From 614bfd4e6f65dbf8a4eaa5618a534e4d26c367e8 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Tue, 31 Mar 2026 23:49:45 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at Mar 31 23:49:44. --- .../20260331/20260331234851-Binary.backup | Bin 0 -> 117409 bytes .../20260331/20260331234851-Config.rsc | 1211 ++++++ .../20260331/20260331234851-Diff-Config.rsc | 3683 +++++++++++++++++ MikroMaster/tmp/Config.rsc | 0 4 files changed, 4894 insertions(+) create mode 100644 MikroMaster/20260331/20260331234851-Binary.backup create mode 100644 MikroMaster/20260331/20260331234851-Config.rsc create mode 100644 MikroMaster/history/20260331/20260331234851-Diff-Config.rsc delete mode 100644 MikroMaster/tmp/Config.rsc diff --git a/MikroMaster/20260331/20260331234851-Binary.backup b/MikroMaster/20260331/20260331234851-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..5ded81eff064d47fc9522e22f17b251319c08f7a GIT binary patch literal 117409 zcmeFa34BvU*FS!4lD4^BXo0drN!d}_Ch0=iDWxn*OQ8isP)L)sgr-SIQVJ-th%D~= zj)Dp(BB;24tjeR}j)H=Uf(wd(hzpxQ^ZR_~-kZ!V1+LHQ^ZcLp|2`Lb@5x=hGjnF< z%$Yf7W)`km`ohw81&Spie|E-Hr$6BGddx&55RpjIq37r*j*j8z4va3e3PhqHUYNi) z9%nFPs=vIs4Btn-)`mi%hB945M182xswa9H(JQnXh>S#}6NrQusug0XmISI5DT->1 zp-?C!Qf(?FQEjTB%I5MkWKpO!0yGM*HI|a-_f`j8o{Eg>vI<{@y}Tk`PU~ZB{H2zL^sKF5)rv%8l0(;=|)5}Ql^ovQ8JxOMAyl56CxTS z(@lwJf=o9fqKPt%9Pr6>3nD6&>6S#)Tc%rabZa8&C*N;FL;;yjA)*;F&FA95Xr!^w z+L~&Y5ZQ?q>R9{`$8`b;pTrQ08^XR*VEIZ$s-=4c5?+fVVGj|-5s3}EpfDmA5>UQk ziwtCJOr%4`Ht0;08s+l%s)Hy2U2Jx{(-$-ql@^=qZkN*&44AwgliO>zxlJ~|(`J&h zuOu9=G8V550nZPPDz^oKLBy)6zJS81qd7#zXjE3f0ke@hqte2Na*jCzL0g&I6`167bn`pi zwxH9|t=hwaaymv{G_Y8(Qb0(J5K?1xNKL{aIs9Iq$>o`9bGsa)!ie?dcsQpUBc}zR zCaY1C!>DrnhvpX+Ul#^_QXt{oIz@?rW)T@@5eeDy6|qhReiJo*MqT`%S1!eFuh&qf8_l5EKI;hk+ zRjF)_q_?OWLVDd0>MNI~aKS9CFT8Lqh!o5g2&`q@!0IoWz3anda)eKZs6)|d3EWn| zm1LmCZw>gi6~1j9`LRZu}njb-6GR`E4;)=bZ3}R zkPZ+|kPz=mx>UHCLcSr-e$^9`7_liS1c?!wk`jX4!f(he{6>CuIHs4{3>1q5Qf>Xm$d>3a(oC9jE~QG;Wt3|tU0a| ze$1e1d*#S0ix9X%k3~d^ykiDmI3o2#;yk9D7l}wyUMCXbP){IetMJ>Z5RJ&Ma6}@? zLml~DA2%)?ktA?~HRE+65>r~^3I?5i#toVNS4ASy?$?ckT#HyFWI7y)1s5tC{~RYG zDnXq{grx{#5&jX5#$$R#adi+al+;&Z$|BLaIHL7&M6bmWZHOb<7$+&RD9BJ|QL&&z zLt%!Z{2>vwC8Cdr$V5b+5Yfj(w2KJk3<8rWnNWB?C!#Ni=u0BnOGG<}=xZX{Cn?Ev zmq1Ln{Ei5UGJQitJBjE4f#^Yj=pljVVS(rof#^|zm;(PE5j`#tEfEN9VOR(}B@itW zh?WaPD+JcpqGtqx%%_zC(JF!HIe}=kK(t06dR`!UK_GfjAXH8!ES?pJUJ;mr45gmd z3q-HU%JfEo(3a577@{o#(N=-zb%AI{4AC}$=pO<>&7hBCh~5^6cEu2F7lnuQ;VY=&-3b8!l*ZZsc17b5-WPmvBM)}@IDm4H)21kwnc zV?yq7BGJ)J#xDfxhv8I&QyK*8=;ER@o7;`L6j$o64g{SJ^jFXTB#$0gGSp*Z-IzSL zTWSi>6mu1F0Z|gh9B>pHC>1TFC0hF3jwqE1aYBy=z0Fj*KP)8f5{Pxu9uP=C6Nq{z zci;rnyHx@Ss2`|n==z}SAg7#BL`o*Hv>(=!(Gf*VQ!yb|n1Yq8^ozhG*2XYJo!5EA z!jcknGRF*F9FA4pE-lm`gbZf3MGn z`@L1BaHkJB5Qk5|^0YyvNA&gd3~vcXu8s~6W)~t@x1D7*%1BbXZ=~~^yr#TzRVNv7 zNI{V_UJ@=PMb6-P+EW}iM&hvrp*mr-XNgn**ho~hOk=D{8Ngtl$@ejmvtFh#xT2^? zP`lR3_n~&(Ez?lDHpw*9u9Y&)t4_Z}Ar4AAAPrz-6JrJ&z(9Gc(_FK`i(mB8;6+_# zvT}AvPh$3AoKP5=p)eRBT|`ugXh$IEv9Y0yPJ@Pz%r7tvEGjXT4mS-Oo}V|&R5DJ@FF}zgRAQk!~ES8>*lpp3#&+XG7YWAZ@YX ziWA2G0)D%kK;4+Ztm!TCj&=lG9vezX^q9dY0G@E7&~(%dV?!JX=$#@~@!^2t!hJ_p zR}I4rWNbvFs}pLYDqCPmwbO5NI86hk(Yy8G(4;I@#)2?Lg)FX9nHdW)ngVfhRL*L! z^q`*UsHrTQf0BP3(vuN@5HGkQzD>cHctx^65*Uz{1dhW@aN4Q@L8m``s?FgIr2DHU z1%ti-t4G#6_9P+&rHGFpVt;>E#KjRPrz65qPB<^hOyTDWt={9ST3d&m#gOUpkl)|I zPO%uVDh|i0!FjQgM&%+^$yA4tra>4var%R0-k@nnX=(A@b)t-D;t!0($RtJqm8i>& z3lr&or4)!w5$&eoXeXW*Z8iodM|)G981Z69iO~T$mMEXgBBM1dW>70pHqnQITFF{_ z6wtz}jCvH%hA5!;q3A)ziKT3K*EmmZr&uXPt1QN%bh6$A$JB;nZ61enS~>*OAX}Bo zJ)P;!R}LLmvhrUYc~-kF9r=bzcJvRKMmx$(K}4(_eO|u*b~20+h1N+VumMa#AVD0a zBSDOhCqblMI7O3?s&jjdBy{axXhoO8fo6gPLJK1_Gmt1Wh5p#wKw?x2gQRR53}LcwE7BT){wGVH(2~OvDuo#1;9CD;S3>ln-1{G;oE| zfvfU|F&@wu-@z3{3s;Qm;0l?8E37uS!eWCfYCNuJ8F7V`23K@AaYd&SS6F6nMduUO z1d*2LD4Oh(Y%Y&kzFOi%SY~h_-EsB46RUbB#R$7xjBMwlQ!xqvj;5?{(acD6G=_v< zVn{e+Bq2&9(iw?fGD`i+7$cF<2v!M{B;r~th(;2&8d-l(6hDa}QP>qjMz=`xX$*<_ z&tlN03WavZkl1if42g-KU0blcgGO@8ABqS!JUaBiDbj63@1BI1|x|S zWt6ZSxWfu$tdT@VoRLIpyphEFn;OZuwh2*l`NbCU@0Laqb*%u=8mBfm-3^d?aJm<# z`*6y|gPumIRQEEH7~30P_QCDGIOXB=pplG;A)<$jWE9YA$IVA^T5Kfa?0BNb@Z)iu zmf*AsAkP^|^sNT92KQdT=|dxl!bhNX;PkN+ZTiGWVrVDs>@t$5{}iXsj3mbF#%T{8 ze1X%KIPJyhE1bSIk`Y4{`{e64xcMzY{LVjQyjDzQ^MV5{$nYi4Ne$ zLA?7DPKWUGu#v=+BcP7r^b1Zu;PfL-$8h=;r{8e;9j8BVI*!u`oKE6&3a8UJoimbg z%QqENiytJCDCog-gDB-{w1}#jLk;ny5uP;0DOn`Z+6+_+kwjff_6Y>ekUOrvz2zH5 zky10OZ1$e!Y1w9ThIv|!xtqy1X?jodG;=qTEnB`?rK{8F^Lwj6HxVh7el}7nJ#3`Z z_^jOALD_k^1(v*g>x;O%Glo*5m=gDfF)Y%Ubd$o}!AUp$rKFp+Ug>73SGrjs-F*M2 zq?-_yZjfqH`v!>?xerMu-A`l`=msJ!)H5j$NsqsOgM^CXm1&X9*E)%>a2OFm0_}G_*D2*-$7HR@f4p!AVZP#gt|m<#7g+NJ!P2P1*H{ zxH5ZvBCgC1{c>%gHQqoAC9N3s8QKhL@gI5;pd~~5{9RANDLonxoc_e=3{GeDBu2+T z5jEnJj`;HJTimeQ-oQYI&s{I*20}knLC;Fa>rRO zcbxy5xU)IJoy{mp`e6k{JeOj$a4AdXQoTAwS$Vx&D*xZar7aOIZDCw08kIkcD@#U> zOAXGKPEt+Fmbp}aztUVEm+WS6>6?p*rP~ZdNwR3FmBrLWMN|k?20l_s-eQ?@j+fVfv~jGT!MVno4AR)J`zO8F!fpwm9QKJ<)U`V|KjU zP{1OmgGEk&7aV%5H^PKCPyPY-rr9vTMU_X4TuHEMEhI{9+@Z_RqSAtqgYxnVy7uhQ zW%SU2T^A9h#&_s4VC2w&g9{4t^1I%4ffsMD`{G=LAoVgL+4e>SH+B<;Y)eJ9#rMYm z20wgbbX$YIG?xech_0Oqt?x)C<~j##TTv7zcX3e7qD!3qsZReNTrlwnrd|EPh%A@_ z@6cj|v+P3Qd_|JA8p)UV()#(v2#RSV+*aOP%V4)CuGaFIDLlGZa7*o-3Q5RToSbT-SAGb znhIT&es4)}8F4it;Ua04SUc6{L6SFJBFVycBzaOPN#>J>@(mUUj0G&A5kBxq)zy>K zriIo{q1x2MsXkA7Ku%4%zxsm7-cNMi%V333Va4-Yo;N`H2h}$$IA$=CeWM};P?MQZ zVCaX@V-DXse3=F^AF)U+pj;+QvV9eDSMHQYQBQGz@FB&y@7j zjLITUO;(?u^px7IV0g~hAvSAGNlotMUccpXS76X^YcM}B^omiFb1UWP$?$u!STnN_f49>SP+Y_@z=#8BQ)t9fp`lDGG`>}6Fb0E< zIBsY6F$bVl#0RNBNHw^f4ofrnwxGIgRc`B4w=O+j{Bt`U6M}wMMTOJPQi~MA8ifNXRA{77p^-v`MhX=gMMIet0Y95!mZKO>z!x#h zfd+%3ddQUc@J|B_e9DZ1C?eysP$+~3iMe44u*M)Nq9KBZP}O*X8ZW9oyeP0cfixo}s?@VPIX2XHerA>%%hwFDinEi6>BV z!qZG_K95pk9de%I>X2(<9FdSnX!2l8Mh_6DSTx^EK>$2zCpxeMiw0Sc)2UMFj)&iv z%M*0^Jx*q?RZaUqxM4$*-&TX)TC7NlDG1X={I;5)AdTWHb1g8EKVMD?T*-nmor>}ya85hkmcZDEx)jYBC^ zTqx=ZyP0!Z&~FQ*S2%+{TZJ>=b2=UAc5fBDsxI^__!nYfLM&1*6^jOLm#2DKx}&<% zneKE{Bk(%6+~F|cF~}R);e8Hsw!&~$EmPrz4)+cO->#l?D_&@Dl>w)f-)RGjN+Rwn zGMAZ)`uQAg2k`cnN?Y{QN`;{^d2Ki?7sqc8{0^7GkMdTg`x(n5s!}6*2cUNZdc@zj z9!5nTB3BYzilZ{pWY-u}M+DUgK`B1P^#r6mLNH>m##L2;AR-g7F3zh?2%_^vf&gsP zG(e8k80*e}>~aanxS-@P4Pd86;4T2}%7A6>=K9znKSI3YrhBV{)n!fuGG1dKT@lD- z7YPKw4Jy3e3b)hda|M7srY<(CXy+IF%Yc3PC9uVc3g4t4U`N-5y+D1s9I)Lk0c&Ku zNH24q7ugG-b^~hKB~ZobLAk(PqcO5+fK9&yY@)>9sV;}p3r=V)dg%bqxCD4yMIdMk zy6gbfS`#w>Y`z3=6DihElkHwl(CJ~hs8uSO5rpLuK{WDAve~PAnOwmxugmxg6g~^^ zt-!xnyC(Xj8Y4-@$S{jvv8DYQS}I$@H3>uSYBp#q$OMi@C43j?t6O86+R5f9Fb zM?VM9-7m$a1iQD&m*#eQf;KtB)pyQQST2w$-4R;ur9w*zR0VzMRW_G9J(B(B-8`?L zU7$GUBFr9_3NyOGJ5^4aO!_ruP7mPsycB+-zk6t}`Xyqk4B{!)}B3FJN+ zj+ZbnAYWh76Sce836Ld&=5eb-dkL3{h$`kGT6A5`l0>*y^6JeSO<}R@15sHZf zGrFc0jACM19;U?S$U{k(^AdwOFKpOfxSGglu4X+ZcAbPLE{t~zY;0YeU5OtC)`t`w zRr07dM#SOf<0UeF-;pgAAoj=bcnU_w^&cgo!)&A->}sHo6G_x#^!*QknP1tJE!^Nvl!zXh znDP!ztXqdRkS z2aayf(aL1hDb>zuXK=dD8JH%I?UiEqOCI^UMy4_HrO+71nke7L7}R)~{xcK`mC5v( zP$=Y(X&CeEGJP%-3b|z(U1P_utN9DA@mbERO#7 zu()+qwL9pNSey1Q*VdSS(0?AU>+~>U|3y8F1X&4A3sl+MZuAd5K_3j*I26k-t{9?^ zXY=%9*%VU)kr2&R6=J|-Ty`f@YZvYpp_5wOIVicB_z?3(U^`6iLm)D}ebUD8> z;B`-R`ZJ_4@Y!rFxyV|F7@<+tKtu!;`!zbSioF{hSY=^HI6x@xV8lmRGZCFQg@$W~ zLc=dep<$9&Y~tX;)iNhA%TIADK$lyg5q%{N7&lPDg>6}h4`%*NmvJ!rPoXiKR4(7g zu#!S!cuBFp!}&(BePc!-rhVgpm6~6}QMnHX9fenzA*j%pC8)#)Lsd#x@G(%vLJBL-DE;3Qz2*zXO5=d?4Qr^xbt z7Xh6BP+b^QuLc#FS6-T@+RhLoR>g}TvS{kVhz2!ctTbsn3>h)%UJB9>hKy1}Cf1pU zj;KcG6_%71jKrd&(s2K!(4)fW(Q5Q)3H>joKROH-qlQz`?{~5#N&Z64$Alq`YRLF1 zPlYVW#4b&?-37q*wzVuL$h zeYGhr3>vQnO{#+DX|PU>x>|E_iVp)PsDT@Lr@0)i8BT|q4-vc6g$kj!;p>CkkL|v zStXf%$r6GV7wK;lhHI>bYZY+XtNpIv^mJy#EO$fqMc&%IRS2U=K5UzVq}$#}a^`9X z7zdW&3J0A0Hw0{n*q^zQEAW*~6h#pMCx-)Wq7FC#shd)5bM%1u6lqM#$FE4)tv?i1 zmA=pC^C6Tb;ZU0X)ljSvCy@)KW!%`O3DbNpjjBZxf(l`xxuaTwNLE^-D(T(Z!`rlc^3y5?c%7HViC zgDx7C&q{G*{nd-abu{AIA`IA44H(A&$2#3^Zw5>e@HetjRHDYvy&2Ot&rs+*MoVj=fTM;4?ne~=Bbxsa!~b9l)hOfYKEJozxRIg8eYKYiNN{U7>!d5I$_KWnysqg>L*~Vo@Ftx`bE}X~xtrvD|G7Ov-S3C0!idsOTzZmDfLg)xROOLjAEtePHR=5L<)8 z6{!4o#8p>+TrtH&b6lPFN#1`)DbUv+SIm3S8rNvQv&tKEZm6#mpmLzhGU+InSAF?40hezCa0%a>B<7qb{hy{%W_A)nC+Ec*WpAomFVmS%pT; zRA`7_WeP%10rv~7IyM|7Fu?~r)LeNt27D{;>A@sO6zUk8J5={W1X%Bfx=VbBSl9cZ z{t_Qbt%^FTOp7zr`4Aqrku>VqaFv|S@N(X4+7X0wRQTf-mtj?Nr{jA2B%7zg>9`)H zXR6a-x{NUZvMw+^5Oh|dwBW$B3>?5#Hf+I=kTMvEAuYHG^avq10u|5lC`fw8x}f@r$Q^%m=*t_pNs$kuBr(EXAm2< z1e5@ku{T`N$yHX^f;h%F8piFAaI7>YPpXp_x7D+CZ6T1S$&-7eNm{88->Iw^7|UJ$ zDvaPGIhec?sBs1DlhUyDg^TSKgX0`KOV@K$Xl))1zZL^K!#M?OoS{&oX+pG!M!rs$uh-+v znK;eIX#q|Pal&9~^v$4HyRrxro8t6Ulsv@=jjSj%z-eH#)T|dolPE05t1EC?h0}95 zt;T5$PHblzi7gh4ZE{@ldHq2)#SWzy?rJztITaekOQE3~DKvB=g+^IZXe>cJmHhFE0+WmR*$Q)s=NtxMjL@{9V&o0+8L=cQ#^23WHTvd!HGn!C>W^=sWJXdct&lQd>(dz`A&e-I;;^Kva``u+uh!!uKKV<&N z1VM<4B6B;7$($0cA7#+TUkKEk(k!97*=#Xe%s4DpH%rLOHCrsX=1fbLx%<_cFy;#F z_@IR-($5tV$vjtx)y)+IS~s%zs&20wdi9p$=Bw`MydZV(+~`|B`*FD;>Dkn^54?YJ z!SpMJH#zZh!>rwnySDEh)um}>yJh=g8=m#8=>4fV{)GpN(@PGwX#M--Hcw7Ey#1!_ zudTgSx3heTqwm0sTNWkQqB<;(3XO00_0ZolpK2ONeA4*omT66P3=8^q4ern?aBlR( z!%5~*^H$}&H?_8L+KP3TpV>0x!<>@4C%*TU<@Sa7?@chYp3!giQFS`?cT3?zJ7W}!8cdjYns{P<%Pu$cfG&h^5#z+ zFfZ$wSDQZ~&);&^;3tLezdO+Qy5m*-?@l=}`K}kPz3I>AW|TJRFfm4l)zqFGVD4{D zjMk58(^wEfhA6XM5JKh#xRHn(2E9&r#oPwJ8yK1zk~`ni_ygzF%TM(B^v;vs#nlCd zm+yUm=W-n5vOt{|J-BJ=mhY~3`?^)P9Lt#dk;k|+CtCOHtQ2AOtEaA7ws&#+Ra*_A zcE^uzdLdt!ceAeDGXq;3+jG?)Jz`@|Jo0*Sis8t+!Q(fc%u5Y6YI7>O=G+~7-YV&P z&2H}-qmOhL(*Ahon_o|Q_or6*Tm8NIT05k+{73HzD~=D|{O+9Pfy+8<+c@*X&WFE0 zvgq~s%^PP8-V}Ol@zY0hd++GKp3XgS?&AR)_x0QM{7KKsD~K(zg|=BKm&3sQELD0-EDS9d3lfA%y+F%$An7kRzsxv%>E>6*H@`3}UAp;A%FioKi>#eFAU~1Fyxj2k@P~A( zZg@CYxyu~o?%}NI&|>3g@qq{4x#`SJCeMyH-q@Q}+V$uj>S=lWs{6V$pYZbyi6z%| zDegG-@%!_4?f;dg^(lRN!U z^y=5}(Yn{`_bxB&`0*o8k6-@c-rgJj*xB-`l2}K)xtC)V&AGzS%A0VevSL0p zx@+?9Vn)ep(>!18%o%dSiC(T}Q*1ws_}Mt#^3seuwkMrESYasM<-M(J&ieRg5A+!O z`>9jL5#PSQ>&vyp(fx0{>5F#`rmc$mxXF0W;0ND4HR|L&_n*BvZ%)&~<$9s)Yj1I& z)HP+sZx#0}zxMUQS#2vmsdB9!yLfe*k{8Qfe)PkX^-q6u+4x_(IQt)J@VI?!%Qg#N z>$N}Wtu8P8`e*0NJ^Q;qIqi!nE&67i=xur_>GQS^%%1g?Z^<#Quyp_Xd5!LT^8Mlk za~>NWm;UsP)?Q`ZUhK2(hj0Gz)agDAXLf$`u2;q-o!V8}DEEy6jT*c?;TpFkda*fc z)!@9*&#k_3Y3e3jvn{_auk1ZO%H|+|gFNv~%Np8y-Tmu{`R`0M9R2R_bzLg9-et-E@YAFN zRK_?UX6qKAOAn z;j$mw`btK1-04r6&@XP>6CI{B@4n)Qy{~gyS?^mb*MBn6@YtcO<)5y<>xYvK4lZi3 zIrooqx>C<4=c*qme({MvN1a&q^3u1xQR}BZT6Fr(m4{#4+4`d=TKu%J?Hi-}1%JAw zYi4NNV(Y8=4WnA#a{Fi52d6B!Z&zZ`pl&~&$bY;v-ddfzsq5sAXRSL|mh#;vCk{XN zVom2w&2CPLT6o}^Kd$>>`3F(AA`<|$| zzkarR^9R|&tgMln(>_dj?U&i@P0t&ze`WK!Ce23NdT{t>=LSzH4PAMpBIZ!XjH|Et z`t3WKjPIKD(0w;_J>6~8*tvafpCa_z*+FpMxhwa9FI#M!-u3+($7h$_;5z*AsGH}1 zn3(oJth=&sXU*r0L&I)ZG4k1MPi|QD^z7?KePnFD*x#$9{P%v>EMIf5XxZv*6`h*T zS$!<)$zSp}PFel*uw=`dOP7smk?1|Kqi^mFnO7Zo_O~^|-L*$QxZSh7QC#gu^M8wP z^~O~lMlWc3*+KWbSy?fz*}sk5opfDo|K7nB6QAuphCG|v@I%iV+C(Mv17yR5cz9qmz*YJaKj zK`ToOb2F)nah~A3WWV5OkD-s~-Wj>@%rCXgt3SJTW%aTvJ3Vlx<^AP1^e#!f{yj%T`F_{Y8xpc>fB*cgUJI^2^-b;%ljm-~X~pmk1G<{7JJjmA;+ZXiPt9Ag z`kCCdZ@-*9Yp-R+pS258j`bY$&Sj$>e5H}wx@F<7FJ)ZQC}*21qhn~@!BgKJ`{va> zy_}CH@4oXH=j;vZu1x5&^!A)_B{zJV^V5dTqt=uT`ttCAJp(_8zb3xhp^BVOGPX^~ zZ#p;n;OXa@?}?^{-}`$fcIneLXF->{nmywfkn(+XpO@xM{-xdgwI^ncm^*lV?vd}B z9yz>9?DA9f==|k}p8d4nYu9}B&VB9yG-37uXRnplCg1-~P2)k=w~+b;BhAI?Zh+x= zt{d=F#X}?SxxVt6-wfM~+v83jAOFRPXmeZi651P@o14zAw;8UJ(@gv6*2vRzX`_*6 zH;gG-+T_-ER&KbZ|Gh(A8ku=bhyKpn)7NdwZvJgS$BkQ0^*PaN{kPv<{nq!Xhp(tg zeCbc`{D#6K&QDuhb*{zA%`d!F@$tClE^Bh6ebmXxp8U~mjQuux?rXf^%ax($7F_WO z+3#GLH~iXZ*SwO~@sS=w#y__CfpgzaU7MeKw!!1G7eD@K?T}x)>XQ3hzi9jBX$Nmu zwYguy>hjs|e|JaG#&zFic{7LYY!svJ-L2)8ab;k4$Km$Pw=`ZO+#Yt*Z0v9XR!yE(^Z$?5LQwA#v@*6tYVI8PhKqJY@4 zCkEz0$0WNi!|rxDJ;4cHU(n_C1Yqj?BNPfLR;S~kPzWA6I8Ly&>ZM~Fvr-jWVc3PO zL!eqCzJpn%50(vRWS&-D-l0qWu%QJ-r4t5@8al8mGrYpKkRXNWa!hbkyBv9SU=U;& zrlEP7*%F4qYQJF=qk___4glf_fOy0su0xk0!%Iqw@(K&MPbYb?vtX4IhEm1_EN6=8 z71d=PXArhs7;T=A6U)2(WB0@-n1>Qpx|D3&px~+(N7(rX{($%urTm%@o03vyP~IA$ z4^x;h0Fy1INWdlpLo4zHt3QN7AsBe1RUO%)sMzos>q+2=vI+=eh7lIqX!ym989wsL z!6S!{Dn8Fy3zo+Uzqi_lWd@NpEFXviDZui9IAG#eY~09HEG38oyY6O1m@KUh2@4}u zf;4)h1x}4v!-K^K{x}A|)8@#o?;Cgp8IQ`}unpC)&?~-)s`0ymP8iVTQWXh^Eu>K! zlHI1lUl_`(-R>Oe0~TXu)Md6$gtFHzt-R6hQP@Z2P@>Ch_R4A>?9o1-FGKbgQ_T4v zf;aNwl%L7;Q+lEgg+gl+HncC^#pymyb-6ybpCY-3SxCyS^LOxEOl%#&tkN>q6*sjkl+{d}5^-YwZI^S4b#&us<^ji+0*6Z#JY1Aq z3Lm+6kXFwFwmEJNo_49{>1Y25xhbOF{q?M5S*s;CML0Jy{J%FV8!7YQoF2P>I%_um zGjbIo3#+)H4MWvkDi;%oI4sAE10qh@^cI_MFQr0j60@jdNut*B%Hm9nFt-XUyaTy| z*?GFIM8>V1t}rJ z?z^PT(Wh4aIIq^b5-y>Zq%RHc-LYu+iQ(If4J^TeVOZxjHOl6wa(QmAFM^Vs(-1)j zTiMTw#U}31ne4vruIV%1Bo2D?Y?Fs3PD?O3 zEbcmb#$}z`-1z49m7znmo3YHRB`LJ#wKZ+-Te!%5_LrYuwd+4XY(zHCXF{2+5)GT% zTjBC3xvuy|A=ecexvtQ755859W=C`0cPaG2ei8b8yvb<{|LGvdI){Wv1`3tbtIFtI1qD)YznE5CERhK4aWQ@Cd1(?Go{*PuM9YY$O9b89835@ z_2F7x#Vcl&fOiV5m_>`ZnwSrU<*C6~R8ltg0##JemY5qCizV7*k^T_Km~u>BI*F~1 z#irSw5(s#k#2y5aZ_@xPmh`H99d#fYt>4i#J~ zR46#HDDYV1PI5?OJC(;W-KZVzu^a#+*f!s@;o@&(dgtF5S+-XBKNDHDZF$^9BOCK~ zNA{oQEZbvQyl7-4Ki9M2(qkS-&n2pn)7&Z%x!fOX=rBs!Lt#DN7N6&n81X)332 z=AzDo1x7OP9R@1&WAdcwrWbn|!0hE=^2^X1xQL`xIjhQ?el+zEdYCeU1FC>RV@b>Q zRA^OJ5P)tOs|XSn04qOrUx~*ntfz|zvsWM@5w^|Y@COhi)F5RZ5ENvE#u|vd<(XDc z0b)~9LQs2ISz?n8(Ri?C3e7kMAJBxLp=AN7zBLm2wgKd31J?a!-x`T^_G67wH$40; ztsO(PVsofVTc5rt2BP{uz`(2o zBa)~ABkE#l0c$j1TqrFp9$={kj3~CI1k|y3fy9*IXh#jGV?2Z5gl#9=8%4z)p; z%kdJI$rP#;+4?D>AZd9DEN0p9n3(^8(k@}Ll8D?=;UFY=*Q&dx_5T>kWlhj0??Z$G z!!XKqAr)GU%;`Fr6vr^$-8zO1^hDR$>njw(2%kKrCzafVI#$<|t_IX=%#>qw3bO}U zR}8KZsmb+)192M&OiC;F`fF@{hszV5Vet#9EfKr^Vkop?lu^=^QMVC}qQYaQqMprE zgxaFRlm;C}3iPo=<`)4IgCP6?8$J|J-voi)d1(F6BZa4DAK0_3^@#fh?tXKgWpSeu ze~xslIrQ!FE;HZu-rV)-g(FlhTlBFm)=(pVUd};EV-HIPe zdHnjo>61yZSGIlP+i~Nc{JvMHS<^Qwo*H#1e#cXf^!V(^o^h{sUKHEXYrdyNm%b+& z{&>R^8=^NP_jsXMT89N~*SA`G`M43^Z5Yz(;Ha5LChoZHuCIP9ow@Gn9=emGpL4!F zY0dA&cXW05-`_5L^VN_s;_AYUv12#n963HG``HbzjCF`BpY1dxTX%Z?SC*R}n~`Dr z~)Vha7-OpE4jomYAg6Gh| z8(MxkzsnsXTL0tE{mV0Nux@{JUge`gvgz&xslR8Qy!-3&_N(q{d)cUxiZ_>C>#V+U z{I~_1$hhf~2i)UVp52%jDizQ3vPdG>qFD? zuU^o;w1v%aqvxlb=&z`0?nnQ-|)jVo;#u^FlzE zA+z?ZTVqOZbE3bm(}>nh+9x!!>|d00*#*4OthoHJnire`}Z4lXz~dCg^p ztd|CCn=pSx)3wj!EJ@#Y|J{3!?b|(M#nGU3*YjhatGxe?;x}J?{qCnn1yX0fcl481 zkB<5F42EkvJh}I?D|VG<4mRp0Z^@b$b;H*u#`SR8Zp*#J`1V!zPCIG3@4i52$?j-h z(^0W+-1JSyFK#I)GJKeN)U#vL$ODhAdSFQ5?&BMlcWg4Ee8oe(XH~D+*6yCc-|bv5 zXTtQN*H_M1ct`Ei_uYM@;i=iD2XEhW=8+Z;Zgx$d)qj8P>Sa9=d&Hg0#!^MI$8CJ* zkH^0M^uCxj(?h!zcJp23Wd&>rWoBQdf&o41;eCq1f-`<=%>pJh==lAdYq;yL`-&UOyV(qpjJ-stF zx34@jYQVye9_aP@iL4rjWk^7i>P|OVEd~@ zK{JLKq;ATi)n71`Hu^#@$JFz33|d6YlXj#9s>;$ZpbC8!d9LIY@?4=6l^&)eS&bH! zCQ56zNK;#vB(mw_wW(1R81IncBI*1Xp;?NN1n`+D6_J zg%Q`GRA}882mN9LJ0l|UL|b8f9MNlW(o|T4BSmUm9Hqu)Nb}i!)n%+7;j1n~!S~x7 zQym#>4@LA95LTHS7OrKoQY%ku7EoZpG89%!S%Xq=l};Mh)3c#sWnzA0vLM?Uk#i_VEOPM$WY2AeG+P0GG#_#P9Mai9X{%QPx*wM?S|@0Mv);P+*I{1y!y zYPiQzz5uPM)xW;S)PSNr`=PtZNxdkC{Gr`UKED?m=mbpY$Y#_Dq$}e3KS#kz3eo0iX0sW(FG!0crwlWHqfFLx zvl+9%^;x-QtTG|`%d*Vo3Dtoz%!-bUL>1QcZC1v%zXPW+SY)+kRprSn z%+BtfBeT%lJ=dbJ(4t~ta#ntJrp0Ww=C*sQs!VyoNlw2v0Aq6_B~jSw$?wIAWno^&^Q_t(F1I;M@@JTP zvVUoE4y8$1m&S@;T74NT$q79L95yA7SP5rabh7#Ptf`q<9Vn}}e9Hk{w49?&`s*=E z>&s+Iz+q!~`u}YVkl{(AN(Pv$=@zpoE7x3D<_kdZT(H*E%NaTAE$L<{_l*ks!r5y8 zqu;++D*^jOSoW~Y=_cp;rR0yvWHK>c{-qC4xLflg05F$MNQ@jQw1zf2H?9G*01jNS zzcN}YG^J1l(D<>Hj4+yqA8efmrq?)wSnI6r+7j5~6bG(dsSx}2%3Dm5I1R&l7;^*| z#y>GMh~Lm#IIl8AZ^0(zIB@+=%7KMC=1&G^uO@77U|81_Ulgp!q>P0^xy1Sy$p+tV~1dJHypW@}x!iHtv-ERysZ?CCRZ>n8mq>GO}VM^2rU znP3o-t^Ja3lW0JD8zVWISyIrh1tFiXP@LUcmF}8B|h1C;k9h5l?tg@|;Ws_&bz=@@) zkjYG=3$H$6Y>6~0OH#2Hu;`K=i!Q;*K_2KG!B&`pc#f@NOOXs5l3&cUVwSzGKqa>Z z2+G(x=x*|LolaT06&m?VMD((}@hnEeu=Nj=R9N=jl^rhNAcYb;S6<5CCb^e(D-k_J zBs@$+j}XzL^4{O*kwMGHKGc~+#(@n9PE;&8y|MU#yiy}Ji((H46B#$gGfka6TuLN1 zy;8n8LjGc$eBBHdVT&iQPjR4WBmYi;TB&2k!#e9#wU^)MAYZ4+*O`F3PX5tF9wxnB z{>}DO+RAx6ZQx;fo)EgoKjhpb;T9zV-)vW4%B#Lrv!Vqwd4 zX}wifWluzD2wp41sXtEraO#UK_Sm9=rLM|8xYGkTo{QlyudeQRmw9kygTgj`a4buO zKuU!b6jlUwz!2RvJsoYD%kB(h_}sQ&xz}Hn!8F%2sHN#-cEA)Haj}IE?>ZDY`oN^P0 zMAhw|LQp_zp|Ow#Uf61S$S&rJ9Pf8dVWR=qvjAOZ3DxIx`X~7OUY|E$V+8_({7O$1 zSM)Zep$5rifXQWe&aj>~@o1*bMzqnrp*Ok_apk4=@ql z4`4D5T$5SrF8Kl~wogEB%RYSq^Y_Kq5YJfX5C^U;nE>TL1SQ1asAtRqN^mwrl-TIj>JNyq`{Dy zj4~6=+H}4-XDn>S5`?rw2c2$@Gl=3NlUNQln)!w)<6tanE``h7gqnnL_2oeyKymfT zh(g%8jQ2(7LSgxQseqW$xOFJY6b6K3=xb_fSa3BpHJXA`l-f%M$L!;)WfL^w&4LRA zCb8fGfk_qh^Naa_MuyBTk|WWO%5g*FQpO5cO-)T&AmBz23au$s$SO@tj6s;q+tp#B z&F5mNviV%qTJlUY6PYWY-J}jKy2j-x^G-vEGC4;}py4!X=dg&>wy2ZZ7@N-(X0l8N z{-=2f&n@EyX~#}<*C{o@@0{xN2b^iFg+^lQ-XRKjs(fh}YN+MrptyDBin+o-Yi=N7X9XEUv-&VURN1nr>3Tcd5S9X zatfbqgchPX2rV=aCW1h0LDY3*-ix6nI_eDNC9Nt@(M8JKu05F-a{v6?p4kI> zcF*ZKFt=xZe$N4ej1+YGt6UzNJBmUW^JRmx0F0xMJXIqk3axO8rjY25p^&iw)lxGG zS)#X(o4V)yEwL1my_~V32d_X#`UBQGgsUr}sJM(m8h4hHg;13~FC;T_p_OBzxYj^Q zD>P!K&|p`(i~}jH;6O?%G!zHe!Ek`3%D2!yy2$s@n^C&T4RnYn>vu0?)^(}p$=V$z z3WgM0vd!6^&gZ=&86EIWY)R1O4-RvcJ1ue-o`aISv+$ZIZErEqIW_e>Fll*Ayk#hK zm5zqjP-N{-wE2?j9A1#uz(4;L$zhGXB87DRE0VV$dqrC7Iz1c^G6?}m-j8^tp~G8c zb9vGNPMhC833~4NsT0GDk{9?MR#0^QTawcUFeA%=cMOM&qJog)!dT%Y($7ypeE6kk zsiWKFJe-8^EBwmn7!Ogiv_bg2_&)9O*_1ld(1Gphjs!^MTCrm(DGe!1#wmFg*uN_H1RnQ>ain^wN@`d%X1PDDG2=u>Gr9QH~!u8bnWcFDM6yJTp`A0R;NuT0oqIb{b1 zXg+Zzjy}fGzjE|%9Q`{-W0P)$x5qj91V^9b=u;ehnxp^Z=rbIBmZQ&cG~5%F zaM2A`Xq0J%hGwqNP@WYU(`ghMTCPGzaWr&O(9o_F8v2hy$8j_yka9nP zqtWCk_Y*lfiK82GbR&*#%+bjl-Grl?a&$9}ZqCsyIJzZAx8ms59NmVaQ#iUUN1Hf0 zm808nbbF5Oz|qjA6rObA=*}G7g`;7uQr^Feqc7*^ZXBJ)(ditW!O>=pw&(b*iG!_nP2I+vq+aCA?O?#0o)IT~}quVgVG>dVo29E}kr<(+(v9>~!J96gAm z2Xpigj)s+5!MuW_(VQvwhjDZvM;CE4MyHhbi#Zz3(aQai99_cEr5rtqqepY}7>>s9 zzJfWHqp#-ZaU4CKqp#uUYdLxXM^EHv8%LLMw4I|dcS(tllcUQyx`Lx8akPu0Cv$Wq zN4q(?ilZ^dN(tA?(LRoz!qI+?4sbLq>k3XaM`PZWavzG5LSrtMLQm)D8615bM_Rk8-kZF?Sz}S}Qv`F4aW_^q$Z~ z_U(L1N3dA1V+D7Ar7p6Q%cCl8#^?VaF>vY1Tdtn8uW~G+xt1 zMld&W@!ZV4vxUQXT}L!Yf}}TeMEA(_HXX6m0&x68TDY4XZ|aB{&2YS>i|nHLwvGr! zG#uNxZ{N`|0~^tgf{BV9@9T)IR)FIJF02nZoR7G0cj$=jlRl-7bwu~e z^d~x^MKZlp7g<_k7Z=Y@b&{bE$7j-h4(!;?y|YJ$kqqhhTqhY9aeSeROdI@CM=*P_ zW3P_r1)2UzC(W3}@wJW_4cW0zN3>odX}^wWg-n0Lh5N0JXr6rkI~`GxOn=Y4b3jM5 zNxuJsE;6O@M~){4x%YqK_c_fK+V;1u`HX^#F=NA$S-{uwU4XSsLI zada)0FWBry;W@^1l-*x3s-)2HFkp*o!=-_{k7>-xJ5hSJz&$&n^=v_VcEoV+7&%(x z=vaNEj>PFB^($T<;Z=e@Qf?dQiLKOuBay>N;^>APW+Q#1j5X%oLBCXqKL+0wx+zCv zuwS{~Tp!s%w}n1pfM}^F*lXF*N*~#=whi}f3P-o)XcI@La&$Y6ZqLyjIJzT8cjD;I z9NmSZ;q#)T1>3AB^yM7gjib{zI-R34I2x{W3XX-NtsI@n(ODdw&Cxj=-JPRzIl2c& z_vGka9Nn9v`*3t$j_$|N{W&_1qX%$wK1UDa=mL%&#L)Io`bv%-#?gfw zUBuDDIl7pmvAU6x7b7{kgriG2dK5>G=IAjTeHBNK<>;$9dK^cO=V(~1mH1rC(Gxg& zB1hXe8V;|@w|0(paI{k&X&=k=(keeVD!6wh=_5N)ySV$4Il7XgvBx-83&MeMG^`ec z!=sPLSZvLvOq2I<-%jCZKNl_>DV5!@gZfAtUCqg~sd|E^2s>&x*)>fcX+x*$BkjTr z?w#wn``2^#XX+zu;thJDXJ!0ZT>LRn{sH;^9DSrOJXarSXK&=>-aLIof1A&}zd#>p zLl<)Q7jg8>9DNH%->Q$;_itmyS?Rc4AK6apF1@tM6OMcJksZh%(nmb=ALiouh(59l z`lB4ZSRdIz{c(L{XZ59Ax}M;|UBSiY8SdL>^%4E{IekRGUBkuUd3{8WeSxE2mqj^4_>^E#LIKi8m~FsB^F z0L_e<<91K`P+mR_&TmG{7Jv`Nwa4_RZtOXR&|^wRjw&fF7|6!O>i{tW<@&*cig+Ll zxbi@Ft_kS*?DwAKfiPOj1L3(=pp`rjhI;D&t<(tg?i)N1#);KH@4j&!(3N$V%>!U? zSpk4OAjx7*&t(5CW^Yra3h2!2^MPP%falW#i+{>Y(^>|gVyX% zR0F}_qyjQ(1!}7Xg0)Hol%y4?pBf0JE)|eTE6^-85bR_sAjK8&QgXK47BvuzY$~AH z8e`PH4iGGKJW%^}T7kByV+8Y_3W#}HYmofy-&6y^HmCynht?Rqr3QjwQ3dptR-m`l zRRmT^70}z7fwrjX8cdpMpn4>Kea&q9kJL$nJrqC_<<_zNcC9hmrv`#CRRy#|E6^`$ zAXs8mK>M`%10b8+WZ!+SMxY1tcB+yF-yI(4!90yU;|KG0tAOD6qXzm+8;>5$ z`%(o2uOT(i7g~YToqo6+se!)M3Z%|8_$#S__G<%rVwxHV&Q3hg6Vo&{M^Ef|K*b|? zN~wVM+^aE0U#sgH+^keUUu&#ut2~`mF@ld4546gou?M;8b2X3P;H3ikTw}>zbxsWg z?=Th6IgLQiy`ctzYZ(vp+#6bfLh4Ejzcdw4NTcev^)Yq7A5LvN(ALLVYs>zvYt>1^ z=!^>JMU6>&{WbO22;Av-px0m1I5zTjheuT92)=kc(Aymz)|RxlJ3Oiaf+L?A=uwS8 zTLUT}cmV>aOcu3oZ`GJ1q2sD70|we+G6z4K6OhA|3e<=qkS4%+8udnX2W@r z2ilSMptcz880b|c4W5rGpn-0UKqJ(uAKWHYKqEG41gch-Z1`NNfT}gh?2kvOf#9&o z1ARP7qs-pZQ{5cF+mi>{(^I4Bw`ZtY8HKB;3TUWCWpvLk>QO)VnW}((sYhmGhaZ0E zm>=kebE*QsmVvRleChsbW-%yr27=6DP}lf?vFF9dPOj#G;MuAG!D4{tKoN&}0zq4a z-&S=&sPya?D|sk5#_~{jt`TZ&?`^7B!LOEw!gGyKi;sPvf`VHv4~6F%q1q;>g+IJ{ zd8oDt%~=)Ez^k?i>IMl;!D=X}pREBZt^egJ2>_pBK-py}nbyCH)>sYLtM0VJC7FjB zu=h@_PzC+e;shSeJXAqHNxjjKz=CJhasUp|DyU~AfuaHGikjgnUcsN5hq|I>nAQYV z80;!2xMTBB6^4mgq2|n2ClKD;Jk*@|k}jYjfs2o+q2LV8LoJp^-84WwcUE0Q;Y-d# zJ$F`f5nbDRn~GO(MdzW`_Lc;&hFGodt?r}1lbwfJ-+PZ%w!fd)Ocg6Q!t+q?Cnjr! zT6}DKKVI~~kDiCZbB#h~eeW+-P;kTNq3~QI)SUTk=Nh3(6Z4+n6NniMJQSX5gc>+t ze`_8J6CijfJl6=d_}DpB0x^Grhr)A>P$jG5_VcmA^a~ye&ox3VJ|<@IP?){JL*cn* zsI#ip8IwQMP-nHa&Wn$2Q}GION7PW;wDPKL!eCVbG4+Ip!gGxY>~W`OE6*#;T;ZYc zTqD%tV`m%kP?-3_L*cnbsM5p%HXaJ|W_Tz(*9i6b)6uCs6sFzqPU>gbtQP;j?!G)ej^fU@bXkXy zF*X=51WT4lY+y#3ku(~Oalp4Qma(z9!eM&4dq$0VrrX^;k_9B(cS6wHBs>X72#<|P zAWL}3l7)mMn@#e`X4%i?;)QGin`AFG**FfHgSRZ^eZJMlRM(8EM}xe7JU)C{6!eieek5yLRluWE(5?DyXd^*A`8$U-5#MqTmKIXK|R zLiy7u1>u7?X_QvT<7RsOYu7N9lP9KLm zStx%_zXm9N1r29IStx%6tp+H52^B|6Stx%AwFaome*eu6vTYD2Q&}ja*I2Lk4FWjW z%0l@Y1Zv=l-ywo?u`HCoL!<_%M~=|z5rZBF$7)$9q}M3mBS#L0nln!2hM^AE+MFLb zayaC-<4`XLRlDC#LR{fYa2Sfz&ehLCP&iTysC-~We>M-OkbpRm%t6&I;G1jMDvATm zVW>CP)LepZg&atnhYmx%Rl5WERu9V+j#G0`JvDQ6xRZs#Y3wl6;m+Ej(kv7Xb8}GX z+M%9ip>P(QgL=9~sNo0953x`gJlE z4!5vSI0qkwI^0q-)LWs-fMfJwsJCjb3~z@T|!o zA3l?XLJR;7>dcyT^=3#wgb)Zry;-|}Z?0y!LIeU1iXJ1VLBQb$OkBtt=n4T0SSX~| zEa2f33x)UxEYu@M4yS5_y5-K5H?U9$pTI&Py+)`fG1N zLLqnq3x)I=p&mK%vyg2^><2)Nl{>H6ZTsO6R|p*uhB{n3S0vP&5qTmEMQUx%P2Kl( zvAROw3Kk0KHS3CmIxob%V4)s4LgvwVEn&Gr*o-jL;UzV5bvR_(5p{!us@1j+KVVL? zTp?%&3x)KWxq36CE5!U@p&mK%W;I<^+phkgy6+P#R|pxxLLnVoweFkL97naPE)}x? zh%@2?VA;CU%-V5hQY+*U7QF)MB5nm73)oi_)zGXc!j<@tSinZQ3sgR;xaiU?doL(T z2=U7BW13AGxcpCIB9v0GTMJE$0mRAkUjLQZZ zKv*{jBhEG@wy+SehlOc5=$BK?b^>vJ0CC-sCb#Y6Bw5WG#<-8v=D(mOMhwvlt7j6dP%u=t36E5V>P`VWhy%s4 zv(8c#&5HYqwp|_1Q(aZd>4O3;5P^#2q9?B!aae)4V#F2OoG1M*{_}zvE}$un7u3zp z9rwM9tviT><@1EPiF82~Ia9JMX)4t>7~-2JJj)Sg2_oDU2#$MAzIS{g-Iox;#Z@J* zj;m8q^>=kNl&H=k_!rCBDQY4)&_5Jc;?lTOkTh@+#X>xq1y-6Ffuaz9jAbXGXtt?K zQ?lepx{;4rX1t(Os2;p3MLUYmRbj9Sn9mCsLohU!v5bZ2?nS#)P%VUkS7KrCSY9;> z(tK-o9|saC?u`PL5wneD`BYoCgVxWQS&`vcY3sIJHX7___X=nuMjT6fU0%<|LEmlp zvgFj!_D`8h0Ff0$ggTa!GjeJ_W7|3FAyUPvoZ2s2bAKypW{8c)azXVWPrfsKyh|vG z$S5N`Ux=NYnq*43zOG?q7=*1V9~D#;ga>4KNh-!&xMOGBw4l>KCC(ChA_y3n^I+!k z8p@_mST?xRWUj#*B8B<{Q8t;N2iG-OE!tW!ACt!Iq%>~712VWMm+~0_j|fc5@^~I4lZ`uiX`vOm&QoYK_!9z#5j~e> z*i))gmr~#R&ZPa2fKNpBW%*oVJBFpAM&*?F!K~`wjzZiMS>r&Wi~U})4_37E=LF0k zv@n<{dRBN#6c{^p@;X#^BwyR8=bZWA9}+N*ILIvHr>TilY9JL?Y&q|BAGM4YH_wNk zIpnR@yR6;1^98ndL8xY*UGy$UkL+DiN%5%sc7c8n585Y4XQZ-uW@-Y1!JK3}dgO?H zRlnHn*~Rfduef0)M=)xi5qigsKx|T7l^2G#K_j9y1K759>xFb1^c-_}-h4@-U)WK< zz=^?1fUwy*qg~n1byarIvD2}=D!r2> zgwq+g3a|fv3K+zt8Z3h=q(piElP@**v%`~`uE>(5#A|Sa;D`(7Vmf!+zlg0oxah;@ z&+TgOUldt+Qhh_h%JUI{LU5aiPY{*o9O1N9SRj#ES(Oxf&!SZe+-kz|w8EPplWVrU zXU{{5YHfPp;T!g`#e%z4e2%CwdH9BXk;Rfuq=m&&jquv7yN zpAggs+!h0Zmgk5L4T#He4mU+uH6kEIeljkwVcA#@8pXNUWShLeNwysQ-CvLT|L zil9D+K-CIs;Lst1EiBxq1Lkbc@*_R6um&Rvs~X|8TeqFf62|pCEMcTa5>6$>14Gdi z8SV)33DSXKt*aSxXjfEVHLsM2Tw`2h#4^0fvE7+mwW!Q<<>tJ1C~Nfsz3>gTKylZS z&o1oE+N~G95nZ5(R2}waN666OVy7_S9npp^l@M>qxJh7daC?+b5H;y!Te0U^Agi!X zX;QM(Sg+@5T;;RjDtyQ88WcW%Z*k!1*PmqxQJ(opC$1MVL4xj~U5y#~$CzfT`Hbm(8%BF9B%EMcTa5+010#;ayk1`fR%+Gmej z)xv~drTgrK^M`{GUW{nJ6|Qdc38Jp`j!&c(ZogF&lxQOeE|Oz8!+xv&!SuXFt?~Iu zBN{j1E<2W;^f6d#>Wab??KHpzdn|+g#8-W5OhZwu%;6?X3+x)M{bM;iMM|Uxu_`i; zW%a%&zWA|l^;Y-zf3eLScM$rF(Xqp!$Nww3x%bV#FYnxOPv~G2E<9ujBR!IERHG6# zcigH7f+f$s_l{2tE?jeuf)XwE;f_aeHsNtL$jl!s$g=+WcQDaWy%Ih8S+)}4VoF~C zw-P=2*~qdS>=REaRU^E1+vrDF!ng&KC5-fF!gY9}1Bbr-0hTbX+++zOJ(_UDOh`3} z2M!%t&l1M{o?*g=*4IFI{(iyQtvjD$3F9(RmN3#I38#|ceK>nLlZk!U7k}rmzhDXD z=2Dh0(m}X+mvPy4oC*jZM96cHEEFz2^`WSDX%`$bUXV0BUU2vGbF1Y6jir1}i6aBf zPZ)kEbWRp`tNP^7ERY`J{4^ewp}(Iaz{-J(T76*1QNbOkgpR9JC}stM3iXmg4&3FyVV^m@TbC)dPnP zg`za!u4R@m(jz5~a%ifldhOPoKVnsli=A1*NRK3(N{W}}s}b(p@!@Z?gmH^BOBm_V zgzNBXM`l|?ldQP18iWseCKKtAgzK4#ADL}6S&4B!Hb>a3f$;oYu+AO#gkqfGGH#YI z(jy6{>TpO#W?QqY#JKqzgr~}?&PEbWN1V^9R=GxITSLtW*Nk(7qnlH@j&?jU+d9Td zj62Oa!eh}A*D(z^GTW-MgmHm7M_7#}TwfW>EMeT%&JmVtAUyxk>Bwwr=uADXhUW;= zGxb8(Cmpe=XpYJiiV}x==sChPN?Zit`TJZWv#ohn)wuMYBb<*`bsft?BeShbS;GC5 zgqKDWju^RDQ}x<&JrHx z2#?IR>XC%gbvg8(ypkoH;Rp{L`s9_7ga_;E7IQ4&^&H`m+16Yn;dC97KqIrQ1(xu+ zm4xX4IHGdZ)k$2(65dcr__}C`>sTroneHjEgx~8CzQK2WrhDkcCqjwq@vBFsdqVB_ zJdf~=Wx~nUa&E-`s*K|+FWNxe^9BneAwz$ke_yAkRn<@z( zh^$=o%z=zd_c$!!&6R|mXu=UkBIb}dHVR{>m&;zMw|N6*uPiXRGk4N|eWdjmD`4Y8kJV!eYO}Q_2~YP# z&-&Ckd#kXjzJez_+p0vWI$g&C`p8VnEiB>pd4zBF+wn}xEs=x=>zT`(X}Oand}Sr! zJEIBLGg_Q!c`r-&s!GD|jV4^rjKECGJuKm?D+%8dO}L(c`E*ZczWN%T@N`e~e05#R zKQk?%-f2Hic%~(~cdBc;X{O~?R@K*5623KB)%EmF(>xc&6oUmayUxzNKur?v5lJwMRg7(n<9Q z-ssb<&l=lIOX&6ns17Sms9v5H>Fo^>gzIo@r+Y#()#E(j>7MAB>ZoIkqUx(N1hHSM zn?^UWmGOGw%DgN1xLQydQF|_UY~1Fx=Tp4cEb|G>vQ9{yZAhYXd_|6vp@>5=bL_Yl z9n6Y4cOwc|WpM1B6`biXE!z&C-|-C4^(qaiEaE6tpO96%hUuQr5{St#OqY@``5y3#icc##CsE>Xu#LRASG#~K_Djsg>%dp+oJc88}tHzZIEfdJ+oYtIi27Y!~t-ao}Lyh2J057Ss- zwZ;`1Wa1r&!bF5a1BirCDPUn9A`0vOLio?FNvVZ^q@#Q z2%5}$*CM{o2tcYveimu#MvtdEy(-r$n^BXk^Uzillqfpb`#H|M=wLNOpqhVcs1hA4 zn$D8~Gx!0H`E&iyX2Lo?f5zYKMR>HuF*8NJ(oGzzOdzxR;%2(hK_fVtL)HfcI=z`= z^lYaPGqs%Jp0LVi_1L7U<;UiGHAIgoO%>FlqZMt(D&bdU%opxrmj(>&I?gyF6h7}3 zhCR4&NJnQ896@Q?b;)Kfs-F)Ox)=M_N+5bKb^z2is*PL5u1hvoJAK1nE_54*=3g!p zpmlb4cjGFcT^qZ*ySqhK?cB~l!6jNenU7CMieY7@7h_{;Z6n~3Pd^-*vedkL`31!?qUGIAFdUU7s~dpsRfJ^lNRrD z+qdmv#k`y05@I5~Ldi4fZw%mH&nCO zlLA?@VeF97XE^K=`r=k8ZW@LjFFI!2u;^-4pd%0ccrFiT=t2}`Jqq`D+@FxBg#u9o zOh3d!CToGL%q61nFi)euCK?sFt_aH!s+o^)G&*H79=>)gP<*AyzC-~02@W`X2blm= z)V+L?16^FSYwcb{&GRu1mb-XOz$|A>LaIH)p&nOOt$Puh09RCGpXP8oi*~{skJg&R=)SSed!F1&i>A#&}Qx&a@Z zeLNIKsdIeuI4Q%ZjSMn_`x+RY+D&R$NM=B66ri-Ti%k2 zxU#Mq;MXtNu#=Vk84vJYuYW@NoPc~o0*7NuoA4ms6Q62Nz5ayp(U|uW4BFJfEFb$+0APT(!^K8dwq>E9j$v^hTJ)wPXf5D^vaSz@1 z##Z^oddV6u7?v7$48EPy8g=67p~I@r@t7x`P7kZHn2Qvn6fa5D;GWv_c<4ap^Bf$~ zdBHunY7%ccYF)(Y@k<;W(s{VWQ%1=&EJWO^THT*3UbT+J{4$4$bRP3K02;cKh09m1 z4Lw)9YAp-;LM7;0At>KzxOMZXPz=|vaG+0Zeu~C$Wy|Jx+0qKCRkCf3UJ_ajckHC? zhgoL7%HblNXO_pUri72q9tzdZuW`6Y=W&noOmYEDiSOZ{gpbaCDzu^ZFFnxvJR6F1 z9(1W>YH=3$I6_EKb$Vr|U??SB9U+7?5JGy0`(Gm=WR3T`iFw~b2+IsBCh>IQZMWQ=uPuzO;l zEAay|>T&mO!f==*r0q)$uEHAyoDx#z^e!-&lXN{R$>Vji3=mnhoDEyFytY}joUZNk zI<2mY4a4c$yfIp+>jIHN3U8WQ4Ez@;{4D6NEJjF$-Y9R&uDw)!pQ=u&SwyM1IiQpi zE37^v^4jWLw#?0CdwY9(z-5wt%YD#f>nfDr$e0Ns&mphHz!wq?S;mGlXnYB9^;M@Zq=Q%J3XU2 zsaa~iBw5NSp7l5nrk4(YCkWe*10oG97dd^-|1U{@XF@17=Sq}|? z9$Km(tZ?5%L7>v7aF1Rr>oU^!fMn`M31>3Vr^RK7UA` zKc>%@>GMVU{2TiG4t@TJKK~DW{xyAmmp)N-z|!{!AS^5bvH%@5E9xFleyuSCc)w3>EMKaP<0b5WdNsvB~26WFs!(=rZD^~y#urv=cz z@u2bdH-Ue)n-Bum;4}gQ)k>W(>eCR4bUFb&S2d&o33xQ((S%1c9xZq*!lMMv{zOfh^~$~CpO4KN$f zbmN?P;2^urvjG*!Qf)(@P_5paVNFVwqFOfmOLQt1dfb8hMc!|a-Rb=XyZ&#~s8R1d zD#0%AH|nhaE!#uI8i7y6c%qSXkg^XN{C2D0qqIU%F{y;G#f@}`lGSZ9F3~IP2}aLN zBm_n6Y8keX@KB9_Y64W7tsBK;+%aHqn=Z7Zot1D64H29*0j@cK>-Sl!f)&YHGq7ls zILcaoT$X8HFj@y+Ex@7|Otfe1c2-# z^}j_;_20KK?=fWa^K>wI;1BrkVMhJmFl;`~66XE!%zK#GAA9^jF#lVauoa#^hsNpu zK9SHKhW-bu@5{1+!8w`v-FXr)N0TSe5#X(~>K`EVAJk~vLkJ8LZB-aSzMl}v-vmCUz6VJgZRf3A?*#HIo-{8yO;7m2uYCp zVE=49OhOVU144+7e?N@JLwL|ia3g-*KuGuUL}nnJN#`7ZlI|5t+H}k%?aQS5 zGDAZdRn83bXVNJuDY<#_-#6d+idUwMv{9o?EJQWl#!KAZ5Y*x3V=FFkg*#*M%DX?b zu*I08FyWbxZ`6T z3tOlcizQuhY$aWu$fyIEL^_koW(L!l{(+3-7V1BpGJg5MlM7p@7m7ta{@9ATERpHU zB!@DIL3j|uLmA0!spLH;ZG7<4KlU8nh6QtWM|o-68w00s>9G~nb#}jT>(84mSh}#a z^#Wd~u(Nx@v6YMU7Sc)hMmf&~Os~52me*G_xMS{jQig3!9?n!j(l zZYgH?P>jtOcP}&C;rV_Hy_-%XsEZ%0W*n8((I$@@RutD|APFOjnCkE8o6y;^h~=>S;wz zX9lyGp;Sgm!$4}UR}^hi)+Qr;>2UyEEZ|I$Bd#oQL$tC*GpCn`@{El z(h|ZmP&;@D+nWPxcG9sGuX$A4cPTBpF6+}j7)UL=sXn7ZxRyY;6~|UM*Hj-VU46#> z0}C&h;tSS}Nze8rfmA2+Qnh{gugVRyowHf8exW|6Thiv_GkECxMrb|a>T+iv>dD>$e{7lVjmIEjP3g>eas zIyucE!K48^|)^X3OMMM;_Z;vK^y~$Hs#L~M~``dpkqr4ZqclG+tj?RvrUdJ%> zUJBM#Fcj6@E7XNuLu=PmK*hUO$FtISZvkhg_GhK>{gy4ApXiJC)Bn?{xLL}sUe~4A zPRx{?u??#uvaSaY8QqX2y~|~}YvX9lR-KaBu^#N%Q?{cPdR@i!N{Zs{;8^2jHYSUz z75vLKN|vl{SbJp`E0#Q_%Hwo*ke1VA$x$~t3;w^?!2s2gB4Z6t%{rJN;BpE|F4?i3%m`M zVVkC_Xa-v@8o^dJ)I5|6Dv#gDN5{8l7W7c%%S~EQvZlNu?eH{7o7fi3>RP>eJ*|gp zC`8v9KY^-!-etcgV3=w2YXi`(IGbaAr@JEtD{{6xreg1@<=Jn#?3T4OC9lTRgN~w3 z_z762^AZZSqxr9~yjFf4GbU8a(iGKCM*rX?Pv}z7_TR%WXC2js&87cgsW9t|^`b%h z@36e*eQX+*BNrV@_tUT>$fT(U10*aidMP<2>*r_Q7RqlymG)m;RK4ua%hlbszUD53Epq^5lP!GjbiZ2Egj=o3D^xvXV=Cpi4 zDq=HEQI&%f=*UYk)p897y!V>M+VFvx_tY@>?@{f%{FYi^ikrc=N_q%KE?BZ&bb4_n z+{dByzF>vkxe&S?VtGECESsf*TJXUu)5lavcgE&U*K(39!aq<_OXYNI2?*%Z^57TL3*lX+4f^pLF1=HQPmRF0aB?WbyeitNC z1phl|qnuR8$$kQSf6c^6+@PVOEo!E%%DtL`hzL$#g3#}|DdTGJ65Cuf3!6LWf8cOj zQ)Hv)SccxKs1uqTumKL4L{?i+hOR2X_{hgYCSd>16yWGo=KE2#Du z>`L%C@)ae=ESN!KK>Ne#5lK<3vMr_=@zx5;0ZPLwHS5G=Nmqj|2^#Vfa+=Pxd2s8e z6w4JH!r`@MIw|(OPeC&|3h4Ckfi6v{){to#juD9Dr`cM;)YWi1@B!&t$5I2$W1|iL z?Mcm%$6}JK$JC-@Y2`MIvO$iCgSu4gop4k$pa`RfoyX(qRPYWW853sF>n4Kt(4%S6 z<8*!zqF_)c`*lMe_g}jC%w9f(F=M8n(8tg5Yy4`Ep6J{@lf_@@;Qf9BOTmHQ^+j+p; zGFc4U%=JoEx&FX1@aduE%Iznn0O*CJV!16<%Tq+?lWe(Hu13g`ius^gaGaL1d6Ra) zzObi-IrW5vdsHeihGA9JZ0bQLR*|*4YF1sc@@i#fjy;cj*_o_f7CE*o&~q}nhJcni z9(duL7ByS5D>MzimVxl{II4v{($^HHYEvuNg^-uPp?Dc`a?B~1feEjQlC`bCUUM38 zQRK4Cs+w+>)6vElS!BZu3_1E}CMhQs9mx(-(NwI#-h9D~U1yXX6Br!kqjF!$>D{09 z^3}!hAt*6RGedgh%A6*1TI6UWi&UDk1tXbnI39b{0%Y^%gsBIddm5%my5jQ2wo6YV zG(FU)`48RNTvnx5_5rY)Zj=He$eJZenXP|(V#xdD6REg?u=BnxWIa;$ zD{3P{+@O#0zoMy5DX=N<)htQTN`XqLw&|N*ttcA>rcxS7|KHvZ9ABMho?gzCczgX5gy0WGDw5VO^^TjPu{rZrHh}r@3wP?5=S3gJa$L?q2E4VnBCm;y?=S~ zfyoz-{G{0Nh3EV3CX1iC?Au@aOpE#N&tA~~gKO@8=*8G8FEuT>>*?mUPkldm=&BQ_eH%(jZeA}C6j-3UF*d1AN|``&ilj{ zFI;oRcb{%K>&DgH<3E4xtBsGpu>T*=|EC*{?0WQx;i0!KT>soU<*hIM^`0-?`q;<* z??2o$Hkvr~=|78YdU)i<+duRD_BYOZt?~F(sKro=X=xLZqlWw+TDpcjZfm)ajkN6w zcLJNgaUR&OqNuz0H%8xdEx=DeJ8m(z_&1k226!SEie1W68h%d(G)K8&Vma?BkP zIEKZ2zq)E3>Zds|M=h8-W=MQSa45DC(UKFMTA9|iD1wGGcc*k zk|Z%%P>>j+>8fo@x|R=Y4#e;iyfa)rTkJP>(J+EqfezOHMwSDQ0RC<8Il7phAYsR~<2@MJ>JsI-~tAcL<*jEBmMA|KVGX%vGJM%WMzh0f4~as1+QHEoYcX1N~<^MM{PrrCxr!C+M9 zgXYmyX8F(^QPF;VFy~;QT<=&aW_cpi&yNM; z!hWd~j5N@m?SjquQ{F&9E|(YbVGLD}iuv+70<5%aTN!%;TA0hq8iu160{cyS z&hn9bb;1lP4L3(ZC%xD;9#pts1(0*mQFMNqq-#=OfuL-6ZrrqkrUqkdsfgB~x+kyc WL`U!qYOgzp<;kFw{4hPfI{qK4v`d-* literal 0 HcmV?d00001 diff --git a/MikroMaster/20260331/20260331234851-Config.rsc b/MikroMaster/20260331/20260331234851-Config.rsc new file mode 100644 index 0000000..f61a7e5 --- /dev/null +++ b/MikroMaster/20260331/20260331234851-Config.rsc @@ -0,0 +1,1211 @@ +# 2026-05-13 04:52:49 by RouterOS 7.23beta5 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" name="ether1 - Unet" +set [ find default-name=ether3 ] comment=LEN +set [ find default-name=ether4 ] comment=NUC +/interface l2tp-server +add comment=Server disabled=yes name=l2tp-in1 user=vados +/interface l2tp-client +add comment="Starless 2 MikroSPb" connect-to=176.53.203.171 name=l2tp-EoIP \ + user=vados +add allow=mschap2 allow-fast-path=yes comment=Starless connect-to=\ + vpn.starless.ru max-mru=1280 name=l2tp-vpn use-ipsec=yes use-peer-dns=yes \ + user=vados +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add listen-port=13231 mtu=1280 name=WG +/interface list +add name=WAN +add name=LAN +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroTik +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +/ip dns forwarders +add dns-servers=1.1.1.1,1.0.0.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +/ip firewall filter +add action=accept chain=input comment=\ + "accept NTP clients on local area network" dst-port=123 in-interface=\ + Bridge-LAN in-interface-list=LAN protocol=udp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack passthrough=no +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" out-interface-list=WAN +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260331/20260331234851-Diff-Config.rsc b/MikroMaster/history/20260331/20260331234851-Diff-Config.rsc new file mode 100644 index 0000000..1dd74e7 --- /dev/null +++ b/MikroMaster/history/20260331/20260331234851-Diff-Config.rsc @@ -0,0 +1,3683 @@ +6,7c6,15 +< /interface bridge +< add name=Bridge-LAN +--- +> /caps-man configuration +> add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ +> XX country=belarus datapath.client-to-client-forwarding=yes \ +> .local-forwarding=yes name=cfg-2ghz ssid=vados +> add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ +> XXXX country=belarus datapath.client-to-client-forwarding=yes \ +> .local-forwarding=yes name=cfg-5ghz-ac ssid=vados5g +> add channel.band=5ghz-a/n .control-channel-width=20mhz .extension-channel=XX \ +> country=belarus datapath.client-to-client-forwarding=yes \ +> .local-forwarding=yes name=cfg-5ghz-an ssid=vados5g +9c17,18 +< set [ find default-name=ether1 ] comment="WAN - Unet" name="ether1 - Unet" +--- +> set [ find default-name=ether1 ] comment="WAN - Unet" mac-address=\ +> 48:8F:5A:8E:1A:C0 name="ether1 - Unet" +11a21 +> set [ find default-name=ether5 ] mac-address=48:8F:5A:8E:1A:B0 poe-out=off +20,28d29 +< /interface wireless +< # managed by CAPsMAN +< # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +< set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ +< ssid=vados wireless-protocol=802.11 +< # managed by CAPsMAN +< # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +< set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ +< ssid=vados5g wireless-protocol=802.11 +30a32,33 +> /disk +> add slot=tmpfs tmpfs-max-size=22369621 type=tmpfs +33a37,55 +> /interface lte apn +> set [ find default=yes ] ip-type=ipv4 use-network-apn=no +> /interface wifi channel +> add band=5ghz-ax disabled=no frequency=5180,5200,5220,5240 name=5G-AX +> add band=5ghz-ac disabled=no frequency=5180,5200,5220,5240 name=5G-AC +> add band=2ghz-n disabled=no frequency=2422,2442,2462 name=2G-N +> add band=2ghz-ax disabled=no frequency=2422,2442,2462 name=2G-AX +> add band=2ghz-g disabled=no frequency=2422,2442,2462 name=2G-G +> add band=5ghz-n disabled=no frequency=5180,5200,5220,5240 name=5G-AN +> /interface wifi security +> add authentication-types=wpa2-psk,wpa3-psk disabled=no group-encryption=ccmp \ +> group-key-update=1h management-protection=allowed name=sec2g +> add authentication-types=wpa3-psk disable-pmkid=yes disabled=no \ +> group-encryption=ccmp group-key-update=5m management-encryption=cmac \ +> management-protection=required name=sec5G +> /interface wifi configuration +> add channel=5G-AX disabled=no mode=ap name=5G-AX security=sec5G security.ft=\ +> yes .ft-over-ds=yes ssid=vados +> add channel=5G-AN disabled=no mode=ap name=5G-AN security=sec5G ssid=vados +66,69d87 +< /ip dhcp-server +< add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ +< dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ +< name=masterDHCP server-address=10.30.30.81 +83,88c101,103 +< ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ +< global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +< \n\r\ +< \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ +< 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ +< \n\r\ +--- +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> /tool/fetch mode=https url=(\$GlobalScriptsUrl . #\".bak/mikro_bak_rsa@10.\ +> 30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ +90d104 +< \n;\r\ +93,94c107 +< sc\") output=user as-value ]->\"data\");\r\ +< \n\ +--- +> sc\") output=user as-value ]->\"data\");\ +97d109 +< \n\r\ +99d110 +< \n\r\ +102,104c113 +< \n\r\ +< \n#\r\ +< \n\ +--- +> \n#\ +107,110c116,117 +< \n\r\ +< \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ +< .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ +< \n\ +--- +> \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ +> 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ +112d118 +< \n\r\ +115,116c121 +< sc\") output=user as-value ]->\"data\");\r\ +< \n\ +--- +> sc\") output=user as-value ]->\"data\");\ +120,122c125 +< \n\r\ +< \n\r\ +< \n#\ +--- +> \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ +124d126 +< \n\r\ +126c128 +< \n#:local FetchFile Binary.backup\ +--- +> \n:local FetchFile Binary.backup\ +129,130c131 +< \n\r\ +< \n#\$MkDir \$localDir;\r\ +--- +> \n#\$MkDir \$localDir;\ +132d132 +< \n#\ +134c134,731 +< \$localDir . \$FetchFile);\r\ +--- +> \$localDir . \$FetchFile);" +> add comment="Example add WU servers to AddrList" dont-require-permissions=no \ +> name=WU-add-to-list owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> \_Script to add target web sites DNS IP addresses into address list\r\ +> \n# Tested with Mikrotik 6.4x\r\ +> \n# Syed Jahanzaib / aacable@hotmail.com\r\ +> \n# List name\r\ +> \n:local LISTNAME \"windowsupdateslist\"\r\ +> \n# Web site names which will be added in address list\r\ +> \n:local TARGET1 \"update.microsoft.com\"\r\ +> \n:local TARGET2 \"download.windowsupdate.com\"\r\ +> \n:local TARGET3 \"download.microsoft.com\"\r\ +> \n:local TARGET4 \"windowsupdate.com\"\r\ +> \n:local TARGET5 \"ntservicepack.microsoft.com\"\r\ +> \n:local TARGET6 \"wustat.windows.com\"\r\ +> \n:local TARGET7 \"stats.microsoft.com\"\r\ +> \n:local TARGET8 \"mp.microsoft.com\"\r\ +> \n:local TARGET9 \"ws.microsoft.com\"\r\ +> \n:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ +> \n:local TARGET11 \"vortex.data.microsoft.com\"\r\ +> \n:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ +> \n:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ +> \n:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ +> \n \r\ +> \n# 1st time runner, check if address list is not created previously and a\ +> dd entries in it for 1st time usage\r\ +> \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ +> {\r\ +> \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ +> \_resolved entry for 1st time usage ... zaib\"\r\ +> \n \r\ +> \n:local FirstAddr [resolve \$TARGET1];\r\ +> \n\r\ +> \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ +> t=\$TARGET1;\r\ +> \n} else={\r\ +> \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ +> hecking if DNS entries can be added in it ...\"\r\ +> \n}\r\ +> \n \r\ +> \n# Check DNS entries and collect matching names\r\ +> \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ +> \$TARGET4|\$TARGET5|\$TARGET6|\$TARGET7|\$TARGET8|\$TARGET9|\$TARGET10|\$T\ +> ARGET11|\$TARGET12|\$TARGET13|\$TARGET14)\" && \$type ~ \"^(A|CNAME)\\\$\"\ +> \_] do={\r\ +> \n \r\ +> \n# Get IP Address from the names and hold it in temporary buffer\r\ +> \n:local Buffer [/ip dns cache get \$i data];\r\ +> \ndelay delay-time=10ms\r\ +> \n \r\ +> \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ +> ation\r\ +> \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ +> ={\r\ +> \n \r\ +> \n# Fetch DNS names for the entries\r\ +> \n:local sitednsname [/ip dns cache get \$i name] ;\r\ +> \n \r\ +> \n# Print name in LOG window\r\ +> \n:log info (\"added entry: \$sitednsname \$Buffer\");\r\ +> \n \r\ +> \n# Add IP addresses and there names to the address list\r\ +> \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ +> \$sitednsname;\r\ +> \n}\r\ +> \n}" +> add comment="Add Hosts DNS names to NoWG addres list" \ +> dont-require-permissions=no name=Add2vdsina owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> \_Script to add target web sites DNS IP addresses into address list\r\ +> \n# Tested with Mikrotik 6.4x\r\ +> \n# \r\ +> \n# List name\r\ +> \n:local LISTNAME \"NoWG\"\r\ +> \n#\r\ +> \n# Web site names which will be added in address list\r\ +> \n:local TARGET1 \"comp-lenta.ru\"\r\ +> \n:local TARGET2 \"ok.ru\"\r\ +> \n:local TARGET3 \"vk.com\"\r\ +> \n#:local TARGET4 \"smtp.mail.me.com\"\r\ +> \n#:local TARGET4 \"windowsupdate.com\"\r\ +> \n#:local TARGET5 \"ntservicepack.microsoft.com\"\r\ +> \n#:local TARGET6 \"wustat.windows.com\"\r\ +> \n#:local TARGET7 \"stats.microsoft.com\"\r\ +> \n#:local TARGET8 \"mp.microsoft.com\"\r\ +> \n#:local TARGET9 \"ws.microsoft.com\"\r\ +> \n#:local TARGET10 \"sls.update.microsoft.com.akadns.net\"\r\ +> \n#:local TARGET11 \"vortex.data.microsoft.com\"\r\ +> \n#:local TARGET12 \"vortex-win.data.microsoft.com\"\r\ +> \n#:local TARGET13 \"fe2.update.microsoft.com.akadns.net\"\r\ +> \n#:local TARGET14 \"statsfe2.update.microsoft.com.akadns.net\"\r\ +> \n \r\ +> \n# 1st time runner, check if address list is not created previously and a\ +> dd entries in it for 1st time usage\r\ +> \n:if ( [/ip firewall address-list find where list=\$LISTNAME] = \"\") do=\ +> {\r\ +> \n:log warning \"No address list for \$TARGET1 found ! creating and adding\ +> \_resolved entry for 1st time usage ... zaib\"\r\ +> \n\r\ +> \n:local FirstAddr [resolve \$TARGET1];\r\ +> \n\r\ +> \n/ip firewall address-list add address=\$FirstAddr list=\$LISTNAME commen\ +> t=\$TARGET1;\r\ +> \n\r\ +> \n} else={\r\ +> \n:log warning \"Previous List for \$LISTNAME found ! moving forward and c\ +> hecking if DNS entries can be added in it ...\"\r\ +> \n}\r\ +> \n\r\ +> \n# Check DNS entries and collect matching names\r\ +> \n:foreach i in=[/ip dns cache find name~\"(\$TARGET1|\$TARGET2|\$TARGET3|\ +> \$TARGET4)\" && \$type ~ \"^(A|CNAME)\\\$\" ] do={\r\ +> \n\r\ +> \n:log info (\"start entry: \$c \$sitednsname \$Buffer\");\r\ +> \n\r\ +> \n# Get IP Address from the names and hold it in temporary buffer\r\ +> \n:local Buffer [/ip dns cache get \$i data];\r\ +> \ndelay delay-time=10ms\r\ +> \n:log info (\"1: \$Buffer\"); \r\ +> \n\r\ +> \n# Check if entry is already not exists, then OK, otherwise ignore duplic\ +> ation\r\ +> \n:if ( [/ip firewall address-list find where address=\$Buffer] = \"\") do\ +> ={\r\ +> \n\r\ +> \n:log info (\"2: \$Buffer\"); \r\ +> \n \r\ +> \n# Fetch DNS names for the entries\r\ +> \n:local sitednsname [/ip dns cache get \$i name] ;\r\ +> \n \r\ +> \n# Print name in LOG window\r\ +> \n:log info (\"added entry: \$i \$sitednsname \$Buffer\");\r\ +> \n \r\ +> \n# Add IP addresses and there names to the address list\r\ +> \n/ip firewall address-list add address=\$Buffer list=\$LISTNAME comment=\ +> \$sitednsname;\r\ +> \n}\r\ +> \n}" +> add comment="Flush DNS Cache" dont-require-permissions=no name=\ +> DNS_Flush_Cache owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=\ +> "/ip dns cache flush" +> add comment="Certificates CloudFlare, Quad9 " dont-require-permissions=no \ +> name=Update-Certificates owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> \_CloudFlare\r\ +> \n#/tool/fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobalR\ +> ootCA.crt.pem;\r\ +> \n#/certificate/import file-name=DigiCertGlobalRootCA.crt.pem passphrase=\ +> \"\";\r\ +> \n#/tool/ fetch mode=https url=https://cacerts.digicert.com/DigiCertGlobal\ +> G2TLSRSASHA2562020CA1-1.crt.pem;\r\ +> \n#/certificate/import file-name=DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt\ +> .pem passphrase=\"\";\r\ +> \n# Quad9\r\ +> \n#/tool/fetch mode=https url=\"https://cacerts.digicert.com/DigiCertGloba\ +> lG3TLSECCSHA3842020CA1-1.crt.pem\"\r\ +> \n#/certificate/import file-name=DigiCertGlobalG3TLSECCSHA3842020CA1-1.crt\ +> .pem passphrase=\"\";\r\ +> \n\r\ +> \n:global GlobalScriptsUrl;\r\ +> \n#google\r\ +> \n:local CertName \"DigiCert-Global-Root-CA.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Global-Root-CA\" [ find where common-na\ +> me=\"DigiCert Global Root CA\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Assured-ID-Root-CA.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Assured-ID-Root-CA\" [ find where commo\ +> n-name=\"DigiCert Assured ID Root CA\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Assured-ID-Root-G2.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Assured-ID-Root-G2\" [ find where commo\ +> n-name=\"DigiCert Assured ID Root G3\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Assured-ID-Root-G3.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Assured-ID-Root-G3\" [ find where commo\ +> n-name=\"DigiCert Assured ID Root G3\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Global-G2-TLS-RSA-SHA256-2020-CA1\" [ f\ +> ind where common-name=\"DigiCert Global G2 TLS RSA SHA256 2020 CA1\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Global-G3-TLS-ECC-SHA384-2020-CA1\" [ f\ +> ind where common-name=\"DigiCert Global G3 TLS ECC SHA384 2020 CA1\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Global-Root-G2.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Global-Root-G2\" [ find where common-na\ +> me=\"DigiCert Global Root G2\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Global-Root-G3.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Global-Root-G3\" [ find where common-na\ +> me=\"DigiCert Global Root G3\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-TLS-ECC-P384-Root-G5.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-TLS-ECC-P384-Root-G5\" [ find where com\ +> mon-name=\"DigiCert TLS ECC P384 Root G5\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-TLS-RSA4096-Root-G5.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-TLS-RSA4096-Root-G5\" [ find where comm\ +> on-name=\"DigiCert TLS RSA4096 Root G5\" ];\r\ +> \n\r\ +> \n:set CertName \"DigiCert-Trusted-Root-G4.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"DigiCert-Trusted-Root-G4\" [ find where common-n\ +> ame=\"DigiCert Trusted Root G4\" ];\r\ +> \n\r\ +> \n:set CertName \"GTS-Root-R4.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"GTS-Root-R4\" [ find where common-name=\"GTS Roo\ +> t R4\" ];\r\ +> \n\r\ +> \n:set CertName \"Go-Daddy-Root-Certificate-Authority-G2.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"Go-Daddy-Root-Certificate-Authority-G2\" [ find \ +> where common-name=\"Go Daddy Root Certificate Authority - G2\" ];\r\ +> \n\r\ +> \n:set CertName \"ISRG-Root-X1.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"ISRG-Root-X1\" [ find where common-name=\"ISRG R\ +> oot X1\" ];\r\ +> \n\r\ +> \n:set CertName \"Root-YE.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"Root-YE\" [ find where common-name=\"Root YE\" ]\ +> ;\r\ +> \n\r\ +> \n:set CertName \"Starfield-Root-Certificate-Authority-G2.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"Starfield-Root-Certificate-Authority-G2\" [ find\ +> \_where common-name=\"Starfield Root Certificate Authority - G2\" ];\r\ +> \n\r\ +> \n:set CertName \"USERTrust-RSA-Certification-Authority.pem\";\r\ +> \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \"certs/Master/\" . \$C\ +> ertName);\r\ +> \n/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n/certificate/set name=\"USERTrust-RSA-Certification-Authority\" [ find w\ +> here common-name=\"USERTrust RSA Certification Authority\" ];\r\ +> \n\r\ +> \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n#:set CertName \"GTS-Root-RX.pem\";\r\ +> \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ +> \r\ +> \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n#internet\r\ +> \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n#:set CertName \"ISRG-Root-X2.pem\";\r\ +> \n#/tool/fetch mode=https url=(\$AmScriptsUrl . \"certs/\" . \$CertName);\ +> \r\ +> \n#/certificate/import file-name=\$CertName passphrase=\"\";\r\ +> \n\r\ +> \n\r\ +> \n#/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 do\ +> h-max-server-connections=20 use-doh-server=https://security.cloudflare-dns\ +> .com/dns-query verify-doh-cert=yes;\r\ +> \n#/ip/dns/static remove [find where address=1.1.1.1];\r\ +> \n#/ip/dns/static add address=1.1.1.1 name=security.cloudflare-dns.com com\ +> ment=\"cloudflare-dns IPv4 1\";\r\ +> \n#/ip/dns/ static remove [find where address=1.0.0.1];\r\ +> \n#/ip/dns/static add address=1.0.0.1 name=security.cloudflare-dns.com com\ +> ment=\"cloudflare-dns IPv4 2\"\r\ +> \n#/ip dns static add address=2606:4700:4700::1111 name=security.cloudflar\ +> e-dns.com type=AAAA\r\ +> \n#/ip dns static add address=2606:4700:4700::1001 name=security.cloudflar\ +> e-dns.com type=AAAA\r\ +> \n#/ip/dns set servers=\"1.0.0.1, 8.8.4.4\";\r\ +> \n#/ip/dns set servers=\"\";" +> add dont-require-permissions=no name=script1 owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ +> tool/netwatch/add comment=\"doh-fallback, doh-url=https://security.cloudfl\ +> are-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Clou\ +> dFlare-doh IPv4 1\" host=1.1.1.1;\r\ +> \n/tool/netwatch/add comment=\"doh, doh-url=https://security.cloudflare-dn\ +> s.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=CloudFlare\ +> -doh IPv4 2\" host=1.0.0.1;\r\ +> \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ +> /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ +> le-doh IPv4 1\" host=8.8.8.8;\r\ +> \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ +> /dns.google/dns-query, doh-cert=DigiCert Global Root G2, notify, name=Goog\ +> le-doh IPv4 2\" host=8.8.4.4;\r\ +> \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ +> /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ +> uad9-doh IPv4 1\" host=9.9.9.9;\r\ +> \n/tool/netwatch/add comment=\"doh-fallback, dns-fallback, doh-url=https:/\ +> /dns.quad9.net/dns-query, doh-cert=DigiCert Global Root G3, notify, name=C\ +> uad9-doh IPv4 2\" host=149.112.112.112;\r\ +> \n\r\ +> \n/tool/netwatch/add comment=\"dns, notify, name=ns1.unet.ws\" host=91.192\ +> .189.2;" +> add dont-require-permissions=no name=script2 owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> \r\ +> \n\r\ +> \n:global InspectVar;\r\ +> \n#:global RouterBoard;\r\ +> \n#:do {:set RouterBoard [[ :parse \"/system/routerboard/get\" ]]} on-erro\ +> r={}\r\ +> \n#:global Resources;\r\ +> \n#:do {:set Resources [[ :parse \"/system/resource/get\" ]]} on-error={}\ +> \r\ +> \n\r\ +> \n#:global Updates;\r\ +> \n#:do {:set Updates [[ :parse \"/system/package/update/get\" ]]} on-error\ +> ={}\r\ +> \n\r\ +> \n#:global PkgUpdStatus \"undefined\";\r\ +> \n#:local Update [/system/package/update/get];\r\ +> \n#:retry command={:set PkgUpdStatus (\$Update->\"status\")} delay=200ms m\ +> ax=5 on-error={};\r\ +> \n\r\ +> \n#:log warning [\$InspectVar \$RouterBoard];\r\ +> \n#:put [\$InspectVar \$RouterBoard];\r\ +> \n\r\ +> \n#:retry command={/system/package/update check-for-updates without-paging\ +> \_as-value} delay=300ms max=5 on-error={};\r\ +> \n\r\ +> \n#:global arrDeviceInfo ({});\r\ +> \n#:local arrDeviceInfo ({\"section\":{\"key\":\"\"; \"value\":\"\";};});\ +> \r\ +> \n#:set (\$arrDeviceInfo->\"RouterBoard\") [[ :parse \"/system/routerboard\ +> /get\" ]];\r\ +> \n#:retry command={:set (\$arrDeviceInfo->\"Updates\") [[ :parse \"/system\ +> /package/update/get\" ]]} delay=500ms max=5 on-error={:log error (\"Error\ +> \")};\r\ +> \n# [:toarray {\"section\"={\"key\"=\"\"; \"value\"=\"\";} }];\r\ +> \n# [:toarray \"\"];\r\ +> \n:local arrDeviceInfo ({});\r\ +> \n\r\ +> \n:set (\$arrDeviceInfo->\"devUpdates\") {\"channel\"; \"stable\";};\r\ +> \n#:do {:set (arrDeviceInfo->\"Updates\") [[ :parse \"/system/package/upda\ +> te/get\" ]]} on-error={:log error (\$error)}\r\ +> \n\$InspectVar \$arrDeviceInfo;\r\ +> \n" +> add comment="Script for setup routeros script system" \ +> dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\r\ +> \n# RouterOS script: AM-setup\r\ +> \n# Script comment: Script for setup routeros script system\r\ +> \n# Copyright (c) 2005-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch\r\ +> \n#\r\ +> \n# :local ScriptName [ :jobname ];\r\ +> \n# Additional commands:\r\ +> \n#\r\ +> \n# For scripts:\r\ +> \n#:global NewScript \"script_name\"; \r\ +> \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +> \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ +> tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ +> \".rsc\") output=user as-value ]->\"data\");\r\ +> \n#:global NewScript (a);\r\ +> \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ +> \n#\r\ +> \n# For run from terminal:\r\ +> \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ +> eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ +> ut=user as-value ]->\"data\");\r\ +> \n#\r\ +> \n\r\ +> \n:global ScriptUpdatesCRLF \"LF\";\r\ +> \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ +> \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ +> os\" ] do={\r\ +> \n# if (\$ScriptUpdatesCRLF = true) do={\r\ +> \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ +> cript;\r\ +> \n# } else={\r\ +> \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ +> ipt;\r\ +> \n# }\r\ +> \n# }\r\ +> \n#}\r\ +> \n\r\ +> \n# /import verbose=no \$ScriptName\r\ +> \n:global Identity [/system/identity/get name];\r\ +> \n:global SetupScript [ :jobname ];\r\ +> \n:global RemoveMe true;\r\ +> \n:global RunOnce (a);\r\ +> \n:global InitSetup true;\r\ +> \n:global tmpfs false;\r\ +> \n\r\ +> \n{\r\ +> \n :local RmMe [:tobool \$1];\r\ +> \n\r\ +> \n :global GlobalScriptsUrl;\r\ +> \n :global SetupScript;\r\ +> \n :global RemoveMe;\r\ +> \n :global InitSetup;\r\ +> \n :global tmpfs;\r\ +> \n\r\ +> \n :local UrlSuffix \$Identity;\r\ +> \n :local UrlDir \"certs/\";\r\ +> \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ +> \r\ +> \n :local CertCommonName \"Root YE\";\r\ +> \n :local CertFileName \"Root-YE.pem\";\r\ +> \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ +> f852f02a708aa5d5666\";\r\ +> \n\r\ +> \n :if (\$SetupScript = false) do={\r\ +> \n :global SetupScript \"AM-setup\";\r\ +> \n }\r\ +> \n :if (\$RemoveMe != false) do={\r\ +> \n :set RemoveMe true;\r\ +> \n }\r\ +> \n\r\ +> \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ +> \n \r\ +> \n\r\ +> \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ +> \_\\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ +> \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ +> onName ] ] > 0)) do={\r\ +> \n :put \"Importing certificate...\";\r\ +> \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ +> \_as-value;\r\ +> \n :delay 1s;\r\ +> \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ +> \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ +> t YE\" ];\r\ +> \n :delay 1s;\r\ +> \n };\r\ +> \n :local CertSettings [ /certificate/settings/get ];\r\ +> \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ +> ] != 1) do={\r\ +> \n :error \"Something is wrong with your certificates!\";\r\ +> \n };\r\ +> \n\r\ +> \n:local MkTmpfs do={\r\ +> \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ +> \n :if ([ :len \$TmpFs ] = 1) do={\r\ +> \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ +> \n :log info (\"The tmpfs is disabled, enabling.\");\r\ +> \n /disk/enable \$TmpFs;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ +> \n :do {\r\ +> \n :retry {\r\ +> \n /file/remove tmpfs;\r\ +> \n :return true;\r\ +> \n } delay=100ms max=10;\r\ +> \n } on-error={ }\r\ +> \n# \$RmDir \"tmpfs\";\r\ +> \n :onerror Err {\r\ +> \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ +> et total-memory ] / 3);\r\ +> \n :do {\r\ +> \n :retry {\r\ +> \n /file/get tmpfs;\r\ +> \n :return true;\r\ +> \n } delay=222ms max=10;\r\ +> \n } on-error={ }\r\ +> \n } do={\r\ +> \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n# :return true;\r\ +> \n}\r\ +> \n:if (\$tmpfs = true) do={\r\ +> \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ +> \";\r\ +> \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ +> \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ +> \n :return \$true;\r\ +> \n } else={\r\ +> \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ +> \n :if ([ \$MkTmpfs ] = false) do={\r\ +> \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ +> \n :return false;\r\ +> \n } else={\r\ +> \n :onerror Err {\r\ +> \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ +> \n :do {\r\ +> \n :retry {\r\ +> \n /file/get /tmpfs/scripts;\r\ +> \n :return true;\r\ +> \n } delay=100ms max=10;\r\ +> \n } on-error={ }\r\ +> \n } do={\r\ +> \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ +> Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n# :return true;\r\ +> \n# [ /file/get \$FileName ]\r\ +> \n }\r\ +> \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ +> \_global variable tmpfs!\");\r\ +> \n# :global tmpfs (a);\r\ +> \n# return false;\r\ +> \n }\r\ +> \n}\r\ +> \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ +> \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ +> . [ /system/clock/get time ] . \".rsc\");\r\ +> \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ +> fig\" ];\r\ +> \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\"; \"mod/AM-\ +> Certs-By-Ident\" } do={\r\ +> \n :put \"Installing \$Script...\";\r\ +> \n /system/script/remove [ find where name=\$Script ];\r\ +> \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ +> h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ +> \".rsc\") output=user as-value ]->\"data\");\r\ +> \n \r\ +> \n /system/script run \$Script;\r\ +> \n :delay 2s;\r\ +> \n };\r\ +> \n\r\ +> \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ +> ] > 0) do={\r\ +> \n :put \"Renaming certificate by its common-name...\";\r\ +> \n :global CertificateNameByCN;\r\ +> \n \$CertificateNameByCN \$CertFingerprint;\r\ +> \n };\r\ +> \n\r\ +> \n :if (\$RemoveMe = true) do={\r\ +> \n :put \"Add Scheduler for remove this script...\";\r\ +> \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ +> where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ +> \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ +> \"_RemoveSetup\\\" ];\\n\" . \\\r\ +> \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ +> \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ +> \";\r\ +> \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ +> time=startup interval=30s on-event=\$OnEvent;\r\ +> \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ +> . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ +> \n }\r\ +> \n :delay 1;\r\ +> \n :put \"Loading configuration and functions...\";\r\ +> \n :do { \r\ +> \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ +> \n :put \"Normal removing temporary global environment variables.\";\ +> \r\ +> \n :global SetupScript (a);\r\ +> \n :global InitSetup (a);\r\ +> \n :global RemoveMe (a);\r\ +> \n } on-error={\r\ +> \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ +> \n :log error (\$0 . \$ErrorMsg . :error);\r\ +> \n :error \$ErrorMsg;\r\ +> \n }\r\ +> \n}\r\ +135a733,3456 +> add comment="Global Config Script" dont-require-permissions=no name=\ +> AM-GlobalConfig owner=AM-GlobalConfig policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\r\ +> \n# RouterOS script: AM-GlobalConfig\r\ +> \n# Script comment: Global Config Script\r\ +> \n# Copyright (c) 2007-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# Warning: Dont touch this line!\r\ +> \n:global Identity [/system/identity/get name];\r\ +> \n:global GlobalConfReady false;\r\ +> \n#\r\ +> \n#\r\ +> \n# Global Url For Amster scripts to fetch\r\ +> \n# most be defined in AM-Init-Script or AM-setup scripts\r\ +> \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ +> \n:global ScriptsUrlSuffix (a);\r\ +> \n:global CheckSumsVerify true;\r\ +> \n\r\ +> \n:global ScriptUpdatesCRLF true;\r\ +> \n:global CommentsInScripts true;\r\ +> \n\r\ +> \n# Debug output:\r\ +> \n:global PrintDebug true; #false;\r\ +> \n\r\ +> \n# Debug output for specific script:\r\ +> \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ +> \n\r\ +> \n# Debug logs\r\ +> \n# Other actions (disk, email, remote or support) can be used as well.\r\ +> \n# I do not recommend using echo - use debug output instead (https://rsc.\ +> eworm.de/main/DEBUG.html#debug-output).\r\ +> \n#/system/logging/add topics=script,debug action=memory;\r\ +> \n\r\ +> \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ +> \n:global Domain \"WORKGROUP\";\r\ +> \n\r\ +> \n:global EmailGeneralTo \"vados@vados.ru\";\r\ +> \n#:global EmailGeneralCc \"\";\r\ +> \n\r\ +> \n# \$ScriptInstallUpdate mod/notification-telegram\r\ +> \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ +> \";\r\ +> \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ +> \n# Use this to send notifications to a specific topic in group.\r\ +> \n#:global TelegramThreadId \"30\";\r\ +> \n# Using telegram-chat you have to define trusted chat ids (not group ids\ +> !)\r\ +> \n# or user names. Groups allow to chat with devices simultaneously.\r\ +> \n:global TelegramChatIdsTrusted {\r\ +> \n \"454403445\"\r\ +> \n \"-1003631309063\"\r\ +> \n \"-5124482807\"\r\ +> \n \"1087968824\";\r\ +> \n};\r\ +> \n# \"-5294757340\";\r\ +> \n\r\ +> \n:global TelegramChatGroups \"(all)\";\r\ +> \n#:global TelegramChatGroups \"(all|home|office)\";\r\ +> \n\r\ +> \n:global NotificationFunctions {\r\ +> \n \"email\"\r\ +> \n \"telegram\";\r\ +> \n};\r\ +> \n# Toggle this to disable symbols in notifications.\r\ +> \n:global NotificationsWithSymbols true;\r\ +> \n:global TerminalColorOutput true;\r\ +> \n\r\ +> \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ +> \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ +> \n\r\ +> \n## Update channel. Possible values: stable, long-term, testing, developm\ +> ent\r\ +> \n:global updateChannel \"stable\";\r\ +> \n\r\ +> \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ +> \");\r\ +> \n:global CertRenewTime 2w;\r\ +> \n:global CertRenewPass (a); #{\r\ +> \n# \"\";\r\ +> \n# \"v3ry-s3cr3t\";\r\ +> \n# \"4n0th3r-s3cr3t\";\r\ +> \n#};\r\ +> \n:global CertWarnTime 1w;\r\ +> \n:global CertIssuedExportPass (a); # {\r\ +> \n# \"\";\r\ +> \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ +> \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ +> \n#};\r\ +> \n\r\ +> \n# Script BackupAndUpdate mode, possible values: backup,\r\ +> \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ +> n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ +> \n# osupdate - Update if available and creates backups before/after update\ +> \_(ignores `forceBackup`)\r\ +> \n# Set `forceBackup` to true to always create backups, even\ +> \_without updates\r\ +> \n# osnotify - Set `forceBackup` to always create backups on every run\r\ +> \n:global DevInfoIncludeIP true;\r\ +> \n:global BackupAndUpdateMode \"osnotify\"\r\ +> \n\r\ +> \n:global forceBackup true;\r\ +> \n:global BackupPassword \"Peskar55\";\r\ +> \n\r\ +> \n# SFTP Backup Variables\r\ +> \n:global BackupRandomDelay 0;\r\ +> \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ +> \n:global BackupUploadUser \$Identity;\r\ +> \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ +> \n\r\ +> \n:global BackupSendBinary true;\r\ +> \n:global BackupSendExport true;\r\ +> \n:global BackupSendGlobalConfig true;\r\ +> \n:global BackupSendScripts true;\r\ +> \n\r\ +> \n# Remove local file after uploading if no errors\r\ +> \n:global BackupRmLocal true;\r\ +> \n\r\ +> \n# Local Backups Root Directory \r\ +> \n:global BackupLocalRoot \"tmpfs\";\r\ +> \n\r\ +> \n# Encrypt Backup\r\ +> \n:global BackupEncrypt true;\r\ +> \n\r\ +> \n# Sensitive information in Backups\r\ +> \n:global BackupSens true;\r\ +> \n\r\ +> \n# User Export\r\ +> \n:global BackupUser true;\r\ +> \n\r\ +> \n# License Export (not for CHR, will silently skip)\r\ +> \n:global BackupLicense false;\r\ +> \n\r\ +> \n# SSH Keys\r\ +> \n:global BackupSshKeys true;\r\ +> \n\r\ +> \n# Certificate Export\r\ +> \n:global BackupCerts true;\r\ +> \n\r\ +> \n# Certificate Password\r\ +> \n:global BackupCertsPasswd \"\";\r\ +> \n\r\ +> \n# User-Manager Export\r\ +> \n:global BackupUserMan false;\r\ +> \n\r\ +> \n# The Dude Export\r\ +> \n:global BackupDude false;\r\ +> \n\r\ +> \n# User Files to export, comma-separated string or array of strings\r\ +> \n# User Files are not removed on backup\r\ +> \n# Any directory paths will be removed (/ -> _) on remote file\r\ +> \n# Nonpresent files are silently skipped\r\ +> \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ +> \n\r\ +> \n# load functions and any custom scripts\r\ +> \n# [ /system/script/find where name=\"global-config-ov\ +> erlay\" ], \\\r\ +> \n# [ /system/script/find where name~\"^global-config-o\ +> verlay\\\\.d/.\" ]\r\ +> \n#\r\ +> \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ +> ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ +> \r\ +> \n# :onerror Err {\r\ +> \n# /system/script/run \$Script;\r\ +> \n# } do={\r\ +> \n# :log error (\"Loading configuration from configs and functions\"\ +> \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ +> \n# }\r\ +> \n#}\r\ +> \n#:log info \"\\ndevMode = \$devMode\";\r\ +> \n#:log info \"\\ndevRunning = \$devRunning\";\r\ +> \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ +> GlobalRUN\\r\?\\n\" ] do={\r\ +> \n :onerror Err {\r\ +> \n /system/script/run \$Script;\r\ +> \n } do={\r\ +> \n :log error (\"Run script \" . [ /system/script/get \$Script name \ +> ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n# signal we are ready\r\ +> \n:set GlobalConfReady true;\r\ +> \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ +> \n" +> add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ +> owner=AM-GlobalFunc policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\r\ +> \n# RouterOS script: AM-GglobalFunc\r\ +> \n# Script comment: Global functions\r\ +> \n# Copyright (c) 2005-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch, scheduler\r\ +> \n:local ExitOK false;\r\ +> \n:local ScriptName [ :jobname ];\r\ +> \n#:global checkRunJob \$SriptName;\r\ +> \n#:global fixCRLF;\r\ +> \n#:if (\$fixCRLF != false) do={\r\ +> \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ +> ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ +> }\r\ +> \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ +> et \$fixScript source ] ] \$fixScript};};\r\ +> \n#}\r\ +> \n:global GlobalFuncReady false;\r\ +> \n\r\ +> \n# Git commit id & info, expected configuration version\r\ +> \n:global CommitId \"main/635/33f8040a\";\r\ +> \n:global CommitTAG \"unknown\";\r\ +> \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ +> r: root, in 13:30:03 11.05.2026.\";\r\ +> \n\r\ +> \n# The variables are received right here.\r\ +> \n:global GlobalConfVersion 140;\r\ +> \n\r\ +> \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ +> \n\r\ +> \n:global Identity [/system/identity/get name];\r\ +> \n:global IdentityShort [:pick \$Identity 0 18];\r\ +> \n\r\ +> \n:global devBoardName [/system/resource/get board-name];\r\ +> \n:global devMode [/system/device-mode/get mode];\r\ +> \n:global devCurArch [/system/resource/get architecture-name];\r\ +> \n:global devCurVersion [/system/resource/get version];\r\ +> \n\r\ +> \n# Variables defined in AM-GlobalConfig.rsc\r\ +> \n:global TerminalColorOutput;\r\ +> \n:global CommentsInScripts;\r\ +> \n:global DetectIpAddrDefault;\r\ +> \n:global DetectIpAddrFallback;\r\ +> \n:global updateChannel;\r\ +> \n:global Domain;\r\ +> \n:global EmailGeneralTo;\r\ +> \n:global BackupAndUpdateMode;\r\ +> \n\r\ +> \n# Single functions, without nested functions.\r\ +> \n:global MiniDateTimeStamp;\r\ +> \n:global MicroDateTimeStamp;\r\ +> \n\r\ +> \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ +> \n:global LogPrint;\r\ +> \n\r\ +> \n# DeviceInfo and Updates\r\ +> \n:global IsCheckUpdates;\r\ +> \n:global WaitCheckUpdates;\r\ +> \n:global GetPubIp;\r\ +> \n\r\ +> \n:global GetArrDeviceInfo;\r\ +> \n:global WaitArrDeviceInfo;\r\ +> \n\r\ +> \n:global devModel;\r\ +> \n:global devRunningMode;\r\ +> \n\r\ +> \n:global devRbRevision;\r\ +> \n:global devRbSerialNumber;\r\ +> \n:global devRbVerAvail;\r\ +> \n\r\ +> \n:global runningChannelVersion;\r\ +> \n:global runningChannel;\r\ +> \n:global runningVersion;\r\ +> \n\r\ +> \n:global devBuildTime;\r\ +> \n:global ROsVerAvail;\r\ +> \n:global PkgUpdStatus;\r\ +> \n:global currentUpdateChannel;\r\ +> \n\r\ +> \n:global ScriptInstallUpdate;\r\ +> \n\r\ +> \n:global DeviceInfo;\r\ +> \n\r\ +> \n:global OldMode;\r\ +> \n\r\ +> \n:global ParseKeyValueStore;\r\ +> \n:global RandomDelay;\r\ +> \n:global GetRandomNumber;\r\ +> \n:global EscapeForRegEx;\r\ +> \n:global CharacterMultiply;\r\ +> \n:global CharacterReplace;\r\ +> \n:global CleanFilePath;\r\ +> \n:global CleanName;\r\ +> \n\r\ +> \n:global CommitBrief;\r\ +> \n\r\ +> \n:global EitherOr;\r\ +> \n:global FormatLine;\r\ +> \n:global GetRandom20CharAlNum;\r\ +> \n:global GetRandom20CharHex;\r\ +> \n:global GetRandomNumber;\r\ +> \n:global Grep;\r\ +> \n:global IfThenElse;\r\ +> \n:global MAX;\r\ +> \n:global MIN;\r\ +> \n:global HumanReadableNum;\r\ +> \n\r\ +> \n:global IsFullyConnected;\r\ +> \n:global IsDNSResolving;\r\ +> \n:global IsTimeSync;\r\ +> \n:global IsTimeSyncCached;\r\ +> \n:global IsTimeSyncResetNtp;\r\ +> \n\r\ +> \n:global WaitDNSResolving;\r\ +> \n:global WaitFullyConnected;\r\ +> \n:global WaitTimeSync;\r\ +> \n:global MkDir;\r\ +> \n:global RmDir;\r\ +> \n:global RmFile;\r\ +> \n:global FileGet;\r\ +> \n:global Unix2Dos;\r\ +> \n:global UrlEncode;\r\ +> \n:global WaitForFile;\r\ +> \n:global ScriptLock;\r\ +> \n:global SendTelegram;\r\ +> \n:global NotificationFunctions;\r\ +> \n:global SendNotification;\r\ +> \n:global SendNotification2;\r\ +> \n:global SymbolForNotification;\r\ +> \n:global SymbolByUnicodeName;\r\ +> \n:global ValidateSyntax;\r\ +> \n:global CheckSumsVerify;\r\ +> \n:global GlobalConfChanges;\r\ +> \n:global GlobalConfMigration;\r\ +> \n:global VersionToNum;\r\ +> \n:global RequiredRouterOS;\r\ +> \n:global ExitError;\r\ +> \n:global ExitOnError;\r\ +> \n\r\ +> \n:global FetchHugeFiles;\r\ +> \n:global FetchUserAgentStr;\r\ +> \n:global FileExists;\r\ +> \n:global CertificateAvailable;\r\ +> \n:global CertificateDownload;\r\ +> \n:global CertificateNameByCN;\r\ +> \n:global CharacterMultiply;\r\ +> \n\r\ +> \n:global InspectVar;\r\ +> \n:global InspectVarRet;\r\ +> \n:global ParseCustom;\r\ +> \n\r\ +> \n:set IsCheckUpdates do={\r\ +> \n :local isInfo [:tobool \$1];\r\ +> \n :global updateChannel;\r\ +> \n :global PkgUpdStatus;\r\ +> \n :global currentUpdateChannel;\r\ +> \n :global ROsVerAvail;\r\ +> \n :global arrDeviceInfo;\r\ +> \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ +> \n :local CurrentChannel [ /system/package/update/get channel ];\r\ +> \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ +> el) do={\r\ +> \n :retry command={/system/package/update set channel=\$updateChannel} \ +> \_delay=300ms max=5 on-error={};\r\ +> \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ +> \n }\r\ +> \n :local Update [ /system/package/update/get ];\r\ +> \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ +> \n :set currentUpdateChannel \$Channel;\r\ +> \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ +> \n :local StatusPkg \"undefined\";\r\ +> \n :log info (\$0 . \" Checking for updates...\");\r\ +> \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ +> dates without-paging as-value]->\"status\")} \\\r\ +> \n delay=300ms max=5 on-error={};\r\ +> \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ +> \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ +> s true; } else={ :set PkgUpdStatus false; }\r\ +> \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ +> ] ];\r\ +> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ +> \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ +> \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ +> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ +> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ +> \n }\r\ +> \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ +> kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ +> \n :return true;\r\ +> \n } else={\r\ +> \n :return \$PkgUpdStatus;\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set WaitCheckUpdates do={\r\ +> \n :global IsCheckUpdates;\r\ +> \n :global PkgUpdStatus;\r\ +> \n :global currentUpdateChannel;\r\ +> \n :global ROsVerAvail;\r\ +> \n :global arrDeviceInfo;\r\ +> \n :local Status \"\";\r\ +> \n :local Update;\r\ +> \n :local WaitCount 0;\r\ +> \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ +> \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ +> \") && \$WaitCount < 60) do={\r\ +> \n :delay 1s;\r\ +> \n :set WaitCount (\$WaitCount + 1);\r\ +> \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ +> \n }\r\ +> \n :set Update [ /system/package/update/get ];\r\ +> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ +> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ +> \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ +> \n :set PkgUpdStatus true;\r\ +> \n } else={\r\ +> \n :set PkgUpdStatus false;\r\ +> \n }\r\ +> \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ +> \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ +> \n }\r\ +> \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ +> \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ +> do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set WaitArrDeviceInfo do={\r\ +> \n :global GetArrDeviceInfo;\r\ +> \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ +> \n :delay 1s;\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set GetArrDeviceInfo do={\r\ +> \n :global LogPrint;\r\ +> \n :global arrDeviceInfo;\r\ +> \n :global devBoardName;\r\ +> \n :global devModel;\r\ +> \n :global devRunning;\r\ +> \n :global devCurArch;\r\ +> \n :global devRbRevision;\r\ +> \n :global devRbSerialNumber;\r\ +> \n :global devBuildTime;\r\ +> \n :global runningChannelVersion;\r\ +> \n :global runningChannel;\r\ +> \n :global runningVersion;\r\ +> \n :global currentUpdateChannel;\r\ +> \n :global ROsVerAvail;\r\ +> \n\r\ +> \n :local DeviceInfo;\r\ +> \n :local Resource [/system/resource/get];\r\ +> \n :local Update [ /system/package/update/get ];\r\ +> \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ +> \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ +> \n :local RouterBoard;\r\ +> \n :local IsRouterBoard false;\r\ +> \n :local RunningMode \"\";\r\ +> \n\r\ +> \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ +> \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ +> \n :set runningChannelVersion \$VersionString;\r\ +> \n :set runningVersion \$VersionString;\r\ +> \n :set runningChannel \"\";\r\ +> \n\r\ +> \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ +> {\r\ +> \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ +> \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ +> len \$VersionString ] ];\r\ +> \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ +> \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ +> \r\ +> \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ +> \_3] != \"x86\") do={\r\ +> \n :do {\r\ +> \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ +> \n# :set RouterBoard [ /system/routerboard/get ];\r\ +> \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ +> \n :set IsRouterBoard true;\r\ +> \n }\r\ +> \n } on-error={}\r\ +> \n }\r\ +> \n\r\ +> \n :do {\r\ +> \n :set RunningMode [ /system/device-mode/get mode ];\r\ +> \n } on-error={\r\ +> \n :do {\r\ +> \n :set RunningMode [ /system/device-mode/get running ];\r\ +> \n } on-error={\r\ +> \n :set RunningMode \"\";\r\ +> \n }\r\ +> \n }\r\ +> \n :set devRunning \$RunningMode;\r\ +> \n\r\ +> \n :if (\$IsRouterBoard = true) do={\r\ +> \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ +> \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ +> \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ +> ];\r\ +> \n } else={\r\ +> \n :set devModel \$devBoardName;\r\ +> \n :set devRbRevision \"\";\r\ +> \n :set devRbSerialNumber \"\";\r\ +> \n }\r\ +> \n\r\ +> \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ +> \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ +> \n\r\ +> \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ +> \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ +> \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ +> \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ +> \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ +> \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ +> \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ +> \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ +> ion;\r\ +> \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ +> \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ +> \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ +> \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ +> current-firmware\") ];\r\ +> \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ +> upgrade-firmware\") ];\r\ +> \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ +> \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ +> alled-version\") ];\r\ +> \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ +> \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ +> ) ];\r\ +> \n\r\ +> \n :set arrDeviceInfo \$DeviceInfo;\r\ +> \n :return \$DeviceInfo;\r\ +> \n}\r\ +> \n\r\ +> \n:set DeviceInfo do={\r\ +> \n :global GetArrDeviceInfo;\r\ +> \n :global GlobalConfVersion;\r\ +> \n :global Identity;\r\ +> \n :global IfThenElse;\r\ +> \n :global FormatLine;\r\ +> \n :global CommitBrief;\r\ +> \n\r\ +> \n :local License [/system/license/get];\r\ +> \n :local Snmp [ /snmp/get ];\r\ +> \n :local Info [ \$GetArrDeviceInfo ];\r\ +> \n\r\ +> \n :if ([ :typeof \$Info ] != \"array\") do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :return ( \\\r\ +> \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ +> \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ +> \_. \\\r\ +> \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ +> \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ +> \_\\\r\ +> \n \"Hardware:\\n\" . \\\r\ +> \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ +> \\\r\ +> \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ +> n\" . \\\r\ +> \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ +> \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ +> \\n\") ] . \\\r\ +> \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ +> \")) ] . \"\\n\") ] . \\\r\ +> \n \"RouterOS:\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ +> \")) ] . \"\\n\") ] . \\\r\ +> \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ +> \\n\" . \\\r\ +> \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ +> \_\"\\n\" . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ +> \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ +> \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ +> \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ +> \"\\n\") ] . \\\r\ +> \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ +> \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ +> \_\\\r\ +> \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ +> \_\"\\n\") ] . \\\r\ +> \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ +> \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ +> ) \\\r\ +> \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ +> \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ +> \n \"RouterOS-Scripts:\\n\" . \\\r\ +> \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ +> \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ +> \n}\r\ +> \n\r\ +> \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ +> tionFunctions ({})}\r\ +> \n\r\ +> \n:set GetRandom20CharAlNum do={\r\ +> \n :global EitherOr;\r\ +> \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ +> FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ +> \n}\r\ +> \n\r\ +> \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ +> \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ +> \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ +> \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ +> \n\r\ +> \n:global checkRunJob;\r\ +> \n:set checkRunJob do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :global ScriptLock; \r\ +> \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ +> \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ +> :set Job [ /system/script/job/get \$Job ];\r\ +> \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ +> stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ +> \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ +> lse; \r\ +> \n}\r\ +> \n\r\ +> \n:set InspectVar do={\r\ +> \n :global InspectVarRet;\r\ +> \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ +> \n}\r\ +> \n\r\ +> \n:set CommitBrief do={\r\ +> \n :global CommitId;\r\ +> \n :global CommitInfo;\r\ +> \n :if (\$CommitId = \"unknown\") do={\r\ +> \n :return \"unknown\";\r\ +> \n }\r\ +> \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ +> \n}\r\ +> \n\r\ +> \n:set InspectVarRet do={\r\ +> \n :local Input \$1;\r\ +> \n :local Level (0 + [ :tonum \$2 ]);\r\ +> \n :global CharacterReplace;\r\ +> \n :global IfThenElse;\r\ +> \n :global InspectVarRet;\r\ +> \n :local IndentReturn do={\r\ +> \n :local Prefix [ :tostr \$1 ];\r\ +> \n :local Value [ :tostr \$2 ];\r\ +> \n :local Level [ :tonum \$3 ];\r\ +> \n :global CharacterMultiply;\r\ +> \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ +> fix . \"-> \" . \$Value);\r\ +> \n }\r\ +> \n :local TypeOf [ :typeof \$Input ];\r\ +> \n :local Len [ :len \$Input ];\r\ +> \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ +> \n :if (\$TypeOf = \"array\") do={\r\ +> \n :foreach Key,Value in=\$Input do={\r\ +> \n :set \$Return (\$Return . \"\\n\" . \\\r\ +> \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ +> \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ +> \n }\r\ +> \n } else={\r\ +> \n :if (\$TypeOf = \"str\") do={\r\ +> \n :set \$Return (\$Return . \"\\n\" . \\\r\ +> \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ +> \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ +> \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ +> \n }\r\ +> \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ +> \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ +> \n }\r\ +> \n }\r\ +> \n :if (\$TypeOf != \"nothing\") do={\r\ +> \n :set \$Return (\$Return . \"\\n\" . \\\r\ +> \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ +> \_\\\r\ +> \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ +> \n }\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set GetPubIp do={\r\ +> \n :global DetectIpAddrDefault;\r\ +> \n :global DetectIpAddrFallback;\r\ +> \n\r\ +> \n :local PubIpAddr false;\r\ +> \n :local Url \$DetectIpAddrDefault;\r\ +> \n :local JobName [ :jobname ];\r\ +> \n\r\ +> \n :do {\r\ +> \n :log debug (\$0 . \" Trying to detect public IP using default serv\ +> ice: \" . \$Url . \"...\");\r\ +> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ +> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ +> )} \\\r\ +> \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ +> detect public IP using default service: \" . \$Url . \".\")}\r\ +> \n } on-error={\r\ +> \n :log error (\$0 . \" Failed to detect public IP using default serv\ +> ice: \" . \$Url . \".\");\r\ +> \n :set Url \$DetectIpAddrFallBack;\r\ +> \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ +> vice: \" . \$Url . \"...\");\r\ +> \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ +> \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ +> )} \\\r\ +> \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ +> \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ +> \n };\r\ +> \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ +> \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ +> {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ +> \n :return \$PubIpAddr;\r\ +> \n}\r\ +> \n\r\ +> \n:set FormatLine do={\r\ +> \n :local Key [ :tostr \$1 ];\r\ +> \n :local Value [ :tostr \$2 ];\r\ +> \n :local Indent [ :tonum \$3 ];\r\ +> \n :local Spaces;\r\ +> \n :local Return \"\";\r\ +> \n :global CharacterMultiply;\r\ +> \n :global EitherOr;\r\ +> \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ +> \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ +> \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ +> \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ +> n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ +> \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ +> \$Return ]) ] . \$Value)}\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set ParseCustom do={\r\ +> \n :local Str [ :tostr \$1 ];\r\ +> \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ +> \n :local End [ :tostr \$3 ];\r\ +> \n :local Num [ :tonum \$4 ];\r\ +> \n :local Return;\r\ +> \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ +> \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ +> \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ +> lse={\r\ +> \n :set End [:find \$rest \$End];\r\ +> \n :set Return [:pick \$rest 0 \$End];\r\ +> \n }\r\ +> \n:return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set LogPrint do={\r\ +> \n :local Severity [ :tostr \$1 ];\r\ +> \n :local Name [ :tostr \$2 ];\r\ +> \n :local Message [ :tostr \$3 ];\r\ +> \n :global PrintDebug;\r\ +> \n :global PrintDebugOverride;\r\ +> \n :global EitherOr;\r\ +> \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ +> ];\r\ +> \n :local PrintSeverity do={\r\ +> \n :global TerminalColorOutput;\r\ +> \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ +> \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ +> \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ +> \n}\r\ +> \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ +> \r\ +> \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ +> \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ +> \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ +> \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ +> \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ +> \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ +> erity \$Severity ] . \": \" . \$Message)}\r\ +> \n}\r\ +> \n\r\ +> \n:set CertificateAvailable do={\r\ +> \n :local CommonName [ :tostr \$1 ];\r\ +> \n :local UseFor [ :tostr \$2 ];\r\ +> \n\r\ +> \n :global CertificateDownload;\r\ +> \n :global ParseKeyValueStore;\r\ +> \n\r\ +> \n :if ([ :len \$UseFor ] = 0) do={\r\ +> \n :log warning (\$0 . \"The intended use is undefined!\");\r\ +> \n :set UseFor \"undefined\";\r\ +> \n }\r\ +> \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ +> \n [ /certificate/settings/get crl-download ] = true && \\\r\ +> \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ +> \n :log warning (\$0 . \"This system has low free flash space but \" . \ +> \\\r\ +> \n \"is configured to download certificate CRLs to system!\");\r\ +> \n }\r\ +> \n :if ([ :len \$CommonName ] = 0) do={\r\ +> \n :log warning (\$0 . \"No CommonName given!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local CertSettings [ /certificate/settings/get ];\r\ +> \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ +> \r\ +> \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ +> \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ +> \_] ] > 0) do={\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ +> ) do={\r\ +> \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ +> \"' not available.\");\r\ +> \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ +> ) do={\r\ +> \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ +> \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ +> e ] ];\r\ +> \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ +> ertVal->\"skid\")) do={\r\ +> \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ +> \_= 0) do={\r\ +> \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ +> >\"CN\");\r\ +> \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ +> is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ +> \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ +> \") ] ];\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set CertificateDownload do={\r\ +> \n :local CommonName [ :tostr \$1 ];\r\ +> \n :global ScriptUpdatesBaseUrl;\r\ +> \n :global ScriptUpdatesUrlSuffix;\r\ +> \n :global CertificateNameByCN;\r\ +> \n :global CleanName;\r\ +> \n :global FetchUserAgentStr;\r\ +> \n :global RmFile;\r\ +> \n :global WaitForFile;\r\ +> \n\r\ +> \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ +> \r\ +> \n \"CommonName '\" . \$CommonName . \"'.\");\r\ +> \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ +> \n :do {\r\ +> \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ +> -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ +> \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ +> sUrlSuffix) \\\r\ +> \n dst-path=\$FileName as-value;\r\ +> \n \$WaitForFile \$FileName;\r\ +> \n } on-error={\r\ +> \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ +> e '\" . \$CommonName . \\\r\ +> \n \"' from repository! Trying fallback to mkcert.org...\");\r\ +> \n :do {\r\ +> \n :local CertSettings [ /certificate/settings/get ];\r\ +> \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ +> \_] ] = 0 && \\\r\ +> \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ +> || \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ +> \\\r\ +> \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ +> \r\ +> \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ +> \_Root X1\" ] ] > 0)) do={\r\ +> \n :log error (\$0 . \" Required certificate is not available.\");\ +> \r\ +> \n :return false;\r\ +> \n }\r\ +> \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ +> er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ +> \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ +> n ({ \$CommonName }) ] \\\r\ +> \n dst-path=\$FileName as-value;\r\ +> \n \$WaitForFile \$FileName;\r\ +> \n :if ([ /file/get \$FileName size ] = 0) do={\r\ +> \n \$RmFile \$FileName;\r\ +> \n :error false;\r\ +> \n }\r\ +> \n } on-error={\r\ +> \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ +> e '\" . \$CommonName . \"'!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ +> \n :delay 1s;\r\ +> \n \$RmFile \$FileName;\r\ +> \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ +> ) do={\r\ +> \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ +> +\\\$\") ];\r\ +> \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ +> e . \"' still unavailable!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ +> \"_[0-9]+\\\$\") ] do={\r\ +> \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set CertificateNameByCN do={\r\ +> \n :local Match [ :tostr \$1 ];\r\ +> \n :global CleanName;\r\ +> \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ +> rint=\$Match or name=\$Match) ]->0);\r\ +> \n :if ([ :len \$Cert ] = 0) do={\r\ +> \n :log warning (\$0 .\" No matching certificate found.\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ +> \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set CharacterMultiply do={\r\ +> \n :local Str [ :tostr \$1 ];\r\ +> \n :local Num [ :tonum \$2 ];\r\ +> \n :if (\$Num = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set FileExists do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :local Type [ :tostr \$2 ];\r\ +> \n :global FileGet;\r\ +> \n :local FileVal [ \$FileGet \$FileName ];\r\ +> \n :if (\$FileVal = false) do={ :return false; }\r\ +> \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ +> \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ +> \_true; }\r\ +> \n :return false;\r\ +> \n}\r\ +> \n\r\ +> \n:set Grep do={\r\ +> \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ +> \n :local Pattern [ :tostr \$2 ];\r\ +> \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ +> }\r\ +> \n :do {\r\ +> \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ +> \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ +> \$Line}\r\ +> \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ +> Input ] ];\r\ +> \n } while=([ :len \$Input ] > 0);\r\ +> \n :return [];\r\ +> \n}\r\ +> \n\r\ +> \n:set HumanReadableNum do={\r\ +> \n :local Input [ :tonum \$1 ];\r\ +> \n :local Base [ :tonum \$2 ];\r\ +> \n :global EitherOr;\r\ +> \n :global IfThenElse;\r\ +> \n :local Prefix \"kMGTPE\";\r\ +> \n :local Pow 1;\r\ +> \n :set Base [ \$EitherOr \$Base 1024 ];\r\ +> \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ +> \n :if (\$Input < \$Base) do={:return \$Input}\r\ +> \n :for I from=0 to=[ :len \$Prefix ] do={\r\ +> \n :set Pow (\$Pow * \$Base);\r\ +> \n :if (\$Input / \$Base < \$Pow) do={\r\ +> \n :set Prefix [ :pick \$Prefix \$I ];\r\ +> \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ +> \n :local Tmp2 (\$Tmp1 / 100);\r\ +> \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ +> \n :return (\$Tmp2 . \".\" . \\\r\ +> \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ +> 2 ] + 1) ] . \\\r\ +> \n \$Prefix . \$Bin);\r\ +> \n }\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set CleanFilePath do={\r\ +> \n :local Path [ :tostr \$1 ];\r\ +> \n :global CharacterReplace;\r\ +> \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ +> \"//\" \"/\" ]; }\r\ +> \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ +> n \$Path ] ]; }\r\ +> \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ +> :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ +> \n :return \$Path;\r\ +> \n}\r\ +> \n\r\ +> \n:set CleanName do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :local Return \"\";\r\ +> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +> \n :local Char [ :pick \$Input \$I ];\r\ +> \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ +> stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ +> \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ +> \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ +> ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ +> \n };\r\ +> \n :set Return (\$Return . \$Char)};\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set RandomDelay do={\r\ +> \n :local Time [ :tonum \$1 ];\r\ +> \n :local Unit [ :tostr \$2 ];\r\ +> \n :global EitherOr;\r\ +> \n :global GetRandomNumber;\r\ +> \n :global MAX;\r\ +> \n :if (\$Time = 0) do={:return false}\r\ +> \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ +> [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ +> \n}\r\ +> \n\r\ +> \n:set EscapeForRegEx do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ +> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +> \n :local Char [ :pick \$Input \$I ];\r\ +> \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ +> \n :set Return (\$Return . \$Char);\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set ExitError do={\r\ +> \n :local ExitOK [ :tostr \$1 ];\r\ +> \n :local Name [ :tostr \$2 ];\r\ +> \n :local Error [ :tostr \$3 ];\r\ +> \n :global IfThenElse;\r\ +> \n :if (\$ExitOK = \"false\") do={\r\ +> \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ +> \\\r\ +> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ +> ror\" . \\\r\ +> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ +> \$Error) \".\" ]);\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set ExitOnError do={\r\ +> \n :local Name [ :tostr \$1 ];\r\ +> \n :local Error [ :tostr \$2 ];\r\ +> \n :global IfThenElse;\r\ +> \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ +> \\\$\") \\\r\ +> \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ +> r\" . \\\r\ +> \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ +> rror) \".\" ]);\r\ +> \n}\r\ +> \n\r\ +> \n:set MiniDateTimeStamp do={\r\ +> \n :local mikro [ :tobool \$1 ];\r\ +> \n /system/clock;\r\ +> \n :local vdate [get date];\r\ +> \n :local vtime [get time];\r\ +> \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ +> \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ +> \n :local M [:tonum \$MM];\r\ +> \n :if (\$vdate ~ \".../../....\") do={\r\ +> \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ +> \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ +> PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ +> \n :if (\$M>12) do={:set M (\$M - 12)}\r\ +> \n :set MM [:pick (100 + \$M) 1 3];\r\ +> \n }\r\ +> \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ +> \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ +> \n :local HH [:pick \$vtime 0 2];\r\ +> \n :local mm [:pick \$vtime 3 5];\r\ +> \n :local ss [:pick \$vtime 6 8];\r\ +> \n :local Return;\r\ +> \n :if (\$mikro = true) do={\r\ +> \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ +> \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ +> \n } else={\r\ +> \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ +> \r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set WaitForFile do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :local WaitTime [ :totime \$2 ];\r\ +> \n :global CleanFilePath;\r\ +> \n :global EitherOr;\r\ +> \n :global MAX;\r\ +> \n :set FileName [ \$CleanFilePath \$FileName ];\r\ +> \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ +> \n :do {\r\ +> \n :retry {\r\ +> \n /file/get \$FileName;\r\ +> \n :return true;\r\ +> \n } delay=\$Delay max=10;\r\ +> \n } on-error={ }\r\ +> \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ +> \n :do {\r\ +> \n /file/get \$FileName;\r\ +> \n :return true;\r\ +> \n } on-error={ }\r\ +> \n :delay \$Delay;\r\ +> \n :set Delay (\$Delay * 3 / 2);\r\ +> \n }\r\ +> \n :return false;\r\ +> \n}\r\ +> \n\r\ +> \n:set FileGet do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :global WaitForFile;\r\ +> \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local FileVal false;\r\ +> \n :do {\r\ +> \n :set FileVal [ /file/get \$FileName ];\r\ +> \n } on-error={ }\r\ +> \n :return \$FileVal;\r\ +> \n}\r\ +> \n\r\ +> \n:set RmDir do={\r\ +> \n :local DirName [ :tostr \$1 ];\r\ +> \n :global FileGet;\r\ +> \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ +> \n :local DirVal [ \$FileGet \$DirName ];\r\ +> \n :if (\$DirVal = false) do={\r\ +> \n :log debug (\$0 . \" ... which does not exist.\");\r\ +> \n :return true;\r\ +> \n };\r\ +> \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ +> \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ +> ory.\");\r\ +> \n :return false;\r\ +> \n };\r\ +> \n :onerror Err {\r\ +> \n /file/remove \$DirName;\r\ +> \n } do={\r\ +> \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ +> : \" . \$Err);\r\ +> \n :return false;\r\ +> \n };\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set RmFile do={\r\ +> \n :local FileName [ :tostr \$1 ];\r\ +> \n :global FileGet;\r\ +> \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ +> \n :local FileVal [ \$FileGet \$FileName ];\r\ +> \n :if (\$FileVal = false) do={\r\ +> \n :log debug (\$0 . \" ... which does not exist.\");\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ +> sk\") do={\r\ +> \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ +> \r\ +> \n :return false;\r\ +> \n }\r\ +> \n :onerror Err {\r\ +> \n /file/remove \$FileName;\r\ +> \n } do={\r\ +> \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ +> \_. \$Err); :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set MkDir do={\r\ +> \n :local Path [ :tostr \$1 ];\r\ +> \n :global CleanFilePath;\r\ +> \n :global FileGet;\r\ +> \n :global RmDir;\r\ +> \n :global WaitForFile;\r\ +> \n\r\ +> \n :local MkTmpfs do={\r\ +> \n :global WaitForFile;\r\ +> \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ +> \n :if ([ :len \$TmpFs ] = 1) do={\r\ +> \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ +> \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ +> \n /disk/enable \$TmpFs;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ +> \n \$RmDir \"tmpfs\";\r\ +> \n :onerror Err {\r\ +> \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ +> /get total-memory ] / 3);\r\ +> \n \$WaitForFile \"tmpfs\";\r\ +> \n } do={\r\ +> \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ +> Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :set Path [ \$CleanFilePath \$Path ];\r\ +> \n :if (\$Path = \"\") do={\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ +> \n :local PathVal [ \$FileGet \$Path ];\r\ +> \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ +> \n :log debug (\$0 . \" ... which already exists.\");\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ +> \n :if ([ \$MkTmpfs ] = false) do={\r\ +> \n :return false;\r\ +> \n }\r\ +> \n }\r\ +> \n :onerror Err {\r\ +> \n /file/add type=\"directory\" name=\$Path;\r\ +> \n \$WaitForFile \$Path;\r\ +> \n } do={\r\ +> \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ +> \" . \$Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ +> \n :return \$2;\r\ +> \n}\r\ +> \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ +> \n :return \$2;\r\ +> \n}\r\ +> \n\r\ +> \n:set CharacterMultiply do={\r\ +> \n :local Str [ :tostr \$1 ];\r\ +> \n :local Num [ :tonum \$2 ];\r\ +> \n :if (\$Num = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set CharacterReplace do={\r\ +> \n :local String [ :tostr \$1 ];\r\ +> \n :local ReplaceFrom [ :tostr \$2 ];\r\ +> \n :local ReplaceWith [ :tostr \$3 ];\r\ +> \n :local Return \"\";\r\ +> \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ +> \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ +> \r\ +> \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ +> \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ +> \r\ +> \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ +> \_\$String ] ];\r\ +> \n }\r\ +> \n :return (\$Return . \$String);\r\ +> \n}\r\ +> \n\r\ +> \n:set IfThenElse do={\r\ +> \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ +> \$2};\r\ +> \n :return \$3;\r\ +> \n}\r\ +> \n\r\ +> \n:set EitherOr do={\r\ +> \n :global IfThenElse;\r\ +> \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ +> \$1 \$2 ]}\r\ +> \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ +> \_\$1 \$2 ]}\r\ +> \n# this works for boolean values, literal ones with parentheses\r\ +> \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ +> \n}\r\ +> \n\r\ +> \n:set ParseKeyValueStore do={\r\ +> \n :local Source \$1;\r\ +> \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ +> \n :do {\r\ +> \n :return [ :deserialize from=json \$Source ];\r\ +> \n } on-error={ }\r\ +> \n } \r\ +> \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ +> }\r\ +> \n :local Result ({});\r\ +> \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ +> \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ +> \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ +> \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ +> \_:len \$KeyValue ] ];\r\ +> \n :if (\$Value=\"true\") do={:set Value true}\r\ +> \n :if (\$Value=\"false\") do={:set Value false}\r\ +> \n :set (\$Result->\$Key) \$Value;\r\ +> \n } else={:set (\$Result->\$KeyValue) true}\r\ +> \n }\r\ +> \n :return \$Result;\r\ +> \n}\r\ +> \n:set RequiredRouterOS do={\r\ +> \n :local Caller [ :tostr \$1 ];\r\ +> \n :local Required [ :tostr \$2 ];\r\ +> \n :local Warn [ :tostr \$3 ];\r\ +> \n :global IfThenElse;\r\ +> \n :global VersionToNum;\r\ +> \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ +> \\\$\")) do={\r\ +> \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ +> e/update/get installed-version ] ]) do={\r\ +> \n :if (\$Warn = \"true\") do={\r\ +> \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ +> 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ +> \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ +> es RouterOS \" . \$Required . \". Please update!\");\r\ +> \n }\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set ValidateSyntax do={\r\ +> \n :local Code [ :tostr \$1 ];\r\ +> \n :global LogPrint;\r\ +> \n :onerror Err {\r\ +> \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ +> \n } do={\r\ +> \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set VersionToNum do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :local Multi 0x1000000;\r\ +> \n :local Return 0;\r\ +> \n :global CharacterReplace;\r\ +> \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ +> \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ +> \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ +> \r\ +> \n }\r\ +> \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ +> \n :local Num [ :tonum \$Value ];\r\ +> \n :if (\$Multi = 0x100) do={\r\ +> \n :if ([ :typeof \$Num ] = \"num\") do={\r\ +> \n :set Return (\$Return + 0xff00);\r\ +> \n :set Multi (\$Multi / 0x100);\r\ +> \n } else={\r\ +> \n :if (\$Value = \"zero\") do={ }\r\ +> \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ +> }\r\ +> \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ +> \r\ +> \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ +> lue * \$Multi)); }\r\ +> \n :set Multi (\$Multi / 0x100);\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set ScriptLock do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local WaitMax [ :totime \$2 ];\r\ +> \n :global GetRandom20CharAlNum;\r\ +> \n :global IfThenElse;\r\ +> \n :global ScriptLockOrder;\r\ +> \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ +> \n :set ScriptLockOrder ({});\r\ +> \n }\r\ +> \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ +> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +> \n }\r\ +> \n :local JobCount do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ +> \r\ +> \n }\r\ +> \n :local TicketCount do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :local Count 0;\r\ +> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ +> + 1)}\r\ +> \n }\r\ +> \n :return \$Count;\r\ +> \n }\r\ +> \n :local IsFirstTicket do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local Check [ :tostr \$2 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :if (\$Ticket = \$Check) do={:return true}\r\ +> \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ +> o={:return false}\r\ +> \n }\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :local AddTicket do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local Add [ :tostr \$2 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :while (true) do={\r\ +> \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ +> \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ +> \n :delay 10ms;\r\ +> \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ +> e}\r\ +> \n }\r\ +> \n }\r\ +> \n :local RemoveTicket do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :local Remove [ :tostr \$2 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ +> \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ +> \n :delay 10ms;\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n :local CleanupTickets do={\r\ +> \n :local Script [ :tostr \$1 ];\r\ +> \n :global ScriptLockOrder;\r\ +> \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ +> \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ +> \n }\r\ +> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +> \n }\r\ +> \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ +> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ +> \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ +> ist!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if ([ \$JobCount \$Script ] = 0) do={\r\ +> \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ +> );\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ +> \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ +> t . \"', resetting!\");\r\ +> \n :set (\$ScriptLockOrder->\$Script) ({});\r\ +> \n /system/script/job/remove [ find where script=\$Script ];\r\ +> \n }\r\ +> \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ +> \n \$AddTicket \$Script \$MyTicket;\r\ +> \n :local WaitInterval (\$WaitMax / 20);\r\ +> \n :local WaitTime \$WaitMax;\r\ +> \n :while (\$WaitTime > 0 && \\\r\ +> \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ +> \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ +> \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ +> \n :delay \$WaitInterval;\r\ +> \n }\r\ +> \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ +> \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ +> \n \$RemoveTicket \$Script \$MyTicket;\r\ +> \n \$CleanupTickets \$Script;\r\ +> \n :return true;\r\ +> \n }\r\ +> \n \$RemoveTicket \$Script \$MyTicket;\r\ +> \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ +> once\" . \\\r\ +> \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ +> \_lock\" \"\" ] . \"...\");\r\ +> \n :return false;\r\ +> \n}\r\ +> \n\r\ +> \n:set SendNotification do={ :onerror Err {\r\ +> \n :global SendNotification2;\r\ +> \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ +> \_silent=\$4 });\r\ +> \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ +> \n}\r\ +> \n\r\ +> \n:set SendNotification2 do={\r\ +> \n :local Notification \$1;\r\ +> \n :global NotificationFunctions;\r\ +> \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ +> \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ +> ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:set SymbolByUnicodeName do={\r\ +> \n :local Name [ :tostr \$1 ];\r\ +> \n :global EitherOr;\r\ +> \n :global SymbolsExtra;\r\ +> \n :local Symbols ({\r\ +> \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ +> \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ +> \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ +> \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ +> \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ +> \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ +> \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ +> \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ +> \n \"cloud\"=\"\\E2\\98\\81\";\r\ +> \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ +> \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ +> \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ +> \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ +> \n \"gear\"=\"\\E2\\9A\\99\";\r\ +> \n \"heart\"=\"\\E2\\99\\A5\";\r\ +> \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ +> \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ +> \n \"information\"=\"\\E2\\84\\B9\";\r\ +> \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ +> \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ +> \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ +> \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ +> \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ +> \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ +> \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ +> \n \"scissors\"=\"\\E2\\9C\\82\";\r\ +> \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ +> \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ +> \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ +> \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ +> \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ +> \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ +> \n \"star\"=\"\\E2\\AD\\90\";\r\ +> \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ +> \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ +> \n }, \$SymbolsExtra);\r\ +> \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ +> \n :local Special {\r\ +> \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ +> \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ +> \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ +> \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ +> \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ +> \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ +> '!\");\r\ +> \n :return \"\";\r\ +> \n }\r\ +> \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ +> me) ] . \"\\EF\\B8\\8F\");\r\ +> \n}\r\ +> \n\r\ +> \n:set SymbolForNotification do={\r\ +> \n :global NotificationsWithSymbols;\r\ +> \n :global SymbolByUnicodeName;\r\ +> \n :global IfThenElse;\r\ +> \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ +> \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ +> \n :local Return \"\";\r\ +> \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ +> mbolByUnicodeName \$Symbol ])}\r\ +> \n :return (\$Return . \" \");\r\ +> \n}\r\ +> \n\r\ +> \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ +> \n:set UrlEncode do={\r\ +> \n :local Input [ :tostr \$1 ];\r\ +> \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ +> \n :local Return \"\";\r\ +> \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ +> \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ +> %24\"; \"%25\"; \"%26\"; \"%27\";\r\ +> \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ +> \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ +> \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ +> \"%7C\"; \"%7D\"; \"%7E\" };\r\ +> \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ +> \n :local Char [ :pick \$Input \$I ];\r\ +> \n :local Replace [ :find \$Chars \$Char ];\r\ +> \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ +> ce)}\r\ +> \n :set Return (\$Return . \$Char);\r\ +> \n }\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set IsDNSResolving do={\r\ +> \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set IsFullyConnected do={\r\ +> \n :global IsDNSResolving;\r\ +> \n :global IsTimeSync;\r\ +> \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ +> \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set IsTimeSync do={\r\ +> \n :global IsTimeSyncCached;\r\ +> \n :global IsTimeSyncResetNtp;\r\ +> \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ +> \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ +> \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ +> \n :set IsTimeSyncCached true;\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :local Uptime [ /system/resource/get uptime ];\r\ +> \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ +> \n :set IsTimeSyncResetNtp \$Uptime;\r\ +> \n }\r\ +> \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ +> \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ +> ;\r\ +> \n :set IsTimeSyncResetNtp \$Uptime;\r\ +> \n /system/ntp/client/set enabled=no;\r\ +> \n :delay 20ms;\r\ +> \n /system/ntp/client/set enabled=yes;\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ +> \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ +> \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ +> ee license and x86.\";\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ +> \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ +> \n :set IsTimeSyncCached true;\r\ +> \n :return true;\r\ +> \n }\r\ +> \n :return false;\r\ +> \n }\r\ +> \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ +> \r\ +> \n :return true;\r\ +> \n}\r\ +> \n\r\ +> \n:set FetchHugeFiles do={\r\ +> \n :local ScriptName [ :tostr \$1 ];\r\ +> \n :local Url [ :tostr \$2 ];\r\ +> \n :local CheckCert [ :tostr \$3 ];\r\ +> \n\r\ +> \n :global CleanName;\r\ +> \n :global FetchUserAgentStr;\r\ +> \n :global GetRandom20CharAlNum;\r\ +> \n :global IfThenElse;\r\ +> \n :global LogPrint;\r\ +> \n :global MkDir;\r\ +> \n :global RmDir;\r\ +> \n :global RmFile;\r\ +> \n :global WaitForFile;\r\ +> \n\r\ +> \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ +> ithout-crl\" ];\r\ +> \n\r\ +> \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ +> \n :if ([ \$MkDir \$DirName ] = false) do={\r\ +> \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ +> \$GetRandom20CharAlNum ]);\r\ +> \n :onerror Err {\r\ +> \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ +> \\\r\ +> \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ +> lue;\r\ +> \n } do={\r\ +> \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ +> \n \$RmFile \$FileName;\r\ +> \n }\r\ +> \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ +> \_. \$Err);\r\ +> \n \$RmDir \$DirName;\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ +> \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ +> \_not show up.\");\r\ +> \n :return false;\r\ +> \n }\r\ +> \n\r\ +> \n :local FileSize [ /file/get \$FileName size ];\r\ +> \n :local Return \"\";\r\ +> \n :local VarSize 0;\r\ +> \n :while (\$VarSize != \$FileSize) do={\r\ +> \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ +> 768 file=\$FileName as-value ]->\"data\"));\r\ +> \n :set FileSize [ /file/get \$FileName size ];\r\ +> \n :set VarSize [ :len \$Return ];\r\ +> \n :if (\$VarSize > \$FileSize) do={\r\ +> \n :delay 100ms;\r\ +> \n }\r\ +> \n }\r\ +> \n \$RmDir \$DirName;\r\ +> \n :return \$Return;\r\ +> \n}\r\ +> \n\r\ +> \n:set FetchUserAgentStr do={\r\ +> \n :local Caller [ :tostr \$1 ];\r\ +> \n :global GlobalScriptsUrl;\r\ +> \n :global CommitBrief;\r\ +> \n :global IfThenElse;\r\ +> \n :local Resource [ /system/resource/get ];\r\ +> \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ +> \_\$Resource->\"architecture-name\" . \\\r\ +> \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ +> CommitBrief ] . \")\");\r\ +> \n}\r\ +> \n\r\ +> \n:set ScriptInstallUpdate do={ :onerror Err {\r\ +> \n :local Scripts [ :toarray \$1 ];\r\ +> \n :local NewComment [ :tostr \$2 ];\r\ +> \n :global InitSetup;\r\ +> \n\r\ +> \n :global CommitId;\r\ +> \n :global ScriptUpdatesCRLF;\r\ +> \n :global GlobalConfVersion;\r\ +> \n :global Identity;\r\ +> \n :global CertificateAvailable;\r\ +> \n :global CheckSumsVerify;\r\ +> \n :global GlobalScriptsUrl;\r\ +> \n :global SumsDirAndFileName;\r\ +> \n :global GlobalScriptsUrlSuffix;\r\ +> \n :global EitherOr;\r\ +> \n :global FetchUserAgentStr;\r\ +> \n :global Grep;\r\ +> \n :global IfThenElse;\r\ +> \n :global LogPrint;\r\ +> \n :global ParseKeyValueStore;\r\ +> \n :global RequiredRouterOS;\r\ +> \n :global SendNotification2;\r\ +> \n :global SymbolForNotification;\r\ +> \n :global ValidateSyntax;\r\ +> \n :global CommentsInScripts;\r\ +> \n\r\ +> \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ +> hout.\");\r\ +> \n }\r\ +> \n\r\ +> \n :foreach Script in=\$Scripts do={\r\ +> \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ +> \r\ +> \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ +> \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ +> Vados\\n\" comment=\$NewComment;\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :local CommitIdBefore \$CommitId;\r\ +> \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ +> \n :local ReloadGlobal false;\r\ +> \n :local DeviceMode [ /system/device-mode/get ];\r\ +> \n\r\ +> \n :if (\$CheckSumsVerify = true) do={\r\ +> \n :local CheckSums ({});\r\ +> \n :do {\r\ +> \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ +> iptsUrlSuffix);\r\ +> \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ +> \r\ +> \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ +> ficate=yes-without-crl \\\r\ +> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ +> =user as-value ]->\"data\") ];\r\ +> \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ +> \n }\r\ +> \n\r\ +> \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ +> s\" ] do={\r\ +> \n :local ScriptVal [ /system/script/get \$Script ];\r\ +> \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ +> ];\r\ +> \n :local SourceNew;\r\ +> \n\r\ +> \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ +> \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ +> \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ +> \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ +> \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ +> iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ +> \"'!\");\r\ +> \n }\r\ +> \n }\r\ +> \n :do {\r\ +> \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ +> \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ +> e\" . \"', as requested.\");\r\ +> \n :error true;\r\ +> \n }\r\ +> \n :if (\$CheckSumsVerify = true) do={\r\ +> \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ +> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ +> ptInfo->\"url-suffix\") ] = 0 && \\\r\ +> \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ +> rce\") ] ] = \$CheckSum) do={\r\ +> \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ +> >\"name\" . \"' matches, ignoring.\");\r\ +> \n :error true;\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ +> \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ +> fetch\" ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ +> ng without.\");\r\ +> \n }\r\ +> \n }\r\ +> \n :onerror Err {\r\ +> \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ +> lScriptsUrl ];\r\ +> \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ +> lobalScriptsUrlSuffix ];\r\ +> \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ +> Suffix);\r\ +> \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ +> name\") . \"' from url: \" . \$Url);\r\ +> \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ +> \r\ +> \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ +> ut=user as-value ];\r\ +> \n :if (\$Result->\"status\" = \"finished\") do={\r\ +> \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ +> \n } \r\ +> \n } do={\r\ +> \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ +> al->\"name\" . \"': \" . \$Err);\r\ +> \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ +> \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ +> \?\");\r\ +> \n /system/script/remove \$Script;\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if (\$CheckSumsVerify = true) do={\r\ +> \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ +> riptInfo->\"url-suffix\") ] = 0 && \\\r\ +> \n [ :len \$CheckSum ] = 0) do={\r\ +> \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ +> pdates with 'ignore=true' in comment.\");\r\ +> \n }\r\ +> \n }\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ :len \$SourceNew ] = 0) do={\r\ +> \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ +> >\"name\") . \"'.\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ +> \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ +> lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ +> \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ +> \$ScriptVal->\"source\")) do={\r\ +> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ +> . \"' source did not change. End of lines set to CRLF.\");\r\ +> \n if (\$ScriptUpdatesCRLF = false) do={\r\ +> \n :put [ :tolf \$SourceNew ];\r\ +> \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ +> ) . \"' source update end of lines to LF.\");\r\ +> \n }\r\ +> \n :error false;\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ +> \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ +> l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ +> );\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :if (\$CommentsInScripts = true) do={\r\ +> \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ +> \_\") ];\r\ +> \n :if ([ :len \$CommentLine ] = 0) do={\r\ +> \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ +> iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ +> noring!\");\r\ +> \n :error false;\r\ +> \n } else={\r\ +> \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ +> ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ +> ] + 2) [ :len \$CommentLine] ]) do={\r\ +> \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ +> \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ +> ;\r\ +> \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ +> ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ +> \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ +> omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ +> ded!\");\r\ +> \n } else={\r\ +> \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ +> al->\"name\") . \"' did not change.\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n } \r\ +> \n }\r\ +> \n\r\ +> \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ +> \"\\23 requires RouterOS, \") ] ]->version);\r\ +> \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ +> \_false ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ +> \") . \"' requires RouterOS \" . \\\r\ +> \n \$RequiredROS . \", which is not met by your installation. I\ +> gnoring!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ +> \\23 requires device-mode, \") ] ];\r\ +> \n :local MissingDM ({});\r\ +> \n :foreach Feature,Value in=\$RequiredDM do={\r\ +> \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ +> ceMode->\$Feature) = false) do={\r\ +> \n :set MissingDM (\$MissingDM, \$Feature);\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([ :len \$MissingDM ] > 0) do={\r\ +> \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ +> \") . \"' requires disabled \" . \\\r\ +> \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ +> gnoring!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ +> ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n \r\ +> \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ +> ript comment: \" . (\$ScriptVal->\"comment\"));\r\ +> \n\r\ +> \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ +> Val->\"comment\") \\\r\ +> \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ +> F \$SourceNew ] \$Script;\r\ +> \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ +> \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ +> \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ +> o={\r\ +> \n :set ReloadGlobal true;\r\ +> \n }\r\ +> \n } on-error={ }\r\ +> \n }\r\ +> \n :if (\$ReloadGlobal = true) do={\r\ +> \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ +> \");\r\ +> \n :onerror Err {\r\ +> \n :global InitSetup (a);\r\ +> \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ +> \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ +> ctions failed! \" . \$Err)}\r\ +> \n }\r\ +> \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ +> \n \$LogPrint warning \$0 (\"The configuration version decreased from \ +> \" . \\\r\ +> \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ +> \n \". Installed an older version\?\");\r\ +> \n }\r\ +> \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ +> \n :global GlobalConfChanges;\r\ +> \n :global GlobalConfMigration;\r\ +> \n :local ChangeLogCode;\r\ +> \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ +> \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ +> \n :onerror Err {\r\ +> \n [ :parse \$ChangeLogCode ];\r\ +> \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ +> . \$Err)}\r\ +> \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ +> dation!\")}\r\ +> \n }\r\ +> \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ +> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ +> \_do={\r\ +> \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ +> \n :do {\r\ +> \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ +> \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ +> \_\" is not available.\");\r\ +> \n :error false;\r\ +> \n }\r\ +> \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ +> \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ +> \_. \" failed syntax validation!\");\r\ +> \n :error false}\r\ +> \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ +> . \": \" . \$Migration);\r\ +> \n :onerror Err {\r\ +> \n [ :parse \$Migration ];\r\ +> \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ +> \_\$I . \" failed to run: \" . \$Err)}\r\ +> \n } on-error={ }\r\ +> \n }\r\ +> \n }\r\ +> \n :local NotificationMessage (\"The configuration version on \" . \$Id\ +> entity . \" increased \" . \\\r\ +> \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ +> d modification. \" . \\\r\ +> \n \"Please review and update global-config-overlay, then re-run glo\ +> bal-config.\");\r\ +> \n \$LogPrint info \$0 (\$NotificationMessage);\r\ +> \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ +> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ +> \");\r\ +> \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ +> \_do={\r\ +> \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ +> \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ +> \r\ +> \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ +> \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ +> \n }\r\ +> \n } else={\r\ +> \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ +> \_changes are not available.\");\r\ +> \n\r\ +> \n }\r\ +> \n\r\ +> \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ +> } else={ :global GlobalConfChanges (a); }\r\ +> \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ +> on; } else={ :global GlobalConfMigration (a); }\r\ +> \n }\r\ +> \n} do={\r\ +> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ +> \n} }\r\ +> \n\r\ +> \n# load modules\r\ +> \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ +> ns\\\\.d|mod)/.\" ] do={\r\ +> \n :local ScriptVal [ /system/script/get \$Script ];\r\ +> \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ +> \n :onerror Err {\r\ +> \n /system/script/run \$Script;\r\ +> \n } do={\r\ +> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ +> ailed to run: \" . \$Err);\r\ +> \n }\r\ +> \n } else={\r\ +> \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ +> led syntax validation, skipping.\");\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n# Add and fix global scheduler\r\ +> \n:put \"Add or/and fix Global scheduler...\";\r\ +> \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ +> ; }\";\r\ +> \n:local Comment \"Every Day Set Global Environment Variables\";\r\ +> \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ +> = 0) do={\r\ +> \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ +> ent=\$OnEvent start-time=startup;\r\ +> \n}\r\ +> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ +> \_do={\r\ +> \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ +> \n}\r\ +> \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ +> ) do={\r\ +> \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ +> \n}\r\ +> \n# Add Update Script scheduler\r\ +> \n:put \"Add or/and fix Update Script scheduler\";\r\ +> \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ +> \r\ +> \n:set Comment \"Every Day Check For Update Scripts\";\r\ +> \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ +> \" ] ] = 0) do={\r\ +> \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ +> start-time=startup interval=1d on-event=\$OnEvent;\r\ +> \n}\r\ +> \n\r\ +> \n:onerror Err {\r\ +> \n :global GlobalConfReady;\r\ +> \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ +> \_not ready.\"); }; } delay=100ms max=5;\r\ +> \n\r\ +> \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ +> \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ +> \") ] . \\\r\ +> \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ +> \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ +> \n # signal we are ready\r\ +> \n:set GlobalFuncReady true;\r\ +> \n:set ExitOK true;\r\ +> \n\r\ +> \n:log info (\$0 . \"Global configs ready!\");\r\ +> \n} do={\r\ +> \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ +> \n}\r\ +> \n" +> add comment="download, import and update firewall address-lists" \ +> dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> source="#!rsc by Vados\r\ +> \n# RouterOS script: AM-FwAddrLists\r\ +> \n# Script comment: download, import and update firewall address-lists\r\ +> \n# Copyright (c) 2007-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ +> \n:local ExitOK false;\r\ +> \n:onerror Err {\r\ +> \n :global GlobalConfReady; :global GlobalFuncReady;\r\ +> \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ +> \\\r\ +> \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ +> delay=500ms max=50;\r\ +> \n :local ScriptName [ :jobname ];\r\ +> \n\r\ +> \n :global GlobalScriptsUrl;\r\ +> \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ +> e ] . \"/\");\r\ +> \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ +> \n :local ListsIndex \"index.lst\";\r\ +> \n :local AddrListsTimeOut 1d;\r\ +> \n :local CheckCerts false;\r\ +> \n\r\ +> \n :global CertificateAvailable;\r\ +> \n :global EitherOr;\r\ +> \n :global FetchHugeFiles;\r\ +> \n :global HumanReadableNum;\r\ +> \n :global IfThenElse;\r\ +> \n :global LogPrint;\r\ +> \n :global NetMask4;\r\ +> \n :global NetMask6;\r\ +> \n :global ScriptLock;\r\ +> \n \r\ +> \n :local FindDelim do={\r\ +> \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ +> jklmnopqrstuvwxyz-\";\r\ +> \n :for I from=0 to=[ :len \$1 ] do={\r\ +> \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ +> ] != \"num\") do={\r\ +> \n :return \$I;\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :local GetBranch do={\r\ +> \n :global EitherOr;\r\ +> \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ +> therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ +> \n }\r\ +> \n \r\ +> \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ +> \n :set ExitOK true;\r\ +> \n :error false;\r\ +> \n }\r\ +> \n\r\ +> \n :local ListComment (\"managed by \" . \$ScriptName);\r\ +> \n :local Url (\$ListsUrl . \$ListsIndex);\r\ +> \n :local tmpIndex false;\r\ +> \n\r\ +> \n :for I from=1 to=5 do={\r\ +> \n :if (\$tmpIndex = false) do={\r\ +> \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ +> kCerts ] ];\r\ +> \n :if (\$tmpIndex = false && \$I < 5) do={\r\ +> \n :log warning (\$ScriptName . \" Failed downloading address-list \ +> index, \" . \$I . \". try from: \" . \$Url);\r\ +> \n :delay ((\$I * \$I) . \"s\");\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n :if (\$tmpIndex = false) do={\r\ +> \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ +> x from: \" . \$Url);\r\ +> \n :set tmpIndex \"\";\r\ +> \n }\r\ +> \n\r\ +> \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ +> options=dsv.plain ] do={\r\ +> \n# :set List (\$List->0);\r\ +> \n :local ListName;\r\ +> \n :local Delim [ \$FindDelim \$List ];\r\ +> \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ +> \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ +> \_. \$List);\r\ +> \n :if ([ :len \$List ] = 0) do={\r\ +> \n :log error (\$ScriptName . \" Failed parsing address-list index en\ +> try: \" . \$List);\r\ +> \n } else={\r\ +> \n :set ListName [ :pick \$List 0 \$Delim ];\r\ +> \n }\r\ +> \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ +> \_. \$ListName . \" - Ok.\");\r\ +> \n :local ListUrl (\$ListsUrl . \$ListName);\r\ +> \n :local CntAdd 0;\r\ +> \n :local CntRenew 0;\r\ +> \n :local CntRemove 0;\r\ +> \n :local IPv4Addresses ({});\r\ +> \n :local IPv6Addresses ({});\r\ +> \n :local Failure false;\r\ +> \n :local Data false;\r\ +> \n :local TimeOut \$AddrListTimeOut;\r\ +> \n\r\ +> \n :for I from=1 to=5 do={\r\ +> \n :if (\$Data = false) do={\r\ +> \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ +> eckCerts ] ];\r\ +> \n :if (\$Data = false && \$I < 5) do={\r\ +> \n :log warning (\$ScriptName . \" Failed downloading for list '\ +> \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ +> \n :delay ((\$I * \$I) . \"s\");\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :if (\$Data = false) do={\r\ +> \n :set Data \"\";\r\ +> \n :set Failure true;\r\ +> \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ +> \$ListName . \"' from: \" . \$ListUrl);\r\ +> \n } else={\r\ +> \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ +> um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ +> \_\$ListUrl);\r\ +> \n }\r\ +> \n\r\ +> \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ +> tions=dsv.plain ] do={\r\ +> \n :set Line (\$Line->0);\r\ +> \n :local Address;\r\ +> \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ +> \_] - 1) ] = \"}\") do={\r\ +> \n :do {\r\ +> \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ +> dr\") ];\r\ +> \n } on-error={ }\r\ +> \n } else={\r\ +> \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ +> ist->\"cidr\"));\r\ +> \n }\r\ +> \n :do {\r\ +> \n :local Branch;\r\ +> \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ +> .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ +> \n :local Net \$Address;\r\ +> \n :local CIDR 32;\r\ +> \n :local Slash [ :find \$Address \"/\" ];\r\ +> \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ +> \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ +> \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ +> \_];\r\ +> \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ +> R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ +> \n }\r\ +> \n :set Branch [ \$GetBranch \$Address ];\r\ +> \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ +> \n }\r\ +> \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ +> \?\\\$\") do={\r\ +> \n :local Net \$Address;\r\ +> \n :local CIDR 128;\r\ +> \n :local Slash [ :find \$Address \"/\" ];\r\ +> \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ +> \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ +> \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ +> \_];\r\ +> \n }\r\ +> \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ +> \" . \$CIDR);\r\ +> \n :set Branch [ \$GetBranch \$Address ];\r\ +> \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ +> \n }\r\ +> \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ +> o={\r\ +> \n :set Branch [ \$GetBranch \$Address ];\r\ +> \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ +> \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ +> \n }\r\ +> \n } on-error={ }\r\ +> \n }\r\ +> \n \r\ +> \n\r\ +> \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ +> \n list=\$ListName comment=\$ListComment ] do={\r\ +> \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ +> \r\ +> \n :local Branch [ \$GetBranch \$Address ];\r\ +> \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ +> \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ +> \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ +> ress . \\\r\ +> \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ +> \");\r\ +> \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ +> \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ +> \n :set CntRenew (\$CntRenew + 1);\r\ +> \n } else={\r\ +> \n :if (\$Failure = false) do={\r\ +> \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ +> ddress . \\\r\ +> \n \" from list '\" . \$ListName . \".\");\r\ +> \n /ip/firewall/address-list/remove \$Entry;\r\ +> \n :set CntRemove (\$CntRemove + 1);\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ +> \n list=\$ListName comment=\$ListComment ] do={\r\ +> \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ +> ;\r\ +> \n :local Branch [ \$GetBranch \$Address ];\r\ +> \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ +> \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ +> \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ +> ress . \\\r\ +> \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ +> \");\r\ +> \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ +> \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ +> \n :set CntRenew (\$CntRenew + 1);\r\ +> \n } else={\r\ +> \n :if (\$Failure = false) do={\r\ +> \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ +> ddress . \\\r\ +> \n \" from list '\" . \$ListName . \".\");\r\ +> \n /ipv6/firewall/address-list/remove \$Entry;\r\ +> \n :set CntRemove (\$CntRemove + 1);\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ +> \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ +> );\r\ +> \n :foreach Address,Timeout in=\$Branch do={\r\ +> \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ +> ss . \\\r\ +> \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ +> \");\r\ +> \n :onerror Err {\r\ +> \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ +> mment \\\r\ +> \n address=\$Address timeout=\$Timeout;\r\ +> \n :set CntAdd (\$CntAdd + 1);\r\ +> \n } do={\r\ +> \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ +> . \$Address . \\\r\ +> \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ +> \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ +> );\r\ +> \n :foreach Address,Timeout in=\$Branch do={\r\ +> \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ +> ss . \\\r\ +> \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ +> \");\r\ +> \n :onerror Err {\r\ +> \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ +> Comment \\\r\ +> \n address=\$Address timeout=\$Timeout;\r\ +> \n :set CntAdd (\$CntAdd + 1);\r\ +> \n } do={\r\ +> \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ +> . \$Address . \\\r\ +> \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n\r\ +> \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ +> \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ +> \")\" . \\\r\ +> \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ +> \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ +> \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ +> \n }\r\ +> \n} do={\r\ +> \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ +> \n}\r\ +> \n" +> add comment=\ +> "Lookup IP addresses for RKN list and add them to firewall address-list" \ +> dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> source="#!rsc by Vados\r\ +> \n# RouterOS script: AM-RKN-dnsLookup\r\ +> \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ +> all address-list\r\ +> \n# Copyright (c) 2007-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch\r\ +> \n#\r\ +> \n# Script description: This script is intended to be run periodically, e.\ +> g. once a day, to update the IP addresses in the firewall address-list bas\ +> ed on the RKN list.\r\ +> \n# It resolves the domain names in the RKN list and a\ +> dds the corresponding IP addresses to the specified firewall address-list.\ +> \r\ +> \n# The script also handles CNAME records by following\ +> \_them until it finds A records.\r\ +> \n# Usage:\r\ +> \n# /system/script { run AM-RKN-dnsLookup; }\r\ +> \n:local ScriptName [ :jobname ];\r\ +> \n\r\ +> \n:global dnsLookupReady false;\r\ +> \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ +> \_true; }\r\ +> \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ +> \n:set dnsLookupReady false;\r\ +> \n\r\ +> \n:local arrRKN {\r\ +> \n \"telegra.ph\"\r\ +> \n \"grani.ru\"\r\ +> \n \"xhamster.com\"\r\ +> \n \"kasparov.ru\"\r\ +> \n \"lostfilm.tv\"\r\ +> \n \"rutracker.org\"\r\ +> \n \"lurkmore.to\"\r\ +> \n \"dou.ua\"\r\ +> \n \"youporn.com\"\r\ +> \n \"pornolab.net\"\r\ +> \n \"crimerussia.com\"\r\ +> \n \"telegram.org\"\r\ +> \n \"api.telegram.org\"\r\ +> \n \"telegram.me\"\r\ +> \n \"t.me\";}\r\ +> \n\r\ +> \n:local ListRKN \"FuckRKN\";\r\ +> \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ +> \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ +> ={\r\ +> \n /ip firewall address-list remove \$aListItem;\r\ +> \n}\r\ +> \n:foreach aItem in=\$arrRKN do={\r\ +> \n :do {\r\ +> \n :resolve \$aItem;\r\ +> \n } on-error={\r\ +> \n :log error \"dns resolve failure [ ip - resolve ip ]\";\r\ +> \n }\r\ +> \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ +> do={\r\ +> \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ +> \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ +> \r\ +> \n :do {\r\ +> \n /ip firewall address-list add list=\$ListRKN address=\$n\ +> ewAddress comment=\$aItem;\r\ +> \n } on-error={\r\ +> \n :log error \"error when adding ip to list: \$newAddress\ +> \";\r\ +> \n }\r\ +> \n }\r\ +> \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ +> \n :local cname;\r\ +> \n :local nextCname;\r\ +> \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ +> pe=\"CNAME\")];\r\ +> \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ +> cache all get \$cname data] && type=\"CNAME\")];\r\ +> \n :while (\$nextCname != \"\") do={\r\ +> \n :set cname \$nextCname;\r\ +> \n :set nextCname [/ip dns cache all find where (name=[/ip \ +> dns cache all get \$cname data] && type=\"CNAME\")];\r\ +> \n }\r\ +> \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ +> \_dns cache all get \$cname data] && type=\"A\")] do={\r\ +> \n :do {\r\ +> \n /ip firewall address-list add list=\$ListRKN address\ +> =[/ip dns cache all get \$aRecord data] comment=\$aItem;\r\ +> \n } on-error={\r\ +> \n :log error \"error when adding ip to list: \$newAddr\ +> ess\";\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n }\r\ +> \n}\r\ +> \n\r\ +> \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ +> ={\r\ +> \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ +> ptName . \" is NOT SET! Fix It Now!\");\r\ +> \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ +> run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:20:00 p\ +> olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ +> \_start-time=startup;\r\ +> \n }\r\ +> \n:set dnsLookupReady true;\r\ +> \ndelay 5s; \r\ +> \n:global dnsLookupReady (a);\r\ +> \n" +> add dont-require-permissions=no name=dnsForwarders owner=vados policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ +> !rsc by Vados\r\ +> \n# RouterOS script: AM-dnsForwarders\r\ +> \n# Script comment: DNS Forwarders and DOH Servers | by @xmrdenb43\r\ +> \n# Copyright (c) 2005-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch, scheduler\r\ +> \n# \r\ +> \n# tested on hap ac lite tc/hap ax3, RoS 7.18.2+\r\ +> \n\r\ +> \n\r\ +> \n/ip/dns/set allow-remote-requests=yes doh-max-concurrent-queries=100 doh\ +> -max-server-connections=20 use-doh-server=https://security.cloudflare-dns.\ +> com/dns-query verify-doh-cert=no;\r\ +> \n\r\ +> \n/ip dns static\r\ +> \n:do {\r\ +> \nadd address=8.8.8.8 comment=\"DNS Google\" name=dns.google type=A\r\ +> \nadd address=8.8.4.4 comment=\"DNS Google\" name=dns.google type=A\r\ +> \nadd address=9.9.9.9 comment=\"DNS Quad9\" name=dns.quad9.net type=A\r\ +> \nadd address=149.112.112.112 comment=\"DNS Quad9\" name=dns.quad9.net typ\ +> e=A\r\ +> \nadd address=195.133.25.16 comment=\"DNS Comss\" name=dns.comss.one type=\ +> A\r\ +> \n\r\ +> \n/ip dns forwarders\r\ +> \nadd doh-servers=https://cloudflare-dns.com/dns-query name=\"CloudFlare D\ +> oH\"\r\ +> \nadd doh-servers=https://secure.cloudflare-dns.com/dns-query name=\"Cloud\ +> Flare Secure DoH\"\r\ +> \nadd disabled=yes doh-servers=https://dns.quad9.net/dns-query name=\"Quad\ +> 9 Default\" verify-doh-cert=no\r\ +> \nadd doh-servers=https://dns.google/dns-query name=\"Google DoH\"\r\ +> \nadd dns-servers=dns.comss.one doh-servers=https://dns.comss.one/mikrotik\ +> \_name=\"Comss DoH\" verify-doh-cert=no\r\ +> \nadd doh-servers=https://cloudflare-dns.com/dns-query,https://dns.google/\ +> dns-query name=\"CF & Google DoH\"\r\ +> \nadd dns-servers=1.0.0.1,8.8.4.4,1.1.1.1,8.8.8.8,77.88.8.1,77.88.8.8 name\ +> =\"CF & G & Ya IPv4\" verify-doh-cert=no\r\ +> \n} on-error={ }\r\ +> \n\r\ +> \n" +> add dont-require-permissions=no name=AM-ADguardHome-container owner=vados \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> source="#!rsc by Vados\r\ +> \n# RouterOS script: AM-ADguardHome-container\r\ +> \n# Script comment: ADguardHome-container to container | by @xdenb43\r\ +> \n# Copyright (c) 2005-2026 Vados \r\ +> \n#\r\ +> \n#\r\ +> \n# requires RouterOS, version=7.19\r\ +> \n# requires device-mode, fetch, scheduler\r\ +> \n# \r\ +> \n# tested on hap ac lite tc/hap ax3, RoS 7.18.2+\r\ +> \n# tested on hap ax3/RoS 7.17.2+\r\ +> \n\r\ +> \n# enable containers, follow https://help.mikrotik.com/docs/spaces/ROS/pa\ +> ges/84901929/Container\r\ +> \n#/system/device-mode/update container=yes\r\ +> \n\r\ +> \n# MAIN PART STARTS HERE\r\ +> \n/interface veth\r\ +> \nadd address=192.168.254.5/24 gateway=192.168.254.1 name=ADGUARD-HOME\r\ +> \n\r\ +> \n/interface bridge\r\ +> \nadd name=Bridge-Docker port-cost-mode=short\r\ +> \n/interface bridge port\r\ +> \nadd bridge=Bridge-Docker interface=ADGUARD-HOME\r\ +> \n/ip address\r\ +> \nadd address=192.168.254.1/24 interface=Bridge-Docker network=192.168.254\ +> .0\r\ +> \n\r\ +> \n/ip firewall nat\r\ +> \nadd action=masquerade chain=srcnat comment=AdGuardHome src-address=192.1\ +> 68.254.5\r\ +> \n\r\ +> \n# USB flash drive, FS ext4\r\ +> \n/container config\r\ +> \nset ram-high=200.0MiB registry-url=https://registry-1.docker.io tmpdir=/\ +> usb1/docker/pull\r\ +> \n\r\ +> \n/container mounts\r\ +> \nadd dst=/opt/adguardhome/conf name=adguard_home_conf src=/usb1/docker_co\ +> nfigs/adguard_home\r\ +> \n\r\ +> \n/container\r\ +> \nadd cmd=\"-c /opt/adguardhome/conf/AdGuardHome.yaml -h 0.0.0.0 -w /opt/a\ +> dguardhome/work\" entrypoint=/opt/adguardhome/AdGuardHome interface=ADGUAR\ +> D-HOME logging=yes mounts=\\\r\ +> \n adguard_home_conf root-dir=/usb1/docker/adguard_home workdir=/opt/ad\ +> guardhome/work remote-image=adguard/adguardhome:latest\r\ +> \n\r\ +> \n/container/start [find where interface=ADGUARD-HOME]\r\ +> \n\r\ +> \n# ADH available on http://192.168.254.5:300 , configure before use\r\ +> \n# Choose one of the options below\r\ +> \n# uncomment lines before copying to terminal\r\ +> \n\r\ +> \n# OPTION 1\r\ +> \n# Just set AGH ip as DNS server.\r\ +> \n# /!\\ DNS FWD will work.\r\ +> \n# /!\\ No device-related stats will be gathered (all dns requests are co\ +> ming from mikrotik)\r\ +> \n#/ip dns\r\ +> \n#set allow-remote-requests=yes servers=192.168.254.5\r\ +> \n#/ip firewall nat\r\ +> \n#add action=redirect chain=dstnat comment=\"Incoming DNS redirect\" dst-\ +> address-type=!local dst-port=53 in-interface-list=LAN protocol=udp\r\ +> \n#add action=redirect chain=dstnat comment=\"Incoming DNS redirect\" dst-\ +> address-type=!local dst-port=53 in-interface-list=LAN protocol=tcp\r\ +> \n\r\ +> \n\r\ +> \n# OPTION 2\r\ +> \n# Forward all DNS requests to ADH\r\ +> \n# /!\\ DNS FWD will NOT work\r\ +> \n# /!\\ WILL SHOW stats for every LAN device\r\ +> \n#/ip firewall nat\r\ +> \n#add action=dst-nat chain=dstnat comment=\"local AdGuard udp - NO NAT L\ +> oopback / local addresses only!\" dst-port=53 in-interface-list=LAN protoc\ +> ol=udp src-address=\\\r\ +> \n# 192.168.88.0/24 to-addresses=192.168.254.5 to-ports=53\r\ +> \n#add action=dst-nat chain=dstnat comment=\"local AdGuard tcp\" dst-port=\ +> 53 in-interface-list=LAN protocol=tcp src-address=192.168.88.0/24 to-addre\ +> sses=192.168.254.5 to-ports=53\r\ +> \n# cat adguardhome_container.rsc\r\ +> \n# adguard home to container | by @xdenb43\r\ +> \n# tested on hap ax3/RoS 7.17.2+\r\ +> \n\r\ +> \n# enable containers, follow https://help.mikrotik.com/docs/spaces/ROS/pa\ +> ges/84901929/Container\r\ +> \n/system/device-mode/update container=yes\r\ +> \n\r\ +> \n# MAIN PART STARTS HERE\r\ +> \n/interface veth\r\ +> \nadd address=192.168.254.5/24 gateway=192.168.254.1 name=ADGUARD-HOME\r\ +> \n\r\ +> \n/interface bridge\r\ +> \nadd name=Bridge-Docker port-cost-mode=short\r\ +> \n/interface bridge port\r\ +> \nadd bridge=Bridge-Docker interface=ADGUARD-HOME\r\ +> \n/ip address\r\ +> \nadd address=192.168.254.1/24 interface=Bridge-Docker network=192.168.254\ +> .0\r\ +> \n\r\ +> \n/ip firewall nat\r\ +> \nadd action=masquerade chain=srcnat comment=AdGuardHome src-address=192.1\ +> 68.254.5\r\ +> \n\r\ +> \n# USB flash drive, FS ext4\r\ +> \n/container config\r\ +> \nset ram-high=200.0MiB registry-url=https://registry-1.docker.io tmpdir=/\ +> usb1/docker/pull\r\ +> \n\r\ +> \n/container mounts\r\ +> \nadd dst=/opt/adguardhome/conf name=adguard_home_conf src=/usb1/docker_co\ +> nfigs/adguard_home\r\ +> \n\r\ +> \n/container\r\ +> \nadd cmd=\"-c /opt/adguardhome/conf/AdGuardHome.yaml -h 0.0.0.0 -w /opt/a\ +> dguardhome/work\" entrypoint=/opt/adguardhome/AdGuardHome interface=ADGUAR\ +> D-HOME logging=yes mounts=\\\r\ +> \n adguard_home_conf root-dir=/usb1/docker/adguard_home workdir=/opt/ad\ +> guardhome/work remote-image=adguard/adguardhome:latest\r\ +> \n\r\ +> \n/container/start [find where interface=ADGUARD-HOME]\r\ +> \n\r\ +> \n# ADH available on http://192.168.254.5:300 , configure before use\r\ +> \n# Choose one of the options below\r\ +> \n# uncomment lines before copying to terminal\r\ +> \n\r\ +> \n# OPTION 1\r\ +> \n# Just set AGH ip as DNS server.\r\ +> \n# /!\\ DNS FWD will work.\r\ +> \n# /!\\ No device-related stats will be gathered (all dns requests are co\ +> ming from mikrotik)\r\ +> \n#/ip dns\r\ +> \n#set allow-remote-requests=yes servers=192.168.254.5\r\ +> \n#/ip firewall nat\r\ +> \n#add action=redirect chain=dstnat comment=\"Incoming DNS redirect\" dst-\ +> address-type=!local dst-port=53 in-interface-list=LAN protocol=udp\r\ +> \n#add action=redirect chain=dstnat comment=\"Incoming DNS redirect\" dst-\ +> address-type=!local dst-port=53 in-interface-list=LAN protocol=tcp\r\ +> \n\r\ +> \n\r\ +> \n# OPTION 2\r\ +> \n# Forward all DNS requests to ADH\r\ +> \n# /!\\ DNS FWD will NOT work\r\ +> \n# /!\\ WILL SHOW stats for every LAN device\r\ +> \n#/ip firewall nat\r\ +> \n#add action=dst-nat chain=dstnat comment=\"local AdGuard udp - NO NAT L\ +> oopback / local addresses only!\" dst-port=53 in-interface-list=LAN protoc\ +> ol=udp src-address=\\\r\ +> \n# 192.168.88.0/24 to-addresses=192.168.254.5 to-ports=53\r\ +> \n#add action=dst-nat chain=dstnat comment=\"local AdGuard tcp\" dst-port=\ +> 53 in-interface-list=LAN protocol=tcp src-address=192.168.88.0/24 to-addre\ +> sses=192.168.254.5 to-ports=53" +138a3460,3497 +> /interface bridge +> add admin-mac=48:8F:5A:8E:1A:BC auto-mac=no mlag-peer-port="ether1 - Unet" \ +> name=Bridge-LAN port-cost-mode=short +> /interface wireless +> # managed by CAPsMAN +> # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +> set [ find default-name=wlan1 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ +> 2ghz-b/g/n basic-rates-a/g=\ +> 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps basic-rates-b=\ +> 1Mbps,2Mbps,5.5Mbps,11Mbps channel-width=20/40mhz-XX country=belarus \ +> disabled=no frequency=auto hw-protection-mode=rts-cts mode=ap-bridge \ +> rate-set=configured skip-dfs-channels=10min-cac ssid=vados \ +> wds-default-bridge=Bridge-LAN wds-mode=dynamic-mesh wireless-protocol=\ +> 802.11 wmm-support=enabled wps-mode=disabled +> # managed by CAPsMAN +> # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +> set [ find default-name=wlan2 ] ampdu-priorities=0,1,2,3,4,5,6,7 band=\ +> 5ghz-a/n/ac basic-rates-a/g=\ +> 6Mbps,9Mbps,12Mbps,18Mbps,24Mbps,36Mbps,48Mbps,54Mbps channel-width=\ +> 20/40/80mhz-XXXX country=belarus disabled=no frequency=auto \ +> hw-protection-mode=rts-cts mode=ap-bridge rate-set=configured \ +> skip-dfs-channels=10min-cac ssid=vados5g wds-default-bridge=Bridge-LAN \ +> wds-mode=dynamic-mesh wireless-protocol=802.11 wmm-support=enabled \ +> wps-mode=disabled +> /interface wireless nstreme +> # managed by CAPsMAN +> # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +> set wlan1 enable-nstreme=yes +> # managed by CAPsMAN +> # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +> set wlan2 enable-nstreme=yes +> /caps-man provisioning +> add action=create-dynamic-enabled hw-supported-modes=gn master-configuration=\ +> cfg-2ghz name-format=prefix-identity name-prefix=2ghz +> add action=create-dynamic-enabled hw-supported-modes=ac master-configuration=\ +> cfg-5ghz-ac name-format=prefix-identity name-prefix=5ghz-ac +> add action=create-dynamic-enabled hw-supported-modes=an master-configuration=\ +> cfg-5ghz-an name-format=prefix-identity name-prefix=5ghz-an +140,141c3499,3500 +< set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ +< openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +--- +> set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,containe\ +> r,userman,wiliot,openflow,tr069,dot1x,dns,www,api,reverse-proxy,logging" +143c3502 +< add bridge=Bridge-LAN interface=ether5 +--- +> add bridge=Bridge-LAN disabled=yes interface="ether1 - Unet" +145d3503 +< add bridge=Bridge-LAN interface=ether4 +146a3505,3506 +> add bridge=Bridge-LAN interface=ether4 +> add bridge=Bridge-LAN interface=ether5 +164d3523 +< add interface=Bridge-LAN list=LAN +165a3525,3539 +> add interface=Bridge-LAN list=LAN +> /interface ovpn-server server +> add auth=sha1,md5 mac-address=FE:82:A5:78:8E:84 name=ovpn-server1 +> /interface wifi configuration +> add channel=2G-AX datapath=xs-DataPath disabled=no mode=ap name=2G-AX \ +> security=sec2g security.ft=yes .ft-over-ds=yes ssid=vados +> add channel=2G-N datapath=xs-DataPath disabled=no mode=ap name=2G-N security=\ +> sec2g security.ft=yes .ft-over-ds=yes ssid=vados +> add channel=5G-AC datapath=xs-DataPath disabled=no mode=ap name=5G-AC \ +> security=sec5G security.authentication-types="" .ft=yes .ft-over-ds=yes \ +> ssid=vados +> add channel=2G-G datapath=xs-DataPath disabled=no mode=ap name=2G-G security=\ +> sec2g security.authentication-types="" .ft=yes .ft-over-ds=yes ssid=vados +> /interface wifi datapath +> add bridge=Bridge-LAN disabled=no interface-list=all name=xs-DataPath +167c3541 +< add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ +--- +> add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0,0.0.0.0/0 \ +169c3543 +< MikroVados persistent-keepalive=10s public-key=\ +--- +> MikroVados persistent-keepalive=25s public-key=\ +176c3550 +< wlan1,wlan2 lock-to-caps-man=yes +--- +> wlan1,wlan2 +181c3555,3561 +< add interface="ether1 - Unet" name=client1 +--- +> add add-default-route=special-classless default-route-distance=2 \ +> default-route-tables=main dhcp-options=clientid,clientid_duid interface=\ +> "ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +> /ip dhcp-server +> add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ +> dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ +> name=masterDHCP server-address=10.30.30.81 +239c3619 +< doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +--- +> doh-max-server-connections=20 servers=8.8.4.4,8.8.8.8 +240a3621,3622 +> add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +> add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +244d3625 +< add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +253,254d3633 +< add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +< add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +258c3637,3639 +< add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ +--- +> add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +> add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +> add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ +260c3641 +< add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ +--- +> add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ +261a3643,3644 +> add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ +> dns.quad9.net type=A +264,265d3646 +< add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ +< type=A +268d3648 +< add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +275,276d3654 +< add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ +< dns.quad9.net type=A +940,943c4318,4337 +< add action=accept chain=input comment=\ +< "accept NTP clients on local area network" dst-port=123 in-interface=\ +< Bridge-LAN in-interface-list=LAN protocol=udp +< add action=accept chain=output disabled=yes protocol=tcp src-port=443 +--- +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=12h chain=input comment="block honeypot DNS" \ +> connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ +> src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ +> in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ +> src-address-list=!Trusted-DNS +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input comment=\ +> "block honeypot ssh rdp winbox" connection-state=new dst-port=\ +> 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ +> connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ +> src-address-list=!TRUSTED +> add action=add-src-to-address-list address-list="Honeypot Hacker" \ +> address-list-timeout=5d chain=input comment="block honeypot NTP" \ +> connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ +> src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +946a4341,4351 +> add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ +> dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ +> protocol=udp +> add action=accept chain=input comment=\ +> "accept NTP clients on local area network" disabled=yes dst-port=123 \ +> in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +> add action=accept chain=output comment="accept WireGuard" disabled=yes \ +> dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ +> protocol=udp +> add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ +> dst-port=29185 out-interface="ether1 - Unet" protocol=udp +949a4355,4357 +> add action=accept chain=input disabled=yes dst-port=443 in-interface=\ +> "ether1 - Unet" protocol=tcp +> add action=accept chain=output disabled=yes protocol=tcp src-port=443 +969a4378,4380 +> add action=drop chain=forward comment=\ +> "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ +> connection-state=new in-interface="ether1 - Unet" +999,1000c4410,4412 +< dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ +< VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +--- +> disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN \ +> log-prefix=VPN-all new-routing-mark=To-VPN passthrough=no src-address=\ +> 10.30.30.0/24 +1121a4534,4538 +> /ip hotspot user profile +> set [ find default=yes ] address-pool=dhcp +> /ip hotspot walled-garden +> add server=*1 +> add server=*1 +1132,1135d4548 +< add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +< add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +< add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +< add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +1138,1139d4550 +< add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ +< routing-table=main scope=30 target-scope=10 +1151c4562,4564 +< set graphs-plain=no rest-plain=no webfig-plain=no +--- +> set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ +> no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ +> webfig-plain=no webfig-secure=no +1159a4573,4579 +> add interface=WG type=external +> add interface=wlan2 type=internal +> /ipv6 address +> add address=fdcc:ad94:bacf:61a4::cafe:2/128 advertise=no interface=*F +> /snmp community +> set [ find default=yes ] addresses=10.30.30.0/24 read-access=no security=\ +> private +1168a4589,4590 +> /system note +> set show-at-login=no +1178a4601,4621 +> /system package update +> set channel=development +> /system scheduler +> add comment="Scheduler for Update Certificates CloudFlare Quad9" disabled=yes \ +> interval=1w name="Update Certificates CloudFlare Quad9" on-event=\ +> "/system/script { run Update-Certificates; }" policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-date=2025-11-28 start-time=05:45:40 +> add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ +> on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ +> policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-time=startup +> add comment="Every Day Check For Update Scripts" interval=1d name=\ +> AM-ScriptInstallUpdate on-event=\ +> ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-time=startup +> add comment="Update RKN DNS Looup" interval=20m name=AM-RKN-dnsLookup \ +> on-event="/system/script { run AM-RKN-dnsLookup; }" policy=\ +> ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ +> start-time=startup +1209a4653,4654 +> /tool sniffer +> set filter-interface=Bridge-LAN filter-src-ip-address=10.30.30.50/32 diff --git a/MikroMaster/tmp/Config.rsc b/MikroMaster/tmp/Config.rsc deleted file mode 100644 index e69de29..0000000 -- 2.52.0