From 62f4ca54874501970a75b6801798096357f4b604 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Wed, 13 May 2026 16:00:31 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 13 16:00:31. --- .../20260513/20260513160002-Binary.backup | Bin 0 -> 119414 bytes .../20260513/20260513160002-Config.rsc | 1242 +++++++++++++++++ .../20260513/20260513160002-Diff-Config.rsc | 54 + 3 files changed, 1296 insertions(+) create mode 100644 MikroMaster/20260513/20260513160002-Binary.backup create mode 100644 MikroMaster/20260513/20260513160002-Config.rsc create mode 100644 MikroMaster/history/20260513/20260513160002-Diff-Config.rsc diff --git a/MikroMaster/20260513/20260513160002-Binary.backup b/MikroMaster/20260513/20260513160002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..26c2b8ed30533a0072ced981e3669b4943442700 GIT binary patch literal 119414 zcmeFa34BvU*FS!4lD7ADp=AewlCp!eP11$3N-1SgS_%{p0U=G&HZ)B_lG36gi^}4@ zW&;NPw6OV7bE9302NofuqX5r`x~IyZoC z+>Suz3}1OG1$}?zULOnw8!K=z5%s4ci=OBSkXK|e5Q#*j6NrR3su$v^o&>6wD2D3A zU@#bzs6LHSs6Ne5ZFRaEGZN}WAdSImP30o`JT(EQyCSoutiqdVE3ZgY$~scX826D> zWJyx8Xo_!>HGKIup?&3fzT=Rw{5;BDz_D zyAe^X0(U1OrvmpNqA3b|F%gYX;GRTOt-$F-G+Kc(h-j<=XA;rX3XBFbOo7cDP74uD zRi0-NkynAUiKtY8bBJh;0_PG@KLzf^!Ffb;`UgNw(!@INn&5Lp_!rE7zwiPe_I z$d@MV{H2K``yCD0v5d)Jw9P30TPG6xhe}Z^A&%+^6(mx1v@8ZfmzFMo#j>=CP zV)X|~eO6nQvE1V`x;^gnaV5n@o5$^T*aA+E+n+|1mNKrScuKKnO6cWBLPW^2g=gt* zMV5d(wFz%dAmJk-dRCDoBNh1o64`*#nMo0l*aalUdTIiSZ0MM8vpKv0b+gJ8 zgFu_h>2L@9MvvR*^4P2{qt)lI8kIrw<_I#^XA%2{h6y2Y5fR-XkN`;xZlaPwBG1VX z2fH#3>WCx**w`(CjVTIIE}H4xYu2D=AKwc~~1ki{K;n@1LTjo0gXD94!&q zIz!n;w&p!bYksD|*4+Ja2tWft;gNa(Ki{gG*d66IkGs5&vE1qp1kk*vgffy_>}G-3 zKec?ViRgBLX;WAF!6Woc>COy{FIN zvIZRXo;7a99EW}Mc{7WL6cLb9I&#X;=F~itlila>8lCPLR+rO0HiWSu9)wt$fwBw0 znyJOwEQD2|e|SMr$<-mGj|n8a8NpnJG@D4AO(f(fcTk-P{3b2_%t-tJkJ3e59*?&S z60sXZVnKe1zbL=B`>;^f4M`423*-u=2=`F=Ovu`dtQDCSZiugjn_KvO^YsvkH>gap z;7h(~w~r*-={7pOeuvHI^|+k2nNve#Hi+H=^g;-IRwR03BzjLxK!e{K!hgY5nT4Wf zN9K?bnL|VE(im!(rRU8r+%U6|Sx#hT4L8j>A)I`#hsyOeF=;FOgA+O|4{;umGzV=d zC)E9OBXjE-DjMquR+r0I?(b_}fcD`F;?mm2{W~Am4a=mdB56y~Cf+2z`zL2!j%aa|lWl zBlLN1bq*TIo^C_fd`}+910JKSx(yj*wA$@Hhu?1;F?>v^v5&Dk#t5<8YIBr%JXMi% z*Y^AjvfApda5=6gq9n*~WhR6-7AbHt2d8i|Ma-?$Sz{9-TA;j-neoGz;}cOcBDz<3 z-kgY*C@=)tO$yAj&;wdfS*SeF0nHq=V2+2% z{6&AZ;&WF1jgWtG1Np}dsj*d!zN{Gar@~NQ4aJ`EL(fe}14Nv~l(UFP1`#O@5FrhB z`vcYrpS2ofgnxwy2`kVMg1jMaT$qp)5Yo5-LgGqmoq>SE$GD-u|0*Jw=G>$qA|`lh zN^8m-j0gn|5wYN0ZR4NgL=$kLX#+%r`ZA~p{RolquwLylcA|x{xq_G;MYJ)2Xj1~w ziwQ)V6Nt7X$c73uWC(9`EU3wCiKv}o6oN77JtAgE`hbYuC!#$>XlIaIO#gyf_c0ND zLPVbu(S9P@MMR$y(E(W%gzBvh3Yf~$mqfIih!zV(_X$Mz3q%hHL=Or?4+%tVi0CaC zpai0&0%4vW5(1A4M9T%D6#~&pf!XosNrBJ_X_Y{W2}Dl|M9&DU zb23T0S|EB}V7epJR@x*Gy{M?MTLgkoCrrM!3q(5vqL&1sU2#OO2t@x72nqqcA4l}M zK(r^0Xs1BT==HW@WU~^{H;UZ>LIQ>;2!xRalFphAMM|k$=oP(S1xiIg+VFQqT$L4S^(jQy?ig z9Y1|YYLV1|ikX0}LUJ{dYmm%h$b-Sz_@T;XD9HppfkHYQ&BxD$C_mH&!t_kG*(3r= zLedzSGy&(Bkh_>jviDT*7lHL7kQ5_HhhW8=&FXTYFNF+b<4TG#05lsnc+7COl}(fL zT`qYji0F_Dh*DtB##LgVG>nkuSowDcqBJT(f>}SMBDpstBrp}l^m8#cJyix10mj=k z0tx6J=xdm@q3xii95F;{C9#>#Aw7xq7ad2K!OZq(V$H#MhOb2gE5NdhBCD^;7-92(cH*eBxoYeVS%V81K2QS* z_yjCZA5wZ)-+*=GrVw!vIzWhB4UMy`M~Nhl`y!n^WdtFy6mq;bT^g8UK2qT!c~9$7m4GWK*#;plONqig9jwn@)D*r*xbmKH8PJUE=9MqEty9>k%?x42?7?Y?jx%Oh z?H+%Iuck5(@cLOlvgEVBgr%TN_$VUw?;Pf%zf8C^3hi`Mh~%WRNM;H@*J$-_Z}o-< zc9uY!-A|oz zk+8pEfKf^3XDWZC6-X^Wc8d_%$!C$xCJqYOTO%lfk4*KGsT6&yPzi=E51Vb&ITWF7 zs(vyy+M|IMT`ua;KpUfh;)kjSiBn6N3s1aW8K+n)#i%UBqo=Xi1jp3I6Rd8#qb>si zYKXPk>6*!O=gWo<9<%CSO+4#e7bd>3N<8yEbG<7>Y2-*GVu*nA+vyGDDz0FREEp9q z@y3OFGp+BM;n#dB+W?~dR2~29ju}py!~c-t@m3wYIwJbgAmc zU?@&q6d2xo6~>r4LV1pH^aTY*_7yUEHje(Tz!*nam;n(RN1sxjzu64V=ORlb3Cxly z2qZ`&bRe$&d%$TSKcSb+9%J^$87Cm zvq%j-6-nqe*HC16N~DGGVG~mZz!xY5U_9<%I__W~?g+cU9ZbX>48$GvjXM~JJCqOH z(KK*}(t*4B4>lgauxa@es8f3gkl088r$&x6NbZ-lh#0|}fS}8BKR(@Y3lB8<`6m5~TLvkmO+=b+B zB=;c6!yo#Ha;xquk`&($U-rl20Z8(Z+$WNl93;A5BvHVu9Sa#1@$6|N?}{V|?*ZC{L4r6imgpP&xq<}oSCQyj{P+Ry z{)prtejXA@N<9qd2$G+Xe23(FBuA0_g5*~uzajY@$uT6yk(@ws63HnfXG9XWe_28G z_(2j$f*wpaNOG;lO6aP&)EIwhg1i6q@c>=Ou_VYgjz>qRe%5~bx< zTWx(zbvY(erl~I1)YIs#oY}`zmz9;3-P35z>0_!h^)y;7^4;O^`aIQun@f~NKZ%q^ z4~UeOn4On5Bqu+w(41djc?M5+$5C1g)8k$iLsE?iI63QGoPg6`NWfVd6maGS1)LcI z&ij8#zzHD%2f-!}aS&?Z=MZM{^JE4AZY0q{Jrnd0_W1X25ON72A=j^&EaU`@ko(t& zHdUlSlle~ACoD=1es=%Wf~+}NT5NA z{S(s69Fk^nOq%6XG$_wr$`-;3n*s7nUvjZE zNJ!J0j5!U7xH4NqBCgB^6>~$8CDA|&WyKi%843-0@$Y&PpeRED{Y_88Nj=68B!3_| zjpR=~NwIOzMMWeTpqC%w2E>xABZT!;roO65YZFAEwlR>T#~64xj_6mYxT!#POiz+7 zJjiSb3;iw3I|etbT=Z0qXEEpJSuEq3MPXKUgUqrw$SnK+CT497Giz%Xjyti@a3@RQ zPF925aWu#s$NwhoYzuQ|8=8`SL}4+{rMPIgl&x^7L7k$kyg@FN|8L^b_Ar;WGcFa6 zEf~SIC6VJ&qqC)x+|zOtE;T&0G&RH}n+aU{@_b_H76Va=BAV(IF?C)M6@*mL8%T-| z3#-NuGLgcH$tfnHG?VMIgx;BiB&p``O83BdbRLnPkrV3Fwlq*TIW;z48O0PIKUeizyHLxl-WRT1b@Ev{Sd?#ifO#hvXL& zcJI@v+qmI_yDuV2OYGEb(CFcVhZYv)7j(bn953D)`Qkj}AkQ+w)%J1)XTC{5wWXoj z5(mPD!CP=dmnGm$ce*i;=-#Es@`mhXj<^uD5km>e6bIcbRu16&oy#T>*>q?)8;NC8 z=owyue3qXppU+?jlOv*7p7n~e{99DscSwFfatO(rMB=I#=KN;&Kk;xMk@!^3TdO}N zV(U&mC6ZG2<1e2RN&OC>#?BCRk1w(qgZ1pyA5kq|A^8Z&UIaZc-3P^NIwoNCxez8~ zF%~(ie4a5SWyJM}r1O+nX6+2G8%5rFfg%eC0t1`XBJ;&V`vwaH#sXH*Fdz7$>KZ6& ziy}*xV0~Kh46i%GuaqXkS98u{e}RP)5if%kqRNV=xH@ly@(*dqGB|!HihZ3b1<;e3 zP-8~I7};Nf(Bp%8O6z%5&1nC~i|r#ar{!8}t%Js2ky%{f9ya>ovV!8V(?*Xkvkn{L zwO>_L?5@r3|06yq9GN>|nAK7{rZ(?lkI#Iu(?4XSB~aiWe(Bh0c~$wvR)@(x-Bn%W z88W=Tva+hI+^()Rg0)vMu`(O0fr>1!ua@~8z8SFbLBWiC0ncsKR<{!|V%)MNtoXr& zdlzNd5|mR_e!&+6(+`spU?j6Lx@`7%^nAL})bv(?82&EuRl3htQDW3k5X z@TI#PcJR;Tuulp2oD~%gA1f_N2!|9dlu(6HLKQ{{RTw2yVKfbO(H%l#jM zMCh2)9dP*E4(77etSUslAzzZuT8rP&IFeLv5LP4lthE6_HsqtLWiqM9$3C8~5{Sz@{Je&n*mO6570C92g3cj!drIhG}= zksw%>sPY6Z9Th*8CHj>2`*82~<(6Kedf+I*^<4tQt2#hMc&%C79-OQ2=du80IN#(I z813O{j0lBkJ{YSIBGw!F;fIV|gg8HxzM7~m}N^DLs1kB7s9D$N5!&$e~E-7rF+-e|NLn}AK5iAOqS#aUm9PWU!u_b@!D_iW0 zDwUxMcx9+8=f~d>_}Ln~^Wl&2RAu-W%Vel3O6>CTI;`*uha5M+sPG?AD@jf@RvBfo zMVVD+6r>BXQp1WH$VmMYvXKI{&gu$e5niTreqMD!7G2Mi1<=OS0p)}!sqPAt-7bJK zAt1+01F<7Y#NB|nJ437lI5)%&k-1q@v`LdyFg@ z!@r^}g$21}T_~5>YSt&wl@zctvJ~fNmGV-v3*nD<+FYKR(16VSgpMljm2iH!D6cYO z`KarY8W1+2zo8^zd6~_g;dTTjMwv$rc$Is;Jb*S)%^&SG9K?Bk^5w;37h+SA%~S17 zcRAbvt5V_GCub=v=cp8U`PqeXOYv6+ycyM2rz;~|{bxNqtD&8vIp=|Sy)Tq!Y=vir zQZxnhMOism+$Qz85dLIeue^+Mzu%h?&M5NPS#@@f67@ljeJ_+_lGW?Xu$QGfy=V_; zAlfJ4<=y9RA$`>t^9yB|f(!!=mjf%UGCV%kD9?Hr8T6N`?s%ij(QrKr!+>&sR##-1 zL?qaWU|PW>ML;B16C$B0k$|WzL~J2itCh0!2NR8Vhy+AnVG9II$S}$3P9*do5->Ts zT_850!Ndd;lD%tL{kl$F|m6k{^EqaTVS?zX-*Y>7}y+AvR5lsZCJz+>Ej_1 zzv;~Ohmi)tJe~^6xcBylY+s;{u48r&SjuA++;Pes z81P(D?(xb!fk-SF!lLTf-;;>MsRvn9orsNUl8K~euuuiICNTM{o%jz!T-W|cg!#Q{u2Y2J(t{mKngFAAtx*m0Ujibg9 znCW%+>lE8wDa>DrrXz9b ze1W#>NL<*I=p~)}SsGTeb|dPbm;c^TFaI6Z)cg7nb=J%8bx~HmcEz1Y*G(@|+8jos z1&AkDhy*RsvIx*k3c{Q5;}#^h>Pd>b6VP2q(gl+GWuT0iD2GWPshL@jsl5j;+@KG) zz808bDSKK?{@Zz~`#;Om6c$tAb_B3T1vU)(`Za?xlR2u-L^`f$L*;J@psbS&fl2-JpTTh8gFu?C*b#bLV}^}@8GS#jbtLm z*8e>A#{7GlZxgR=dU}o5<+0jT>0tjmIIQD242|XgEQgzc!*)-to9D6Z@8B`7kFl`M z|2!VY{d-z*Q;*vBIvwczwL_#dvScuKC znPVLe_QtA%y%CZ4PA;3ON-@}B0;}F6HhY38LfMW2E9QI-zsEJh;mee5;B(l%a^dZ5 zVWCmCy#;}){~8lm)!&T?th#S70wC0PVDVA6$;Bj2g%R4J!iWn}VYuW~|24R9g~ACe z^i%!Om~yKy$X98A-9XJ3zGamjEdHCR;K2ew6^1!U^@GE#q{1*Sss48a->ANCEDFTR zZ(Q(FtK0TsaiIDf0XizLut-pau~1N@2c{}DFT@zA+Ya+S@iXz@iE5TcWPuvS1S1bN zQ9*D^d}?YMo1nuk!V^a35ftZvCrcVEo)~nPvNcp&VzIckm^E6^;)D7i^@xP z*Vq`wuvhUs7#W%R5JrO*W4yd>JcKgr)V&Z&LkMMz7G-k8Qgo0Sn_o1hv~V=`w3f~N z7s4JB!XB%|9xG%2i{+0Ep^MX^Q_Jsjuw6<1Le0m8P>NcViPi23ZOupDoWu}PDH3T# zc$WlL_~?;JA*AsUNWH$mKTBzR2x&qDQlBHD_+fWpM`b%UghDpdn-W4u6SYWFsu6h_ zi0DyQMBSVcLx_{Kh#PzAoOb6`4!f2QVZYS58mcH7SYTUH2y-JX=6Ji?pCP*-QD2RR zG9Pui-R(CHFPV{Tv_zAK$b!Ebh4M)LYk8QX>dvWegD+B12s~wt%(b@LsIv zp>-T+Z5={*krrVBLpZ_Va(QYQ&ZvkS3!E2)aJJFnl!+{I%F0Oe>P?#v!nRt3(zyJ= zBgdqx#f}PN8Axm!!q~1sjDJbGGy}$VA&jY7jIk9~pS6OCbc(*OrH0V8*P@G}uZ1@* z=4xNlqt#x}Ud@FC+G{g9XGe&16(f3`d|p4?w3uhG9a0DzeurVqGt}ppXQ(jd87iF5 zV0l{7>6j&8 zc7T9tL;+(ag5YN{7D*f?VJr-qZLNSA_eRX!R(J)LBo!UDJ>*C;Tij4F(pRNp~WZdTs$=<&SB(wR+a@fTERJQ0f( z2g}gX5J;`CjrpckrinTot7S=#c`g_ZFE!?Uk`9Z_IKIJO2o^|S278r-nClhqH~f6M zq<9Hs#?mmU+-3DwX1YAGE{Yp^^0RsRlJbq&*s zB_>hR>abOM{vEAA-!QFM_Yy6wu|7w&C*auJP%A*^K$~UKQE9VS=kQOqSwq9rVmVGE zwT;+pd>~6Rd^P82!7&cRSi$Oo9_*`eIavQipG8y*F7#OyMxRw-^h_0o_*Iu6^bzp9 z$f9HBD1iw+;6u+!Kx9)+R%^mh@Y?W4bg~NUgTF(rJ-PnUM0J6?M z(;skDqqX3|vJ70nt)2%4laOi*go(^dMHZO0njpxi2U{B^;bl1}2V+fIQelnH<8@>f zdHgm{Z7V9WG$O)^CPn)yVu$1;QjrDQ%$7_yOhX2KXY~}nBY^Y3{Az}(?G1NKa@9?? zAdX>2gWV1V$7W;7qB>=NTRq#_76Q3WS==Kp(n^E)PGikLEO+{kQZ` z({XTzlO08d>kLcf`xz>-w2DPsi-DyGPQf;3Xw(>*Kz2$j3CXb}+Jxj~By4!~$I7LsQSPPQ{ zAU3Wn0>qX$eHNoEal#-g35}2pj+KY?!dQ}o6?kk6Y?~aH zydGbGEwMu@Mz|U-bWRmU^HO2xMk);5NQKeXR2aKZ52YeYQ`VUqk-(ZZETm9XI0c2R z`C^(BvmxtA5c63)R=u)>-~89m#DvfcFV(RkD|>GIH8kv4mIkQF`fF(7LeyvrmHpSy zU_RdvH8~nIOiG@I#i%Q`B#yBqL1_u;Hg64T-RAHy(E)KW8&#}`@NbpyIXGg~1(emT z@J^BCR<!kJQZ9T8TT$vP`m z`-!vH)z7Yg(}8U=ST6}!vERbVj@6Q?JEN7OmFN)Ehr>q1rHDfVM;71-nsv)_WRKmb z(V0z&dec0;XqqP+U8>g!I-S`3>yna%Lod0*loTuVm_Ka(i6lWth#^x4v(c0qs~>C7 zC!PzbDYa!%FO$h^GMjLjuV|T+m1i=W^GsRhY*Vi*qQWsx=)h+!#E^cTkW8j|LcDIC zAkfCqC71Vn{@@EY9Wz~iSJwq;L+8cb{L%L-3@NMAHY|So#DbZZj%GlDGGjCdy zWR2;xA|^Pg@#n*T%X++pKlw57!|ip=cZ~@6_6+UR#(!qq)I%wzvDdH3eQQR2)AW@a zFFw6}*t@x7?wtD8XXaZM7Q8jZ(DtfJ<~-ixo9}L2w`XFP`NM91=EM!3oM`s(p)*wl z?=Jaa`{^qm^lsSyS)Z3qT~+wyrFR==^?q()$phW*ExfqZ7?tn4X!g*@ zgm1q7w&~T!st4YgdVJa)PhWY%A8W5FZQf~WoDRFGJvPWR(3BjjAKR{}AOsCDCcPj8 zO^xs%84nD4o$$P=9ey`5v@kU5dRNnT99OJ3-uJ`XPk5Hp6dInpdoj=D1jc27x-PnJ z>x}JRU;6shYi>H4IqyBUxGXnTw|aJ}unmu%D@Zlv- z9LejqYv3k2^XQrP2W>fU$tzF&xMuu4i`UtnY2=@B*^_tmzI*$2+kNBadQNv=+3d(q zjaLuzpPAf6JaONcuRG`Ft`lCKXx^KA!w0Ws9s9K3fdgB*)vbH#M4P;C>XKe~|7iJT zcdnbYIbmS$xeuS2Rd=#?%X?p()_4(73VI#-_(E<6_qqS=DgW&$swmV$4ECh zd5+%Yxw#gHIm_1Dnq|6?$lRcSx(Qj-;ao&>jw36_lw-=v%kGs`-rGDK>wM2KvVEKK zmxo{G9KP`ItK)}XIF>Fv{H7G-m!yaH&Ky*bOk`SNcx2@Lx;5865UAQ?igERJ)OKpU zWt_Bl@f$aszQO3;_43R6vrD@l*++fMk6eCFw^mbrx;A;tmEB4@Pk7|sf<0fn({%iY zOCOkb&F<}|3KJfyY5(hzagRQj@||tYwXHA8ZT8u#qw=S9`MvmsS;vRO-Emj^Q{VP{ zx?s%}S3P#5?~`j^$<%dSU-89PP3FXZy5;@y<*ix{Ps?@hUpM@MNxB2(o7hOIk-kxacYhOciFSWPvB%Q9Rm`_danD(2LIp)PW_h-9v zhh2NTuXA;(^}A6&iIdFFUUl2fls|u{FqG`^+)_4oQ{w7xdr$c7xy4n-q_an&R>qte`AK>$k&Ii?pCqm4s*e~AEtae>A)K+7R^XH^vc>1 zGcg)z%yL~BB zE=id9Xs79|daXQc8{l}Qtl!O5n?9Ioc=%xUiVrv4@!g3=KP+m!E${a;x>ENCXKEfS zdFIhS#vWh(+_Kj_F`H&QRDA08RfnG0-S)jlTmQJF{mbJn3H*3d_pIQ=C6*WTo5x;s z)2$!n{4jmNJ$sUihxGjZc)=s3iI$qYt=*@+KYQbuved6XIDTmDGqqi}w!ASVX5qJ! zf4};>74O8{lvg-0c7Mvyy7#h$Uyrxh{Or}q`@ad+KfmeN&V4cSe)(wcws&%b+1aDF zrN5i{;?HwB8lMucd4Ai*<}F9v{KLqP&J3Mi8ocaqMcl#8nO98y{Po+KPwJk1|2@}s zKh<;Wgn9jMoi1FmyOZF$eNW!vPg`%9+5PS7Cgqe}>pb-S*c<1+o1DHl-c?n!yY}Oz z!4cQ49KHIL$2Kp2V$RiL-xFIc@%0^3{@W#!SFHb`c=@_lD!R0qyY6WAV?P&cnZE9c z5zWl6E?Yjfb+YI9t^s-1W?g=G^{?wky6TU-bE|trlZ5*B=Kq@5=H<&fja$&7#}BUS zXJ^Mb=lnWhZ_3s61N#M5PF>w^*y($2`*_?n{anX}rdBo1K5{C3@Zme|IrZRkzkF1E z;E7jbZf%oOj6GLO%`rV_Y?>#WQlxQ%iY@ahBk` z;Jn~S@8J*X-Wa{`^w0IJYCgJhRn79tx-7ok{Pv1#`;AGy=A$k%w!hz{`_fAv{ASOQ zYm;*7fBX2gz6-87`DNaB)8_5GVdcn9gSs29KGSG-*}m|XXEP@^$$iC{**UoJhm&6&{qlud~adKkMgB7_SWWF+`pvAn{A5N`pwJ(+$ zf8*22xFxph2ody`5;-&$QSKL4Pu4}3$ z|7v(e+?jCd*rZR6$C}z>meA4A%G6>`gTrt{O*8GMXA^geWlcu^xp{o?vgS9xv1;>8 z1MeR8?C7k?od!B?&Di)#POGm9J8#)>vj6eEo4)$$ir2nLJ9KGv^0R+<<~J4|bbQ$Q z@-wYhZF~B)iuWh3?a};j$Cwk-+y&#>iI;3~-_vySr>lZ%7hL)Q*=}EzKk~}D$*|Ny7D=1e|=l= zmW^L$d$LCCZke!qd&lc->kh`uFN(kK&0l}~{f~bfon?G{=H8<3KWo|CGBnTp>HaT& zJkoaiBbCYf_dfO0pnIh&k0v#C1-oZvw7TZ$&$s;COE-LZ*EVD4e7_)h=vd!IPuiUy zEFbc1R@wRH3IFXf|Lrnb+sS{s%(q!(xBXZ1{jcWxU(NTwn(zMt&6n9Va%SK7RpHkZ@k z4ovZQ15S_I4_D{!!C+AJIvooJgNV?P8mFQ_~7o$@e1EUlANd0KE+<+wC6{lL6#vjjZJkXa|jJ~`wd|c zRV;lY5P(h~NCX`Tow^MhiF3V+3b{`!Jvdyj+5tx?;{vub#qx@pGPffD-!7ask1B=b z!~SuA;-f4=2|HcNzHLAV)k`28{)2cx{EAV3O^HuUEi`?E@HGKDhaj_5{AjQI=!h-55yXaN0_@LSkUh3y#HKD1w#3BI z5zH&Ca9s^k%SKzxLXwPx#kXC|ZPw9~gINR|+X@^ZRfup=YbkW);ScEz{DGa1n~T48 zYv8XR{U_9>gnswetCCf1G_@%qxRK%id#kdEx*pEqw)tkVVdFoeRw1&miyOu;blqi2 zGl7W1cFedS;?#3*asKu)Dzc<7k2T}nCrR|P9zUuqy>piOw z5^7HQ)bQ4Ai$)$F`HI-c94H)teQwiYtoCZB`__gCl;vC$1VY#+4Lpd$6eKUe78uOLEh0Ra ziUD0mB|;TsxFY}zWdb^LJR)S+5d~W`>pr!)ua+}s_tjKnX~~9`c%mnC)I>%n;=;!L zxWdm22Kku*fr@M;D%+AuWU)!&gMz#z6;>}o34!!YBzc=5Y&nHvSrH>;N8ng9RB|&! z^4gn`ygv|&iEIJEk6qkxVHm~|C?>`cE;GHxX{+)(0;mRD>M~1&Lk;8xUo|jhy?}R$ zELcd3<(gO$h8?QGTl7=5`~tmHRhU>L7o!rxvP8cNB&Hr!c28nkWU-aDCk4XsawOpl z*))A+e#tLI7wujggh$dw9!-^Az4Fk;iBz;+=H^-&cvp9$&#=@FZ6V6lx3@9-o?8&q{H%jwG6^BT0XQ zj@S`t*vLsYStlO~c_sclMMshsgEQTTzuk&wHv?kDWDG-e>Ya51cVDHWG^*86S_gASTD7XGR&2#b9YI)z=yP)DK?{*OUmFA<9tjc4i++fN;exZJMLcH+_IvDKX% zmdK7Qk7pWE2Rvgn07kI$zULs&Uu4?n-$*RmvHYJQRzAP{yu`-+-Ndqm75@ye?676& zyu`}UyniES|7l_qun%O)d5Mi>oPF|N&}I?j8*O_{0ili0OQ;-~jRgwI^z?7*Tz`eo z#_BBhytK;U=MX+9mk23>FkHK1hRf+^Q~4%DI&3nD3)@1fFruc@HKF4yP@M@2*fa1Q z%oY0a`SPOE^Sunj?Bx;4%g`SrbPB!>wCLkPxNmXYRLk=VD5AU7MaNjUpfBsS%b7v;%#=v&BZUrwgaQ-hdx zc6VT`5QydsR@jro!HqaLnS)a}xG~Wjb%Ti}M03>bIqC(X!Ad!sVx`tx=<{*14p5I^ z;5kVGbx$m^bO_ci@`N{&; zM1kX6WnpxHrBUFBVLMAeBTE!WN*#%D)PO$5GZ>-hBI+dp8#;1W8-=)>D07*N!Fq}9 zq9O^hqNk$8T00&mR)L_k%Q#s}L~UvCASdPQDrj5KFKYu{*ZLV!Wu$0Awz&fTC;}ofw=Yi zE7Qw8zFMo#?sSLNS^SJ{OT_L!8;UHjHOlHT`Zn@W6?v>z)U)-9P+N3Z*r0>GKp#(J zdIo6XkcH20#fJj=n;_5|_iq}0xaicJZ}%;4JL;andtbfYyrjwTKStZvAN*=Xw^^@y zZtQ-=!tK}fZ3)-xlIHF>+kYum;Y>bKwVRB5wUdzL($`p7l@Qzug5FKhqk zR}&{a_D$bl%NDOzJU;ed;;zRZ?ETTpC_zp2fJizklydh@V0Ka8Dqc%JsjM+}7RhdwZww zdMg% z?X;5LcGdciW_?a$_P2DdIWX$XTlxL_eLic|)yK-$>@V7T>dRSs=1wS~YuvroIo5T4 zGv$)meZGi)Vf@rvziYLn=lFpipSu0^alhp@oiOb5t~0GhOid{6I>daL>#bL3PV4i< z7uyyr6yJGo;J|l3+PMAV@%wtuDz9pP=J(^xVh*o;>-q7Mgt}cbPCR_&gkN@<=AP{N z_zJ0atmWP}Z`#$;u`B=H{bFTudZOup$2UG8>3+JjdcwZhQ``rCxb~tC=XbkpRNH_2 z@x_X)Yb`q;y1wcmp_%c{1!=!!ow)P!@{VinXy0S(n2J}IU+Jj1ZqmdBTS?sd!D82> zRex?tnYe9JLCnAb@%_;t=F)dhPipgFQ|sJg!4dr~@BQM0o62^lzBgT*ee}~_O~?Id zT=7)$*YjrI{*EQ~_seUSOdp|N_>6z%3A)GkKxX0b7KOJyyyO0v1y?NSSlZfZzs~)m zfB8e(+w|MuTJlJ2*~x>qT{^@+=A}KqZt3yd(jkK??s@XtAKR~NUp!&ii0viQe_S@X zsQM*ST4nbd{f~ty!vcdBb@_97(y-b4Hm)~jv^ze~ z+htVS<{guon7>$*a@~`NY~_)FWzSO+)>hqnTgj_0ymaRiWBqA!-a7I@n}^1Kbs9$7PLJ*X z=+ZsqSwltLwC&l~$6WjQ@rk`1)?4y!5?{ak?z$7kd+zZEm+p=Awip}#@(o{h{^X{@ zV#B*>N8G!%j{f$cHH(K8?LD@6Md#+D%2(dsZ+6Z4S32A^^y}RV=1!Se{L-qc7T#9> z#65Q&ZhUgisi8Z!o_?_PecPNfXAk@$Z{70V$-NU!ySh<7 zF1zp77j~q*aQ$!V7OnJewj^A)Ipyg!mS9n<{cXKBC*C-^=~M4~d_~5cum1VlOZ&@) ze3kd%hfggvZh8EQwqMTxlUFor+tR5gzy4wUy(Le?O*ePe-Sfhx z`8|7VlD@dH=QmxK|2lC>pEa!y-?(l6)??KPpAYOFXDwRP@}hN{-+2Cp(F@nc&)WLy zKjN?4_?2n><|E(qn{w%)q53tCJzTz_&B45;7gfCR;KPIGZ+Q9*=kGuFzG7HEbIWh< zIzHm|Ntu%`zWCiIwwl_G-=nH@(>?yoK;3lp5F_}pa6t;HFl3<$Lk6obq@D`HVx+*QA7~|lXVQZVAj$#%nACARNEMx1f)Gx5fm*xwY1R}p+3mF9^ zkF&neHSmQVDwXbBU+A@8uyfDY7y5I3VQAnBwnEZyt}kL5_=26X76Z)~&XCBG$7;V| zDsAk!UXE+vkH@7Im)H73y4tRh1qNBt?xDmLt60AhwKjS=_ZRAkwb0R3V! zOF@XT+*a6>K=fjQydW0&$V6>SptSf*c~!f&ri{%ayftNL_&%$BhCP#=q=>l!@+wpE z!o5sUYL&&!0vaq>hQ^A8YfuU<*U5Vt=$XM-U7jCaGRO`{WUD}#WsH%9IR$!}3%Cw;}*osrOzX8sOODXthTEE79?j7~+ZHK&r@?UxrlM~rm zo?cmtBNtI7^>j3Rk7dia(18mS7#+Aqfzg5YDlj_m+X_E^jRhVYdPhsyENdw<>|nAW zw>)%J%s+zAiP#)B-tX`^t*$&vjtNZXezN@*V3y^c^$}#`$UB~Ci^)`0SCtp-kDVDc_uKGIq1o_GvzW=3Sv9kl+>v0y)iSW}(JWPu`VQl+5@H7RBESBu*e1(NMIlXcf7MgnHnN=2= zH7snFU67MyHkr)1CR4WAY&PZPFp=IVQCc=H}VZ^y1BRmW&+Z(9%plxMYc%L}NFfV@4mNsXKU?GOEVv zvU#ejjroB}htK1O%ejeKC>;3Y^I+ey5U&$?R_zV7+gv93GfjQif9XmMrOQ>9&YE9( zLlrE`2|fAkR<({;3ugy)vQ_wOsF_vcFKe)UD;b@)onuV;>y)JrV6w$;x3W6@|CRz& zc*@u@gN&98v&op9XDTZ5`XPAE*=ri)j8gUH43k{@qRPHd^%}tFx6e09z<&{vJ*;wi zDz$zg`C~L1jf|In=>s(Gw!8=cnhO^sP9X}Tq1DFOHDGDSg*#4J#%P716siCQKenF{ zta^w$J0TbjHZ>vz`!cDvP$-w!C8L>q@Q|c0S3Fr5Y;mwNN^=s2 z_{8@y&V(L=9=B8uffSa6L)OYS1L|8oRkx>KNB26iqBt;aFPrdZ{y@} zGjl4&wE*N3wu`fQsxy2wUO2@LH~sY9c~dbq$hOf)2eKSurZQu_!VKKkQ;{W=DJ?A& z-xZ48Mh->@`Kh4d!Bh+l6~05Lbx`JDSY-zyD_+mAkF%*#$xNdQ?Li`5gfgoeQ?XWn zt(WxJdI_NpilKKD+h+>mIlh{0NHTa>K?&1}S@k;oRoqS>Xk#0pyD9gLI&}kAXynfl z(R0f2v#^HY03ax-@a(;*gk2y^3N3b?vZ28Z$}H_>BD$YQcz}o=B%+6u6TmSegO-oe zsI!Q~!Ho%_RIE7tumys$Un7o;Vt*V;ByLG$nmYUAG9szPWy-@*$`=!r`!=u$2R)&W zs9`kil;5dPD|O6y7_nIwztfXcU^T>^#Mu4@LCa)fk-Yv zG5`ndv8@G5omKtuq&M)m&xeP_cJ;!$ERHJ&5DxQ0cv%_*QX0IV@FK7aj_B?g85q-? zHitjc>#_#QJ-+Hprn#m=EzK}NRX1mv)6MW*GX}zS%>dT4F`aOFy&jKC?WZ{285iz7 zNVdDO7|${A&9k1xyuQ$UtOkVr+Pxvjmj})ljl&_rX02p%*)uUMF~j2K%uk-jGnO* z{Vq>nGDa(TlgNOxYE01}=vc8uV}^|^D#Uz~iG3xQ)+fgl=YoXag27;+QgYl2xhPK< z^YM4gIY$CtQ#L6%N7!$?60lrtwPCXB^!gpP%xaI_p$vg2ROI{=f&x+tgN1B(VSDPK zx>!JRqR%m%Sp#r#0jAC}RXhTjxSV81k{UUOxxX9_ zhM+?o#wU5(KU6Z1Fv9{1j8Z9PJ*R=9upT1Q;kP>7euuBR!lxb?k3!)>Q&P8w2lqV6a~LC37+)j&7Z-Yw z`ka|fl;`MKa}^l1svckex}NBAIkxGEkg6lIkSS?!q&7pFiDhFtKb$ibwqylDSz-eY zm)j9Q^HD%-iWPIsB74mm2|+-Ncll`(n_ODJvYh|`BVmJscG!T}9 zKx{$Ob!GvK!KFIt3gsoe+F#L4uH5c@SS<3ug1kOCgZlK!?K3#9PeDPSK|@3eIDFMk zx78IxLD+mj5JQ+iL1n>4P!if8iKU?Ai=&{}i0Y{&1lV9zLOvs78%K8h2HSgC+;(?S_VJHsp zgW&>8)o-DFbW@&VHlt3J8|knoE}M5RWZrdo=E=q#CJKg?m~%`y?yhIOBRd`NPW+gF z)fX7yEO(fdDLjWtj?Thsl6=U;V8@KKvyjP~Wa2GDk+XChqK3jdfMU#-L+9{=ikuvtN;;1=%a|j@KEXj8I9)NREEQD~;`*YOB+o?sr&ywo2%^XO~V2F-qCy zdqiRJ*>A}~AHW&j47_tFXS8PIoDjkl+9>_(5+sIRij^n2-Oj?36ncfvN7l(QLfnsa5 zV~9M9kQF(+SgR`0SzSXb!n#7I4w2VHTM?KzpyRSFXjQQ>U7-c{=`1Xb#LIMYY(I1n zIU-gE3jz93T2tmD^E*8Q!^gN|w$MJj{e8a%UKs#`>{;iDhm~;np3d6%bf7{T?gQm& zVEjWNn4W_ndycy6DO4yOW@*isV#CyaMm84BvHtC{1iYMq1{cHzMqJ8647oV z`cPgJhZB>*(;WOK2cO|!geR)`Vj8T%XwxbT&0K|{JgYDk)u=GE zTosPtVCbgmbLfmJ424dGpyy68!c_{~DI8&dG;NT(- zF6LlZr_}dLI2ggv>hsYYJcffyIe07wkK^F+91QcmigN-7U%|l>Id~EWPv+n&Id}>O zPvu}M2bXcMjf1g#Nu|fZ!Q~uW!NHXr?Bw8S99+f0E)K5dU@Wsz^Yw7BmxHHsu#bcN z91PF8il>Hyv2;s)4#i1@v7AeVXL9gW9DFqgU&Fz(IQUu)p3T8?ICw4x&*R|hIQV)F zzJY`1bMOKVUdX|VIQT{mzKMfx=HOd6_*M?Sje~FJ;5#_@P7c0{gYV|xdpP)B4qnW` z_i^z39Q*(WKghukak6d+_Z(YWtLHi{(}fLskLtpwcRsEocr4hpl6$^N7d|&~9f$uZ z9T6gza6O|7@7MmUj^H3+*Yi4g?LIEJ#?&1(Uetvxm|HkHw{h=m=kUCwBdU~9(#txc zyA=2p9kD$FaQ#ExzMEaI>WDebaJ{ArpQZV_jtEXPTsygM-_S7!8@t}r5!>Jb*IPP* zi;7)u>xk`Hfa@JDuXi~-?{WF=(h=Pwe@gG`i0)P34|GI}6nM8TyurpEj?NEtvZD{z zNAjr-?Apt{vrh+0hJ1ajlbwsWKGB7j4SuR4xV_l5Uq|$`0)M7sR#A3+u47I^b{)_W zZIVIyLPxYxfxqPP{Ypo4z4H8P9Z|6Yf5W}=t&V7`^87npcuC{;98Z4W-v5!~|3Mwm z!^*dZI2sP?h?XnQf8uC9qLUq>xPI0V-LAZIl*9iE2mh)gx=DHGH(hvz{O>w~OOaj2 zxc86ii0)RNpWxcSN$#Cf9Q=ol=n>`p(_DG~q=9>m#mwqEF?zPmJ-cG{Y+HMF#c}V594v8gyguAV67=Ezm8cK%DoG!1w~h3~ z_Upiv%;8Dl;Km%zCi-w2Ys$TYd8tZ2jPEMkf`eh~SD&}ihtJV%tq(gOF47bHwd`u6 z51(7xj{7#1gWGekk%QAXxB~}we9%bMOETzJ!AZa&SHe z58~hg4j#3 zu^c>(gU565A8}Fr*QC84z_YI0$$Z`Z5(XpV23_DK9=j{ zy?$_2aPL&=!{<>ux#!b3xQc^u(m3`E!Ua1T_6)-1)`w**4ro)C$$PnPr*p86%NK!^ z>Y3O9eRzzn;bhtjJt0zrUA3I-s?&$Z(3$%1xNsHs&eh!WYq;mL^x-k_TD`n)1+Li~ z{a7f!Sk9K_>cey4dHV1;dmShDuGfe4xB1-r3-sYJbRqYA5eMJM!8dX6&HAu^{}$$) zm9Ja%;X}3V(93&0;ksKNK8O5%eK<1z0glcG_2IM7AL8I8`tUjGkLbhat1siq^(dF` zN{*f!NVdbAT3l%qPJnKN_Z-nw^{P1F$lCStV!Vlb{e zsz-NYe}@S@u5|R+F{OornO!^r5pz&(8akwyM+Ac_j|hK{3ei(JZ>{DL!CK2B!r!As zw2DUrQ*Q*KRZ${(^JN|p?8I6`Z@zpMqRS$f%_D$uSw#SUK#JLvk;VQun@s7JoE%^? zTsD00n1P-|4SXjlP?oe;AQL89XZ=z^mu8+70o|@8{GWm4Xh44&4AEA9vKA2>P8vjFw20bk5y4xf zL6j0LqD!=h;Of#KGDeGNwiXfmWEw zHMlgjh#HXm4Gps$-_sTi{!k#As*H{ucScLm0WBgpQ#FWoMT_WXEh2bgHHf~57SRbU zBDirih>k{ysQ1lUMDPLghx5nR_iqCqXbi4sw{c3gwsTZ5=PN@fo_HAO=aoaP!tr=lE1h8VTV5j^fZq9Mj8 zyU4Ic+Uke9o<}sSQIyqx=`1ZG`1*N7m(GfkN0kq15g|~3M^yPhw1{5UB0`jb22r#U zvhpWwgG7je2GLJZHpr@#T11F%;1N}=j26)|+M*#iLWAg;C~M8tSKA;FS-~T6^(~36 zi?~*4DMDC=2GOc$DSBEfMiA4XLG*N#)jw~ymLdd%@QCK^juO$r7V9;g7SSX;qJ=G@ zthI$LUeF*yD2f)*Q_(SdVT(-~M2KV2BH9=&q8BxY5Co$|^kQ^~ZauAKHX>+vM7RDC zCA06mTU-4IzX2kvGGyO*ca(_k%ipaj8e(^NMEB)KIWxX5f3F4+0)MoKK8lV<_vL@8 zL4>FwEuv4NMWmhdBjiYn=<{e1X=@GfN?Jr;M2G0nIxQjuJMoAft&4IvdUW4n4UZ5h zr9rgs?kFkxT-(cxe!Q9A(R1b4H5@ z(P0`yXQD*3_GK+1gqHD$*1jAqqM)|ZA}&pXC>W*cx8q^$ydObrJfa;Bw~em)cWlrW z4b~YAqGzHk+Dk8LZ6gS$;}N~|VwAR#*E>C^X-9~~;}N~y>4E5q_Ijs>G>8z$r$zKo zl!$itHHZ)e2t;LysC|7$l(qKyfuA*q5JIRybl`{RD0=UJcBDo8A&=<215u8&yYjWn zM(`q!XjlGy(NVN(ut!rgL_TT|4R%F|Xp~m=9 zMTCG&9?|<_qm6kb4BREw>z_x+0IK3IZ8s;%5b@&6!V-V?lfbDt7(G%-i%K{||RF~F{)bI-N z)I6$7Yez&|zzTy+g9_o;JgN%A)M!!7ov$q*qPclgbLY#tKokXBa#V{7!QecqC5qK8 z3RG+V)HYGXlJlt6{uy->-O%q94X+T2&ZFAUPZq#YP_?O_c8-Ebb{^HHe*25zJSzM>N>p>_w@>7$LKHtx z*%irvzekB`(5Sbr=TTu10FMfPj}q0U37=@F!Wse|75*M2s`g2P{$F?B9v{b5-+T13 z9*!KxPE6v2Sh5_jNp_`ONvqX5Ch=QwBFB!M7lb&oGqbCSW_QLjvyw#u~CCe()RL!8-hYKMgaJtoxgh3B}!fI~kl z6zDOb?!4zh&R^lo5DNu*OsHpW{3!>8BS$P0=rN&=FT8|!_`#kLoLB;s>iKriV?%v| zvlR|J@lfB0YpWdxzx6d%Dx8;Mp+Ju*)n_mLDpweA+=_()JtowSgWqarrNU_~77Fy3 zP(R+h5fL{7v*WNA3k7;isN)OYCY+CCq5LVP7*Kzy@gpxBuVkVAQd@{Snh>YGaXOQQ z@~6FHNF~nc<8UVn<kGeK#5DJI9kd=`AeuVpsxSVuf3bCgE*PW zLV+H$T!|Y5aIlqy@;3;?kV@Pkf^)Gfl)pnH2GsEddP8E+;^0^<3k7;i1&=SBJ`<5uV63n#gLI}Y^+*ia|iSSXx>=b=uv#fEyBD-1YB&qKW&zc9SaNrhAR0#tmdP9o4!;6-tWpNBe0 zLwLq=$R{sip%4Q=fVwEQtzP65Lc#j9zPOQ<3K0kdD0++_hJvFHnYfcTuoVIr zuu!1KR`6tog+lxT7V7xI$xKYBJMUS48w-W-2`m)oF`ue7f;X^GpvQzdzVHjqw;0hKB^w_o{T;qkf7cA8A1+s+3YZWUM!e;PLCs)Om>Llme5p_d=itF1)A2MfI zsSvb-g#tacR4;P2Ld*{q>iEKo^=wsdyZXcG;g7IVA!G;(1v;c^KRm5Dj%w9iDrNx? zXT%4}fst_2&zhPmzCo86AT81Lk%>c3^1Pk$VSgiKaOr1R;VM-zD4vWxHR1M8c$_6R` zZySUWXR8vMSqRv}!n7Up^C`BUK%5^y+`7=>)}4YRt9iqi^pQIJ7u4m1DTOdWEL2A! zFDpqe_BRg`mQ#o@#KLsTM#)U*YPo)~CKG~z;A`%rYnhjqO3Ye$C3&KO)g1g zsi<18MlytPQg(DjPjXU$cT!PxZA!Ifc#+;0A`*fyu_E;^4LVH9*DL~cPlz~(1I3E7 z#Znc`O8SPjT^ldaTy^v5-62vS0u?JoUr{xZ@B&H2NGi6uME*VE=OvTRpcz3Hl+Esa z55ATyJBWnk%Y?ECdPotuNU|(xCNnV1$t^OT7Z|e)5pD|%C%r1)KRJ~hNQJ^BRi&s- zsxwjLcVjeESeZreFIKX1)l_40Nh`*5SvMplcAFfQY3mn9`(TJrh*QW4 zh2BM>f!;-GarR6>Voh~_h*XG}$VzptV;9sVHlUl?Z|n)l)XGI#7saaZSco79*9bv$ zuRY7rWL-Xe0 z+zm1EW*{_gaHq*)gEvG9^%){>azP8OYqDClwQ?~bP1|k*s7Pspw3}7TehRBdf47e^JS% z9wr?4@en}~0G1WBS5{1TbiLAmSI;%B*(1eA3Y?%WcptoA!BhF}X z=ThWZMBjR?%jVrzeUWWl5USZ17p)8Ek*!N69X=|5XNY|e587u)XQc8)W@-Y1!GdHv zdgO?H!(e!~XTKl=z2b(|9Koo4LFgSfA!?KQro58d291c;3}DCR-B;3W(2LCFdGjTy z!O({Ki-H=g1_+z&GlVHGr@p~1oDNqwY$F z=g!kT@O(&F_UGxsJMUrBPYA#6Geo%?TIPPt1z~s}4k=TJ18W6 z<`^x~MtntlB*bF4Qh*g^pr{&Csuk+jx$a6xZN)-B6xKr_vf+vYR;RJ z`(wz!>Qk?=9Qw`E=dex-*Dd&R(NXPho<1kU46f4}PKEb7>M`EDXZ#4u7@lkJe zAM_ZEM?-V-!H^ul1rk0(c*}KCDwADO+i^*lBTC48LH%fmD7e3Z73I=kv@09BuF4J? zb~?6KrB}0rZ~+5X)9e2qAp+u34OYN)QYt%y$(Pve?C7+nE3#xM$r#-rbi_mFV!HRe zcLiH`aM6b^pWD>FcSU63$qbBy7M}Nq7zDS8_zY2aE(x91;uQ*WD;v_`z2~r13*2hL z%Cyd#Ad_SJ-iw!@MZG#b^vG?8*=)hxD!xS2nLKja;mB;srm~^gQjhWG-TP0mjB$|* z%NX=X#+it@xsQaD2iz6|hL+b69T^JG$3?m+p+zGCGOVAB3v5{N*2#LJsLT1$fsxVl zaIz>X<)mzcanD3>UqqpLnKg9cgu!MOZq$Krw&(dlkIby$h|H?Tc=PT(7qg6UeGkhR z^hm~;bojt9Y>Etb1o;fEnOwE3EOF)LvRA2V z{S3YGcWj2@t|ebw_?ykUul!wfhNdzN_?vy4qr=5cJmY=QjxLi5-;(i;5PyT)qkM)a zNw2XLdx;sc0sEAuB}+{Nt0L8vFWFec;QJ1+2FJx!z8J2-_Z^5~@TK<_hn{-=X_hf= z$zmCU9?3X6Fcg~8w}luSS8@3aVektST~62&+ERBQt*dYBusr~{`3tNauWdPBO{Fs< zDYo|&XXbKaea=w>gtNae!kuQo-DAEq$a2tQSbphk`p}6J|Hx)JE;?fwgC5CvIAR*F zo>v(<@hrE`9=EFTjGv|Z>_g`dha-A1Vf(Fcb(_x+Wvzd5Dzkk1t)ig9HiF~P}om!hltz|!0D?tS-j2cvM| zADy+KWRz)zZc>cYAa%y<_s(Tbv*kT{u-G(6CL#n z(W9SY3lT1+^c8Rm(W9S=%*)|{@JXe5j5qHYe?Q9@w_vi2L62tKKu>h&#Mj@>GRBpg zEMw548Ar^7)YEwA#EGpeW8Ck_Gd{632IHmo3pVe*>PeO{E)!)LgC5B^lMdg9b4YNR z*oS@1Hy`^GmN9NFWf_AG#;yB}>-XYR0DlmnC_u7MxcJnEqPU@?luF_>0gC5N|Vq{y7@z9A!xyc#a+siTrJ(}@A z_~cAI#$)sCWmaR{sm3w}J(6)Y6+V|-k8$_D_ja(1aU(Iy81zWSnTAUB1KeyWu0Q4( zKM-TKv;k8OojAcoX~JF0EMw3kHIC}g)HC(w-B0Pky zefM)Q&Tttw%NX=X#+e2>BxCdKc~)cG{0+u4Ra5698D}HTXVoiQWAp7?b;32{0^{iF zlx?6MkIlDFuo~k|bAj!;Q89MPew~R6DF@9^X68CuY zGRAPkag%x)kIlDhti~CEG3b#RN1bz7gfVw9!bmM+dND$HscxXpHT0X0Uc+jf6&Qma zsqt`Q^;l;aj|z;(=G*m1#@U8C^dEgQ%Qz=69y;;SH%BraZmd}>u#C3~jK}8N3z3Yo z4NL-!&9|3W#+TMIrUT%J!qreCaVyJsTP@>Tqcv_|sbp-nufj5ZqsRC*zw0yGM=w4J z)wq#<_1J75SC23A7~fuH99@qyjd-rvKCU`lUduSTIz??Ruj{#H`#6`my_Rvb%Z%FM zvIyg&Y##5ZWqdTUa5XXqGB(@iu#9)sGIpXFM;wV*L}RW)zpIvUbceo?@$uMfpT%mt zyOyyPt#Jcmr?J^SZnU_kmT~lGv5}1wW3zo+FLQ4#uI)~i@tZuxclh;quI0)w zWzMzT!!mwzE#rHl88aK9TBq4QZrw=|8PE1b zuRCQLX`N>KI0uriWgP85qQdjl_0_X|Hfw6Rma!da>Zpw{bs5jK-N!OkJjQocJ=cAa zjHC7lgq?I!J%)FA`_eX>6-%CwZ1q*dy*aOnAw+z+H)O+0L6GD;HI*7jr$&>~5@JeR zv?%MS&DmpfZQPYBMMfNK>;XMSPJ}PE9v1Y+j-s)-HtrgRiCV_=8iqx>WOd^QkAwR&lE6I+>VB(BVBgOBS4l?kiQB~OgIz50Bv7n@}%fmybMa%U@2*g3wk zAjwF?A(=&XT!$UZiaK`_7O=_?#Ct<dHsL?cbZkk7BE4FGK*n`9R+n5EL3?R4s2d7D2b_&gj87S0l%pD zv|;BYDuPgHzeP-_70WQyS9k3F^*&le_uzjD4IP^WQ=WwH^jy@IvYL?IN{#2ECrV2V zn41bdjjLwZIf7|H#Ke+9RfSZJO*kGL1r~Ph^_VBwyFBB$A%S890$6&iJwG&DGLY^xWR!5gEY!mM?hAXx(8 zk{!t&NF!)6Jt&e4f+mZ->oB=43_$8eeh#zN?Ve2cctx&XHlrq6mtd_ZsIcf@ZxbZ* zqJzbVK(+MRP$xQAG@nm~xWTsz!e8o#HVZA|OBeigUW7+GJZ5HCU+Eo!s7xTU#^PqW z(Lp05T13}}Lu`77An3(TDPd{_#XVtF%z%$4FBiI7K=Usb3edWHdwX#e(Ejbcy}i9*SM9u$fkKyP<#aJQB`JpO-95ANuvM`U z{Q0^A`*E(P>$+Wsw6c_#GRuMi>Dc(dwg1t{b{+0v;9)?}VZe6g8YB`HKJ8ux0P^8l z0eQK6|E4%#f|@jYpV_--Kda__jFeCl^cpqm0eyP-Tc2cs?iYYSj|=n(7U+RmpijgE z`sPE6SDqIh)Ec;yvI8Ab3z$QcyiUHcEA0Cye)HKCO4>v&wQ%llpdw+pyM!zk)>&RPWR z+Dl15oeV*p6;RK&Rk>nm&P-B9RP};RBT|%YgrKM=`>LHtw#QF)QwXc~d#vvB`T%D- zT1oXZsDa;q_yA0^($fM-^E@_Z^f>|htbwFeNt%YCC(DkRG%UJW71+o_KT}8}I698Q zyvN~wPx`Y`aX1hqMCcERkm)#(wW-2*JR zeQgNvM+9L04zdu?u;%5X0_e)J9k+Q2tDcVuu)@V_A;JpIgfs040riZkY2Az1LU6;f z?BfD%ciB$)c@_yQUN*>jzfTIl?ZpY%N@{ewnkegvy_z#t$%~f_vT&ag;JS*MGf~Oc zxC^gbd5A(irrm%K%s?m4N8CTZT1N_Rh+pc1@|BMItfY&~Oz9^trks#s3>ehoS;QtZ;K^Fnf zI5r`bY)7?V&>zKsU>ml_HzO#=%S=6b;EWFnqEpeQ}r=#;V}QG z2J@CsOtHGdqEGI8`Y%|EJ}qE^F3Q<$RUAu_Cshj#Q9aa&b9!FSqW-af3VJwdJ^d$M zILPgL`x6oMg@bh88(ZX8>J@9UWLRp_F~oXKOVrsHaEDc&5i!rcfF4$5F;^%?C0UW` z!9BU-aqd9o=LI;>Ma4b1dK&LIWnInM@e2YR=px+88KYtv79#G|E$+{hZ`#6Q{;7Zo zx`=rO01aKrqsv#X4n0%8X)_D@#ahtKp`c=;;g-!Oxfrfr5thQR4jelgyWcYuD?HI^wY1D?ZnZFYRz2IQ#Kr}fPbZu zx{VzH852EM9GDvFNqwJ;d(yp*FcPK->G(pEYw+d}NeQV+dM|`5NV=Yv8Q|}Wwn8u~!5YFX)0`xQ`jWISF3Fp}{Ke)#lGlag zJjNXr+^RcmcY98ETC>z*MY5E0J@0WDTrVNy)GM#Na+c=-4m1&RS<`rWp@lrrOwJ(V z>5E=D)k%8rIN$$Y?<=Q(!TsrIB~LVkCut|A$ck24Ysv3gNJo=JNNX$UByD*7TMOx2 z^?VEI?4thq-&;s0`42q)%S+luPIbKU$}6v+mFc2$sMlfk^0^k$dx@OizQd{9aB#GI zczER4{$1HUw_bDg%(Z(DUU&WWtM%QZWBJnFox5%{uR3^e+Y2p$=fcF)N&dg2mGqK- z1!iXG#`N&+Yu|M6pp)Hwg}Qy;jk~f(uXiqX)a=ozy}MPjY)>mYilw*eH*R~mg=}da zPs0I{v&eY5iJaX!|BXh^{|)Eu|AzCv+)F>! zg!kj=RzhgI)E>C#W-8R} z-Pe*+v}x=>A{5FMhYbvv(V*I8tx!-c3PA|@l9zS(_e*3v{X;^Ype^?}``tM3`Itv%8|3?csmyk|0rqsZ9 zfO01ucj0k29`D5CU3lDs$Gv#0BBZx-TFqmX?AS~v^j}8+#s7h?K(?Ta!mImb7CG^H zFDcUazb&sU!{5Lyqkl^^puV>WE(BI@emxl%({%javCF@YWauxuwYAAh*2F+j--=|d zNVW=SO(=erY8(2LYV{WkYg)1t)w0nmh0s@ef{ zHWLx58Bi^N>acaAoK89huv)IPq^oM-nwlacYXMwq05|B1RtGCmv{qoz*m6{~!K5rx zHOCu}s|{H6T8hrRot{?nzF=596>Ju%hZozAPaTkW@D5?H$RJEUb?@?0y_b93Uw&YyoM0+oQHWH^X=Akz#mVaMaPhL(Q0s%(Em_Zb3Y+)ZM24A4Ei=gsH|@% zv?1su?}p!l<0q=S4zCvQpCTb%_s{)z0xxM5HSlZNdwmT5nSrZ$AtKi$Q_r2-8 zC!hH3vZ^{6u4?n?Rdr1&R~X1CYOavVjiz!+E~QdU7oL4?w)?{6)$~xfrY)yk(}7%e zAU86SQ{~*yU@n`Xnvy%F|7GVrKlk#qnO1PrkL4)Fdqj;pn}RajdV19*u5uTyTz}tt zmNy&IqEfVu270xfUcJ_&aznWhIhV@h1~a+BaBgsfYTA1Hy3Bu$EUy>Z8?Nb!)2r#) zR4z4;ODnmdR4y&&(gQg;O;uf;*nUaRSC%(Zw}q?PetK11LsiY@cH?$LckE-oL!%_vUa_yHBsGYf`!4ft)Po3fWwCI5(QfNmSDV-~QdZ zKG?OqnR-pQrmIe`rfX9{{rht#Zy5UI@@DFl;i{f_dR1MM z$_?bwBe~QtdJv-{ImxZ5O+bB*Y2ca@%#Sp=eLX=##nr9DwoaXBsHffxy(Rra5OhO6f!)oNlV?8 z3%4v*A!LBFNHOPA8QpQ!YXu6enMBv)GA+p^VE;O{b!z4 z`qkdoBh{S8%F)% z`>Ux5{0!7SQNzyGz?+?Odev(k*A8Dtv#!Vb`1gl0%kQc$tWmBlP;TAnRnB$Q3zfHA zc;x7F%g_dObO`=S32N$nUQJyU)YR8_HB~`P{X4Iw4zM-#XiZI}Q-@xOqt)}-aqHjL ze+1QYg+`a77psvTndYSXk?)%7%q}&>nI!G#6qJ2apzNM$>a2t2iTdmFJbm8;eLvdj z`s)O!>xiHulr>+p2>#S=(P|e1kXFjDO$YEgWM09n0WYFl@%++d~&OV`9DI9Y6Rv z4#v^NH=-C$>R5kiQoAp)m0j7= zOovK^gljOp@BO=`Z9IJedF9b2vWB?Has}0qCw5kB$0%XzmqQ4d#17{lx7?}|((!at z>#dYkiIC2gql9!UOg3SrySI(D0tFn?VlY%fdj6m_S9Et6xf_iRxdL5l={+0$?N*ji z-Fx4^acg&1cUND(V;Fir1?wppit6so>cK9p&6{eVl06%fd19T4C|FeyXC9B&uzqyB1OP)~WNxBLhsM}^#J29;}6Gp{J z$dL(#W5?+wu-G)Wf)GfRIbQLY<8=dss#~Q+r9cCk%}#ymy}wtrbxI& zaVK5br}F>*RWf{q_rNpk(R3BnVAs`S*gA-khkQZd@hkcG)=-K2GsM(jC_nQKNnM%Jo0PRV#DYkaIJCLxhY1rdtZ6(=H+x{i1X5!UPYZT_xSMvn2G`2lGoXKVM?Q-VOp~CRd?6Jbd zdoSLR-#^`d@x{B!<2UR)aNYFOF?sv;LSg2BBn@qAC8YP9z;!Wh3)g$}b_SFtED1If zGVmG*)eccDTf*)Y+IMVfB9Gkvt6xq1_=|7Zvg*vEn~Iws?fd0Dmz;a^bDx&p`0KBK z_r&vmdE5M*pB;SmzefJ}(sygCezm55e0^K%kI(z-$@TB}{vF?W;f0^QuXD#+|KaRU z?s)uPfB$zk|L~g6Jb3q|BdJplubg;S@?w@+aENe|h?f!SCPv-Vc2{@$(vMQ|CSPhlw4J zjNSguPkgWQcbEO9`OFPijke_p6}z>uX@vek8=bc_rKl#-4yrbG^HR&G|r@S-K50~t}!_v0*v1wS2Ty`wo zr(rpqp{d6LBrL3Zl!B7?(=%^N)wkeEdn9rd84KQSFGW_(BeHbFv81vs$&O}J<*#;S zkjQXMpAQtSer=(^(Ld0o`rh4m;M1^FEl(7Ta-ajuLl2YsNg%#lvLr{f}K$-iq7H4B}>-JPCue3_&BuOmn`m`3!$rt zl7ypdeo|KyT}`pHL;;nOK~z6(l(f|7b<6RO#3b6Y!_`Aqc=}=O$33z^HXT=lR!3zzYCJ zz^jA|pD-NTG#nSq*A-RYC(ydB1-^nM3E9JvY-lBuhFJ@5hPTgOrZ%VU!o0PShbktY(8tS8j6V`@^d?d)U!5=>b$fDKZ9`azr=eN&lsr z&g_?@z^stKG|hfJP0t0$mKtO?EN+^nq0;jL8snOfoA}7)(nDg?F}XH|a>To8p99&2 zvu2(WzHBJN)^LBx)a`!Do-+F}nD>cjNtxa8ZvOY%Y~ulU%Oo*uv(PVD)$#++Akw+& zD(t|g0BD7za|QIoW{Zc<&cifV0QK|GIrwKG{iFA8j4pygz24FxT8GU$a1R@7|GuCX-wwG4!p z#!)S_k-nt_Q=3}JE^)mC0mVyDkP}YH3|x3!l)P;P{#vkziy~KjR$aPXrK659y2yqZ zIC8Yn45=WM9mx);s4CWQf3ajHZZ)bM6F3~^qiS0!*xjGF^vxy65t3t;W^#5E@|=y{{Iw)}}iuJ6?D7EE^@JQK#%BWlHHcEw!K>^M$5XrtiIJXrF+Ah-H+FfE`*N`hp#A z0M=G5P0|zG_ztq!s^!Q*Cjg(@rMx{MS=F`@&5K>iqyG{p0mgQ@WCndT*Z`9!rln0u zj>@&36u^)tZLPr7Fx#$ajIeDU=dXPQp*jAKu^U|r@CmS@V@ZXAZcHOMX+aAHhY%$o zIq-uoyNB=n^vIx!S+pdDAJA3oe2w90T3faH znF$6g!b}BSP86bPU6v$?NrH?-2VYlhThg^+P-3BmPw>vn`C_r(*k!{AN(J1r|BWmM z?Fo8E!Rw&LLty`{kBpKJ5ruDcSuPY=@9d>x^q@R+S)P!}%v&muE-UCdF|R3WUDl?V zcb;`@l|`kRy2BhvmQ_0t6glRfbd%(XAjg;w6wP905GY}Kx}Vm!envsmiYkGxF*FZ? zkGP6X^_@;9WXTkjz}r%tmn!=bp3}E}KR&S?W?}<&vn$1-YID7Oh zDOKwm6vPZ5R`IBx^79mirRNe=MGJb_U?04!Da&B*%>kBlDR3ZYQT^ApWr}rEBr67* ziXh8i%;1Qdr0808J_Vg}*nr6vfbsU>3Pz3jxUy73RoF~IJIFz!(E8S*#lfqOG+&sZ zNezw3WLl)B(+LEk@Uh%7=e|SBX7~hj0+6^=(H$*eO15oISdtxNnb!cx)%FX;4dXJ} zW(R|G)B^fep>-s94^uPaypkjbxd0s)5;v>tk7!F3Ta&p_6LJGzxs;=ZohVvHCGb1` zxUx!CY}rhdq#y+kU14UHc}i(finS;OI{21F|GFwDC<(P_skWVPs^u65TZKeg*-M4V zY99>a9wD6%#wJ6%B_u0Jaw0F;*m~ps;VnevGRkV&C?VZl&XV4o`Y%VnjCaa{Bq@TcdSY|7|EkjRmG>DRVCxK zr(A^;e7o{s~2Su2(gD>+*43@7Zz9>m1tq8u6{37Yos*`f4(LR`S ztW+&`EElsnvF4}85_0K?R0(>nsLyuE7J68CiynAMDi^D>&~V_c+hzO>kTDaIHw;I$ z7y@SEDt54N1Hr)kNWS7Y)p7t2!@r>onrRE^z}ud&(+MSS1%=u7b?iH2FLkVHlIWVTFwq7+J+hn^N==B9onR?Qip(ONVW}^J8goiZE+HSHi4tM8P zFp@fANrC^SEmk!If;wdeMMM~3(\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack passthrough=no +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" out-interface-list=WAN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260513/20260513160002-Diff-Config.rsc b/MikroMaster/history/20260513/20260513160002-Diff-Config.rsc new file mode 100644 index 0000000..084d320 --- /dev/null +++ b/MikroMaster/history/20260513/20260513160002-Diff-Config.rsc @@ -0,0 +1,54 @@ +940,959c940,943 +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=12h chain=input comment="block honeypot DNS" \ +< connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ +< src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ +< in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ +< src-address-list=!Trusted-DNS +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input comment=\ +< "block honeypot ssh rdp winbox" connection-state=new dst-port=\ +< 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ +< connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ +< src-address-list=!TRUSTED +< add action=add-src-to-address-list address-list="Honeypot Hacker" \ +< address-list-timeout=5d chain=input comment="block honeypot NTP" \ +< connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ +< src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +--- +> add action=accept chain=input comment=\ +> "accept NTP clients on local area network" dst-port=123 in-interface=\ +> Bridge-LAN in-interface-list=LAN protocol=udp +> add action=accept chain=output disabled=yes protocol=tcp src-port=443 +963,973d946 +< add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ +< dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ +< protocol=udp +< add action=accept chain=input comment=\ +< "accept NTP clients on local area network" disabled=yes dst-port=123 \ +< in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +< add action=accept chain=output comment="accept WireGuard" disabled=yes \ +< dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ +< protocol=udp +< add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ +< dst-port=29185 out-interface="ether1 - Unet" protocol=udp +977,979d949 +< add action=accept chain=input disabled=yes dst-port=443 in-interface=\ +< "ether1 - Unet" protocol=tcp +< add action=accept chain=output disabled=yes protocol=tcp src-port=443 +1000,1002d969 +< add action=drop chain=forward comment=\ +< "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ +< connection-state=new in-interface="ether1 - Unet" +1008a976,978 +> add action=drop chain=forward comment=\ +> "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ +> dst-address-list=YouTube +1190c1160 +< add forced-ip=89.110.101.17 interface=WG type=external +--- +> add interface=WG type=external -- 2.52.0