH;| zw2aG4;gBNt4?s#=ZAv%H7E6Ad*DbnD#PnHN1QKJnC=Jz=`2o^E&o1&Y1KFMn`I2sV zFUDyn#ERhf_0tCayR)1J%!A^P9>t{2@_Nk2*40C@XV0VZ%tVn<`Bvd_ONJ7X>S%3R z$S9lgy)8fD)v4ptogDBw3KM;up4t=XCwT(rJQ)YqEW6|&>&b4Tz|Y8DCz=e$rDNtU8w5C4pOSqBp@ow^v=Oa5UG8KY8`!J?Et9m(L+ksGAW!L4^F0R`(`KSF!yjX zoE7v$_2R+Flp)m2A38vq*_9~l?~#CDKOJK(Za<1<|Rm`ue%VjK}-`;ZlKsPUSAvZFeJ+< z_7Jl~?6hmWUs-UieQR567}VP4=QK^#Wjs}0iMSW@s<5&GA%vA|)CBox@UVQNEg zizXZ>^8yyut2|P5E6bW>D#1N%;N*7w^*Pws4OiW6$|Gp0xNQw%qdnceagA~aElm_V z8qOUM7ur#h*qcxmF~F4>@}@DFyG`P!Ad}P=BE{a{%)fP8Jka!UW`oY-+bC!yLs@-S z;{w7S5?o9L=*OrPST;G}Pva(J)? zfMgMh-v-As162k7%#c|0w5igDsoxg%8)aZZg(4JBYLgX@YLp5ms)0z0Nqe|A@fgxt zD=bqO7ZB3qE_zK2xCt75t2>wzPI;yeJi3D^m)v&CswW1Cj_L^>(}0w`F{M{&f@Huv zma#aRkhGeT!roMGCX?}Ivre&s8tO{Ld=g5Q*Qll|&7WMvV+NuwoZ5t0V;Gu3YZIsQ z=tL#vk{#2jl0Is*30Aiw)~Z+oI6lie%nD&3c@2R<5ZeF}-w)JOk(wo#yV_LX_NzN{ zGgURb6&7$_#TDAZ@zDh8&(rh5t>R+&4p;c0-J0k+Vy#w1N(mOYyvVK-x3GnLq*@wQLXnIbu&# zl#+R}?$spT1+*#Cm-HZb30<(7xqy|q%~m|$^aGc<*TN1_RI{8tEOWZfmCYedibSIv z*W$e?t;U5N{N=nm=@?&%i3^25j_D+8kU8k1&C5izHkOgHEt9B)0wp7Q0Zm#;Z8@~; zC&vSEPc!SWe!-{%4Kfw)pv`qxPk>6v!CiE@0cWHFZdOBtk1S>`t9n!~r%1sjy$)<3uusy3tC6VcSo51xAsASkh?uAnzrRZ7DK$ zKm-p@&DfQ8Kqb?IY0$aXP z7i6O;e!M$6fIASP|%j* zA*+;o5Sj3y8TfQ>gb31%QP>F?g4KqLjtQ%9p?qq7fm{%c(1vL7)0pAKZ;1mbY03mI zQWRq6VCAdxG37&~li@8S*ifE>I1NTKeU`n%JHP)(n^VElZLWrki##hp$@(CK91FSL z@%aNpMqhRpCXbvvaY%+H6;tquaEX;gwV)YQnzF{yn{sI|6O-vCA3@>M<_XF=Mw$DV z>$@iIE_JOW-1UqyrWr}3QSaH)O9_gz>K54w+w+oeMiY8_@OiBSP3@5kC2JiJNvQoq zxMVNUyE<(Pz2@Lv}vCL(I@N3JdAz4iXAZAfXP?d@-P{ zu51%Ev@`d8-&a5p>Dr~GG8mGWR8KC*q(n6{Jd(Qgy1zgeDaA2`m*i%G8t`)VEF?qkHiT zKjaEBB}?hT2?##&&zFM0gti5%+%lAi^WM8 zvHO{OSMPn0w)cs>E)nLgS1s2lS0Bx-^74YzBsb{?{y{I{7;@8z*DyLd(@T*`J=Af2 zWnV2;y@a#VI1PetO2JU6G>$11-?FLIuvW9KQ+7-JyZVRw_wsndxC1gQHdg!MoX{}+pG4z9$|ZTRl#FPHnv z{X_k``gd!5X^z9t67}}VfSK;{vKR1KFKR~KN-Jp9TXVcwNy0^589#RDrtzs0Q{&G+ zb?ns9Q%4S+IB@d#?S~Gy>ufG7lpzKOl?Fo?P}?T=mj|uEKFNA}CNZ-PszGj$waMEH zJ@7i#Gug+=Y)FxdhP&>Mm6es1PWY9q?kH!wqgw6UkGrgb!`Xs2-)t8o&MGlBsL+!v z*J!lm8e&YxB$l~ioL<(TnWz+G#sKjnZabCluSJZqiHv>x7qx8@83K%Ux3Gi5u8iD2Su+3XX~D zq09|JEDOy;&Eu&#S>rkgdtJGNAnRbsy@Dm}MRmlJXoYD-GAHf`%`L>3vKOokQWf~V zM$1+t!Q5emPJuR&IX7cr&dwj#cI&ZJh6MVuq0}3a zxUyZ>vLQ2|Q`0Po_LNSFZaV_;8w%eo*;`ikDpQGGp2+#o;!i?FDm?i?i&zO=n)0Ji z{bT8Rf>Tg8&J8ML?W?j?n(7WZN2rmN12CsEm6{>Tr${i>IOto-xMWv9qDfVcu(tLC z)DfPJ2%6Fnj0RwB9+@Kze#9#XqBM$K*dAG*7f6)DS%h7Rv4qZ^W-kR(P7vtdTr~8MMs2zHtjS=6P$&MHT*#46 zn6g(9PMxQAv??pMNCJxC)=9YME`o%Znp`;9Xx3sq0JIj7ogviZa-4K%yL|m$ry-#j7s%``4PTk+4@BG}*F8`PM@c{ufsnOX zDkd+N@D%p!PA)0}MFjT9Co_R4G`!^kBDcZ5sGPA+ z+oeXHuv8FIB?bfInCj#dZ7`|8TqngsM(ta(*F+a}l+Iva5)M|&r78~0Bv+(3(InVh zXh@Xe!EAp?fljR^-KAZaizX@B88#Fx=_uC6?Jo~R(v#nCDZ8>w72bR%1IPYdJ(`^X^HKvdkcuJ?{*6H>si2!)DncBmzD3S3Tv zn0KX7H@CcEW{Ajk^R3=Ul4VQS?ZZ4=)M$VhYDOR^GHbRdHY#IrpRn8kYSz7qAoxrl zveRo>TJJ%lIf_p97L3S;ij88PQi8G!Km$6b`=z3jI@+b?q}}6fE0byQt{fp zk4Z6~NI`by4!CSau5E;*Ov_c0swuDvQ%n4oHGL>?W)+B9Ws*6~&e&R&lsc5nY;*x` zitLtsTMs(fQp-I9b4S$Tv;?4Tz!?~ES+%X9slM(R%v3v+s#6)POpUT14Kkt!6(V9R zVNnlE+MOsecJiJwhE=H#C16Jre3%am#x}(kQj)hr+s{g|4Q&TYa9PGu7%jx)4+(N` zFMz9V3(;Tde!?TK&cZ+i-xpV#&;Os=z63mu;!3zi@*&yy;0i}bXpM!Duv&BIwk=~_ z#>SQmmL1r5jOm%_nQ1iB-R|zuVPgp7B1^#8WD^n~!LWhwJM0n&3kiV@e^`DXgbm?X z$ihNk|4o2D3FnfKAEf=>tD~#uu!Ujg1I@UOSFc{ZdiCnnt5>?KyYj3kX-n9zWa2YR z73)lZk`-=NiBY6Ngx)z8FN6n}nB|Fsj6FfsAQ1dW(56ZhG7gN(q;j*)ULH!WWFQz8 zR20h3S5tw6ccz1LpN=ON*m$G1Y0qA!pz$DDJSZ29p|#TEp({mmoKRvP!X&Mz81BV` zN57od6TzEnLPU!4aN1cBh9HUnKp(U#2LTK~5Ag(4#3JbFBk}@}fvoiHv|c({sh)>a zr0t=#h%PaF!;cxgffF&Q0yXW38nDcO7zc{0YXFUA_F5ZThYjF?le#dGXl;h{3(MZE^7UWI zYByrB+x&t?>>>)=w(w@f3eSjLs`Szc*(jqA8Un)^#LxDUTz|W1YpF3Ut4F9OG4A5o zEmA$L@_R8QSHdZ)BJugcBJWA6?l|#vuNTvPJ+7qQu- zsx~5Qpx92B?;`>O#KjV0<*J?yl+!V!u@aq(q5A|qMiJ8lRbH0HSh=!B1ps|EaEo{?i_7B;Ac*%U;oZ7pg;yzI@7_;-n4hE%e0?*B{bj68WU?l^#a}4hwA~bV7j`p0QvDHY8 z>E2;r!Ung5yi7bW;1nzs`BK0H+9pcL(!rGI?bF3qo%t4xL11=`z|iBM(}p2P5WG_c zzPfCJvM(`NumB=06J>+D&Tw3hwc;bfx^=JtqEy8QY|^|E8lis>QiX7QAvsJMamw%* zq*NsG?v`ujz6puf4AK;WlkuE}%0Ol9y@b4_8XzT3UpjsGlW5EhTK{k;&3Sl3y5%s~SiI0zGDC!DP}ekWNH+sLD2l<+oXxmw5POws zW5O7@jHqZnEZVeN((xu|qJxQsgG)?Kw8NlSa1GGZiB#y=E0qe=F`*`*>V0aK%cq9T$Uv zXEi}T7k{tBE(4UxEQ)KRSgtuN=;)!b8L>Dz^r=J{5yORB{H9?_@$U|f1mz97sBus` z;D*fhN(jpHq9Un=Ek{>8Q~+GX%V{RZhvCd3pYfJ}dMyxJPWRvpTB6*nS;u$$l@yjr z4@{M6E@eyf@D!UU5PnPd=uHMm164Yiqz3WJit>&$^2()}?grD-opB9bXy7axQR4g} z8(qC11Dz;&5ekG!ElkAhH8d8v*#4uJcR;TwLkD>Z`7aPBW;>tKr31gZ%DBq|FXkU2 zCE=&i4)8AXjU9IE2A7@2v2f>dE6JztQ^ag zwIIJsvw`f-9_bLDP37`=?RuI6{`Li&UNEgJGlkD1FlH#REBQRLS};|!62?2ru;ofC zR?$-?G#bGWu6BUaJiS1O)*tXL#}4rxav8=gI;HRLph{aIT!L7lbTcjAv!?I$G?pd9 zV}h1rWDT>oF}g}|i^&W0l-JuBTcs3q*VVFmZ)1EF#BLqyZERbmxJDk|foWIJj80G9 zd80$KyDp6kU5*J?(%CGPu@|QjYyp<@_#FzWjfq8=CxiP~%b?+=G$#%Fl|V26UPx90 zg5d&02?*}SZfgL@X0#es#6w+^2&0)vE)S!e0B@5(9nQmIl<|^&|I{|qfFKp<`c_I7 zjo<3RqibQwW|ZM4W|Wy&V!(fuC(^dup-IotXlW`PS-R51wCk{z)KWz^+#61;iza&3 zCHlG&ee9C00@gXrDX4e}1d0sB6W!|){Za0;1m`r?1U^&Gvik-S-CZTwMO(`36qzY4 zubXMj@!RfcOLTWg`A%8|_dGReO-hBj65VZnp`7M;Dhs#-_65-q0M=7djz!xjE7$Fp z%Ui`XL${|p(H--19Loh)D~D5}XE4z{AhLDM@p69a-2;j4L6Mm;9No|BX;1X|-OS`I z+n!RvVN5C#PxSkvkku)bhT@5yzC@4Ts~oh-vF(we=8SAk9k=qHmep0)$nx>&=}Ywa zeZnWB4Ku6i=D41>Y#GV6M4wL<@Njbq7&(kJ*WI4z_Yui!PF7bf2SO;RDZ@$SWl-x9 zeLl<3qK=*}FV~*vZx=KJp(GKcJ<;Ry706c=-tSTkb4;~$M2hlnPkW+!od5zZZxWEU zM2|lx1uF^6W#=qYMz$@{?-Pgz&vl^km!z!w%wFt<@156JyO+z zk=LhGTXQ@JtfOYMl!QfJN21?na#j|;68N6( z04lcTjOBHy7t+YPwyvjgYEsMRElZ|zJkclh#uFUcH<;-0N1M56m9n5z076l~lg{H) zDt)s`o?-(a5Wo(ww}l5ep)!rFr&Op7Ygq$tk>c@>zhgnUg=bNCWo?Jj4tG%l_R~=~ z)Y0<%c8bjCYP4OA#-#D zcF$SfvNf@AFtDo8)$Aa9p@1J9?1pfW@*i17eFnB_Op(GB3U(UO_JUcqnYR?(Lb5c_ zs`;t~h*5IGi$V-gBMx3O+yY~3lY})at3&G&{oOF9VaS6^X=%J0v6xm+BwX-uVl4!g zPns53l>_;eoKXVHybKv^aJ~VH6QM+( z`Ke9Kr>$sNxoUOqn$y>APb7AncmAFW_g=(xcBVKLldiHy37-<}gHy^=qJ#JqkJ7Ig z{fg7CHu}|0zdGnwC;bwu7=FU1#Jg#F5B;LhAMT>ONB3(m5viuL-Ri|X-hsMI;1&*j(erp{Ezx;H8 zSE9BoKb8)dIiNnsl424B2`kA@7plw#dI=sI3ka|B3+^Qm{YuyuqFV-eJ|Ibgih2cS zX>bI>V3bW^MjqZCwggXgLf{H$1p}Pz^$)oPDzevvv>E=CmgjMe@o^&g;uJfKV-lP1 zO_@JFPX?(bP5ce+;K(S%l*-eqTKpy=IE$@>y9fDkT?uQp(dy}WJ?m(NR?Eo-qjty* z2IyYa*1BRoKQ&;Prk;Y0yJ(Hc`5-a@ns0Eyt};4hrf9OTj|9*MM#6qqvci^B>B|s@;gdvR&>Y&L@1>x9r)>_>DiG~-q1}C zwIzBbCXGFWDgk@dL2I%Hsc>StQ)VjXSf;VN>?tmshh-QuGEoUuLOV!A%*ArJ&Bo(y zU)u}Zcq!7{Y7)e6o0F2_96YL|6N4RCRH)KOalldV(E|dp95CWlsJB{aV=oW#ULy1P z{mTlqEZi7X;7*h2*$N#YFiZ2W!+N?!Nftfv)B=#am8+;FL>3(lVqJj+K#VdL=rt|Y zJ7#x``v+r(s5zzc6SP1l5nLr6%o{1)bgApu4s}g9uaE0_ye*S)bn0>}Y_-)!9qJ`5 zup7{@cD+h?vb!_ra{ys_sbB=!j#x5jWx6^#jd*IA%9gDIs0I(L-=Y9A3d0pGfRo*w zKFNa;RVEO18 z058Y;1z0=`8328!nzzti-omi%<*c+1gN37DFt8Wwnnbv0ruB?r>S-hligdQHp}8D7 zLn+2m%OX(*aw{FS1PYXHXc*L>cES?z8f&0-`L$Del{!!e4ky-G4vY|g?w#spdWw-Y z7*U75h=)X%;_`$|E3Aa4bQg^nR?$;aPM$jyE<=bonC#8)K#ZP7KL@VXpnMHCi{WSr z!#fqds85NK&D{S+hRuet5^$PT89ctIUBD8(%wSC0p_RD3cn4)19CON^{K|b3y^4vE zJ>hl=9GoCqvojO?&7%4+0n` zIM`H(Q>^*5Yo$rF4zWXlzCq-{C$|;ix6zzR%*uPUEaF*KK7wSc@SM5CGx!*J+Vxah z^Kw#jj}P#yxgg{b!c=j*0fF`N=^2I>p&;qph~aYpze5H|cpC*Rv7 z^Dy)s85j=1Byg3nwbFVit`+7Uwp4=NM=*SJQwN{2A*4fq7Yf3M3{e%U zTDQvL*p$jb31`r@F(?GbT7JeOh%|rU%*|O7O3~)0yuKS~DVDyl95r@>sh~nEBn58r z2aVJvmOl#RQ<{T7n8QBzZ{W$`3JECP+0)M;AX*} z!BjH{mtY;n*9{DpJ4`{q7F~zwkw9pPFm94?1K@X z2;yTPYAUlSBDh1Kj{x#W^K|}F=JNZ`pR@5(*r;<(=n((r*7I=Pdx7gNJ_}_`@-cJ42vyAM&Y}gl+QAFdiseLjF^affjP33iXKpr!#$l?2gXB{7 z1Yd)y{zR0r7q&zU8h?Q@JgR#|n>Q^_Nw8GY0mQH>Y*8q4V`N<_^JIiK#71>busz%l zgKf3sMd){g1A)*M7*wvjHh(mYznO}`;ea5$jhr&*iiAdhUi?`ElO7y$F_VEi<$8J{ zB8CA?2UT05E~UIVU+R~GfkmJy7=iF%;Q|rxaMV%j<30W0$Z$Ag z%!$U0K>KApT0Yi64y^>Dj8V(kQZbn8Wp6B9ZDG3sf9{ zjM}1WX&S*1^aKcL$rO>2BCx*t<~;5)+{DB+vyjnHei+dQa8UNH0zDn{m0lW569Qer zdIjnSIPhqBWkScdQLs`#vjAT-#Ex6jkgbPk&}C*|E7<_yC0Z&h`D%mYFCl$eAMXc) zDj%AJ$uAkR6Qs00K2UV{n_ze>B@;PN3NmOB{st1u=Klnx@dG*?uA+-qc`Xcn%-(gO z;gWgi=k3bM3#=siH0QnB9f^9io9hoK`A!Lk@x;fjvZiL8m{q_PO^<)rKQy}l@fJA zlx0hU@6iJj@_}chSP9QL29SV4RK9SDvQnYwDXyDS#`Gx~C4<_o;opi@gvX^kBZaPI z0ARqfryL`j^OUAkvl5R+JJfhI-l=>F9-L8DsbM)jW8f=E6-5Z$$fF1e zT=J&FgOgdF1t?~?z#AQ1?=u#tUrb32qzlvTGQ~g+RKTk;uj8oNnhTF#YOdm9#3m-I z0svSq%TB@BFhOXIO8X(YzQ7wuQZBz@#xbpARiwjIac{&DXJhM@%qA2d)zfI$BfuH; zMHpwkb4653v`G1ko-6Yhf0ezDtY}WQ2%F3%x4A{J>2qyBR61wOv{H0+$KN^u_Z1ye zFm>?UiR-^mr%dPN_{|nW><)FQ$Db8$?9A2-Lc^D!^HW-Pb;r>1VEI5YruDp0fZ#d3 z@E{dFqLFsT70ZTr`Y!x#wey-`g291b|A3)rXkt-O)HP8s>$z@D)zk5gj#v+kTS^<1 zavfI-zS!$;g9Ae|I=UXI&tp1L8u;Ll5G;nNTeLwa>*?8&Vx3`Tb>}SDXbul{0PmzM za~#f~ub; zBzJU@czL@**#+naa$Dvb;3LL2LS!jTWBQbe4@h6sNT1xWU}K%J*gxq@9VMZ*tB@Kj zaIj!V>qOJ=V8=?-?#g-~a0oX8{dtr`ZCo?*U}C^sA>drfwuc@ZN)UFe!p>tjMN}&G zK>rT-j+9y!156~v%47#D%BdK_vlQ&9OshEb9H#=&KYyu=W(0-@=y#CYSilXfc9F9K zH3y2#gE0Go{_5$b=k_A&L9G_03WHH2U}dW;m7ituUn%80w!E+dZ|DcuDJ6V-engP6 zaPR+{pHj+1l2QO4zeK5Gz&(*^HMZ^pKN_^P%?zUUU;7kSf*!~MO~UP+!N0i9J5zIqy~h$Yh!?$q=gQrCoGoq#KPR3pdP2_H0-2wXl0vP{MI8^ZU< zN^~4~ISS|kA5x)2Qi>;SLF?f1Y}P{h!`e*1SfPHP4gL{?5US~`c`Iv}gnj1GbT4J| zlzK=hB;B0m=q^vJqlqw(!8E3&HWETYgphB+A3{hCA>>;4LkOuQgxtW=pPmb4hT}(( z>H5$-Lh1nWd_wAL>Itb2f$=1?fRKi^(e-`tj?R@+xz26LjXh^>7}+)0bIy9LXWgdg znLS-+Y#J0h5a3YN)Az5Fs(ZD|#H@ zG9NH^Tn+FG0qUU;xqi#Fjp5g~u54)av`^got0!-q{DitVHSy1%`RHtn%l7N ztKU8EvwyzwzL)=3;)XNNe&MK#mM`l6`rAvMY1orJ@P(F7FaP$|RkvMwRc2o3H+Q{p zP7$-x}|1y7ims=FavN-`^h189#mg%10jBH1g81muJ4EZK}EOjs5-gm+d3VFaPx4 zzkAEr+vorA#=U1>bw}seL+@UEUvb<1e`&n;wUtBKWg|zudEAwk{L{z&_V+jKi=Dgo z#%pWjfmuoirdAA0jXW^tj!q61cl8*0W>;$6K>Mcr)Hz$GMz(G{yD*+yu`M|sJ7;%n z<5_3h_J*@73`{)Q4g*t{)KX(bTX+1i0iG!vo0<@Lrb^``O)WhJa%39$W!GcObmQ&}y`h)eipZQ+j=5G&w^4d?2nD5^F)=lo)w|}0zQuERiH_rLS`2P0` zFFw5N@#D#hjeq@yb;(QLx~cn)!PuUQfBoJYH?2MSNAKLZf7|(OzrNysU+|wlJMbH; z?=L(4`25nF()aws&^Q15=-MN%+5PGZzl$`^`}M8I@4o%|+ZTh z;rM;mzx4MPHO#x`&fVE_-&}aw?W_Lvj^h3Q*th-SpI-6!m#)6^o!hn+SH1O{dmewf z^^s4!6??4i(w>ELU%z`_{V_|GeDZ<@Zu>U^Ym}Yo3|YQ$i|k3 zPq}yTU-z^;nu>n>8TIwuKRb5qr1RjjfA#QPNALUhTef~>^uQJW{6hEGX5+yAZ}q=< z-uhpje6#gjzVSroGt9>h4YUY%_N?_i7bEfuHAok z?5&?UM|t*!N{@0C?qh93r99m6!T>GV$UK)Sq-W|=0m+WfH zHtk>b;ul(uKktnnXlwrSpPvpu_WV0tcdh=ivG}EBN`~Bbj!`J?N-cws{yZp1OyJFKWr6 z|0@%}c>P&(!5w!;FCzeD&zO(9g-+8v_?&S|mJ!dW3HgW$2^T&^V`jvk={kpq0 zHh%K4Tj!p3VYp%J#g~6t^WA%Q{>R$?yXWZeR01&be^E^A^>dv_C z@Z?2=5HI7|J6YTmQGN+zI9eu?w`6#nO&8QMCrgA%KGGIl5L5cpg^~Dj2Rr5kUbXrLu!{P61fT zi*B-vXs|}Z0v*vb4a&eLCVj`qaC|Nym(i6P1nnGHb8F$OVjdx}rAyV$g>&B@*&jLT zrLXTZ7QQL~rZR&3P;I=xprWoYkxyxwCKZ8EoiH3d4{LltSI+O+xCIK1@j6fjNZyoRGTb<`VJ?$bJ<5{0kv={PSPo&r&koa0Fnc(&-cfb&$M9NCSD5AOi+Iza%6!Z~D?3C$Ie6(S#6o zMa+q0EN4Q4P?GNXtY;fpJs9N8>^Ep{o7nF;((k#1kYSb%O5_OpJzuIjJu@?NBuiIo z2-!%6G~Sz^894pwOch0d%L+D z6d^vSP^bc^8UR%bpz7SbWyV`Q3t-i5bhJ(7;0}pdEr6RNz_oGID!@7BE17Pz3*n*@RPwKA6p&iZ$%%4l9fx&06r?%@9 z+*ZTIo*qet;~_F#2Rs99!Zv`Ix)(8ZBb)1FT!eBFQr!u|OXbvpmI};eDQi5hnIdm7 z16C-yMk)f5mIH(-0kvq(F3VN3j#U(*>0@QtX*Xr71x=I)f-Yv#Ne()gQ>dEbRLy}t zaA+q4Fo7IZ&%zZX)zgG{KB>HrVX{(ihQWb-yu2I-CKrRn%qI@ES@5is!+4>$mPXMRSa2fduoju$qrqg;q;S1jmhKs=#O!m}r+(y4G>TAjftrFfek& zU`+$WAWMS9yUCJqBJe7lC3&79*jNT;XHvWZtl8LkE3FrHYQ;&O0n^hhxFy;Ztjt=` zvvy`2eHT|kV0niReAnSLC!w;{x_t3xDg>_Ong%;{{2ap;|3WeE87iF3+Brva1yulr zqHWp*J#C0e(40st)107_NiT=zE@=1QZ9yjscHS*$aKg@0p@pPlq_euDegOSwqFTuN z6B5J=Pj(%UsLns3K&sxtNo)6!eQb+=NRW6Pe?;!I@KP_w0Cu=dbbu;+hZMR zH5re_)%LcoSZ8}jS6gSa4VKs=w_1)fihC|rz2aIsA1Tcn0~c&J%2dKtjO0M0)7fvJ z)mru&RKhm)`wxVWRdgAzr)nFxJ}rz`wiof-NZ!hV*VDqSqdPZkK4a%ueOuQ9jzBfU z>U36>s%cPlF|SJ1f2e)L*3q22#ZX595OcbtJyEDOf9vSZvo>$p8mJOv!vaLq7KD>^X-+IzmzLS{WkPjh+#-PT zQ}YPeGE33_IUx^BTdnEk%3 zmXI?-!|?@#><^J8Bw2K!pOI)Z2LHn@ZwbhVdBR}5knY-M7C|yla9vD|Dov>(a$SB( zvGcI=Oe>S?2R10{E!V?S4~S8wJ1vUsSmQ=oca@Tsnt_%d5vY1X8srz0BuDCrniqv48l1a^!I zcEkx=M#42QHCBle2b|(=-BH$QDc!5efpH|=hXlb$*3r?`$w(IM>W*>Fiv>9EnD&8= zwpcV8>x@R*W3gDYyQ3ot?01BWFR%|WR?k4f@N2qECTT|*X<3BycUlWJRQds_qX zU3@`uy literal 0 HcmV?d00001 diff --git a/MikroMaster/20260303/20260303084004-Config.rsc b/MikroMaster/20260303/20260303084004-Config.rsc new file mode 100644 index 0000000..a06887f --- /dev/null +++ b/MikroMaster/20260303/20260303084004-Config.rsc @@ -0,0 +1,3978 @@ +# 2026-03-03 08:40:04 by RouterOS 7.21.2 +# software id = 2961-C4ZZ +# +# model = RBD52G-5HacD2HnD +# serial number = HCX084RAVFA +/interface bridge +add admin-mac=48:8F:5A:60:A1:0B auto-mac=no name=Bridge-LAN port-cost-mode=\ + short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" mac-address=\ + F6:BE:9D:85:53:F5 name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 2ghz-b/g/n basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b=\ + 1Mbps,2Mbps,5.5Mbps,11Mbps channel-width=20/40mhz-XX country=belarus \ + disabled=no frequency=auto hw-protection-mode=rts-cts mode=ap-bridge \ + rate-set=configured skip-dfs-channels=10min-cac ssid=vados \ + station-roaming=enabled wds-default-bridge=Bridge-LAN wds-mode=\ + dynamic-mesh wireless-protocol=802.11 wmm-support=enabled wps-mode=\ + disabled +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ + 5ghz-a/n/ac basic-rates-a/g=\ + 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps channel-width=\ + 20/40/80mhz-XXXX country=belarus disabled=no frequency=auto \ + hw-protection-mode=rts-cts mode=ap-bridge rate-set=configured \ + skip-dfs-channels=10min-cac ssid=vados5g station-roaming=enabled \ + wds-default-bridge=Bridge-LAN wds-mode=dynamic-mesh wireless-protocol=\ + 802.11 wmm-support=enabled wps-mode=disabled +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/interface wireless nstreme +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(17dBm), SSID: vados, local forwarding +set wlan1 enable-nstreme=yes +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(20dBm), SSID: vados5g, local forwarding +set wlan2 enable-nstreme=yes +/caps-man security +add authentication-types=wpa-psk,wpa2-psk encryption=aes-ccm \ + group-encryption=aes-ccm name=security +/caps-man configuration +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-2ghz security=security ssid=vados +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-ac security=security ssid=vados5g +add channel.band=5ghz-a/n .control-channel-width=20mhz .extension-channel=XX \ + country=belarus datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes name=cfg-5ghz-an security=security ssid=vados5g +/disk +add media-interface=lo slot=tmpfs tmpfs-max-size=44739242 type=tmpfs +# mountpoint [tmpfs] taken by tmpfs +set usb1 mount-point-template="[tmpfs]" +/interface list +add comment=defconf name=WAN +add comment=defconf name=LAN +/interface lte apn +set [ find default=yes ] ip-type=ipv4 use-network-apn=no +/interface wifi channel +add band=5ghz-ax disabled=no frequency=5180,5200,5220,5240 name=5G-AX +add band=5ghz-ac disabled=no frequency=5180,5200,5220,5240 name=5G-AC +add band=2ghz-n disabled=no frequency=2422,2442,2462 name=2G-N +add band=2ghz-ax disabled=no frequency=2422,2442,2462 name=2G-AX +add band=2ghz-g disabled=no frequency=2422,2442,2462 name=2G-G +add band=5ghz-n disabled=no frequency=5180,5200,5220,5240 name=5G-AN +/interface wifi datapath +add bridge=Bridge-LAN disabled=no interface-list=all name=xs-DataPath +/interface wifi security +add authentication-types=wpa2-psk,wpa3-psk disabled=no group-encryption=ccmp \ + group-key-update=1h management-protection=allowed name=sec2g +add authentication-types=wpa3-psk disable-pmkid=yes disabled=no \ + group-encryption=ccmp group-key-update=5m management-encryption=cmac \ + management-protection=required name=sec5G +/interface wifi configuration +add channel=2G-AX datapath=xs-DataPath disabled=no mode=ap name=2G-AX \ + security=sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=2G-N datapath=xs-DataPath disabled=no mode=ap name=2G-N security=\ + sec2g security.ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AX disabled=no mode=ap name=5G-AX security=sec5G security.ft=\ + yes .ft-over-ds=yes ssid=vados +add channel=5G-AC datapath=xs-DataPath disabled=no mode=ap name=5G-AC \ + security=sec5G security.authentication-types="" .ft=yes .ft-over-ds=yes \ + ssid=vados +add channel=2G-G datapath=xs-DataPath disabled=no mode=ap name=2G-G security=\ + sec2g security.authentication-types="" .ft=yes .ft-over-ds=yes ssid=vados +add channel=5G-AN disabled=no mode=ap name=5G-AN security=sec5G ssid=vados +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip hotspot user profile +set [ find default=yes ] address-pool=dhcp +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/snmp community +set [ find default=yes ] addresses=10.30.30.0/24 read-access=no security=\ + private +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/caps-man manager +set enabled=yes +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\ + cfg-2ghz name-format=prefix-identity name-prefix=2ghz +add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\ + cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\ + cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set builtin-trust-store=fetch crl-store=system +/disk settings +set auto-media-interface=lo default-mount-point-template="[tmpfs]" +/ip smb +set comment=MikroVados domain=WORKGROUP enabled=yes interfaces=Bridge-LAN +/interface bridge port +add bridge=Bridge-LAN ingress-filtering=no interface=ether2 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN comment=LEN ingress-filtering=no interface=ether3 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN comment=NUC ingress-filtering=no interface=ether4 \ + internal-path-cost=10 path-cost=10 +add bridge=Bridge-LAN ingress-filtering=no interface=ether5 \ + internal-path-cost=10 path-cost=10 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set disable-ipv6=yes max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add comment=WAN interface="ether1 - Unet" list=WAN +add interface=Bridge-LAN list=LAN +/interface ovpn-server server +add auth=sha1,md5 mac-address=FE:82:A5:78:8E:84 name=ovpn-server1 +/interface wifi cap +set caps-man-addresses=10.30.30.10 certificate=request discovery-interfaces=\ + wlan1,wlan2 lock-to-caps-man=no slaves-static=no +/interface wifi capsman +set package-path="" require-peer-certificate=no upgrade-policy=none +/interface wifi provisioning +add action=create-dynamic-enabled disabled=no master-configuration=2G-N \ + name-format=2G-%I slave-configurations=2G-G supported-bands=\ + 2ghz-n,2ghz-g,2ghz-g +add action=create-dynamic-enabled disabled=no master-configuration=5G-AC \ + name-format=5G-%I supported-bands=5ghz-ac,5ghz-ac +/interface wireguard peers +add allowed-address=10.8.0.2/32,0.0.0.0/0 client-allowed-address=0.0.0.0/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-certificate-common-names=CAPsMAN-A2A7DF3D5EE6 \ + certificate=CAP-18FD746E5814 discovery-interfaces=Bridge-LAN enabled=yes \ + interfaces=wlan1,wlan2 lock-to-caps-man=yes +/interface wireless sniffer +set file-name=24g +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main interface="ether1 - Unet" use-peer-dns=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=ros.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC list=NoWG +add address=10.30.30.10 comment=MikroNUC list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=89.110.101.17 list=VPN-Server +add address=80.85.244.9 list=TRUSTED +add address=8.8.8.8 list=TRUSTED +add address=8.8.4.4 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface="ether1 - Unet" protocol=tcp src-address-list=\ + !TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp src-address=!10.30.30.0/24 +add action=accept chain=input comment=\ + "accept NTP clients on local area network" dst-port=123 in-interface=\ + Bridge-LAN in-interface-list=LAN protocol=udp +add action=accept chain=input comment="accept WireGuard" dst-port=13231 \ + in-interface="ether1 - Unet" protocol=udp src-address-list=VPN-Server +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" in-interface=WG \ + log-prefix=Mark-VPN-FT new-connection-mark=VPN_No_FastTrack +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=Instagram dst-address=\ + !10.30.30.0/24 dst-address-list=Instagram new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address=\ + !10.30.30.0/24 dst-address-list=Twitter new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address=\ + !10.30.30.0/24 dst-address-list=YouTube new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address=\ + !10.30.30.0/24 dst-address-list=facebook new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina log-prefix=VPN-all \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp tcp-flags=syn tcp-mss=1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 dst-address-list=!NoVdsina log=yes log-prefix=VPN-Net \ + new-routing-mark=To-VPN src-address=10.30.30.0/24 src-address-list=!NoWG +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" routing-mark=!To-VPN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + in-interface=Bridge-LAN log-prefix=WG-nat out-interface=WG routing-mark=\ + To-VPN +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps disabled=yes \ + dst-port=443 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat dst-port=80 in-interface="ether1 - Unet" \ + protocol=tcp to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com log=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip hotspot walled-garden +add server=*1 +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=add-src-to-address-list address-list=bad_ipv6 \ + address-list-timeout=none-dynamic chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked in-interface=WG in-interface-list=WAN \ + src-address-list="" +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes +/ppp secret +add local-address=192.168.60.1 name=vados remote-address=192.168.60.2 \ + service=l2tp +/routing bfd configuration +add disabled=no +/snmp +set contact=@AmsterNL enabled=yes engine-id-suffix=MikroMaster location=NL \ + src-address=10.30.30.81 trap-interfaces=Bridge-LAN,WG trap-target=\ + 10.30.30.10 +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system scheduler +add comment="Windows Update script" interval=2d5m name=WU-script-run-schedule \ + on-event=WU-add-to-list policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2014-02-11 start-time=00:00:00 +add comment="Backup Every Week" disabled=yes interval=1w name=BackupEveryWeek \ + on-event=BackupAndUpdate policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-07-07 start-time=03:41:27 +add comment="DoH Cache Flush" interval=1d name="DNS Cache Flush" on-event=\ + DNS_Flush_Cache policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2019-12-06 start-time=05:30:00 +add comment="Create mkdir function on startup" name=\ + create_mkdir_function_on_startup on-event=\ + "/system script run create_mkdir_function;" policy=read,write,policy,test \ + start-time=startup +add comment="Scheduler for Update Certificates CloudFlare Quad9" interval=1w \ + name="Update Certificates CloudFlare Quad9" on-event=\ + "/system/script { run Update-Certificates; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2025-11-28 start-time=05:45:40 +add comment="Scheduler for Amster-Backup-UpdateEmail" disabled=yes interval=\ + 1w name=Amster-Backup-UpdateEmail on-event=\ + "/system/script { run Amster-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-02-13 start-time=03:41:27 +add comment="Setup Global Environment for scripts" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system script +add comment="Example add WU servers to AddrList" dont-require-permissions=no \ + name=WU-add-to-list owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# Syed Jahanzaib / aacable@hotmail.com\r\ + \n# List name\r\ + \n:local LISTNAME \"windowsupdateslist\"\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"update.microsoft.com\"\r\ + \n:local TARGET2 \"download.windowsupdate.com\"\r\ + \n:local TARGET3 \"download.microsoft.com\"\r\ + \n:local TARGET4 \"windowsupdate.com\"\r\ + \n:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n:local TARGET6 \"wustat.windows.com\"\r\ + \n:local TARGET7 \"stats.microsoft.com\"\r\ + \n:local TARGET8 \"mp.microsoft.com\"\r\ + \n:local TARGET9 \"ws.microsoft.com\"\r\ + \n:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n \r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n \r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4|\$TARGET5|\$TARGET6|\$TARGET7|\$TARGET8|\$TARGET9|\$TARGET10|\$T\ + ARGET11|\$TARGET12|\$TARGET13|\$TARGET14)\" && \$type ~ \"^(A|CNAME)\\\$\"\ + \_] do={\r\ + \n \r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n \r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Add Hosts DNS names to NoWG addres list" \ + dont-require-permissions=no name=Add2vdsina owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_Script to add target web sites DNS IP addresses into address list\r\ + \n# Tested with Mikrotik 6.4x\r\ + \n# \r\ + \n# List name\r\ + \n:local LISTNAME \"NoWG\"\r\ + \n#\r\ + \n# Web site names which will be added in address list\r\ + \n:local TARGET1 \"comp-lenta.ru\"\r\ + \n:local TARGET2 \"ok.ru\"\r\ + \n:local TARGET3 \"vk.com\"\r\ + \n#:local TARGET4 \"smtp.mail.me.com\"\r\ + \n#:local TARGET4 \"windowsupdate.com\"\r\ + \n#:local TARGET5 \"ntservicepack.microsoft.com\"\r\ + \n#:local TARGET6 \"wustat.windows.com\"\r\ + \n#:local TARGET7 \"stats.microsoft.com\"\r\ + \n#:local TARGET8 \"mp.microsoft.com\"\r\ + \n#:local TARGET9 \"ws.microsoft.com\"\r\ + \n#:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET11 \"vortex.data.microsoft.com\"\r\ + \n#:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ + \n#:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ + \n#:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ + \n \r\ + \n# 1st time runner, check if address list is not created previously and a\ + dd entries in it for 1st time usage\r\ + \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ + {\r\ + \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ + \_resolved entry for 1st time usage ... zaib\"\r\ + \n\r\ + \n:local FirstAddr [resolve \$TARGET1];\r\ + \n\r\ + \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ + t=\$TARGET1;\r\ + \n\r\ + \n} else={\r\ + \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ + hecking if DNS entries can be added in it ...\"\r\ + \n}\r\ + \n\r\ + \n# Check DNS entries and collect matching names\r\ + \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ + \$TARGET4)\" && \$type ~ \"^(A|CNAME)\\\$\" ] do={\r\ + \n\r\ + \n:log info (\"start entry: \$c \$sitednsname \$Buffer\");\r\ + \n\r\ + \n# Get IP Address from the names and hold it in temporary buffer\r\ + \n:local Buffer [/ip dns cache get \$i data];\r\ + \ndelay delay-time=10ms\r\ + \n:log info (\"1: \$Buffer\"); \r\ + \n\r\ + \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ + ation\r\ + \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ + ={\r\ + \n\r\ + \n:log info (\"2: \$Buffer\"); \r\ + \n \r\ + \n# Fetch DNS names for the entries\r\ + \n:local sitednsname [/ip dns cache get \$i name] ;\r\ + \n \r\ + \n# Print name in LOG window\r\ + \n:log info (\"added entry: \$i \$sitednsname \$Buffer\");\r\ + \n \r\ + \n# Add IP addresses and there names to the address list\r\ + \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ + \$sitednsname;\r\ + \n}\r\ + \n}" +add comment="Flush DNS Cache" dont-require-permissions=no name=\ + DNS_Flush_Cache owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ + "/ip dns cache flush" +add dont-require-permissions=no name=create_mkdir_function owner=vados \ + policy=read,write source="# Written by Phillip Stromberg in 2019\r\ + \n# Distributed under the MIT license\r\ + \n# \r\ + \n# \r\ + \n# this creates a function called \$mkdir\r\ + \n# from the command line you will be able to just type \"\$mkdir some/new\ + /folder\"\r\ + \n# and all the folders that need to be created will be\r\ + \n# if the folder already existed, it is ignored\r\ + \n\r\ + \n:log info \"Creating \\\$mkdir function...\"\r\ + \n\r\ + \n:global mkdir do={\r\ + \n # \$1 refers to the input variable the user passed in to us\r\ + \n :local newFolder \$1;\r\ + \n\r\ + \n # we'll use this variable to report error messages that may arise\r\ + \n :local errorMsg;\r\ + \n\r\ + \n # if the user put a slash on the end of the new folder name, remove \ + it\r\ + \n # i.e. \"some/test/\" becomes \"some/test\"\r\ + \n :while (([:pick \$newFolder ([:len \$newFolder] - 1)]) = \"/\") do={\ + \r\ + \n :set newFolder [:pick \$newFolder 0 ([:len \$newFolder] - 1)]\r\ + \n }\r\ + \n\r\ + \n # if the user put a slash at the beginning of the new folder name, r\ + emove it\r\ + \n # i.e. \"/some/test\" becomes \"some/test\"\r\ + \n :while ([:pick \$newFolder 0] = \"/\") do={\r\ + \n :set newFolder [:pick \$newFolder 1 [:len \$newFolder]]\r\ + \n }\r\ + \n\r\ + \n :if ([/file find name=\$newFolder] != \"\") do={\r\ + \n :set errorMsg \"'\$newFolder' already exists.\";\r\ + \n :log debug \"mkdir: \$errorMsg\";\r\ + \n :return \$newFolder;\r\ + \n }\r\ + \n\r\ + \n # the name of the temp file to create\r\ + \n :local tempfile \"mkdir_temp_file.txt\";\r\ + \n\r\ + \n # port 0 is unlikely to be open to HTTP requests...\r\ + \n :local fakeURL \"http://127.0.0.1:0/should-not-exist.txt\";\r\ + \n\r\ + \n :local fullTempPath (\$newFolder . \"/\" . \$tempfile);\r\ + \n\r\ + \n # this is where the folder creation happens\r\ + \n # `as-value` prevents status messages from printing\r\ + \n # wrapping in a `:do {...} on-error` prevents error messages from pr\ + inting.\r\ + \n :do {\r\ + \n /tool fetch dst-path=\"\$fullTempPath\" url=\"\$fakeURL\" durati\ + on=0.001s as-value;\r\ + \n } on-error={}\r\ + \n\r\ + \n # this waits for the temporary dir to show up so there isn't a race \ + \r\ + \n # condition where you call mkdir and then try to do something before\ + \_the \r\ + \n # folder is actually created\r\ + \n :local count 0;\r\ + \n :while ([/file find name=\"\$newFolder\"] = \"\") do={\r\ + \n :if (\$count >= 50) do={\r\ + \n # after 50 * 0.1s delays, it's been 5 seconds, which should \ + be long enough\r\ + \n :set errorMsg \"New folder could not be created at \$newFold\ + er\";\r\ + \n :log error \"mkdir: \$errorMsg\"\r\ + \n :error \$errorMsg\r\ + \n }\r\ + \n :delay 0.1s;\r\ + \n :set count (\$count + 1);\r\ + \n }\r\ + \n\r\ + \n :return \$newFolder;\r\ + \n}\r\ + \n\r\ + \n:log info \"Created function \\\$mkdir\"\r\ + \n" +add comment="Certificates CloudFlare, Quad9 " dont-require-permissions=no \ + name=Update-Certificates owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_CloudFlare\r\ + \n/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalRo\ + otCA.crt.pem;\r\ + \n/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\"\ + \";\r\ + \n/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalG\ + 2TLSRSASHA2562020CA1-1.crt.pem;\r\ + \n/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt.\ + pem passphrase=\"\";\r\ + \n# Quad9\r\ + \n/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGlobal\ + G3TLSECCSHA3842020CA1-1.crt.pem\"\r\ + \n/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt.\ + pem passphrase=\"\";\r\ + \n\r\ + \n#:global AmScriptsUrl;\r\ + \n#google\r\ + \n#:local CertName \"GTS-Root-R1.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-R4.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"GTS-Root-RX.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#internet\r\ + \n#:set CertName \"ISRG-Root-X1.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"ISRG-Root-X2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n#:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ + \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ + \r\ + \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ + \n\r\ + \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ + h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ + .com/dns-query verify-doh-cert=yes;\r\ + \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ + \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 1\";\r\ + \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ + \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ + ment=\"cloudflare-dns IPv4 2\"\r\ + \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ + e-dns.com type=AAAA\r\ + \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ + \n#/ip/dns set servers=\"\";" +add dont-require-permissions=no name=script1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + tool/netwatch/add comment=\"doh-fallback, doh-url=https://security.cloudfl\ + are-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Clou\ + dFlare-doh IPv4 1\" host=1.1.1.1;\r\ + \n/tool/netwatch/add comment=\"doh, doh-url=https://security.cloudflare-dn\ + s.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare\ + -doh IPv4 2\" host=1.0.0.1;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 1\" host=8.8.8.8;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ + le-doh IPv4 2\" host=8.8.4.4;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 1\" host=9.9.9.9;\r\ + \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ + /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ + uad9-doh IPv4 2\" host=149.112.112.112;\r\ + \n\r\ + \n/tool/netwatch/add comment=\"dns, notify, name=ns1.unet.ws\" host=91.192\ + .189.2;" +add dont-require-permissions=no name=script2 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n\r\ + \n:global InspectVar;\r\ + \n#:global RouterBoard;\r\ + \n#:do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on-erro\ + r={}\r\ + \n#:global Resources;\r\ + \n#:do {:set Resources [[ :parse \"/system/resource/get\" ]]} on-error={}\ + \r\ + \n\r\ + \n#:global Updates;\r\ + \n#:do {:set Updates [[ :parse \"/system/package/update/get\" ]]} on-error\ + ={}\r\ + \n\r\ + \n#:global PkgUpdStatus \"undefined\";\r\ + \n#:local Update [/system/package/update/get];\r\ + \n#:retry command={:set PkgUpdStatus (\$Update->\"status\")} delay=200ms m\ + ax=5 on-error={};\r\ + \n\r\ + \n#:log warning [\$InspectVar \$RouterBoard];\r\ + \n#:put [\$InspectVar \$RouterBoard];\r\ + \n\r\ + \n#:retry command={/system/package/update check-for-updates without-paging\ + \_as-value} delay=300ms max=5 on-error={};\r\ + \n\r\ + \n#:global arrDeviceInfo ({});\r\ + \n#:local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};});\ + \r\ + \n#:set (\$arrDeviceInfo->\"RouterBoard\") [[ :parse \"/system/routerboard\ + /get\" ]];\r\ + \n#:retry command={:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system\ + /package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"Error\ + \")};\r\ + \n# [:toarray {\"section\"={\"key\"=\"\"; \"value\"=\"\";} }];\r\ + \n# [:toarray \"\"];\r\ + \n:local arrDeviceInfo ({});\r\ + \n\r\ + \n:set (\$arrDeviceInfo->\"devUpdates\") {\"channel\"; \"stable\";};\r\ + \n#:do {:set (arrDeviceInfo->\"Updates\") [[ :parse \"/system/package/upda\ + te/get\" ]]} on-error={:log error (\$error)}\r\ + \n\$InspectVar \$arrDeviceInfo;\r\ + \n" +add dont-require-permissions=no name=AM-setup owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \_RouterOS Setup Script: AM-setup\r\ + \n# \r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n\r\ + \n## Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:if ([ :len [ /system/script/find where name=\$ScriptName ]] = 0 ) do={\ + \r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# :global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n# /system/script/add name=\$ScriptName owner=\$ScriptName source=([ /too\ + l/fetch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptNa\ + me . \".rsc\") output=user as-value ]->\"data\");\r\ + \n#}\r\ + \n# For run from terminal:\r\ + \n# /system/script/add name=AM-setup owner=AM-Setup source=([ /tool/fetch \ + check-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" ou\ + tput=user as-value ]->\"data\");\r\ + \n#\r\ + \n# /system/script/set source=[ :tocrlf [ get \$ScriptName source ] ] \$Sc\ + riptName;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local RemoveThisScript false;\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n{\r\ + \n :local ScriptName;\r\ + \n :local RemoveThisScript;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local AllDone;\r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n:log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n /tool/fetch (\$GlobalScriptsUrl . \"certs/\" . \$CertFileName) dst-p\ + ath=\$CertFileName as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint \ + ] ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n };\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :put \"Add Schedulers...\";\r\ + \n :delay 1;\r\ + \n :put \"Add Global scheduler...\";\r\ + \n :local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFu\ + nc; }\";\r\ + \n :local Comment \"Setup Global Environment for scripts\";\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] \ + ] = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-\ + event=\$OnEvent start-time=startup;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Commen\ + t) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEve\ + nt) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Add Update Script scheduler\";\r\ + \n :set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\"\ + ;\r\ + \n :set Comment \"Every Day Check For Update Scripts\";\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpda\ + te\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Commen\ + t start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n }\r\ + \n\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n /system/script { run AM-GlobalConfig; run AM-GlobalFunc; };\r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :set AllDone true;\r\ + \n } on-error={\r\ + \n :set AllDone false;\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$ScriptName . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n\r\ + \n :delay 5s;\r\ + \n :if (\$AllDone = true && \$RemoveThisScript = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :set OnEvent \":delay 30s; /system/script/remove [ find where name=\$S\ + criptName ]; :delay5s; /system/scheduler/remove [ find where name=\\\"_Rem\ + oveSetup\\\" ];\";\r\ + \n :set Comment \"_RemoveSetup tmp scheduler for remove setup script.\";\ + \r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-ti\ + me=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$ScriptName . \"\\nI've done everything, and now I'm ti\ + red... I'm leaving. ))\\nThere will be an error below, this is normal.\");\ + \r\ + \n }\r\ + \n};\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#root.mnuc.backuper\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#/usb1/mikro_bak_rsa.pub" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global GlobalConfReady false;\r\ + \n# \\/ start edit\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in Amster-Init-Script\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix \"\";\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\"; #:global EmailGeneralCc \"\";\ + \r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.21\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 138;\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global GlobalEnvRemove;\r\ + \n:global MiniDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n#:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global ExitError;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n:global CharacterReplace;\r\ + \n:global CharacterMultiply;\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global WaitDNSResolving;\r\ + \n:global WaitFullyConnected;\r\ + \n:global WaitTimeSync;\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global FetchLargeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global LogPrint;\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n \$LogPrint debug \$0 (\"\\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if (\$CurrentChannel != \$updateChannel) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"Set updates channel to: \$updateChannel\");\ + \r\ + \n }\r\ + \n \r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel (\$Update->\"channel\");\r\ + \n \$LogPrint debug \$0 (\"Update Channel: \" . \$Channel . \".\");\r\ + \n \r\ + \n :local StatusPkg \"undefined\";\r\ + \n \$LogPrint debug \$0 (\"Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n \$LogPrint debug \$0 (\"\\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n \$LogPrint debug \$0 (\"\\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([:len \$arrDeviceInfo] = 0) do={\r\ + \n :global arrDeviceInfo ({});\r\ + \n :local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};}\ + );\r\ + \n }\r\ + \n # else={:local arrDeviceInfo ({})}\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [[ :parse \"/\ + system/package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"\ + Error\")};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannel\"; \$Cu\ + rrentChannel;};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentVersion\"; (\$U\ + pdate->\"installed-version\");};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devCurrentChannelVersion\ + \"; [/system/resource/get version];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateChannel\"; [\$up\ + dateChannel];};\r\ + \n #:set (\$arrDeviceInfo->\"devUpdates\") {\"devUpdateVersion\"; (\$Up\ + date->\"latest-version\");};\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n \r\ + \n :global arrDeviceInfo [:toarray {\"section\"={\"key\"=\"\"; \"value\"\ + =\"\";} }];\r\ + \n #:do {:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system/package\ + /update/get\" ]]} on-error={}\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devRbCurrentFw;\r\ + \n :global devRbUpgradeFw;\r\ + \n \r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global ROsVerCurrent;\r\ + \n :global ROsChannelCurrent;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :global ParseCustom;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global devBuildTime;\r\ + \n :global GetPubIp;\r\ + \n \r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :set devBuildTime (\$Resource->\"build-time\");\r\ + \n :set runningChannelVersion (\$Resource->\"version\");\r\ + \n :set runningChannel [\$ParseCustom \$runningChannelVersion \"(\" \")\ + \" 1];\r\ + \n :set runningVersion [\$ParseCustom \$runningChannelVersion \" \"];\r\ + \n \r\ + \n :do {\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :local RouterBoard;\r\ + \n :do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on\ + -error={}\r\ + \n :set devModel (\$RouterBoard->\"model\");\r\ + \n :set devRbRevision (\$RouterBoard->\"revision\");\r\ + \n :set devRbSerialNumber (\$RouterBoard->\"serial-number\");\r\ + \n #:set devRbCurrentFw (\$RouterBoard->\"current-firmware\");\r\ + \n #:set devRbUpgradeFw (\$RouterBoard->\"upgrade-firmware\");\r\ + \n :if (\$devCurArch = \"mipsbe\" || \$devCurArch = \"arm\") do={\r\ + \n :global devRunning [ /system/device-mode/get mode ];\r\ + \n } else={\r\ + \n :global devRunning [/system/device-mode/get running];}\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n \r\ + \n :set devRbRevision false;\r\ + \n :set devRbSerialNumber false;\r\ + \n# :set devRbCurrentFw false;\r\ + \n# :set devRbUpgradeFw false;\r\ + \n #:set devCurrentFw \$runningVersion;#:set devUpgradeFw \$ROsVerAvail\ + ;\r\ + \n :set devRunning [/system/device-mode/get running];\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Error in Function getDevice!\");\r\ + \n :return false;\r\ + \n }\r\ + \n:return true;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global WaitArrDeviceInfo;\r\ + \n # \$WaitDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devCurArch;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global PiblicIpAddress;\r\ + \n\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :local Return;\r\ + \n :local License [/system/license/get];\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n \r\ + \n :set Return ([ \$FormatLine \"Hostname:\" \$Identity ] . \"\\n\" . \\\ + \r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location:\" (\$Snmp->\"location\") ] . \"\\n\") \ + ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact:\" (\$Snmp->\"contact\") ] . \"\\n\") ] \ + . \\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board:\" . \$devBoardName ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Arch:\" . \$devCurArch ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Model:\" \$devModel ] . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbRevision ] > 0) \\\r\ + \n (\" \" . \$devRbRevision) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len \$devRbSerialNumber ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial:\" . \$devRbSerialNumber ] . \"\\n\"\ + ) ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"nleve\ + l\")) ] . \"\\n\") ] . \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License:\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \"Running Channel\" \$runningChannel ] . \"\\n\" . \\\ + \r\ + \n [ \$FormatLine \" Installed:\" (\$Update->\"installed-version\") \ + ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :typeof (\$Update->\"latest-version\") ] != \"noth\ + ing\" && \\\r\ + \n \$Update->\"installed-version\" != \$Update->\"latest-version\")\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Update->\"latest-version\") ]\ + \_. \"\\n\") ] . \\\r\ + \n [ \$IfThenElse (\$RouterBoard->\"routerboard\" = true && \\\r\ + \n \$RouterBoard->\"current-firmware\" != \$RouterBoard->\"upgrade-\ + firmware\") \\\r\ + \n ([ \$FormatLine \" Firmware\" (\$RouterBoard->\"current-firmwar\ + e\") ] . \"\\n\") ] . \\ \r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# !!! The function is not ready !!!\r\ + \n:global FetchHttpInfo do={\r\ + \n :local Mac [ :tostr \$1 ];\r\ + \n :global CertificateAvailable;\r\ + \n :global IsMacLocallyAdministered;\r\ + \n :global LogPrint;\r\ + \n :local Url \"https://api.macvendors.com/\";\r\ + \n :if ([ \$IsMacLocallyAdministered \$Mac ] = true) do={:return \"locall\ + y administered\";}\r\ + \n :do {\r\ + \n :if ([ \$CertificateAvailable \"GTS Root R4\" \"fetch\" ] = false) d\ + o={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Vendor ([ /tool/fetch \r\ + \n (\$Url . [ :pick \$Mac 0 8 ]) output=user as-value ]->\"data\");\r\ + \n :return \$Vendor;\r\ + \n } on-error={\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=yes-without-crl (\$Url) output=none \ + as-value;\r\ + \n \$LogPrint debug \$0 (\"The mac vendor is not known in database.\"\ + );\r\ + \n } do={ \$LogPrint warning \$0 (\"Failed getting mac vendor: \" . \$E\ + rr); }\r\ + \n :return \"unknown vendor\";\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n :global LogPrint;\r\ + \n \r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n\r\ + \n# :retry command={abc} delay=1 max=2 on-error={:put \"got error\"} \r\ + \n :do {\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using default s\ + ervice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fail\ + ed to detect public IP using default service: \" . \$Url . \".\")}\r\ + \n #:error \"Failed to detect public IP using default service: \$Url\ + .\"};\r\ + \n } on-error={\r\ + \n \$LogPrint error \$0 (\"Failed to detect public IP using default s\ + ervice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n \$LogPrint debug \$0 (\"Trying to detect public IP using fallback \ + service: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={\$LogPrint error [ :jobname ] (\"Fai\ + led to detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :if (\$PubIpAddr = false) do={\r\ + \n :set PubIpAddr \"not-detected\";\r\ + \n } else={\r\ + \n :set PubIpAddr [ :pick \$PubIpAddr 0 15];\r\ + \n }\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n :global CertificateDownload;\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :set UseFor [ \$EitherOr \$UseFor \"undefined\" ];\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n \$LogPrint warning \$0 (\"This system has low free flash space but \ + \" . \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n \$LogPrint info \$0 (\"Certificate with CommonName '\" . \$CommonNam\ + e . \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n \$LogPrint info \$0 (\"There are \" . \$CertCount . \" Certificates \ + with CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n \$LogPrint info \$0 (\"Certificate chain for '\" . \$CommonName . \ + \"' is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={:return fal\ + se}\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global LogPrint;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n \r\ + \n \$LogPrint info \$0 (\"Downloading and importing certificate with Comm\ + onName '\" . \$CommonName . \"'.\");\r\ + \n \r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({ [\ + \_\$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$GlobalScriptsUrl . \"certs/\" . \$FileName . \$GlobalScriptsUrl\ + Suffix) dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Common\ + Name '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"Required certificate is not available.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl http-header-field=({\ + \_[ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n \"https://mkcert.org/generate/\" http-data=[ :serialize to=json \ + ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n \$LogPrint warning \$0 (\"Failed downloading certificate with Comm\ + onName '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n \$LogPrint warning \$0 (\"Certificate with CommonName '\" . \$Common\ + Name . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :global LogPrint;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n \r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n \r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \"checksums.json\" . \$GlobalScrip\ + tsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={:set NotificationMessage (\$NotificationMessage . \"\\n\\nNe\ + ws and changes are not available.\")}\r\ + \n\r\ + \n :set GlobalConfChanges;\r\ + \n :set GlobalConfMigration;\r\ + \n }\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (https://amster.vados.ru/; main/3419/3ee\ + 19780)\");\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetRandomNumber do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndnum from=0 to=[ \$EitherOr [ :tonum \$1 ] 4294967295 ] ]\ + \r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n \$LogPrint error \$Name ([ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\ + \$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={:return false}\r\ + \n :local FileVal false;\r\ + \n :do {:set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\$LogPrint debug \$0 (\"... which does not \ + exist.\"); :return true};\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\$LogPrint error \$0 (\"\ + Directory '\" . \$DirName . \"' is not a directory.\"); :return false};\r\ + \n :onerror Err {/file/remove \$DirName} do={\$LogPrint error \$0 (\"Remo\ + ving directory '\" . \$DirName . \"' failed: \" . \$Err); :return false};\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :global LogPrint;\r\ + \n \$LogPrint debug \$0 (\"Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\$LogPrint debug \$0 (\"... which does not\ + \_exist.\"); :return true}\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n \$LogPrint error \$0 (\"File '\" . \$FileName . \"' is not a file.\"\ + ); :return false}\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\$LogPrint error \$0 (\"Removing file '\" . \$FileName . \"' fai\ + led: \" . \$Err); :return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :global LogPrint;\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n \$LogPrint info \$0 (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint info \$0 (\"Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Creating disk of type tmpfs failed: \" .\ + \_\$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n \$LogPrint debug \$0 (\"... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Making directory '\" . \$Path . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={:set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]};\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={:set Path [ :pick \$Path 1 [ :len\ + \_\$Path ] ]};\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={:set Path [ :\ + pick \$Path 0 ([ :len \$Path ] - 1) ]};\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n \$LogPrint error \$0 (\"No valid RouterOS version: \" . \$Required);\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n \$LogPrint warning \$0 (\"This \" . [ \$IfThenElse ([ :pick \$Call\ + er 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"A script named '\" . \$Script . \"' does not\ + \_exist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n \$LogPrint error \$0 (\"More tickets than running scripts '\" . \$Sc\ + ript . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global LogPrint;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"No symbol available for name '\" . \$Name \ + . \"'!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n# read parts of a large file\r\ + \n:set FetchLargeFiles do={\r\ + \n :local ScriptName [:tostr \$1];\r\ + \n :local fetchUrl [:tostr \$2];\r\ + \n :local CheckCert [:tostr \$3];\r\ + \n :local fetchMode [:tostr \$4];\r\ + \n :local fetchMethod [:tostr \$5];\r\ + \n :local FetchString \"undefined\";\r\ + \n \r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n #:set fetchMode [ \$IfThenElse (\$fetchMode != \"false\") [:tostr (\"m\ + ode=\" . \$fetchMode)] ];\r\ + \n #:set fetchMethod [\$IfThenElse (\$fetchMethod != \"false\") [:tostr (\ + \"http-method=\\\"\" . \$fetchMethod . \"\\\"\") ]];\r\ + \n \r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n #/tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName h\ + ttp-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-value;\r\ + \n #:log warning (\"\\\$fUrl =\" . \$2 . ({[ \$fMode ]}));\r\ + \n :onerror Err {\r\ + \n :set FetchString (\"/tool/fetch \" . \\\r\ + \n [\$IfThenElse ([\$fetchMethod] != \"false\") (\"http-method=\\\"\"\ + \_. \$fetchMethod . \"\\\" \")] . \\\r\ + \n \"check-certificate=\" . \$CheckCert . \" url=(\\\"\" . \$fetchUrl\ + \_. \"\\\") \" . \\\r\ + \n [\$IfThenElse ([\$fetchMode] != \"false\") (\"mode=\" . \$fetchMod\ + e . \" \")] . \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue);\r\ + \n :log warning (\"\\\$FetchSring = \" . \$FetchString);\r\ + \n :put [\$FetchString];\r\ + \n #:put [/tool/fetch \$fetchMode check-certificate=\$CheckCert url=(\$\ + fetchUrl) dst-path=(\$FileName) http-header-field=({ [ \$FetchUserAgentStr\ + \_\$ScriptName ] }) as-value];\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$fetchUrl . \"\ + \_- \" . \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$fetchUrl . \ + \" did not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n# Global Environment clear. Use: \"\$GlobalEnvRemove True;\".\r\ + \n:set GlobalEnvRemove do={\r\ + \n :local doRmEnv [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ScriptsUrl;\r\ + \n :global LogPrint;\r\ + \n :if (\$doRmEnv != \"True\") do={\r\ + \n \$LogPrint error \"GlobalEnvRemove\" (\"This script is needed \\\"T\ + rue\\\" for confirm to remove global environment variables!\");\r\ + \n :return [];\r\ + \n :error true; \r\ + \n } else={\r\ + \n :set ScriptsUrl \$GlobalScriptsUrl;\r\ + \n :delay 5;\r\ + \n :foreach var in=[/system/script/environment print as-value] do={/sy\ + stem/script/environment remove (\$var->\".id\")}\r\ + \n :delay 5;\r\ + \n :global GlobalScriptsUrl \$ScriptsUrl;\r\ + \n \$LogPrint warning \"GlobalEnvRemove\" (\"Done!\");\r\ + \n :return [];\r\ + \n :error false;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Setup Global Environment for scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n#:local Resource [ /system/resource/get ];\r\ + \n#:log info (\$ScriptName . \" Loaded on \" . \$Resource->\"board-name\" \ + . \" with RouterOS \" . \$Resource->\"version\" . \" and Architecture \" .\ + \".\");\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n:log warning (\"This script \$ScriptName Loaded on \" . \$devBoardName .\ + \_\"\\nRouterOS: \" . \$devCurVersion . \"\\nArchitecture: \" . \$devCurAr\ + ch . \"\\nIdentity: \" . \$Identity);\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err;}\r\ + \n\r\ + \n#} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n# log the successful load of the script, or an error if it failed\r\ + \n#:if ([\$GlobalFuncReady] = true && [\$GlobalConfReady] = true) do={\r\ + \n" +add comment="Import ssh keys for public key authentication" \ + dont-require-permissions=no name=AM-SshKeysImport owner=AM-SshKeysImport \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-SshKeysImport\r\ + \n# Script comment: Import ssh keys for public key authentication\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n#\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global configs or functions not ready.\"); }; } del\ + ay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global SSHKeysImport;\r\ + \n:global SSHKeysImportFile;\r\ + \n\r\ + \n# import single key passed as string\r\ + \n:set SSHKeysImport do={ :onerror Err {\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local User [ :tostr \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n :if ([ :len \$Key ] = 0 || [ :len \$User ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Missing argument(s), please pass key and u\ + ser!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ :len [ /user/find where name=\$User ] ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"User '\" . \$User . \"' does not exist.\")\ + ;\r\ + \n :return false;\r\ + \n }\r\ + \n :local KeyVal ([ :deserialize \$Key delimiter=\" \" from=dsv options=d\ + sv.plain ]->0);\r\ + \n :if (!(\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\")) do\ + ={\r\ + \n \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' is\ + \_not supported.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FingerPrintMD5 [ :convert from=base64 transform=md5 to=hex (\$K\ + eyVal->1) ];\r\ + \n :local RegEx (\"\\\\bmd5=\" . \$FingerPrintMD5 . \"\\\\b\");\r\ + \n :if ([ :len [ /user/ssh-keys/find where user=\$User \\\r\ + \n (key-owner~\$RegEx or info~\$RegEx) ] ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The ssh public key (MD5:\" . \$FingerPrint\ + MD5 . \\\r\ + \n \") is already available for user '\" . \$User . \"'.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$MkDir \"tmpfs/ssh-keys-import\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Creating directory 'tmpfs/ssh-keys-import'\ + \_failed!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileName (\"tmpfs/ssh-keys-import/key-\" . [ \$GetRandom20CharA\ + lNum 6 ] . \".pub\");\r\ + \n /file/add name=\$FileName contents=(\$Key . \", md5=\" . \$FingerPrint\ + MD5);\r\ + \n \$WaitForFile \$FileName;\r\ + \n :onerror Err {\r\ + \n /user/ssh-keys/import public-key-file=\$FileName user=\$User;\r\ + \n \$LogPrint info \$0 (\"Imported ssh public key (\" . \$KeyVal->2 . \ + \", \" . \$KeyVal->0 . \", \" . \\\r\ + \n \"MD5:\" . \$FingerPrintMD5 . \") for user '\" . \$User . \"'.\");\ + \r\ + \n \$RmDir \"tmpfs/ssh-keys-import\";\r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed importing key: \" . \$Err);\r\ + \n \$RmDir \"tmpfs/ssh-keys-import\";\r\ + \n :return false;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# import keys from a file\r\ + \n:set SSHKeysImportFile do={ :onerror Err {\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local User [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global FileExists;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global SSHKeysImport;\r\ + \n :if ([ :len \$FileName ] = 0 || [ :len \$User ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Missing argument(s), please pass file name\ + \_and user!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$FileExists \$FileName ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"File '\" . \$FileName . \"' does not exist\ + .\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Keys [ :tolf [ /file/get \$FileName contents ] ];\r\ + \n :foreach KeyVal in=[ :deserialize \$Keys delimiter=\" \" from=dsv opti\ + ons=dsv.plain ] do={\r\ + \n :local Continue false;\r\ + \n :if (\$KeyVal->0 = \"ssh-ed25519\" || \$KeyVal->0 = \"ssh-rsa\") do=\ + {\r\ + \n :if ([ \$SSHKeysImport (\$KeyVal->0 . \" \" . \$KeyVal->1 . \" \" \ + . \$KeyVal->2) \$User ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Failed importing key for user '\" . \$\ + User . \"'.\");\r\ + \n }\r\ + \n :set Continue true;\r\ + \n }\r\ + \n :if (\$Continue = false && \$KeyVal->0 = \"#\") do={\r\ + \n :set User [ \$EitherOr ([ \$ParseKeyValueStore (\$KeyVal->1) ]->\"\ + user\") \$User ];\r\ + \n :set Continue true;\r\ + \n }\r\ + \n :if (\$Continue = false && [ :len (\$KeyVal->0) ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"SSH key of type '\" . \$KeyVal->0 . \"' \ + is not supported.\");\r\ + \n }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/tool sniffer +set filter-interface=Bridge-LAN filter-src-ip-address=10.30.30.50/32 +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260303/20260303084004-Diff-Config.rsc b/MikroMaster/history/20260303/20260303084004-Diff-Config.rsc new file mode 100644 index 0000000..99323d2 --- /dev/null +++ b/MikroMaster/history/20260303/20260303084004-Diff-Config.rsc @@ -0,0 +1,49 @@ +1c1 +< # 2026-03-03 08:40:04 by RouterOS 7.21.2 +--- +> # 2026-03-02 23:20:04 by RouterOS 7.21.2 +125,131c125 +< add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +< add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +< add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +< add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +< add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +< add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +< add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +--- +> add dns-servers=1.1.1.1 name=blsp.at verify-doh-cert=no +139c133 +< name=masterDHCP server-address=10.30.30.81 +--- +> name=masterDHCP server-address=10.30.30.81 use-reconfigure=yes +283,284c277,278 +< 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ +< 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +--- +> 10.30.30.81,10.30.30.10 domain=WORKGROUP gateway=10.30.30.81 netmask=24 \ +> ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +289d282 +< add address=10.30.30.33 name=amster-nuc type=A +290a284 +> add address=10.30.30.33 name=AMSTER-NUC type=A +316,317d309 +< add address=10.30.30.10 name=MikroNUC type=A +< add address=10.30.30.86 name=MikroYellow type=A +321a314 +> add address=10.30.30.86 name=MikroYellow type=A +942,943c935,936 +< connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ +< udp +--- +> connection-state=new disabled=yes dst-port=53 in-interface=\ +> "ether1 - Unet" protocol=udp +1035,1038c1028,1031 +< "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ +< src-address=10.30.30.0/24 to-ports=53 +< add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ +< 10.30.30.0/24 to-ports=53 +--- +> "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 in-interface-list=\ +> LAN protocol=tcp to-ports=53 +> add action=redirect chain=dstnat dst-port=53 in-interface-list=LAN protocol=\ +> udp -- 2.52.0