From 6636840c93387ca768793d43d64cf73185f6f7ef Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 29 Jun 2026 04:40:04 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 29 04:40:04. --- .../20260629/20260629024002-Config.rsc | 3692 +++++++++++++ .../20260629/20260629044001-Binary.backup | Bin 0 -> 367956 bytes MikroNUC/20260629/20260629044001-Config.rsc | 4912 +++++++++++++++++ .../20260629/20260629044001-Diff-Config.rsc | 3 + 4 files changed, 8607 insertions(+) create mode 100644 MikroMaster/20260629/20260629024002-Config.rsc create mode 100644 MikroNUC/20260629/20260629044001-Binary.backup create mode 100644 MikroNUC/20260629/20260629044001-Config.rsc create mode 100644 MikroNUC/history/20260629/20260629044001-Diff-Config.rsc diff --git a/MikroMaster/20260629/20260629024002-Config.rsc b/MikroMaster/20260629/20260629024002-Config.rsc new file mode 100644 index 0000000..1bf4cac --- /dev/null +++ b/MikroMaster/20260629/20260629024002-Config.rsc @@ -0,0 +1,3692 @@ +# 2026-06-29 02:40:07 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \ + wireless-protocol=802.11 +# managed by CAPsMAN +set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \ + wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/720/6faffeff\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 02:10:04 29.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid_duid,clientid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=accept chain=input disabled=yes dst-port=18880 in-interface=\ + Bridge-LAN protocol=tcp src-address=10.30.30.0/24 +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=*401 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=main tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 new-routing-mark=*401 src-address=10.30.30.0/24 +/ip firewall nat +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroNUC/20260629/20260629044001-Binary.backup b/MikroNUC/20260629/20260629044001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..886b77331fe6ff2bb3f091879d7a6299171fb873 GIT binary patch literal 367956 zcmeFa2Ut_f7B)OP36M~v3kYIB5G;Y6o~S4tQJOTnm?V}&X(d&mcMVD(W& zW2YJqp&B!}LMh2s>ub^$Wb5RL9FYCA+#QP1tAn;ickiM=AR`EG=!`W42KHznu@RwRK!3Z;qnPCe!v&B@u~?jw6VH* zL~D(0w1a+ir6C6O6-dGzgz%P%7!;!MFS5J2rwk$*Zy;+nzR|BYUaaJE1-OFClFE4s z7Ej5O)Y^D{t&QjZHyb~=y77Z|*Xa3I(D(>L&m-vh8Y9g*N1;z+1$BsEC5I-cG9@Jc zPpB||tx+_`yRw4e&aAAUudt8q`HYH)Ui_xFesM&0x6FSy#kQP^8dIVt|L|I-iB)dukF2|)ia7=@&0v54t0PSidO}6?3O+HwJetJ> zX)@E|6SBi2wc%MY?GknTj$BTpUX~M{9m`HvwM|l`w(l$z^E;`-0v=J3M>AeXo4lAb zX{=7n;rfT=#e}A2M|W)7QJ$I>#fju5<@MYS3{?i zgit?(u>J_4LNFR&I|>o#4?@YAAjGhyBgAl!BgCMjBE&GY0efc;&(gt!so`rT?7{ zs-rdBC3^(mSxy-Jg*14Qzsva&LQtnY1QWn~aazauP` z;j(#Xz4`l|na`(&D=UfKMpE68Nz2@@*5FkQfsb9abZ2nntJ3lw>HN zZ&J0I?5vig%z0${KyrMN1|-KOX=tl}q#?7Aq|Gpdc-4GhFj)+p0@En7f&rz_OMopv zTo^(gG_67+=hv2p0(r{GJT^7+nB;0zdIh_-OjO8JQAt$9s8NeDTdfutG7#KXaYlm- zS7nIc%yUMKJf>2KEIm6*SX(X=$aN7jA&;sC8%j9}Zwk!>XHhjWs z+`~~cClev87eYvf48{U_*mFWRRc@T<}f~xaC`L*Vu{5%iL<684jf1U?;|2_`|rX{U9k8vq3 z$;t$k1FAz#ss*^qN!1KpX^jBvlePeW6DSG>g}_Wkdkt$s1j|muhU!THSR&*>S7quI z+DwJM%HSE-&PEorl3b&H^#BnePz>MQ>jYL)=EGN zGSehFrYud8nW~UCV`ixp5}ksnRp|5*t)8h*Q!ow7ai%JhsnN<6TBcsZlw@V8^N2rY zDsq`Rg&w>Dx~>Rea)dx{gU-fm5F&=KJwliRLZH(?fnm-FVf7439vw#rb4LhkfDqX<1W%ZU&Ir-*Y=pXy_cZv63ScZoKxRf^I((ra z1OQi_K`Lbcy0B{2AVk0GO#o^}AfR4%0KC+b)&}3pDdJ8;r>&8}NWUSiC)^1K&G~^< zCd0JabP&@YtOpnX26;C}h`z;wP!;sJa9B?o{%(a3y~ksOz`!76gTTPpf`LI!aB%^y z4#UM2A%?jdLUd}>XVT06p|0&2r*h7g(o%$9fLa)hNvM=Q%K$n zF7Z$y`DtH+4y!?j)}TXb(7`q6Si-PLGNWrei>g6K)}Y(epnYr5J~e2s8g#=NbRE*) z)GJ$&tdEBWajfMj8}E5Ar#nzpf3bK3Zl;$f}vd$L@%~SXb;7Z&4Y^QAZJgi;qMKphQ9+;o6;O1Z>k|(BS=R> z$OrBSQGBTePQfHmhJwGT7%ngpIm3V&K^8a?zKnv)XewfujRR^tTv!-lwDf~E`a?T# z3^5$on1S1gkYF&idh`KIGHS_gf4fX6|Fbf+A>5Oh3O$Q--~Ro=rT+7TOZ(3ZSesmx zR-sntbVlL!_}fP=?Vl%H>VHPK_PV@GS(;XpsmZRAZ`Z$Fz9#=X`TmCnuXUP6uglU@ zDF*4^AzQ45C8L9F{pX3-jYMwL4)VW4!jzg42E_6|D`5wauw0Xy zSyRTczeC0~@fZ>9`{&8n>_0P#?KPR|JXV@SE6N4#Psy zNW)%)0u;?*61y{8Q8dRLR?iLKLPyBM95z7s>-BjFxGU*30q2+@lwb-J_>(Dw$AWMl z!OEWS#};}Merpfp3CnXgxHNs+b^RL9puvymTfxdNxkP{&cF06r(TA=+Ns-76|vwD4GL43)toZ;ROiY zLFkbf9pE4`Y~(=hwT}?UB27e0by1FUPJI`quSqQjpqp^y#m4{SLU6oVwcO5%=VFjENB2 zCca+e^VP5H7cGsQct|*+p9hR}6Nx-Sm02q{z(3(@t&N+*3A8G1AYN0Gn>Lbs&(Ymy z-%NL@IPcPAY`aAt%^nT#?SHeulyVpKl1ujt+^jGkdc0x%wx;cL+xK=Z4ap_AA$;s( ze?c}7BP7Nw$R;q?m5>cF(IHR=+ruh646;d_W<4>-;q%~#lA#NEqc6>B7wXx1?LEsq zN2Z;6Yk%YU7y~!GyEk~!vdt5xmM0gC-gVi_61bs9tJ1Zan4}Phh5XQ2--!o8gH@gN z4MPwEWYDS^>buEih-?3^w}hRdx;~bp0OhCgD+c?%+0;Tc{%u-Pm<_lM**2H^4b}%a z+T|}!h#1s3S+yJ(Vq^eADN+d$E&3~tAnaJh(Ko}#6gV=e=7{3cDkX?24XJ}{@YlBT zlNsk19ILcmr#8jvX+@(bQw$=~j(vQ;XR7xBQTNb=-Lh5{0!L=i)lp2C8vYWA#5gI9 zL14H;4A#ULqaY>>F&zn4EqL>7oLw3^1YEwc;aczZT*jB9kE{_w#+81SR-;s@2?YqB zo8|0<#+S?YUHGr3%cOQ~@xM>7W83PD+@MY87ah{01dxPww5Q4lsh& zrZ|&I1DwGyRT;)0qVoOY7|9BhSctLfb41?p8uw6ZLGdKpr&ztZXUl zR-|TSOF`%9@^pGd2JDl7j~{sl$1cP<-~--WzxBX(}U<_Tjx4avIU-q5g-)Waes zqpd6~x~ZsRP#la{b3{cLu{&?Dam!^djm}@+yH^h~w{bTEw8lt-EilqxKaDil1tVQ^ zCj`idLzV}TDkHrLgY>X-1%Y)UcCCOVBL*-aAqd?YLSzs=vSDOxKV+lSk_{sBhT14U%SQb+8-*~oRoSRN%SNju8?7oE?Pu9cYRP6&mCb}> zkmL_-GyOIjOgBTbOn;Wc>}NU5pjQc$1A`rggmJLJkTBAa$Vfvv7^w{qqO%5OsEoAJ z>cE~x+UtE#PZ&Bfg*F4=1C;9xg^-vmf!x3WLv0!iQ)GxpO(37ctv5*n2zo{WH%Kah zu}AWAjZ6c7-b03`K=)iFX#i4vV0V2WY`A`{{x z%uz^8K)gnyXLbr3L_nQphT0&Ei3S?*AA!aojE4qqPBTM@Uf`KL8g{W5a3Jh}D|SN& zHn;WghH(yno&wP{>R^QEb0GkP5dA0xp`q}Q*eMN_vO0xXgWa(}2)~BmMc5_02J)2o~VY|DGYaavf}V@G0w$_PiH499(?6+xO_2R-1%QFF9)|VH6ys8 zV5TNb2hflwRf=dW?JAewTDiYxuQh3(>Gd1tzL)7O)a-^mrTu#AzN3Gu5k9Fp45@p33r=-`NKR>#6+HC2{(RXAg zVs=e%wdOak%fer~6te>7Zyeoy^A-y3(*6Ft{J}SNUj49_KW}05`tDDQ%J;u5n)(Oj ze$wXAxZnuZ>zVKFqnREHC-^jbSg;S0HJ92dwW5*}B==CCCkj$EV=3vpb@Q%c1$rHIc_;v9((7fB?1 zIbR?U3`dAv>yRD+RrE&4gDK(R9D!8AQ78p6p^Ssec{op~;41`ti9pO1;k^L8kqS=( zJMTbWs9`T!QbGd5pd@LelB|Pb1431)st|=%&y38J*`wH`fZW_%Ke;MZB~xhielkr) zJKwl6i}+m8yb|VKDRQHwBZgco7vlp+j6w_Dt@)m~q+ z;OzVk%i`vZvB)hsJa1vS-HAzEFb4A&HhysozB%E2$UYV7F!S~(&uc?X1JMA+i4(2^ zcilMNqF4Cs^U8xJ>vMeSj_EtgePX}z&28q>FP~rC$5L#nC}`WQL8;S+9hMac0Vs=05oN*^>SFX*jFW9@mmzIRubmT0}c0PA{-p+{IK0V(|<9>*w z_ZU%@vZ48)U2~VUjq2CxWNeB$r~90C!m+cidfv}C;ZSdM&!ZK`*E`6a4t8lgi?i!h z`KPlM!DY)g2XQW2mOcM4;N1369b0d7eHiIGFY7X!cJ2MTy04e{_a$SsQyh^H0}8XT-*@d2?eG?QLEjeZH6Tmv&7D?PhH~cd+8ko(3I{ZpoO@ zNB>|-iCgkvu-c9cH23AX{GGkU9%o%=kJ=?h4J#-=sO8-M$106 zUVLSP@`hA-{&Z&0s8_6wk8|73p4sts(@whs8$M(C7KOFSOB~l|%FV(yON7r~oX_h~ z_xg&5b&hAQ2z3(qM_#@a)~d-?LBh%Aai;J69`5T9sg`&+pQEkp-LhHp!t}*YRy#U8 zx;SjlR+0MlSoQEq`PN+T4)|_YulcvGKDrT+zj1>X-2{Ki+F`LPY**aYrLUh%!R%HZ zDn2lUmomz{<$*`%CQi(_4z?2%M3wE_lK`9M3ETO5LL1cccRJ2<`q6Rng}dmZ~*? zmA?_S7!*tdCow7^J|QTfO%R7K;NToQB#6yo*MhW;(eNVLA-ssXhD2JHZ+DnBO{To* zvn8%s!(%U$H7%XRe*kGkaEL`P8|RX1U<1;^xg4=^5!~sQz#bQ88xUO+qil@YH-f`V zj7ng}Cj>DK0%C%Mm?1&zzf{P_-rGoH7j2hmo|VKW@6Yh*+s7_>_{%pR&p)^|X2-4hBqAF>$t@owL4es<)F3%2~s5`Wx@_9G&;hjQmtytIG`gNNx7t)1$ zWLK|;pT81T(XZjxl85ch+}qDjc@`O-SkSC^{~P-mlO0=9AI=qDRatWOtghQ3YC=SC z{=7po`rR*!PFx*4b;%yuAGtHmx4C=5_GXj9sV_pZPPWcTKOGgh+^hQ^Rz+XKmn>J0 zKPHV2&K~z++NbW_*R7Gy!G*h(2X6?kpWM+{xQtqV=d z8Nwq|$t18=(tVTgyJ-dMl?V>ZB0LzH-hkEu7vsV?{5jkqY-2H6HTRdwP~!nm29qYh zdANlsqsNdo*pRPk3Wl4Rnxqb}#4wz0Y6=9Unxa%aqkcCr2?$#9GV7@CWYy$+{ny=} z8ud+BzVf)@>$VxDGlpO295VD-bX0Q6%02rxnlSx3ovv*Ac21LvYbLHd?ANx%g~jhQ z#f`ty#Od>#bEXGEQffyxIE6A9L8>HCc{b>Nj+WC}H-9Zs8eS5BLlk zP}YCs$obRb9~>xtD$H;4`9)G^k=EuSvOgK6yRuBkU($GhYDP}!b?3e%Wk*gvPo;jP zb@r&cw(@c78&`|oK6%q=Tth3bCKJ7*j?5iHL3dy8j0>T{SkBiEs{IDOSn^e5G6|6Z559nM5R$ z2}J^-R4n0(gi=07C=?61V!lw!7V-pKrA)-;%5kZH!sy>=bi6x2( zNRVmtdYxRNR#>6ffCx>fL@v(*eMl&w$G zXjS?=ChONQyL?7lBCzE2u%ISprvqkJ`_>v;0yk(afW29ShDC720#L!K!4<2DD^>*O zJHO~*@Qd!pizq7%XdOe}p#Xfqz;D4Z8DgT_n~_pu+vB!?i_PrKtA)p|hdaYVb9>tw zGHeD;Q$IEv_cs7(-(Qs^;VTv6Vw`lAg0ED_=5X0Y1pm+A@~^xvyLw6KFF$qSy>~tA zJpX-RWXDII1ML^>XNF)c2EDvLIC8en<9CBxW9DqQk~QTZ2U}~>$}Fb*&8JxZPPpfT zeazBPMfP_$wO&dc_-WqG;f_5Eu3PNg1Fq^7#D$n`X_z&BZ5P78ibQ*X
0oJyH;32EvpNSq`l)rA)-{A}8 z@$BQ3W@%1WJWE8ZKBG=2zEs^w;U4J|(AWIVk%AQQz1!K__UAZrPc(bsAGPxR+6O0M zm+YI~Hqmr{LBDf!>)UP>{hhX~=>D#(?z#|$W%Rqn=^LgFQXJ`1eEW9j&aUqtyS*hM zjZP1VJ*q^cQ9c8HMoU1|-_!i>R7St2`R{4|Uz_IDIE}|=^KdDb!xJi`Vwp@N<4bu; zTrQOIxwx3E6oP{b7l{=D1z#fIDmX%(ST5&EWD+r3EKyH-V&DL4@~{$(=_ znCnM-p9wqStD!*#M50OTKzd7ie-nU?i*iM=0ZEyvJ_@~tnW&JZWolsal0wH!@C)+u zfM_(po9ql`HOhh4AXMQTH$Z7*l0HalvSX>m_ z6K5K9n#)fm#rDCyA&rH-`=86pSQypb<)>03Aee}ab2w}cF60V3J6UnW0Kv$w|8@TU zN-N*_+;6^i+aE6uI}ClBj>X){3^d!8;nS_)eHYgH&IjA4EMLG`BpJFX(|X7moHF^t z1yzT+&f;!8<#`9NPAgin+lunf(9X2;eaK8{VK(nrwC>95Rj~(?&vjlrY1pUN%hSpl z4(a4`lHpUjB2zoi4cFedIq%V#Tl#F59ZhESbxfqWUI-DdO!D1-yWaLUyYH?NMRJej z44y3xJF{TcE4z{HKjhzK6}(-M@}%zUwXDE z-^BM>WS)JyZEddjf7G58AE{_?k*9sTA@C#{+xzsoEz7A}gDr8VySpq_T{q+U9*LXy zadG0$BEOFu^b3HYi8TlAdcN6jj|-t9mBY7iX|(W>m40)p$p>;C`b?Uyymo8V ztDr7NrX&y4W!)W8?+iO=oBvLhedioa%)^)gby|0!dd{)isqARm_9%7Vh9*r|lbmjf z6HD8i&GDHzjb*y%@Kf=bph1k_>-XgTQ)T^2%IEjw{yn+>Ym>Vga`9z+5lXqMlh9qSPj&FU%4p1jHzEnQawXog&W)MFkirW{66k=Y(Pd z64MmSq=c~e#Q3CyL?fi~1++yx1*ku7rH3h5e~64l?I2Hjo~FY z=77BJ`TP`l88=(kh+sFZVu=->5LCk=vP+S9+B_$Z0VRU=*YC*Cch`=Vz%-*7gJlXEJn*qT&)+$!E zAKnc9PPO;0YRR7o7XTU?$2m29WFnl+7FGGk{yD4`QGVQaNP&Ha6mv=u1w(~)3MWCG zy;tb#Pp#-+mGkVl&)KMzaRVi{mocLmEIH%qiD9#k1uT8~?&O}UFVC($-&g2s+ce^` z_&{lMmklY4cJ!M$UlzP6=he~{O~-z?tvU6yF0+Ku>h?qZVdo8F%cSxv1@lc`7CZMW z@oZUIVgF*NL*I9I8;mZy+x~!UYB;_9(IF0rtxLHT{naxn>&|rE(S9_4(PHHxZR!;d z<=V38y{Wt7nm;`D;%e!vsEXAlllTofblzNf;$y((W}Dt6UOV)_u6gvTsNtKtPTR1V z8E~Y)leemWi!>z``T&awPngc_@qWV21YwCT(}0m(zzM$Gb29fLhkjivrxIVaXx2|ENR$2t3Bfr zaTog)XZr~kKk3$7&F^|8=z`tlrI8jlE*1`FjF*nys66Rie0r#3Bo^D0M7A&-jpQL9*UX1KmuV9?ue*1BC zUN`FJ7VT7e_-RO^Q@esv0+)t{zM1-=#lmYQqcf zh)$nq?&HfEg}03xutMjs^ZBHf^-nuw__sm!8sLG>1K+_-miZ!sRCG2jc zV5n2fB6@bgdrUOJVPc3G<8zOtr#>^qEUx5|cfXHA`}|V@8Y=tlnj1a-!F$`-?OU)Qfsa z_g_3UP;2=z)pnTW4Erc8??&mlUN@HYx^`=;dSpwxZi>r0I@oOrNw2(jJz8no{^ZnE zPn|YB>@{}e^~j2A{9f}MeI~e_l-y~wT{Az`+oRk4YxOPs(p*~ghHLqMRHxf}L6;*py}hvw*Xo(g$VIJBT|M_SpzPE3 z*2e~)*Ay&e-PlTb|90}Ujr_}dQ`Zb_yVQ49!_k#pebR5OiG6KWj{M3x4LuqkH1YA9 zhzsTNprrg!ohTEpNoW4CwY;;he$c|{n@bK_n%#IiOrYnS_uaE*jm6CwQG4Caf4QUD z7!f|ee_qk@v$D{veWNN_+-)nz^xc?MysDMU$w1$WUk;UQ?>5!*ZT$U?`x_LqL&}Tm zUpO$jWk}EZi=D6c3#j{2`teA~lCOlL^h{-yqZDk85v%{!|NjwF^;`e{*8jit|8M>O zU(x^7%Q=Nm%$13yI7cZLNhEBpg2R?^*&L2YB9lpR5t}U*@VHVTPb?FOMPdO@3Y#6| zJb{cW=gFjU4zZl84VP3c=a@KKDHq7OxKbwJ$|QWYM8uX#Wda_q;PP=UM-IChehuHl zimvvR0yx-ft}MXAUSs(|I@u+rfA5xL?q9Fwc1M3|539LA{%2Ut8GbiwK`iAw4NJN2 ze&Y4>-_6!H?zv?dHY6K%IYe;3Tfc=+@FGfUya?M*uHQ_Ol1pE8U%=<@U0{7~d6>55 zk3j$Jzp#qn5{oh}4(l)u{LTwDF2EN)`Sm}+!cTs(du{Qh?ZdZNe6}d?IP+rXPTgy6 zw|b?#$JY-`FFiH!-HT(VEVfCyv=8q;i#5A^w9L}!sae+BlY{&M2hModIw+&X%Cid` zIthBuq=uB+*sHbIR~0Xwo4zsRMC#Rsl~lL+w_E*6oPS6Se82umn*|@|?!UN75OmB| zrjj-;ZFit%Z&A|_uAs2d%FzBvYGR9m}FaMNYFo%MRm0kXjkJ>UT?&^|rk@KD%ym~sazzN%OXvmnDk;P4yOj|m9 z|7o=2L*nge_qyb-_i+M%2t(HB%!OfW1c<)}n6_%$JMnAJ2=4Cz_OA}GY74|=OXLCp zPoxyFaUPp1k_ovYC0DGF@VFeD&E;~%Tm@Ic7Rh8dha(m!lwzTbBaw*}N`a8emg9s4 zs%_@fut0o1pD&QglpH=3%jfcCTnP_X%J~v0k1yo>{5LNV+<)meFV}u`XPq;O4M@;S zv`UpiE&nFKYuIGh3>=Ep35a1$~h&Rc!rB+w5*ZeD@k&L?O*mE!*tI zeCtR2#cg)pcte8^(XEQHZv;y2xZ~is!Ijv!I@w={^{=`!hO`^wk2y=q)?|xb@_Np^JA3$$M(yu6JAHtaIg#0R9QJg}@YKHS z+o^sdCsG^vh0JWrephFs<@U|Dg$175(EK`m<3FcwZ?W%eUi+BiC2vyATn@Di?_-7a z+u!j)#{I##(=@MrHaBVSZ@wxhTV`GvTwnNX!aaE>J7%uvET@%dK=vfvr?fF^kDh3- z|LLb0{ZIB^`_hcH>C3Jo3wE8FY|^&$v9m9wWJh9ehDWcnr~B2vRCmo%Nx&&{`g0q^_ebKXul(s6XZCgmlabn=e^eRuD$V(R2Y(6>{(6hv9-HW& z{|4Fc0z-JIExlk>#W%lXumX%#S7JDrhH?@i`dQ~=sx$D8M|f{m2K*SAco8n~-mIVe zw!tYRC{7n06vGM$V)5C*9DW!d7lz_OYlQG6w3qC`E&N@_Jg8%8H`+6Q*RBBSr|8R+ zO*?jr4k*T+xBr|;UcEZ~pn z#f1m@jc<5i%;SRSe9G`umCKsQ%hF=S!W-Rs^rAm*mOkbjcjvkVg9qD89%4C%Kf2D2 zsM6yrdn?a(X;gRm+rsU$XzMPPtJ}9<_;Q@@%9rJ`r~SOXJdZv-RhTRf^l}>!Fn{3H zmZLXYRX7TB7Wsh`iKY6h2-Rt((UbpO@huFKGb*=#)Q+IE(6_XxeFLTd#TiJ`E zDA`cjJ>*j2hH1I(QvxH7TrBN1=Hp7md8-+#a~_=e-0`5`RVT|P^(req#4S<{dG7s2 z#*{?ONZvJe>Y*)W<>Bv=Mx-pAtN7})`*{A7Ts0~)iT8~4%nRf78KF2cd&#T(e%$Nl z^UbftcPJg*=tk@*#}+5+?rqq)ZM#2ii)6We_f8I5m*XYR>N{Yj*}>Rp_4AgVTfcs1 zK=aV&^*Ckq;vYWh^k&VDL$ls@$RB)VN4a{$!gkx17tj4VwuR}|GTDNsBeS|cW4UfQ zx7%bTJM@6k;!w!BqTM@pw0B)la`5Atc>9~d)R8;R-FSNimAq1wJNaBUdH&^sY4TUi zk(Mt0bH|0Xmp5MjF=5*3ePbqW4K0|nlY2V)@cO+sCV0Odx!CsjfGgc2r!HuCe6&sK z^=6gJj~1+P9DJpiF=2AZg0hachOv0kal4@}EGND7+%%%1V71=>+O!n=)qm`c{m6E=cvG)V z-sCG&uP*O9?s&_y{b|An*^k@ZnVEiM@$j*R*$V5zpZ?Pe==hL?@CttJv$;93mg~T3%QfM?&!f{zsw~* zXHK7KfSJ4YDXl!*Q1sC&`rce#T9AX&)qRhSOjwrtN7wwAyg0}5I@SSen}||ZQhhp1 zoBK}#cMWVo9y z?_r(2Ir`j-V|jvGTduBdcRP4#{Xi8(fBcVJereSEcdKu`UOMvek(nJ|jB?UWYQMpr zQ`wAmddxhFREyP9-p%XAe!48O$$Phf!@4(#9G0$SrrAzORW2L&{L~k>73pX|+L6=2 zXFC0{Eaw^L<>bO+uaiP5oK7F>Hfe=>hRKB(N7t}FP{-h|!AtI@!Q1{UVIfGzi?A04 z|0LbIG7kKhu7&LKDKSBg2oP*hb%?2OFPs7FMR>B#dB7SU{$d#s;)?ETQZwy}=yp4sv)*f(w{H1Vy=^;~$v z-1bY>;+E%d%e7PD{1TqHxV`RKe}3ANLxT@(Ti=~>R@qD5D%5|(Fe{0P*CLb3uC~`B zUvn4K)mhJ{pWD^j@l=#vTNdHvs{5MUmZkKMg<&%W>5jKFd3?|P11+kNn- zm3Cju&Wql)I9KvsGc!AkwsFGb?>d8!i4d40<-(z#+k!#3qZHrbM zFOPcrTBa<18?p1qfJM3{UVBUXo$z^b_vx@bL!9k-5j!ep&0JD0YI!PfEBZR`>*?Uq z8?E=Qd9+0xI+ASR~p0I0|Y)bL~&F9989m=2CE^njz+N}}&{gi||-U7iY z?2j(&3)X|r?B~9{((=ZQQs3UI*1UHW-R*6)`Sc5AyK$@fZMO&%5193}U+)iMr%Bs- z+7fG~RTWi^R(OM`(b4*Qru?2MSe19-e|@Hm`HggcBi-Lf_czl0zXItJFTE8CB{I2E zDHd^s5~*Ck6>$VIiBN{)xKJXJill4_@mgw$g3IOON~w@7QizoT0Y|~+%ES_`A+%K+ zlB)89*s%FwTt3dnMIxS%8!l!Op{$?y3a)~zFVDxTTVKLQ@3^t-M;5Rt5K21 z&srHS8m;2hJ3uY7b#EIqf8pMA_1v=U!%Er{u;L8{Mk2)^kI*>cbPQP&F|!iXM)R>+`afzTwnLbY?F&85Bqnx5me8% z{9)9)E1#r-8(AA)mE7u=&q{9K)v%FUi9T@dX2+9Ldc9A}%f5a1{ndHBkDjZ0?Ch~) z!@rnN-l_js?MN*sqAwP{pPrN(Id$^IHe+5rvpSH=vo7d6g0X}-bhxTa*wy<+!}EE& zB@VBeben8@c;2bbPiM01=3KtjDr3{zdtLnsHXRwgf2`Deb0lxm+|U!BF1b1t-4;K3 zaHds8!eQ0@h1^Nr51zJfKIU-D-boL|vipo#?8($rQBaxpiqfcx+PP!3SNhj@%Y7;L-5iYj((b)Zx?5x%qTH_`FN|5t}=7`>?S8-RnEX zPu(HeeSdzJ5Ss;^8eVwf^l9{-aieg>-i^B(MeZFOn66WOe7(5N0V|EQW5CzQ_4gIA znbyq~xR1*_7d%0jJZm5KPQ7QJ<36fZ?be)T)=S+TdTVq4l6`%0ZTacNk?WXN-8XD_ z;}f=~PP=t>N76GTD~^2VJR^B_?3sOMIlW$uJd`$dR;71?IVVaQ4OHhHwJ_;2>aNS~ z(13MUdYHEum&%+L^tN4Y_`)ICWm|5YdUP(B(f|1VwCyR*H+*OA>*IHetL)Wveb&w% zLBVwc-j7kwx_5Ez!0<#@lpsbS3UDNOhy_R^Dt zF^6}uhWY5cinoi^=xkTp9Ts$I$p+_D`TL{=Uq9Y-rS@s5?`yGPQ2&!|6L*Zj2V<9g zG}|Ng99?#kX5A?~cf8}nnJvD`THf>3o$Prn@cEcqcG>&#moGnXp-;c$n8-JYH)A$q z%W|lLRy5o7$Bj+Q`+DW#gtmRRynHiaMs(84_GNyBcaGXeylB6X+gv`?_i6d1OO>`y zf}e3;XJne!pE+w1wd~HpGnHR`yT&|MB)#9>xp6L|OQ*^Hjq@FEzdrLvjT;d{?}iCb;3sR`l5m9QIu32o4Jua9B9vMc7x;VbSL-UU$TZ zH9_C4XMf4r@K+9t2JHH{D-o!+tW|yfrMKdYrt{FRigdHWaR1HvXL}XQK|NHfyHS>g zj49dB=M`e;!G=-IbW^$s;2a^1A`LJEzL{Pv>R;QUmjDqY@$3(>K>Xj@xYGF zbrbzq%||YCZ1I)03t%xw0LfCr!1#eQ!g@0dvoqw4YYty-4ntF|&B? z4wI2~&lkSAK_9y9TGpq;_S@q()s0^~w`qyvjTzZ!(8k7-JKx?Np8eP@jt(q;qFC+&0Iq z@3x%6AuBGlUYTs$`1H!cv~imb?tC`F*`y zykbc5wd+rYKC)ZO!FzBWcAoXztP=-ySkAw*+iG~uwWV7%+eEU`fD854w_bRD;et`U z@7z*kK67qzR91g#enEIx`%di|+kW_5_vN8__MdOuaT0bN^nO@_?M3nHxii@JK2A>< z%Xzq28ZhYi-c4QajOoy@cQdcPv6LyS)+uVT~ks|{A3xzzZ>?Yh*51LDp`GfS!T@zX_r=DqkmZGKOi zpE&*g*QbramGK(`|Hi<-G4O8;{7=Wgge!xOb9rKclBZQ7bO)WA@$VjDN+qVfU~5Hf%zI;#fS9D4ZW83S$Qahg6-j;|R+ITf7MS zNG=yzn$AtV)1>12ErWl{a>3Pj{tngh2af)7sZcJCoK86$U;O!bg>&}#?#r?lwre!G zgnevL|CR~X`R5zu>^j}3@tn5P@0OMKx8hg4zI33)(EJa#ME83Z9U8ni)+@L%v+rZq zm2v%C^a}iOJr$oh8$?TaF|ik{x7 z`}D~QhVP^7eTr0`RUzW z(e~00S$urk_3}H@|D&ZsGrP>XbM4~4Z0`^=*Ky?GW!pytPH3|sp4-hUP%+wX%U-_o z?J)1s-5&zpwb*+5cIN|kJ)X49u-@=VGsG5~t~lq?@vFBJ`ch|h;mq0R zD%!kkOmPUvA9iSG?}z}+kdN?Ca9&X}0eEq8btZq!*Pi?h2L4w9{UY%(O;e9Dnm zkKTOR_o5$jLEeSv2iKe&IT0fEm8-WNmAmbloo0RY!kTBnlNjA!SlOy88~gh?=dZn9 z`dmnfT&7( z#Cbv?N6A*=91ce&m$ErxoUagwmAHT{L(O_Qcf_p*h6K^_UVNl!_2aM+jvigy8h6Y&dWlA(RIvog#z^ z5pkj@yyg`RLkJB=2#r7p4jV+H$OGTUkcYa%f$wn8djLWx2q6@V3}+*A$b+N#+#|#JgLimF?>D_R)G;#E=IplI8%P}5I?LvNs1FA7M z@(UbP3n#4-C#*I^h*1c~RGWK~PZ~i%zHn&_7veB?KcI-SoQbo&OqE`x&>4?NHlDN% z_Z}#k#x-iLJ|NkuMJa___Rg{wINTDq6HEG5JS^OsW!?W~kI^h4#lJ zrqxLdHT{^xtU5`mL@P;E_*HQNvV{ZF=~YQ=<(dqMDwCyCNVKvvmQJCEbFYchy51a)s)a^EIk{??M5Z<#VJ@!GKqC!`%$9r(hj@!oG{+oOAiEO8 zFsGCdLybZ$LGW<(+U z)cz=%L+^o#sp!QUFJu$qjqtJFh*pR&lR|_+*_3bDq5xY|C@~A`f#}Q_gotKPp)GZR zZ_^%#zJ`Vj?3j~Zpb3wgF1+& zQlKLGpHu`a1CO+CcqHoow&?^1a6~N^Ch_Whgow^;K|Tj% zXry6S7->+3MjDi%u}nC~-uT>(0?!RSfDt`lLblZ$nu&~}B!)swQPMaOEH0}mXOC{l zRXOQ|fFK728g0gpVDSY4ylquS2bRVVqDEumzRhF{)zQriT7(MK!51jR5(;4pa2B5< z!dp~VYaUxwf(21+%@SxeOEBR_u(*QitkBoSw*Hvak+WEE9+4onSW)*m~E4q0K)gS4P?gw>V8g!*|-M$McioCp@14Xch^wM?ER(Wl9j zsYcyzw8WtMjaD|2u+Y(*stF6q2^As+6&SJTtz(5s^pZGu-br6J_$$|Ome(1$vKBnn4rvUg z7Rm&}1t1STaCi9Dj1cw(z^In*uhnGhRhg;8-Pn}Eu4G=gcLjlA283yeA%=S_aAS`u z7;qK{gJOmmOa>i8sL&ik3}k^JhB+Z@6AU%BjOKV(Rxl6~E>;+7Y#z;FR#wo>-QC-R zFo1iBT&~p_JH91ZITxWSx;H@^j3^Bu$Xp5XX#|VJM#SL543EtzhCA3mXr}>+w5*wz z!65QhK;8<-%O&zMh~A=`GYDB%=LIHpvNVM}TdmLnbD)^llT1R7Z6s-bgwRZq2I~y# zX!x)ZLKjIol?r)@hG2e}VfDiXp=H1t7MNl6LWuq%9fM^%X>vi9O~P^%+B{~cB#)V( zsCs8gSZ0n&tI5nzWa^p860J%iRV#EX40$y7*X8N-iVT09OsmS$Gy5{N*_q6sX!3nW zA(~93Dz(M855u!FWi6Qfln8lP2Su|I6y#~GVVOA_e`J|hymK%_Up6eLCva~G-22te zy=OJ|A!!O(Ix}3OWhQ0G;gqWcf2OK9f*Gt;$x{u2ZuqUB{Xxtb8o7T^G%GSrN~9xrwEphl z@E@6DxPv$wsRBWq^tr_bdk8OYu4O#fCMwj5RIMa~8ImT^GlMmH=ys2vbCVds3fAZe zUaUx74393>;N$@pA%6_f3pFi!vf*7^6S*vLsW^ z43@~!v$L2wMW&pYsj2ZwXT63Q7A;Y!{h$r3Z`)8kbPd^AhT#yFAyKKx(drl!UCSQ< zA4$NX7`5#8O9c!ejEWE}Z5dXeP3pjoT`Rg#<<>ESr3@HFLqBF|w0a$^7vQs$yu%t~ z1xbV21#JPJ?ii$r=755>MhF9S3+BTSA-d7Lc0iT3rFJm%d`NWiH{XRhG#m39?V*m zd&THkfIGR|Cy)iWHHf{}(Em2@lk>{T$^wuK2=to;v0+_owDudw8sWYHMRVKtKM5kaG3;+X;$;r%?g|-QaGni(CkOJnAadsHj zh;WDH5y+w)1rg&4xM2{(i~a0FbsHY!4eD$hF=W$MK3aJtl&4l83ycE{Q#1MHAcpFe(q0XB+07jl_0=@ zMi(>U{+xU6Ip>~x&bjBJ8dya&gQP5J^MCW1?2=vz?x7m$-`Mi%-`Mi%-x#O});lYz~KjoREEC<6rk1|Fxghef(F`_&5B<7rycTNV8u}p$&;{+!?V(l7oay1qr93mX4LXy!?ok6@b} zkfx?g`Ulbk{`~{C4gYzl=B+>Ydh3_j-1q+Y_`iJu1snhByZ7IJ?>)T3zgY7A6fb-4 zLx@81ef+cV#;n67(t00u>R)KJ-v7g&BOlWHzjUod(rE|-^Ea{1d=v6u_{~=9{XhSw zX-OjkHLWewEp%{nMedPcIAs-A=>WsI%pL_y%JQrHe_O5Azx%aT>+iyF0>{+XTCHCI zb3;mhqt*H&ank%43O39htyb$l`$ns^j>WXqYW?~5TCKnREByDr_g<^@yZ?~?{=N5F zt-lH30jJk{?DWF(7vF2Oegpx7zTRuKCQ{}vz1M2>rQg5&UaR#~6oS9rfrqWtYW=nMTCKk&?fi%DwOW5lcGmyVd#%<1gj1{4`s?qtT1QYS zTCLW9^IofU6F306248Re-4C``f3@|`|Hju^e?ri*UL|Gqe(NXX*E?>t-v1~6!{1Lw zt=9X0a`@-cueE;iK2Qd2^3Qy&)tXh?pgg~aCX!am{P2UTAAWFkeUuNZ0uIBid12On zl<#Nw^X0~eA4q}Z)nvCAxZjV`QG(*(8yEoGn+Iuu7bdF4lY??O!WU8azZa*~qr5;X z-rKE%XGcl)a8%;uhaapTj%0ga(yYJm!qn8ogESkO)1#zF3}F5;+9b=oxAFOQ zWL_?sVc!43j)r#+pT{FpZ*Tc9sdVQ-XrjHW z)A;OVdjf*#Q$M@KU@!Z@g%6P$dPuW_9L?|9{!QOpvp=rQDM;Y=8EE{CVj;+1gvckd zVf6KDbI26sh(M6M@rDu6*5XFC?wFJMJ0fyWPd~D-M=!N0@QO0>AuGZ{a9(K|LGmgY zOshn?>PIhLtWV;iOw3-Se|=$S>KCH71kA!^!HO0)%p0>8y?hyMm^}uv2EZ58m+jj@ zp$JfWhL03|=aAA4Mr{Gu;J)9W^Q#8WK{`tM3j``nao0rMq8#k?dJ*VyeV7|3Bo2t( zXG>GjtHQ%;;Nh#wXxPNVAx~19s-i*SqV*~-tHM}rBHpDMU>7cI26KchCL*aYZ&$1`=?kr?@!ArA9FL1=H5$DIgL>r8*6}(#h|^y*mWP{qOyRS zHVVHqx^%QxX&tboA7(?ZskN}F$I~%?%%)@0z8-$uNvdgqL41hT(gU;bVttfkru}$2 zerfuq$C@&Y1r0^L=nWMWTqGr+oTP(ehH;@y0W%+={-Tk#cB|s$%MDZS0#MicV0eNi z(G(hwi|XYYlZ?s)tCi3%jhv^qO~9a4qEjZ(T6!e2cVM}?uh6WS zwK*8&Wuh#|loKtIi15nDFqH+AzNjuxjG{_kQW$UFkSzS8Us754t11h7D;-(cwz9Mm zx0Wv(|I7dL_eeJWwSV%vBpYG;Am?GTZ2XnR1|cg?f9a|$q6S^1cGv$Q8vkcLVA%ID27Yd|Gd z%;>19Cgu9_a*>x^vLknkX<$PbCI?SWv!pN)eFmAhmL8==S?x?&(h-|&+ILnk8{;at zuCeHOpR^l!eO0TFQ21_g_IW&-Cc9N$Ko3Vn-HL6FpHGJOcRqW>Lk&L$rVg$JS>Rq1 zkSw76HN*5xgei&4>(?yh_w#&2%ZcezM{9NnnVR&pC$C# zw&Vkmj!CM_B1g?f<{brlo+oUa!azE zB(2Q;8TOEeNkMPAW*ffVa#|!Nc@+<;(V3}^($eHv*v3L6V~iF}TAK1GKh3%_yTOov zP9BO@FfV+26~cn^Oh!u=D*V>NNS5pR95K+7BA*~GvX5q$JmAGdh-ng~4((BzE#PRjDcx81ZUR@pDPVU_5^$xBd?B5w2+`h4T&|8gf^=`-Ujp2=( zH*Z=r2bPq8N&BYl|JE9+@X&syB$Zj7S?gSS7%}efgr5X)6LJ@K;%wNNPKF8=Z7R`D&31!%${|Vmjg~#N9;kW8v^_4>8tkPmiQSbC+q+OdYqL41I^N|L`4iU=movx)4a|;HgAV)^Er^-%KSDsgSY*N~ZY%2g7~@bav%;INkF50AaD6BPq^lnmaM_oj$p`u{m^ko1Xo z-5r0+ZtvpHt%PB^_LVQ72M@s@TNUpl90b(Bx5&Y&25H8O|@h3r{vr$1szYI_`y zpJjq2;Nh#Zgjly+Jm+;Ib6+LN;nfh~aaGLHw$bL=riqwmOlh9Gj1l`~^!=+>igEyL z=yL@8?-k$K%dSE5I2-oE_u^)y z&R~4x0d5TQS~*%qe9htWc(g&wcAq-nUV=bWSlqJdc;7Xs}H9TU=cHkVC`&yZ6=f@o%c><3WC!!5&}+n@_Km=4m`Qjt`U4H-7x5(LW>O z$J1Z^Ju-eE+5^UqpKmsP{A+WXg!$v6_ph3d8lBAc`3TeYn)HLY&ub||A#PQAYoPDKwUr#E)zNex0d>n|vLBaK8fPnO%VWgjRq1gD z(f>)2ml7pdlIaH{LX3HAhG~%us=PQe@F!rmd6EvH?O+=%B5P>MNjykUX>&L zBHw*r25~X8fSjhsX;-@?c<^R!2c8V#NjZ+Q z&O|5-iXa<8F>IkbLr%~1z>af?yt6E|5wV=X4v-$0X$g#6n@$dkc$jq1_%&IMKKx)g z&8nn0hzH5?X?l=q*R;iy?%5#H27uZIchW}>2>lfs;)MKVgtlI%P; zd!KyzV`C?zG;u*>JAtPqKOmwmlSy3QR6?XxVQL~l)HTnJUf*SUV@cLw=5BIu|+`rU~KQ5RM1Fz@znbyrql zT(V48I)F&&2tcakQjRX#}v-O179J5_(Rw|aebjqI%&SB0~{X_X8r z*u2uL|AmR-VjP%U8XlCndEMVl%|6kq+c$r3Q6UqJ(@D9XL~p!pveROfL>Mqja=t;R z;R*42>B8p^$3zIvh|?@7E-Gm0hzDgvc~?l;gyU^i`Gs96+B)jC<5SRg+n+11I$2!| zd!fhqFzFLTkV{z}IHavHU70f^6~*nc>vUNG>9}{D0ElijIgb2}oUs?e?UD_+?Yyr+ z3sxSITS#Hng$O3%u6dG~*j(>jU&7H67<%K1I9l;Hj?eIg8JJLrMXa18gY+Oxh5_wg ziJ-$1zSyio-kSA4t18Pcs>-stjid9^iLawP{yRVSBZOWe`V_iJ5O?{$)rxvB#~2&*N-bQElT*P*#9x1ag(-s1*_L6e6c@X|rKG_w5?bcj zBwR;qA@*Ka!-Q}7yo6n%Jp-7vjzXh)8w05ws{?Z(=AEpV0(tnsIk`C}>pXZ8h;x8JyR|f*eER)%z(P<$lek)TP zwdTSqF4y?w?Cab#VM|OP_**@DCrPoNmq|a%bt?>E;C!}Q!z8QH>ddO8%c;DfupRI> z1v%)XLJrGZ)C7taVT1Ix_^@41JJak*Hb{h3v^1RJ)Tp{^^#kuZh#p9f=3o?7rgz5M z2pOo<3(HX!&aYf&b+X87!`={r_X>CL(t;PfCD;fmYnpprjCQ972k9%*R+MrThWL3g zdVswVOs5=^Z)@I9iVCjxW(g$~y9R$r58Y@PQNCC^rFpb*pZuC6>aAPT2LWYlM56je zooCo<>5+5Kny^HS~S1*YXJZ+3T zJvjgFn%<(G{m{{g7nR}-pi_EIgt{ZucWF}d9Lq_6Dg`e(#W#3weVR1e{P`NkoCxqag4EZTxg$2Y6<|WPh2*nMz>wInsl;B(vG6NtD?BOtjqT>+q&mV>rlmP8^6b#S5oFHtY2nXqNwLT5{IiCl?c--Son&{QGR9}) z$s-yZS)e>P$<)M4f@hPO9ci0eKvYfuwqS$XrSmsjaF~|J=D-n>5E8Yq!ZAUoSr#JL zB^ZLVwDp!ulEwRo3g~*ibMA(|Bm$CyoyJiaWaOD^rcxgYb1k-W$5UL89aI zbKit&5L8R+APugjzG~PCv)PGcEdlAGc9&B}fUvNWr3Pdd2HF;Tw3W-uJ$!hEn3C<0 zLAB^5WJMJD4CJv-yN4~-18ut2W%8;_%SuVwjkN6;#0yETFW=|4JVJT?P$$4 z8R4~ac*fC-k7@Q0bJsc(LQeA5KZ;?G(!dr@V^F38SD!}!ItN5(V*Daf6YbN;*2(f9 zu?^D+0isGTv$0qb0D=UQx>cl4M8N1(lt9XC2xEvu1#9 zF2sHa#bt3{tM#u4=0m7wFz(5N&Eb$RN;9#3dV~XHShT9K{X`2F2S9SL zzPsT0pzSdvh)lQ@7a@d~n+=*~UR0a5k)ASt;id!oM^CjEGLL?Ko)+;ymGRWoVvQx4bwLK%t9z-a&Af^UwdbOctNxwILzW1UZ zut|lwxJ=_p%+?Zv^=&V+T9RFuDDce$?PEnWHYuQwMRvUi8d=Ktrdl0`l?Oqyk$Q8m z9C5cL9N!%*WqtZ{I$;m?Nj&PW^>7%WlVE20ZJ8pWpJq*TFWb6yf}u=CPlQ^3x?I9@009aXfPB zvhFH{>jgNb#Lx1We0Vq@njTJz7%m?IyB}q4;U|CyjG)lANit|mV$^MdF5I2mSBp#kw z4IS=VfXm-u^e0a$pJPymDk4e9ev6XhysW_K!{i{%lA%c{eJChd4kaQ=OAX-Kf`gko zVk}7?z4=0fw6;L;3rbNPZ#Ksxakrf$Chg$+m_jy1jO%cl+k;wbkqEo134k{b0CqbnyAk>h{gaC!2>4 zzI*exPmZ1>*MH;At?VqHoce>*rjQR7Ep=9Uy|tTbD{H+wy_;*%hPfJDzj6I~Z|(Z^ z8#E^KyhNM~3~%{tQdW8!Ykg2`3vYRAuxiX$RSC02N+G-5DSz z=PaL^qZkK?bCE5edbpi%X1p@#urv!GQR)XjuPg$?c|oZ#$i`H5%_o4OH1TMZpQ0(M zOICgkJSk0?j;Et4&XRmuj?TKXIA=ta&!l%+Xgw5R-K`^$-`!YQy?*`n>h0bwezDTK zee2H6+qYLK2oC!ARaCvPdguDB8@JZ36E>RrmtjN;@o2OdP?};DQ2M1_ALZlZb$)P= z4ic*28ukx2L72UDJn_w!MSN%zUP^l<5SS$;3A zj&`L^P4qsKz>)j;C@-GSK|d|x;D3-H_HYXu$l?Lt$mGI5(#gqn$LaaWQE>L#ulgt+ zjc~-w)r}`S@y_N(X~g)LiAD6_QsV&Xcv`tW&NHiZ#tI6kX4H)zMnvzXf&p{XuD= z?pEsEZI$IT89tTL*K5Mvyiaa?K>Cw@-&k^?#mnOw?(<3LCcOnefjBaj;He%M}L3h0O^Mttsad{89_5ht7HLVB3x zMN*m{9^}O!;q*d3BtaQIh-eSWKv;q~@ozjjjn7KyQ2SfL&M+fcnold~ki+r?N2b%< zY-4jK&v>f|lsR&GkeuM;%T_iRO^3O*57YsS#PV)+BMCDXUedtt} z$~gZo8hOYU!AUdqTKd)NbvMb%v`SA91%Ci50huP!OaZAkf%1NRnp8$|y(oS1y80{~ zBw3kAX;yu(pT7U;&Jvqj%5;=u$UadXr<28cds^S$mhA3+YQCGC&4O7T;kDnrXMvmp zFiOm=qP$gyiYn2^p;MAE^v*V)VVTnzifqSOFdBq6JeUsW!AGC`(G!LdjYBFd=c!ww zoqXKU^BqIUMFh1nE{gaJZg5UdM54}XBSt1!+A<;k%@Fd8*$-pBB9emCB-`Sx=5w)0l4!*;w* zev%ZU_$)Fnmtfg_r#8QgzTepB-d=aO+@(`Nl&n|}u82<1ln{6pTuI*W>=W+d^SD45 z?$RX&TC2&fJex}xLBX|96CS+of(3twrgnZTE}|Z2#g=cUn`7vsfNaJ&�Z>&|50K zQfQIj3Dd@&(MI339%05F&xRRAd)Y8Kp>?=#+VUsqb@ehkoOn-)$uE>_n6C4Pi`|hk z=h4NqwDbHiolJKT)U)UZA)kwUp>)N*{0xwfq#cYxiiw#4cn)4q(_wXF#&L0+6lO2- zfNsV)`NAj!^r|V-LmYiLO-S}&Q++0>l-;__<~?2D#s4NgSUAo3`xV~{Bu4lfh@ygK z4-4)$#URLjcHyJn{fBC<{pO6h7Buf0Yya(&J3m6g@f%NW)2SEaR)?{6$3Kz#VPNNi zsWyBAL+wBP2bVO|GS>nQ2p6H~x}DbY0?N$TX#a&AcUf`{A{$)z@Kstp`L129#Kpv8 zpwNd}}sE*64mJbioS8pLX zzl>bw^cq(ojAGv51J?y$;jJ_9Ptz6U*hVS_T~L|&K}(^z98~j3 z%7?2`*rd#_ktVnVbs`y%u`2Ld$w5@tGHlH$+2P1YdaKu4K3KVa(7SVk(oZP>Ts0pLK7nB?omKN7QK4#|QE*!IsjvI8aZY6%rq*4Ed0 z>%BFzy4vmC?Bci=IkGTPC|K6LB{FA_q)>MFlo(upp3%oiA;~3aR<2`bo>{rghc6VF!{p>% z9v2*9WcvuhIrs6M&N`#2SCN)ITgN-vM&cjVfm((8(_*t29Jx9{KmOUxrta=f3&pJM zG-yD`jR$zu?Oki$8aGktAx=uUF*VrZyb;ehO1y8rrA>@jrSNB&@16iFt&Mn}%B6JAyWcTg~}U>;nxC!^sEMjNv`DSV!B z${WikNyQ&#Q2nqR#FOMvUhE`?4_|pz?jOZS;+quP(@~X9Mt*bl+fFhW#RDH}_eV*b zLB=CnhTk0Ci;Cig$E)4FB25kgY&=Zi-hATI#3Qo0e3nuM3>~c<*J=+iZGx1%PHUe( zP5c4ck25&=q)2?WcgY;RrnfhL)Bm-FFfE1Z)9ENon>^tjxdmWc|S%NQDga?q)e*ERml0<#}85;wRA$l ztG+YF1bQ#<^OM9E>(8_F)#`)XXMyL%=wUWs_E#9at0=tYm=`|F2mVR`E2O%(yt2MO z32GU+u)Oc6=9f9=)2jcCyi$+yVqRVPe(&sgmSRXkxH_!Qkz^~blHIecihY`@g(P?# zx|J8w;V|*X;J$6AhaC0f)fAESEDvdWhZBSiH7AHy1Dgtp;;FrRlIdGVT90r&!Kc&1 z1as^IMIT^U+B{6MYPa$mLs`mX=U4Cyha@yX{2l<_XU%2N{1v#CxJSjel{cO&azoh4 z5M)t(9{V7=mpcLBlJKnONShx>!mJ3%PTzuU7 zxVBZl{zM!5ksC@*VCwE zN2SxKzW5>R$e}FGR}?K;ktD~a#A=I^o9;FfcT_Bx0GefvxD^|4edFiWFRLlm_JwXe z@yUScN9r^QprC+9vBCRbQuqtYK;|iS{*jEqwUUfuzZi`MSxw2eZYiW)Tcd%p=7W%m zRP_Mrp%So}z;HPZV}av1OKj?Np-nXfCq$IjK%@nJC_KrT_|v>8+#}H5;(W1+t4(4*+w4oD!vi*~weT-i1`% zaq)Q!6$&rD(+xm^Vgu`uYfGg|gY5~F>`sl<3(R5lkYNI;IMae1kOJWu-q5)SzF=Yq zllGHuFrN7WGYv~Zzq~j*XG)7Xc;#S<&G9=puR%^)%5z!KPNm?-tk8N!S+ z!5fS;V2Nc;6G)^pq(f%4x{c&i!-EVIU4`UxVL9Ebcq6V!*kBsyuA^)^j(E?>dn}%z zyY`|wmidgj8aOYE+*21$W6y51xGhy6b#A1i9lGhRxrv1k(2vY2lt{iuFYHY9cEPz4u_Jvs?D(BK+)x)h)v8-d!YaKrknaHWg{JA5 zHP-3xf4UPP)JolS&81%5zUk}zUj7&X*=M2`m38_^trkqT7NuUQ4B{+bKsd;o9FYpX z-?}n|*Q#RF6Fl?V6-Lsg!;~}9cteB4*Mtuq9{*p3l5}m_9t?KbAZ;c@pdZSj0}}a0 zi*X>^D6cum;m%!T07#s{MIjA5Rr4zs;>&W9QARqmM$d1fB)?aOFFtS$h1)-i7#>Z) zBg%L>V5c{DNOm86KbtLJX$weeTFia;d9`gYS8*@iO5a$kQJ1Glquv+VP9Z=>I_q|i z7MsT1RHtdx1Ij{83q!4Sro@24z7p3^)SG&gc1ZV@yjtt^ndW-_e9W&aTt+E#1rfp; z^XmjFH#)OR{ro!Gk60qrri3o#lPm$UbY0w%)1tJ6OILN~P^~JRpVKQbw+i4;O3be% z6yG^Wi}7h(0K?WUP#5tHWmOq%AQR2nf0>pW%AV7**a3YcH8Jk|LED_+-V}MGwp`v+ z?i{#g*t_isg!$00)wg4J@J*1|kLcb>j9{B)Jnuct;P$9a+}M4gZUE~WM{3Z1 z9Oe5l#Z&qOtzR|RD5w&+kKN`l@MpW%b&t5!IyJ1{+R{gSP5_Dx&y3pHvhjqL?rc0E zOL6d(U0J4KgDvQ-Ym`)Bo*`Dz9N0xLN%~$wHgZAdl<$8)H&0#A z_kG+9FsQt){kjc3N1w*U5F%;4jtzfE&|65MLBp7(`oc+>t}bc;L1|tCO{?go+M$)x zYe-jBRF+wphfsmtTU=)_id(F^ZkVnpW}Y#4>3-@f@=Rwn(gB`%z4nGT+epJa&Kt0> za_4T8jc{o667&loq#CRYR84R)+nPfP|E1}4SP6czJ404ZM3FfY*S#-z?S7>|N@H_i zY{0!N{~q#ZSHVUis56TMUm=~bWthfw?rkZmraxVBIz^R>V9Zt);LVq}Hh0;mc)!wj-|MX{ozdJig&?i9;rs^kw!xwppDMmP%<|4)i|407)bJ#az-fB z*@ra~+)z!qs8SBwqu~7p30$u&>Qbah%5lC#-kFzhWwCBnGiUkHSvLBsK^q}0yt(kg z7jG7w-e-gUynw+O4bY1|behZyvtDGwvMS6d$quWd{tMIAf~>e^(=lJOzS=V{=`>b9 z+PruF!NW(Ne7f};-~DX+@sp?j*3Ry;=bwM?H-GE5@C^8A}zKK#8C4roa+YhpwcGF?Mp~aVC zm{e0JcL@h5-xx5;4^t@8)T8Gi#8Df&E8y*dQKrXKx_CV|lN!EYW>M}J zZU<$U3xO!dI^Mo&rUU-A#kKv3fkmH}&d>?ML2?vY}HyE@(5j z_mk3iP`+BRm)kCS=C&^xLnQ6M5tR4I?x`-NY%;~r8C-TVeFpW?EcDDro`_oIX1zV9 zhI+ejZuimYhT*Puc2dN%l?{`u+DRxEvw~=Mu}_Nx7mwJDzGX{W;&Zy?-7B%`NZucm zH=s3FLP*Ar$O{;S@?)m}iCO|m|gM|P? z_v~zvJi%@A%9d@Om|z$FS&{)9bqO_;5ClT$@)63MX4=w=04r@1iOLsToPlHPA$h8t z`fhTz#E4F_zI5;AN^H7qfdM&0X*TQ2JP)A;;Bj&mnf7;+GmA>Zs#qn&ZPRRRjot-K zGgiH-m<5e=AvA|J^7@#|3g+~88_F!QM+p=bOqL>AK~X1{on`A1=DA#m_Q>DUWEa zN0MPmOy^P64As+}qojH|ab&lu%0A|ChIEUwH;L`w{7)+I}nU@E!HT;^;T> zeFW5lIDVAx^ErPtq}Cj&2;=1Jdm149tT;n78zp8#CN49X?vK)e*?KBj0*8{6t4s; zB7rpYcKo{j%7CB@u(rc-?N;fN?{if?MF?p?5MdQ>vQ^=e@4L8fT*8+bg`%)Xyn%|` z8I3Q{XzlKq#6GLrP-U?i={Hq&%*stwy0}9IAy~-+wNjKMt;Bmxjt2sE#0Cw#i9ek+ zt_AwqHPN~dOJhwKtq9VNS(VGo2!7j0U4OGtO9D1#np=Rz8)&u?kUpoq*@iq=RJ)bl zU$PP?tzWpfdIz=Y^t4-fp%ryvk_bHxoO*%a?83aH09)8@+N%@-WEWA1vJ$$i(bePW z*dw~@I(a^cF|p8e@@zhyj-hW!TsNT&%|yM3N6eKAiX9W(1Q1eCc~O0Y`in-|+O3M0 zFMaC-ccH;uejkEkzezMjvFSziQm4_9HjP_?%Lo{>D%%K+r^pLsaRpiTzXZqPZw{+(MJ=9III_wTH2@ZpsHofTb&w6%q3Z{^+#?AY4WQs-`a1+r*Nujo${ z=#A+Zm`~oH<%d|mJh4gB8htD_le@^#1gS>G>$c1&Ybw03SyX*#7NYMja9*<4q@BK| z!!)mPz^@}|@6W3Pa3aGyEb51jWV(Ko z1L>P!pT2Iez_$aAq(OtKtZj zxdJw-obPX)%gE15WEE&+Ws*W_sc{#cc*laB`KdA40X5*Sq0*Trc~M04X~nkeYLMI} z&8j3DCP;Qp7tPrNknT=25`)ri{eUFXIs>4IkAie82St)}j)ucd3Dv~BG#{JWYqxLT z?A;E1NVWS*gS#;Y#i*k<+tbMC$Ww3+>P6M*8dl!_^Ih-3hCCoei=4ESd*RJdTpA?P z#$e3BC@zl-4`+YMsn4vRF-mc-4PV-k@ZKmt%_zs9w_h{&cRu6P;%8-*j1|>BGI@dX z$m>!w`Z)I~@-RI~GHu+M{DKe_yZ(dx-u9-_ui^&XOW&WXr2YD}L$|qX_2%1iMK7xn z&xLpAI-b{ibFEl#ShhjUGqYOj&bwm?C%@ely~d23}pWKJPyD4Z%eA-&yv4l)L`_e5%v0hL((;ya)a}l zR*F!v^Wy$vUU_i_;k(Hh?P_*on5v4Thq(Ot`B034XhB+3tycd_aWP~ZRserxgJ}BbB0^QeM81?G4!5X#xN4+1B_u&DU?4T0 zoNJoysU|#O7M>)$V+icezU}v7OE01e`*Z^h8;XyTc$gHOgEScp`wL%S!#0CT(?(dv z8_z+oAkO}9rU4@`Q!bMzwZrOaJb)Cp^X|1cEUON3KKETUwLueg7(-{cWyai1u1wtC z@gHxwtEsPQ5LOMVaU##3Iyc4FIB77FN0w=o7iU-0=5KA6Rc^+|zz43%@J;%`;UQ(O zw^OG`>Unzne5vfO8PV46&L^Dt{Wn*zlO!cE)Qs_5`ARf3eprI5rie(}X*#OXtV37T zu%aC;nlDX6_hr%c%%WMJOE%K1wej;#x?2On5H0Pmjd)0MNTv!&C8SBF0#PBiNH-`^ z)QU)FUlX!xg87%i=eUkG()+3$F)wR=)a8h!2s}jn7ufkBD`EO$T#3;~UQ)C0MIguC zz?5mH_hP0$m+c8@vX?~8cMkQjVy6TgGut3MZC(#*QiLD5sjqPoX5~!d+>4{@r;szz zHMb3GRu)Kor2hpfBQH^u0iUv=dg62vm*wQBh|8oOMWJvFvjH??=k29UxEr0Bhyd<+ z*D!y%5PiSCm_$E#(d*oK`4LQ5Vk?wss0(~gmAK>{r>t-*=QOh{>gHjVJz0g<$PjcU zA#9#{;48@RAzwTot9Y4UPo=t0UDQ)}8};o;dO-^VcnPJ?Hg4^!yfN91D`eiCH94yd zN|hDX;M{Hos?0nzEO>zS+uTK7gckL_z=dTm<+_FZ0qLE;7lM^ZT`;n_k>Ow z>nngjB@c+TAZY(l;E54Ohk6Q;-)xIxRaYSWsR@ANdqup^75Hc__GLksbH2p-(5#qm zpiZ7A#B-5McO~o~g?`Zpr{}agQoQ25IISd~V5V$eG9QE@Ef`oeYEnYz##7W5v>x)Z zr9X!1<5BK~)hS4gYmgmVfau(n@U}jeUBIOsUpB zo#JwtBIW@@ZOy4SKEdb{7$}%eMHYWiz}^@#-1MzP)6Y;g zS+rVg1m41WzTD>dquJ9KdtXvxhwg`i*4ZQU>j}@eI5NK}iSmq&w?BFI^r6j$h)iWq z^HU?SwUB$%Y2f0bH!Ho>nxFVy3VI6S*0^Y&3NM-{ja+;mGbJPLV?zZ)LgH_B%~oM0 zf%R-Zmr?j@Fu{x=EVS|eZ%flOc6EVqugm-iy+6%Q!#x7GVncYDX61K#%W5%J3OyT7 zRwyC>Ua4=Jm0l0cqgmCLIEor&C`mIKk_6qcIK!OYNr zd0v(0s}017b|@+WX)M}>rFu-CLl~F!_-IDXlRW;Z&lFMQ`|MK1CMPkgq1B_I?5*BS-eQJlO0-ol~@+y?6 z?-?DI^d4RWI0YVTuG^cxX;yk*>{|0Q1y!Dv$$*DZVL%Jqb~jwbXfzS-KZ8p5l7%rI z{)zC9QsX`36jpeJKplB=8Oc*8Et|{?^ju|KHZn(XQ6fsD`{LzZdtveQw?F#M7jO3V zG&!-S(*H5=CaXvcgD{q?PvrLigD*sTd$jv!N)*#BKF_08q6eN{m0S%J`%u%o*HMlS zPrf@}c#)OfkDszM%NV6B@&5OEd{td}q7_S7oi?6uw>zvo^L% z;r6S-Y_0Ei#;e=WZP#z)v52+n=r}zta;EqFJRiBBLU-HWV8qu=&@#mcKcS10U%=df zzgV-fZJv;jq_6m^{&koi9C&G4qu$c>r5j7PmToVt^rBkf?QQg`v6;>8ndeEF+o6M+rGQ9>PgaVv(Vm#=CJBCds*`X^e$kN@sVk7FPasz zrsz_k%M*Wgc6K%ozMeN7EA{CZ4(HF~b+6)$dc{va^(zu(^^93n@C2^$c&5~vF*jZ%%`QNhC7I}8p&si!xH@W2wL6o(M zSzX_W4=IA$P6wpfn-R{zE-ujL8WljR5dqDU5;}P*grBSOtzpfx4ru{>fe70iy1<>mmod?72y$gy-!^MbJ_Rb- ztnCrt!_uli&!sT8^vlxj(I>`448!7R}ZC@4kduA z!4WB9$ls5J2vIX`xUCvLNM}@`2WcTnpl6WffeS(emHck@KpNdD5BJAVuYO-QQP;Gk zVWD+lmb9o_!nJ?tlhzw4)`ZsC{=3~SjGY76Ym$;;3X@l9Szm;v|e@1JG{(7^bhFgfL}&!r zJUXKr^XgpN%Jv za5ixnlkBg$IV1y>BG9{6JfCzer*V ziA2LDKOl54IIiP1uVoQIshM4xh*<%Qhr>B2rY1V$_*DnqQ<#ezkC9Y)6^}aOWSkc` zBf4zXR8rO=ib9xt87-)ui7A;s;0AtS^}?alEg=@)GuUQ^f_f`_Qde!+%FpthR$zL8 zOLcr&nbYp;g#)(j}4LFCDC;12UnAP(QUFeEK5< z)v2#OS0c7)%(S4)ifkr9#hfF+3*`3ZZ<5qz0$VY6O+8qA@?kA@gqpObriaxpT5(IH+9>Gu;73I+=d42qN>J!~DfWV|^uN z-|FHVR#pT^-5xyVSbMt`3?M^S0%}Ey)~mwVUvlm*apXCKzjQZ}NNpR(;j2O(U{Vep zI}O~q0^ID2AaltcNQ4#BgtSl6n5>yLut(X+Sq=66_FB-VT2x$*b1dWvh+NMlPKDWs zn3~bLy@L7eErMWS=wXC3HwJ5v2xf(Twza#aSNg48H5JZTp611INoRV1jwH?uWveNd z%qXprA|9DM(-T{q)bA)MlhU7_T31C^Sv$3BieR;_W-*=X4ORp^ z)+B)#a^^+ttJ~N#Twyzt1R4Z6qvW;;%TR)`g7}~3>}{Swww~t)m8s_#rUh~`FPi8; zZkLZt#CccQwd{MJMNgIbq^T~%l^G>*SsA1;Ob^n5(T3ttTAeMLg7H&2om z8wc9d3uTOaV-Gm^8v|t1pd=NNbFSSp3(@ECXh`=od}TWTpV8`wm>ZhH+)W9bOz+hS z#lNs`!-@t`b?Fm$4mdF=`Bt}b`V9~BYTUdO)Fwu{bB9Asq zL?QrxKnmdBVh{yLy#zn0ZgA3cZRck}UjY^%1 zr(@nAMUg<9F=2dh(Tq#+8B&4r~!CDz1?uJ~cgrs_DWU?nn7)4>*dX^c9%L#zaUFnXG zW;CW`rEbovS?iLK_#62?U(oF|Tlpdr;PfR8adL(zyF*cfrM5{dQ6^ziNQ;zD9orb!E8K?tUvW`jFMig0A_KxDaa zqx@qzg9>=$z)0CDAEiZENiPnNOH2?qKsUvEEM!$)=VqwUr3g{GYP=(k6f=FSlF8th z<)03BcIyEmlYM<7PH`Swzg%f<)Zd=e&|BAh89AH7;k#pYlcI+_=FrW=g_srd6mY;; z(Pc`&5{naG+f$nzk1TZ^mL+jM1$XYkZnS9Hn?t!j4|U|O?cUh=T1W<6+)kfbnmeI{ zditM?hn&dCyJMQ`zYC^S^Vu3My#pD`Je`Y>tsyR|Z!?JDY+hzww(K5l-kb;_&mfiD zk<$qe%X1zo($ACK=SxgQ+B;w@T*H)I8-=64CH2R6A=Vb_t5~g5cuk=bu%?-gY!*K# znEJ6-GJ#56u$tT2$`a-+U+gInl=7j#K-X>9qi@QZM|Fp?)07ryrx`|?xILnrov2GJ zh7<{lc`4DhFw6iJw-IBb0d2${=L!x-nfQRDrQZL0Ss<7)>Tulc!(1>6pwATzh}uR* zrHU5+(o{!rrqBq)^RXo=+!BElQ`lJzk%`}&#wo>B;1CWX@cF1K*}UxS z0D))^w|Yr7^l$Ydg|;E&!Y)v?^6=&wBtH$CSw%jVyhsmm`AKiXl+*nmC4;KpUfD2X z&Mw?eRYlAnSRBfGvmmN;6z|7_X&LpSy+^&hJCF7@Z|!Z$`ELWePF##Tbc6&&9EkF;U{gG&}4h*-0|W zCq9sCdz%g|h#4!!e37uw!S%g+4vczS z?p?PygADQza((ZPqbmqhx&Wnor<_9NQ}BFMZ(*7okWNg3z+Ag;+# zp83G8?cH+-noP^1N$NMh=1+P#NXs%Wh>u~x* zpT+J&AYdtbvt-)7Ok@2=gxYp|n9>1X^3J>M3CS%A&ZGlxFU@rv6Bg+y@({kOc%+9x zd_wQ^u6KGX-u!Lu-MeRT-9Yj63b!BZ-FB1HRAHspS@U|h{m>U}bw+7u{?2NovFzUd zY(X*A(d_&)Tc4)jH0*q6F>(p+NPEGSPShq^iLfX0HWRWvl?Wu>EXq6R(7HMSD#mr^ z?t(VdrkPvB0Wz6f4`jH|9zNQ;cN+|i`K~XTkMhD_kKMA_pfr?-9Fjg77Rq4#4ZgcD zAASuy2TQu&GVE>6SfyyF>5rOZV^!l*$f9RMz%XuuYsVsuzhO$PMS7{)!()P?L&j$c z10m}_p@X&)Qqv1)!tEdpdWXC;FT=!6UPV9_%*697eYN@^XS0eM@Oq^eRC-zqjfWt5 zUW^`QPPwiz51gQYItv6?Q}ThW^1GI_^Rkog^lT zCuz4zM#*6jkC8t%%;qs;($hDx*L9L^t9&#ajn3}pS(Xg2OSS!pkPE?KX0e}OMA$vc z20jn9!y3+r5t^yVuHhZsB6EngcbQ5u#)c8uR%XYdpYF$lqa?hRcFTU;fl2FeHF2YA zyN_J6F}M<-_{L0i#AVfFc`!f+%L+8usv#Ah$;A=M!?`I$bBYg=5NJ=dq9LTTv;T6nN$4fNQI?83vjK z2Oh1D0$m5hrc-L`eQegoO|-`S1)53J?$Pm>teO~}A=qHug&RwBBgZfu(m_O^ysHXY z4av6m5bB1B#N-GG^fSH!+4_K1oe$`OnrCt?n=@k(LlLr?XmFGclC0zuxX6z`!u`c` z`~sJd)UqninRV3L&#`NU%0`u6-M%TY5FU2fC6?Ik|oi9vSop0mp z#KU2clwdeo2+~O~R`HKG3KY?BSw{1Pv^Q_=+>2n422paftwZ4zQM+(f_ppcu$pPdz zY=11aLR>k4Pubf)ogOAQE9bmbs)W$x?(+;nyrSZwOL<&8g1TI#3^|%9@2XdZBRD}Q zx`L2>7QHddvaZY|m=C_bYZ!?}#RZMg@x$QF>~X=%T@JviK{DV`*Hm(Lyc0gWEIv_| zM<%M>waTGtgd|3{9z$N>qiB>nKTHVgO`0Tb5b|#G=}J9jTwhh0Wt}nG^HNEQYFM-6 z^j?t+D2=@+t#jm#2e%$IH4CRg0zVj2X9E6{nac^x4ap)gE1>2lA(wT`O`GR~Xvi#%g8&>C zE0+hG4*&E{hs*g(ohRal^Cp;u=e#kof5xp>4< zK}VsRU)jtDs-1=IZu3a3{z6$%gnWoj>3>b+r8C#G1DcWlPLbyckuY($`e-zqt{|U` z^8I+kOp5D70tt^RJksi3ktPSh`?@7YDMFUsc}fwtAxQvq1i#`moXb zh6e0=!)AfISTnUSy0)^iibo^9iiHs06N{jVn)O`3F58cy#&T)zStnO zoX%xtSXm3td|)!-T004@$mAlPav)zHBq!-0+2+GKy3Zcc%MR|pA}s+TjKmNb9BSO( zps?wfumu3i`$0~AJ}4~+ZET@QVz*}n2F{Z-%LzAwjp`K%3A)SzV3h!i^ucK{5<+-h z*iau)2;2x>%sWyF6{gDb(K21hbctKVtcq>kM#+|2#Yl0@r`2Ry^`~W0H0eNAUkOgP zI-CSt{jeyo4Fgt531%&YNR(#Wx;|(#%&re5li7$wUev#gz8`V}&bWD8&UDEwN+vMA ztW{ei%~X1{%9mejD?30Y&i1TyhBcZ%<-{7ogZAi=B{@D|`#3oj(hfw_Q8Jw3*d{r8 z9BlI155Yvnx058RzC`-neL|z(J==!hT-)2H+bbLv93F7@yLEo{t3@^lk8#SV){FGqx3M#3$ne{O(f=JaB}M#YSuIUM_L>KQ+la_t{Y#w9#Lu5w)|M6fF4^>KLwII~`RGR!t< zFS1bh{A@SfJm+Q>K5gIM7V{;sT4ki1`DWFD}0HfbL>gGMJxky z6XqP1!{UO|3}Bc2uA0SHtXqiQN)$kHSko&+?1p3KNt&hQ(ToR@QRE$KryxMtE!_kqq*J3|mYZLs4Zq#oHS;_(+I$rAH8Ic*-1 zV-s&peVhxpGmGk6p%p@YA%vo+lYI~7C}#ITF**n!w)Dl^W=&oi*F_hwH^Ky_+}!TC zU2l3wPTPwMBWOGd&VX2)ddTe8TC!Tq>(@F08rQsXvy|016D$B&L9X>kOOmV@+`F~= z4~`J`+cgg}7|d~cASn&RYn2;76;75hp4#l02%GFa`mEy~EwW+Gn=yXAfxK2VTEkzXmt?=cbuBykb{y%uC4B zM<13*iPU3bB281Y9wFD(s>`kCeXS)ovX7%=591GCm3(qaV7dI70L0SPe$LQoX6mvC zD2Aw-SLZ9lfn8nXX&gRefsUNKM)Lscg5p7Dms9eO;?nFVNoHaw4j~tlI-88jq;G@1 z&I3_q_ANSB2eB*^HI?riD)(e40m+H*=x;Xv;*r(e`aPcPf=HVTaR^_)HK{YgWF}SB z63G*Iam5$twq3$xHjkD1SzyukH=nM+lU)<_x;>a2Nr@s6G~?sI<47Wq?IeZR+Sx$h z{>nTv5VE7zEGGeENP{FP{bfBECl#CqXZaN7Mshcjs@|O=rRFUHG@|R6f`)4`)GdLdf!vU! zm_Zgx%DXYIRD(-PumjoSLEW~0FB#j39i_((R{QW}zN@Wg3w-15S4mzr%{f$w8hJ(D zM41Cd6z-{`_#ut#x8oFN_uCQ|JOOx=8$-vW&*5|JR&$t*U7M^GNlLa$OIhBLUwJ1+ zu_Ho+Atz~%NIiCT12zqWD}v+xS(V6iYlZFl4w}*qYg=wmB>NK^JCY`9A8o@SG4MtK z7o>%JHJ={Rn3ilEy+u(BsYE*MW@FE`H zW(<}M!2o1Pt0U3v();`61F|>L>P1s6`CM1S!z8j7jMki668~QlCXixCAy+H6EMYv)+=w{8DS@ zQ2{{@2`urtkS-|<83fq zWjcXKJ9U~hW;jX=s;Y2&5~m~F=Q6uzY1Df0*a`L^pCMKU#9Z|R&m7utwa*!X5MUF@ zcoa=QdIsJAde^;MOg1MIJ{mGs25&~8kh}#o>~uaG`iy8Rho&8IzBuRtVeBehjGX!0 ziB4wk&a<ij?YY%P+FTI2TrDWhK0pf*CWZkTqGxHa!QJTm_J!j=y02z{3Izx@!1mm4VfvD z4wmqsh~p18E0$)0^U{JJB?o0~@`gBhC96xLw1N)Ri1DU=fZDxmFOvq>J=?<{kJ#gm z0+}a$pC|F&VNA8Tq{klYuElT~o5{jN-{$n*vdZZ^;Axn;NQOh26p2RRYku!)3qyog zoQiGjttaboa#|8KvS2PvTqJbFuO^Rm2V;#vm!~GS`pppBh8;nJN+a_~8m|s`PLECq zdG~qN`?Q75?bVj@`bB0XyXva$_3)y6OgOpExVmZ(fN91#g38JdKX}WSI&8K0!f+7+ zcKhJ(e!K`fk(1WH>_zLdT}va%;HMB_FPN<_o#Cd>`oXY_*7d#SMJC*%EJKuq?q!GB zkSV;~$TlJFeDBIU1yB}WVwjL!9RIyrS2Iifk|~eV$;1mf(v)0RDJv`O{L)vtEwmAG zAAUd%H#nJ1UMy=d<`!2>PBY5nKFJ;;?9fCZg3TAq&PDV z;xn_GR0_hw>?AGnj1Db)9v3N8G`gA2XGeD;#171llLQg>;k4aNDjwOx>;yzhE)uu- zal_H*M;m@UTU)Io>i)3NnEkfmhw{zQ(bqoxNhd0B^%n1fX1hbM<=mcF1J>@&gBnZB z+-5AmoZaIsVbPFN0Y*mp_P}U67Fi4p6DymG)W~J0bPlb~DNPgxOz3PxDm_^?1;=YP z%$`Vw@U?BEfk-K!!#v815Q29nP7;Yh|1&f?OEMvaHZ?IrsIz2gQpvB`Um4Dunh!si z6|#y^x47=$Hb9blIEYo8nJ-wndkP;F(KrjH9Nl6qL?U=t8|7Pv>4HIMo#qWzPs-8U z=UcyVBliumZwAQ(ppd5s1Ew`bCYFv;f0oAxrtx&+y1^0?jiV0~=P}KWv-~uR7Rk-T zpXj(6o3hz+WYz3QmHlCIau28THHp$*rk*2FsfNkP{b`|lYSLRby|ZRPDSY4}x`&X@ z`cs#gs|MNM;*mK`NQ)x8$whsPR#@N|`(leE{vc)IyZVa6vRb9vJ@j0g6Ka>;if;W> zO1P9}^5F+R-}=dwUy^pMM)5blvAz1Mt$+SEzSjEX7SG)}Mbq7%mQ_A}zx9(=)oQhl zTdnth&ivDK)M~xI|I2?h{aWiM@BiL=t=72J`uVT@POJ6)KREtc>#)_j@-rtm3vnpwP8vVD@>rSSKvbV>YqYH{|eE0#NDDu4Oj*D zF3{wh8CO?)Ujv)|y+8T;#HL^Voxe_O`WJ*vzX3M=!$GUYravc5B(2t!Z_VONM#~dO zw+nATjI@6Ab%o{6C@ggKZ*o7+syNM(!WSLCeTQNC*8cAkOn*^e`g*hI_{CaN5Fh{O zYr-0XJgc@Indl^`jwq9)|Ng0oR(g;N^xrZvgxPsT#ZSKH7a)#XrezrUA(zpl$5GOg zq(SNP@2BQ4u9DOEjDLUfy|9COMLIl803ZL=dGLhNIC?-zkpNVI)PrT88md8~t#5qz z0W!7-WK<}C(sp6T#?S`!p?%P>rK?F^RMZsz4r|m~+9DW$A)0Lbb&wvC5?sXN4)UY+ zZ{57TZHnYDEvw=TCsSD1gJJdMN_UtKj+3IB=D53hm=^squHqGtno#}3E>M43DQyrJ z$4N3tiv7Iu$?X4l@}Cpw|0jRQWcKe1nZ4IcX20OK0~-6u*S!&qaZw86c9fP?-xmIX z=t;}nNs&|bhO!t4*tU=$#49u`tNt<;p5<;_9u-I$_Ex=3jwanSOV900%TQlQHNcD8 ztNNNGv753B2Y6mr+=XD`vO|d{lg2jjo}Zg)s}X$qU|Ym5U1j<|Gb7o@`EYr2 zyR-F_C4 zjXp3a!#aWPxz^3Y3#A+sWqlGr%!Gz5si(MqtGjY1DB?x%Eb-wLY9~7K1XXMv?nO9;+qD~S_k`k~d_yE#S|b?FJy zT|35Dqn@{I5mwAJiw9MDlJv8@PEcg*r95-0wMdMcd0{*-uME$!c$^M=eM3Q3%Wf@} z*4KnMv*6n|2~P*xZlT@Yd1nFgw5`JPo2smcyn6OY=U%9-{OP~{k4bdi`lEkLqVq4a z=zRb0nO4hJSUwC|fb0z4Kyv=aS1&I)8ImTs`MgZbGs&t7-|gTiuK4&H1*@_>g(kYh z`3|4PTGdY{+#Q`<^zv2m9m4HfGo* zr_yhhjd0>3Ilu{L-n4P>zz5{a;u7kFdY9**!wX9`8`!4WXe94GxF@p6|E9lW7FF`Ye$G|KPT(P?L}kNkaK?%!Q<- z6AX2S&qE2FQE5`rk_0~tQ~pM|8yh4PxfIpPfhYA6P5j}e znXaBh)G`=AeFNYGTyB4%BkR?-tTuyAtAHsTDIu2w7ain# zcxSMCEI&bb1VwX(FcRI-6m-$9#Ve&D3mh4Nk(>$?o+Kfxj}xXbILvch4d!tL@6zW1 zAG(UKwKX{i*MASW5V8QL5wA8=++|cNOaxp1ol~4EU_L>rtNmUo-g; zSzSFoG7Rck$@EOuGRlyu6%v&79`_s@qL6E5uNbnheW;qi&B1<|kyX&>DpJ-fQ6p0S_K71(m!HRiF!ryQ_ZG1g}xmD`d1=abrc?{48Aypm z^r@N~lC3FH4D?Vf7_oJ^9#VVda1o3_pf=(w+`J%r>E$`JG$c8N84ujA3AqXg3-L-N6Na!^pOV14+GL)pB5O33f$^U;#H7)SuX~-U0)2mI^aCe zOZw)CmA=@7)ge$26OA^<9bTpDD3tLRaAK=6T zzKIM}P?;RRtWX~Xh%h5H!LcDZXqoH|@ezzyE^;qVJTt^x#7FTBifRrqUoaxzbd~M+ zR#7A|p)l$?77}n|YBywn=+|=wJ?ut5hgIr@L~Ig@ZR&DPjM@mR6`Z@kDSW3l4!4jU za)Du1sW&OHwyqI*Jt&-}j!g~Aqu0ZU2pEZosD;BwLpl#vSB>JOGBXo%rae&hOk{c@ zB>^GhjOBX%6k-@KI&=rNCJvhAvN#;o8e1^U6U`9ujdfHQPVh;L*pQ(FmL?qL6Cxnt zXy6In3ZyT*hRtm>!FF!Q`(4rTBppr7i8gUjYS5d|8UgPpx<sYXK>I-5-d#`qVV)Csd|(=m9iv0%M#+Svxp?Of^`)un&645;d#~q z2G!LeOM=p|;%z1M#2n3{u=cf%k)!ZP=>r;CL})1%Yl#V>fR$&#Bx=;T)oD4z)=V_o zTB{b%S>Z$6b=)_6Q|9ImKJ*rYXXGUr@@lLU2xfU@Mx37s?gf{6jr_==irX{j+Ko_) zK&G*_o%{q?M3L43x8UC(L5am#M>gTN8NV4iZGCgB8aB#LyuqaW8_3=#sY{LsS%mTZw@8 zNw_x-8j2z+Pn@QH$+1nmG8tkPdRy_*1{_5;t0`sTBXK};w1GH~LxH9ekc%eB1sP&* z@soFDapY(Q!STFfg&;zwsX(7%4LX*$3?Yl4uO8N zu2Zv1X(7EdYa2chT#*0>e75@h#ZsUIY)rPq!cRLh?dIe9dC@6{Ma!Rq6UazTBz{jb z0aDc++lNyF;cGXRxn?6Sy>z6fCrYV$oYX4*geg{G)vAHYhPO$Jg(Ut^h@*V*td5A` zR(a&}QSC_`I+iO+f+nVgWvB=*Y!-tX!Ia{`*bq-5`6a|>W$g_+=zoe=4rqjW|rO1 zS`Onpiae>)C=-Y5xaBRJcpE05*f^)EblL#KL*)O2(cR-hbx*j_p19GesROx$ZNO6R z(8X{)8ZWEfHh^_N6~cCmwi+y8+>StB86y<qz=6DA`+AgUrLT4*-bZVtA-A3TK1p`}jlLC(@8b!hGi3|w&F+<@*PY%L~ zLJdG*QKNSdV)WWb;#3GAk|(U9!I={W!fnR|8wu-6L=uGt0vt=OK2-eg2`y?51y)il z%vI%@Hz&t-ZOyDf1b}>b!1U!Sz$T0*k?-^g!htZz76DNp^8IMdoi%0cXv4Z5qSetK zLu^G0pMl|VX{z&EV1RTMt$ySbkW`n2N)9PHnjkPnz6o|akbldH+NOA)%Oj9ZZ00WzYEde2BJJ^f{BP_h@HX>4xud&^>k$c4uSZ^^-t|h4u+g*s3io20)C_K zuC8qVJlNT;-*M$R#0U5UB42#sSqkk(AzGE{aF9&Q_?QTsk|e&cFJ3BP0d8W*f-Ec? zO;Ku*?q^8|M5a0l*2jyvX2n^EL`h@hSpz~P@Pw2$>`2m405&NE&|_=sx)S{bX?!72 zL?%mVfuIV!XaS>*t&%)E9hIgll~+M9XCSfS7&eYw4mVcn#MS!0jLidg5fiPG^W>g< z?EELNeoxP96rL_0Zj}u?xF2gwRe+w2C5q`6QKA4(Ye>P%%hWZ7^X!L%hLVu$<8UbS z2YG=g+E7NSj9}o5qfiI#k}D%H!UfC z%M%Pymo^wSBBB=Pk~5s9UL+=-qu%4*sBf_c->CPPSP)@iKep^oEyARMUld-(MWN*AQy( zuv;FmAtR%BDt3Q_*KVj^S75~(^m7IoLgfwOYO|THhn4BX^TdYK`+*Zh$TBA1cLeWg zF0qgbmNNnt)h<-?co55wfIB@By|=-AnsAx-G1&eT-YU)$)v{sP_;w0j?trf&@O2cv zTH&h=zV3vtWAL>%ywxB+i57Tu1$?F8s~5g*hp*e<>kjxz!&h_AJ85gmet?0CI5C_; zYHt!isOw?Mew4<8y6FRfiS;PnKVe&NjbmVTz=zbY6Cf+Fu#SizSx@-X2;596_L}Dm zSC6CBRZJPvf-BuifEIm90nwT`cI+5!USadNXMOD0F_jfpmc-Y%F4zSjnQ()^a3yI( zI9qBj$^bMtNR0>=mP9LBk~9mVNN0Dcy$Q#)W-S{cX(Dw1qB==P{t@XY(wvOm3e2AP zamm(JG_qiZ0rqPf1Z$WprBYK>Urk3Tc z9XmU-JcZ+sa1(#wI0T>}n_?TWxgh9C^sjJ21=q=~kkgGX3b|ldLUQq=gnbeW2>9s9 zYk|A4^C*Fk5Nx;cCMhlv&P>@~0!e{U;TgoCe)t{IDeA$fRyu@~M?>~kA{^!j^bnmk zH4|#2jVyzJs3D4&h_7CWUkebtqUCvxi?@wy5m7n_M4o6`7QSeB+;<#ac5FO#8{FIE z%b`KWXP-MWGaT7~f^I7zeTAnay%ABi@f|#u&GHN(Uuxc!lOo#Po{ZdI~|js(hUkMRJRD8RW@xnx}kw0u^o3kwL=ZEkGkr#Jt};E z+X-Spq`VlIk}#n@8YwQYfe=~%4-as-d;6a&z!<+Z$pMVUvd`h>+*ygv3?05 z0G?R?OG8hhG7T{H!A3zEcObC_$S z1X0FEL-dV`OlM!7dv zi961%BoPnJZnvuZy7fD3kX|?DsX}FBQ6lL{3$MZkG`is>^h4Xn_50Ims?y+>^>Ed2 zed+#>`JZR^7-&%{nE+q%{9nW_;cp^cFf+2=? z#9>o#0i=8dZ^CY>Wd4rbfhVeCHza!}|EJ~8neK=iAaTUEK)nT-BCtSfGDp+Y%@paW zNamDrNFf$5fWXRu5ieCuXGV@V0g#Yx3K#&izn5pdwzak|q?Hab?bwkTRqQy=0@jHD zTFW{UuY`3*Z9~F0iBA%HD0lZ>vE-2?a+66>u~!7DLKRS}s7)XQ#OGkKXc2+;VRT)9 zBFI$eJ!WvhYmMl=bXLpy5U{7em(FT>AK;^C6)kn@w3jE)F%@#g;Rcg2$?8%(AsJkP)6MYY6QYYRur^+IZJw~eV}++cu;Y+@4s#3j-`om2?2aq$ z5V;*F=60M09X4#02bi!_8#uS6M?_v=A$ZDTKoJ5UIaFezCH3Q1i2>K;z%O|b(~c)Z zlHvD1OGZCFO>*kKq0~N1*_{#x+XpI!Ro1!m*ruOhR<&<^PjKm%5|`erbLop>n}G<( z_&30@e|FajQmn1)l55WIHqYY`zOBUT;o&mTwl&euT`vvz9+sn@$&@z z)*;B(=+#^k&iL{vHqDAC zp2&6-I&+15PqYXe3dDPy#LY`Rc=uA>wKgjf3~6W^7_3wzKxBZE!Ew1+viu+p*3&Zf zdhJlmw2}Avb0$Qen80dzt;&mz>zYNsyadf2bQYm#%`*$|=YFGH7O98j?IA)V@#i2Z z2V}hhySi$)M#c0^*TYJ=G^oKT0iIgfbVU-|)|yu{%H<{Q!ChyDx;F;G5Zm~X9Y>+V ze3~coJjE5nTg~)rnkRCl1aB>wGe)iKLs&07XoFg!T1T2EJD^Kg434Wo6|>m_{+DRy zT6KBDBdF;?E1hYc?Bpqxbhy>2LM)F_R&@)Ywowv44Za1w2WGJs4oK68y3#z^#Z!F5 z=He1BdCHu|6?jVU@*HucmuLm9?Fvsewr~zXhiqLMUZr^b2$Bjs!WEAh8j6j)PrJ01YKEe$xjV+SDU442rU z;lDb?Rdt;Os{})oScg7yk1xU@^=T7_jIH4Z?@_`ma)NAcsaeH&AkbP>5M0Hwt%{*{ z)y@~^;BdY;_AdGZVw@?PC#-3!3~34RCSFvpty}SCa_n*7gi)!MVF<>oAafKL;7Sg0 zNS>%Hr35IzN(rTZK>t}t50hCLQ2j?=-3nSox(@gzPYf-QJrFQ5q#W4g5(*!EhmdOZ zqmveBc*4?`tMhj>$%3#a88$_e6Ygt8iMmr*`6q;)Dx9xUJCgz>XjqxBAiQN%g(`<( z6~YH1yrb$3fH2&6Ad!OBl>w}`9u%x=K6rIRGM`|-0J!GSaGz4d1wD4k&;`9mS*)%< z`Jw@P4Imtut4t{$^xGBJuPj#AuY9o*78{;1ao3>Z?zoPrR9(OH{IPT8@St$nko5-R z>WLdyP_S-j!K;|12Tm=P9wRklLd;u8v$1A05;idhayvY<9iOKpKel`k*ry{&u_$x34HaMy_*TTl2AXyPTvA>&fiXV;Im4#lau*v2?ky=K7%ymKAn;8) zxCb)W>v1sSLdeV}*e3m53yA{=zEsYHO%v0uG28U0W*4N$j!&iW>?p(gd|- zf~!pZIkOU4rTXdOg#`iBXy%PB(u7Za8=#HWx1ryn3H9VAyI?Bytwcs5_t$7Bl4PcMuciz z9&?r@tc$3faN5iukFD4x5R?^F1$Ec0=uXlS{fP^QhL?CP1v-cq;fU6?t6Akt*S5V@ zHe=$@U^Pi^xlC%IE2T6i6{(}ov4tPP6S2yMMq7MjTzF_9I$D|db#K7>2Ub=0LZ2QS zw;eVYBN6qns-rBXiD6>4WerN0W;&y`M|mb$-@iQdBaXZZdqYAd?tF6;G{{_0s#83_ z@KX2Lr2sBSQS$vrxfGdUObuQ6P?H6!iYvQ)J6C0TIVBq&v5S$-7=V9V^+4xQP$d?C zz{JoXx@$FKkIbieCUz9iyzdm`mJF>U?8>Ak?Hiri<*vyMKI=FoKJ6?u^R~80d+_oK zFB>&moG1eul5%5MHt*t|S#<1@o;(_F*X3}hZde*>&H#-x;7VR7DR&`pl>k5F5ot9m zh0@Dn2->1?6BLK1A&7{=dhGHNpVSs&G9b1Fht0!0MIo7V)+3W?2@XcAI0}anyQLu4 zQ%c<7nyMPEZ-I*jEI@5P6s+|4a6gURw5kMvm_AB02`Z6jvYor;Ow9w68W?a9l3ZcR z1sTjl)-N#@>@bp;u!TrU5)AHe958LuHOdo?me(N$nYFhwj$1TE5$&mXFiJj~x)@dCX%p6Dha{3O>q?!0hk z9P@m*p6wX=YmPxAZpt^^$}uQtED^L*_qC9Z{Dg_&5{@dM7F?Y(u@O58r(J)O_#UYj-A4pwaF{n0PANk zS)gM6mhJgQxjbT*mqwv~IY5caWXucOLEbW*$akl+o#~FO<^?Xw3+CX4V|78n;^Jaj z+dRVy=29hd0dJjcp}-aj%Jq2FHD|07YHZ^}qdc*1K48xU;Tfhe!S*q3^~xaqL=tL{ zW6Sd$fDkX$Ohj(VGMMJ05Hn@+;+$EW=VfPBEMLWOA+5V_SY;0#&;dJ5z)1#dn#Mbs z7=oLdeQQ2Q6=T$Vr(*b4Q4-m9!l%guUq~mz@Iy_`EJgd#`v9p^;K$;a_px@l&q}BT zFPbzKc&`!Iv38010@Xv<4`mzR#4+;AxA27pe%0aO{S$*D!{hKrOG`j& zkXsW4H(}ClafM9iQBZowvMsRXL8}_~4ZH%9mUpOsVjM2nJCdv`1R_r|9C=nH=F#|^ zr5B3#%NDR z=VuRBL8tUt@sc$&W4dDTriCL|tRWSIrV7=X z&yOTQRt|a^Wdot}M0Yx$&LzaZor$BIw{S|Fh`fF^4RoY);RcX%C>o9*K*R~TV7fUK zbtl4O7ECwKlOhVSh2vq~qDZJvF^)Upy0(gCJLo#CI<{&1lqJOoz@Q@4O*jl(^oOA8 z5Z00-P(>C@2-6C5DbR0Aj-TU43V4%I5(*^J38ij<5s}0ay*!l@s=w3>ps+OK#eBr5 zk5C#gXe-OHwrWq5b1?=o#ie%3Z&uO;gj5g?HRtD@1%Jf#egg9Swf#xMVtQVxCj;(BhlNVPa$t9mHN#U#OX zXgh9gKpI5zgb$ld4pOJs0F;|i!6sZA zYIV5Hr?#d?6s5Bl=iW!1wc{D_*;bM|R2z`P| znh~PxJ%M7-1E_0~a<#{xtnp+Aayrf%ihf0p@xoudeqx0`b~8)Xl#t70FseP`W5C%$ z06Qk-dONr5YRv~x8UXDWs@7oDw1915;eiB|@=AFr3mTl!1VUeh3cU>4L%&VJ^W6mO z_z`E&Un_!!W@thpyiZI>b;&Oes$C8$q8b%!*H>zu51V-g2YnJ#O%Y{+Iv`8}-At=% zd{P_LYMM_^+Jk7PMq2P4emQM8l8tnEFcRQhT7NtdE(rw@7y=N99|6oj!tGyxk( zm_5Ga@r2fRTD%f%hKK}8LqwJ}8?NAb#hB7ShaSI;TBe?MYk!KSz&wU=wY2b2)17hL z3K!=(Xoxswfh}NgqUH#+81Hovjsme*sE&dWC?=#>mgGz*oP+P)~nz|8x_&P5h{e4K?v})(NhW_ zLu)8V9)QyVDhyu8ErJ12K&S=7As~O$qqyL83?EX9WriBWAlk6ZSkbbz@Nqmi6)2lM z-150?nk6_>3Y2f2sFtmwJc!7?X`c!VTfrjJMz&L?@ z4ANMSLOAhJzK8b&E>xVoymKItQPZtdQ4=&>&lEZTwI!4E9Y!f|(9qolb?ta_&SEMU z`)QhmX@%QvjIL_H$OmLL&jSm7PAlOw(tAKk+ z1g@JT7Q9!o4ZaYePXEgZ?W~cA8rlo78xb*^|knF)XnB(fANP zJn&LM962afqv41{VOaPMZ^aT25b2tpM-~Ib6H+dYz=VJ#L*g%p_(P00eBUU}!JfSr z7!tct8p4fn6uSW2-z-7XP+c=AI64$ytmx+*H)c$pFiI86zOv+049kWP`2vqzVgq&cUoSHH3>yltHcoQp@nwKBu%KERb-OJ`ET{SRq zV}Zl1W4M!Q*h}DJU9g;*S6-4Qr&U7&>k(6hIR_QNGw0O&QPyeBPr`zaQ1c>^w;rS^K-CdxP!j+s(dBL)0QzhFIM$BpJSaz!FIUr3{OF?LO|9{B7~!Wt}*SnKIn83UgEL5kVoP&H)ecr9EH1)n_*HNISro* zLO#HdLd{&Px)igp3$DfySuWlxU|QhG<>A)`2mTSe)vdF+-JBFPQ0yYmYmI^vTu^~p z(Sj@sWhssb(Wd0cBxj+eM11v~-Uy;fj@6sQ79{Bc+oDHEvcS0LZ;e#NNHA0c4u$pV z`f`IcmEp;B`w;4`c%@aE;<<1)0F2%R(}g$$0cv?%CxD)4e;J|Ef=h?%hI1E71U-Vw zewMD?2%$62L`fo^5F1mWBtb#D0;EW8@^-c5&`V5JDEyvj`|TJ3363kv=ErpWJ|?kS z;gckK9bx#M5K-uahsdT6Z+X0xC=040A&Qt)b8iHKuyS=J!fZw#M?II-=$}?h1{@SZ z4NEctCJT~)mmLS~Z`4a8v=o8^O-8Coqz&hG3!rEe7$!fYJz;$SR1{*0^}g(L%;}W&~U<|vBZ(Hf}R_4*MRtdGSU!= z>DO@ENkfTaA&La{r|-`_4kU^?mpJ0a7Yx^ety`EGY!l3@qZ1V0;Q3}16rl+?RRX#Z z(TQbSzPR7I#OF*Gj0zXBF`(6K$V&o%fWYDqTY$l?&~#1of1Tk@81Ag;<1P^_r?yF? z6%w0|5fC~e zw&2)gw<*ntcP5*H|D7%V$&EMW0r48gJR z8Qx=SLk^v&uorD@Pm9rF^zxuF9)samjg1VQZYEkEkMnd|B!xhNv=BuLnG_dZ0|H$b zh6y3d8x>MPILj9k>>Fe2mM`ddm~LljSq!1zk6_#6*ks%QSI9vCnPR55M&ywv*=0mX z48TJHA_!^`utcD#f2~588kT?)b&#r50Jpw{lDS}(ohlw|T8DC2 z;nxZMAJ2DSxS|F2ABuJgjtNK2AOx%#WNcytY9%aBEC%r=;q0#kF-;g=st1;V)QLk4 zC?wjZXi-#m8^r3=?IZ}Q3qfafNDwSwNVQWU)i2JaFmg`x;c?Rjr3yBW;1WP_aU}&T z)x|3Tlt{p)Ifke-45!0Wy|pTArhtEraEIiu$^y2GASP=&P>(78hr)d7p%U{xppE6h zLZhq49)wgV@Jhf5BqJ@US<+-AMF5dKAd@gZ8J*Qwa@P7~xf`0ayaNCjy zcjK*^b5{)jnwiE@Q-Tl>@^uaMfiH>LY1|Ncob+~3sTLXlxK22D3Sr)AsNhj1=gKHX zSV|MG-(0YYCQtEWD&;fA%%KO7h6k0w4HKkl;j0OM=>ntD(GRfX=FZP?vN9K3;zh}nsT<< zTL^FxAkZGBd4hlk?m8DDKOMUumK6j=OqE9MOxmfq&l=kT#4iLHyw}(YMmH9CvSf-t z$2B&y&oNwZo#=s=Yivq{R&pC-D@Bvxc*`}m8<-)2#TNJi4A&|);6!WeW?#)Jm(Zn# zep<0}7-nYEPy~-s9bIE5VlLAFbbi(KTwPOG;7Kh6b&ZV^x&zzBK^AyYa(DQF0--gj z_;mOrb?R2fHdC;z%a4i#+N-CM!&MM24Z&B#*8+4cEqriP**+!HH}Psp=``TU=z#z{ zngqdtfjF1@O$SVWv^G6R7ncYDI9i)7TgAbuGQD|H7L#XzR?P%No7%W3Z*R0OjI$Je z_^4f9*91)+wlSjZ0LQ(9b4~sN%hLSooF6Ipj);3qVAQKnAvKpyFVCT}8hWIAUeNp4 z=&kO4B`s3l?|`I?70a&qCKsX;T``sosf*E5hnx7|1qJtv8ZKgOfR~V^mgD zgX7>;mXWxsPe4bhv>2}6hZL;sWWZFR%%~6A$uh605do}*4TN8l(-BZjA_mEaz-)-I z-dAkLDTl*~jXiCvQ*9Cw)r^aDa#0%#{qzDWNu8BJ8bP#PrfL-Djaf4z%HaWZveA0O zb>%Khv~yf+9Zpe!n&$g!t_w>X*foJUqgg4W8)}2pZa|B>sXNrQm;ib(1#^TC20t{O zEmD4J#&L;w!7+<>)~Bk*EX+x!ftP`<%7q>Vn_wY&LlRna1XBGCQb9lWp(TO{H;LvA z?LmQg1G5n9G*rEpCx*><{t~uKp<_)42<)ktZozi&{FG)~LGKh5`LgyBa~ zCd4NJL$s0W=z+6p!0r?aL&(AOt;YN=U_M%D!9XL-EUwuYZdPBc0Xqv#U&)4Ge-TGs z$L7SUFAFxf??aHCrr3t9-gXpt+G`EWX|&LAuUeR5a!BDlzDC$U`A0zBl_3+?5+q^s z9n>B}h>7ry@|0mGB#Pw_Luk>Ct`dQ&p#s#OVm1YSY#}mn9fv4ue*@VST1P6{XeAx) zc#;RltfW>uB(gZ%YN=};q1nhy#K$&WVj$7jRR#Re?ik%Efw2m3L{bXCD7vNjs1P2c zLCG+bV<8q53+vNSj0US16+k2buA!C{3==@;coKNQl(n`ZaPOldq1-7Vt&}L+7>Wfc z(u4w6H}^@Kf)GSVp9uceS@SVCG)hNJ#jP;{Vd1=~BQ}JEnThaiw7ZR2S!~k>-52h5 zw-zk8={s0YAsO_@03{X49WC_BAfTHFBLXj_);#Y1>3D54CeR&?1sYx5apd~)#CjSX zag30B$O49)YM|`E*b|?C5s7`$5OWT6mVmk`IUnZPGeYj%K&n@0u)>7CR-6VN z;!aVmpEip|%`@Q~06CnW*vZw&H{mJ^kt^QO zh#Sgcl))6HHII2P_8{T{<^b{^awm$z?lIo?zG#QW9$T%sRmU^od}tW&AkD1U`GV(y;fq0PVkt(%(I!CE zHDS9Mvwx`m<5j}OBohS^3LKI>mn*+Np3IZU-7vtZR-JW?k`}0eyH1h~E~F#u4Cbo6 z)O1PSO4A|BvcSWprMyuO)e)f774rjn-$Mtncy6=RhO%7~wp2&_Eqq%JdIwkxzwa zI&iGYDF%{Oa{L(KRL}7P(I*BuicA(npYLc6UlrXP_DK3>HAnF0xG^ZXH*TyFlh(Ex zu>yv%OV=ZW@2aCZhykei!qUpN0)HojL?zldy8je!3=KlCr_dvD&7Vld5Z9`RB$l>& z98NtR-HwLwRCd}z$CAP`4{==T9bBH_IU^jk3FF^su@0dYP+Od|gA2VCh($3%%*W6X zwNTfQlwZNRHyAIBJ-nejX-}yST~7{c0|nLQyYy|YsGr27ePqXu9eiS7e1eZp^o>pM z9Xoa$owO%m1I#Mo?zh-x5_@9wNZc%}R~{Jdr>e@kO6Nb2!3p6<+=G-bh&qlrEf$Hl zB^s)yDtLm+i!jh+#AD*2;AzqihiJ@DnM6`=K!IK_slz4)O`nc_f`nHbF~XiGLj$a+ zHk)NmwF>UEzib*dFsE9T0F38hDAx@PPdmw~@hovbl;XOhy-GGE+|zkFOB0wMvEnF( zlhPIyB}tU6DtDfkfw^G1OL(U_@NnS`)NC=`_0`U29m$CCmVotfbm$~{<2dm9dtb3ED0A+%q+2dWKMuLBo;Bgxd`p>Ic$i#PR%!6 z;jtsd3+)*cWH>z){w((DXDqj}2ytyPaXw{tQ?tS$0B2ECfjlbsSn5_vN+}&4vXerH zU~3}ShEN+AvXm=PWZyNThe!KU!vi-=r1p)BOr$3I#;@6}-RmV6JNAqKPs))6_YY|W zBj+3VWJ0$OCKFme@EmWmMzy7RVqk1+WQ>mq&=Gr*K;x788JQ?f3f(kFCX0iT8;CF?P$A@<1u`vch<#%& z9PuG|XipUV$f{!cT8S_Ov=_8GD+dBU4HV=M^eJoo>9Z!wtZ#)9~y-Dj7yJ|v0Mkw-Hf=(PN1X)WLyt`3>Pa8$iS(8|+sM#1ZM0GVKBn!O=h zEx1KO#L?@*+CxI(}oa5NeF?D zxm;rdiSohTMx5?Kj%bX!M>R^*Q`!SXMRXcgQfPgmt%~V_b|ciEa3%5`rYW>?Y?@+1 zuELwRwC4o1s}{vt$gpv}P4Y{k^a+Wg=#XM61uh3e^S5bgCux?J%?)00;N%K15Ljo} zL;zMJ{RAQZA8qQPM-6VE0xXro55)0GRT8PQ)mN2ziy!)gTBASEx4>5~&Oc+IP_`(105KIm<1f(a??_DIhBy z*`#Nc__QBBJ{&p<9Kivi8dMrlqjwkL0*COyV_$eY^Ap}YHQs8Q&7z#bI9ztt|QgdUiI8GlF{R@32 z@C=X>BZ6>|li#tf;Blv7Dks3A>)5koAPd_rtV%$-7%-AWKjZ-}@sS`l2KS<%NMzAT zI*Abr^B-NHzFF;%`cSmw=!pbHRvMnTre)j96wV ziKjx2d&m*^F@M>hj!kAL|me<+AG3j^V07dxM@R=l{>h8yqa(Ebh~N#aWjf$ZoIJ;j)p)n zraMvtyN^=m=x)9LUc8Q2H(}yvgu|Lx4znhjo)1Ydf&awK6RVIp1P5S=jj2eWWvE&& z6b=_UHfdux$@1262u)UqJ;*FqYD~p&QsAu!M?_l<0R>w{nJQA!{!es%;~=HH2*)Oi zBs-)@3Qs@o;p;hZLjT_2Er$#B~s<8+JEiPtd991SxghY8IAC8#KYVK91nc_w2gAQc@z1zdE|5gy^m z=z`Zn42wV#ON6g*Vm4|`p+bE#Setag!RjH?UUn%kBVJ2o1M2^QtL&MTKk4lS1rPM#Y2|odpfb&%UYUUuLzftTxXOVyeC0vgTyv?xFuM0%921=Y8JRW!QIZS z3dU9ei=r@)8Ot>n;l_5#(UU5}e4rJj6!F$#8_#F6J*j*)-z`SM_aMW$62H@KZLi2} z3iT-4y{AUnE`@M!Pdc{?ip=?b)hlE&uH&U;3z?Er%*-sNU>sr)=?eJbgcSj7c;p%t z!c%{VtYk_e2N^q6 zfjb=}h;($eCPZ75LI?n!aa?uTfk=skTeskP;CJkXdmYWPvDDj@%~s$lwG+Kvq3oby zP2n_pNB~g|`|#{VS?{nb_RI)`h^YORi*2+f!k{i?AiPCgqf57<`%7p#lB`SfM1~Y( zy-CO`&`R(LdWJ9(y+>j4==BEel6e9$4wlRl>9XewYl})K%7SyyBQ>Ar;JPv;3{Z31 zZ@O?tjZyZ51PV-lcw?c=4GwII>Qcg65L`C`mkI^7t}^}N+`-zc3Av<6*`o3XYZb!= zynz%f!!>ahR=ymZnV2)}0WplAxkJwEsB76GMWHM^Z2CinH&0n{sdakT9U6@QD#xzf8eSE2M4dd=Frga z$mq3W;}eIkyZ(k7Z!)HfC39wW&N@C{uGmiX7T5D@3yUX~ZcQos7mln9qK}|A3wcN7 zwq1@N)y5F)>G?}l)0qK86<7Ue!#ctR8*feK&|FTm@#G-h#3wG`uxpk215Gl|^B{r( zKB!;@?i39=2TXsTYuLp(ZDbPAp=A&5x0GW#!V5*mUNBuB@)p`2B%HI}II&Ec|11!yv4+{Eb8kItik8$PEGl zo!FrkC{G%Tqy_|y1{EMhdA(|DqGH&_EF|Gxie8NxB2z)xNX76|QZy27sGwh|3Tl?! zW6v7aJ#R?3Se` z2)h&EL#?gJLB4}02iu^Mr(6xI7PwP|09Oxwr>kYdvK6O6FFSS)h{;M>^8{0`!We0UlGW9B9eb1!I1LN~QC>1hF|aJ;`~VRov~KtiUt1pIRsj`7 zXemB2FL!8^1_0xV=TA^iK~#vv{kGp%Dp5XX)x>_=A2Y$>O3Gck_~n7mBjso!mc1J zIfxv3Fv6o8kRE=bam$m~^-)k@kMLw* zAM;l6W)JVkxA9g0Q(6>mgVJG;DV%{14ukAEksXZw2!FACEV3_!$Fgck%dPRV99ghdjyAUbZXNM-nIsC8Su z{f>B+wdTPGn(ImjPgI9g^cbeD$K1%J#TBj-@dIEN2^pWUsu}5;&gdpo205)b%03w| zJ7ORuvLqr{zslTB`Lc;7|&8rQRV$ zh-?Fe2&8hXlW@zMVrct-*8-TNniz6q36xNmV zk)+%GJ0#tPU|ucpt`KfIo`R$1zma%X3g$HsZ$qg5Zpc@tLf|!PC#}e`d&8Qu=D0r{ z!#il$r7|$QY21V%FK5t)MikPrCu!3TLPK1T)=L#a{hqGpz7qQ2S0&ASrxBBlN;4Q( zoiwZ8hL)ekat=-`tVCPUlpFCO)uUHQ=a86mYPy&V2nYP0NH*{z%Gx9FJspI}7w0=L zmel|nh+-K~6Os(LZh##t5j+7_MKCvDFQFMOuMhoCz}%H`nPtHl(Zg1cxeXc8|4X>L zQcyq6xElm6M)wneDQKHQwEdy6fdp?AK^pZASdGG!e%r=#*=$z$VcVc$sHs#6h#2xL zHfj?Z0;Zu_3D@T?h~(2XAU0SUHvt;wX~sZ%F`^B@AmFH=qHMLfzq+W+AiOItw{TY; zA2qW{285k01Hz2O*_3H7=#gMAzwyfB5V83RiU4DJ1XvKUxtXd$#Mh=x8M-0Qbm8!j z7tkD(s=CgJCFq9Fn@hcY*B_WVG&nvnFf4A->rE88y0TqeiEXQFWNct)WMV)zlFRN& z=dwNNTu)EBXV)5=yn4TEZr7@ZbM?@mno%yh`srLf)OUmGJ)d25|KmATdkvNIvU0AY zd-Yv+$l9H&pZ9pDteo#zbiX zUHPun!}OqnO0GM*E8DZPt1F)pKX-NRT0Ni+DnR8RN-Dprb7yCYe)e?cRt>vB1-m`d zJbNOW&E~S%TxUL)%Nw1Y`MrBwp3CpWcRREBd^Vfi+1=4S)6?10)sycw^QDf?o!R`( zY&P2oWjpt-egq2MdtBa;-@C_OLmLXpd)yMwb;D5dYZ;4z?jC>d9=FKz*)v9OynVUG6^Ka8D!0?3D-H{9?8=f(WW@gcH&Domame3!e9ROXNO)0j1lvnW@ zl+?VrbQBI0u(>8FWiHmGj1mwKE3352V*5 zZni*vA3O)EUUJuQ{8Y(usmI_&*_nka1bUZDk9%{KlxN*)_I3`@ac9R)!5MLQtIIx- z^hm&4xQu;c_RfTAH6h^Ky;;KfJPpqI)S@|Evk1UVa1`Us?-c-k`Bw#i-$el47!TlW z#-eNmWc!1g3e}p=6LLeHTNPuLavpoeg30Hs3YbYXZyI5p*oK$BXJ#NSmDk*IZ=zA) z^t|Z;tZ2xo;+zW$li(!}?q2Zc!V5^npvbmuVobTTyvGIBFIdjRwg8RAE5Hd{G`Y~q zFwJGtyVAST`Aoi(&li+#*K6o1Q28%|gEhUf0qa zG%q{uO7l_2^&!q;5ibWj+&{`YJ3II@wE?vDRc!NC%eejkzxMFpeqOOER?%H*TXsYx zAWk1LJorx0DfiY&Re?{A>-RzrG$z0?DCj$KN1MQ!NV;OfQ>Ls(|yBEKrII&}d!@Vsc7dt&UTH|GTxadF!n!ZDf34|JcC9)HMS) zQZr+Q-S1S!&7y1i9r^L4%CvLH%Xj3v@;&)o9l2Xp+A!EC1H=8JBZI>e)O0SJ?!f%_7wfztUceVJ>LdBP?-;{W9$Ytl;6bI+Zfx- zPO@$6WYY%5wz4howT-c@7oNe`)=lTZpBFH;<H}k{@jT%bJu*f zW2idb*SmqS=5t-ofI;9fzHBa+TdxidH!+rjv1FeNW7!O&bv=VIw!R65+tkGVZ0t43 z#E&Kl&1v6w`h5?7@tzY;Pn}&{{M55w^2jqj@PempY<|&8-+c4$|LTRG`1ac;-+1-4 z|8oAF+t1qf$3HvgE6umfzT-LVH*J6I#P0Y0-YaJ|HT~;{eth1yGk3k}<%bWwW$L|G zFMh3>dtl3-{_r0jc+>IczVBZ?xbvl7yy0V8Zn*bVZ+*%AAFEjZvZLp9KfjVctL^m% zKmUbS{?P@0{YQ)KfAGr>zUYqiJHPVtKfJIb@lOx54{bWh?Q7oae*Ybv7hn6He0S@6 zUR7%A?!4m9k7VbpkN@)vAA0c6@YgST!OWi+ht}Qx<2UTv`n(sh?Jv0LUB7EXr96<74zLpSUny>4;gM6s`LW@c&BFgkHz zF2ehEr>2ehD>c~&tFu+TIsFQ~=J{X$`odT4JKA>kIkzNdTi?*~wdb^7eDjb0!r1%G z2OoaxPyXh%SKs}p>_7x&(91!W#fjgT=IAGPr2(0&-(jc{_>F*ZQXb4 zw=VqieQ*B$%YJq9m&V@vg5TfMlRNp!Gv@vv{ii?vXyw)W*FXHNKY#J!=YI56d)xaz zntdKSEZej3Y0p@{^s!I7Puuxl zmu&4jx83{U z2X;RH9oN5T{clg)yX$)&c=(5({j0mTHD_Kj_=ZdV^*dW0dEQH(dTQ$R8%L(^ee@6i zKKZP}=~q4M^nCUsUoKws&C0d2uXxjYUz6VS@435PY`i}6$hTg0V9TF<_qCh%z3$G3 zuV}sTX+ImB`{~S+F8I)I&o2Jo&BM#{9OXgTMcG7w7ML(O+El z-RqBEwC=&z8|k}WcJbe`hn~9m&JPd1_@Q24X~ygCyZz0F-dlK6*L&aeSO503{Toj` z;+;He{j2W#+!a54^@o4;R||dC`|}TedUVgGx8MJd-~7aX{Pr!g!!P~B_Sv_7@rS=X z_Q#)l`hB}gpM3Wp6-Sdt&^}PDoAA9Q$C;#!oyS}sd zzT1z!b9~TgHQ#sa)xX(e-S@t2OHcjT!Lz^ozd!$-?|uYUmyE54&sqreNTCJ_w3s*{nw7KzOeNt zkKSy4X7;+Dy=CF%bNR!&Z~N#EANiZ+v0ab;=+4$({QLvem;LI_m)!Q_zE@p1ea}P2 zzCSzj=L1)s`tdFKUC;aM@byzS&igx`{G4%LL>&li0Dtsi~E@Xub*`m%)+Z+-tIKmUi%mp*>aJ?`e0KX>PiuiAEh=DYXb|IL4Y z_wGM?x7>B_n|i+5)iZSIi@$c$%WwYdpUynzCtvqp+4{B094L{`T6*B2yZ`2ekKTCd zmj8U}*dKmk?%rQM^xFL2eg2kr&E59-8&2H$(!0L?&cC?*lh3ubZ;j2@>f1`|4W8yx83o&!Dqj@c=1!ebJ=%4@_BZ&=cW(+`R>i^+nYZ0C0@Am zx&Odl*LqgVNA7?4;BzjyzIgkiPia5@C!ctI@%>*Pe9OY%U*CNXjG^>_ugvz{n)P4v zN1uH6hRM(KkMwRyIuCvED_h?D@X^JGK63ltfA0eucAR#10UWvzrXXx*Y|g{yldNaPySV>_2AgZAAj=eb3NyL|Je_J=F6S6kG}Kc z$LuGSu6f|nE37Z??0DtP>(9RZQy;wc>YJbWgQtHoadqccdp`bA(4ZH~#p28?n1g#r z`H=cLa6kEbJ!1@(4nDx=ql}wUM3Ny6(JD*38a@ud_y3^Sb;2Hp+5f3ozifC!6cqhjDGB zamTd30oq@u+Fu`OzpJi&GctZ?8~OlwpxSQ=kAJ;te?z$a&0Vu|x2BBZ@{?%74q_U| z!Eca_qrDQ_z8!7x;JTfWQty6RHTd^_tZ?dipm3gg-UeLx zP3MRLcQeKy70o(!23xf3Y3D?$Bi-52%=}_CRq(&d{DNv8; zbL!N#OD~(B%_)HjTXn4?NffZFSzB4c_5=nyMhPZbJv6`F8V zdL^Ee{8zEOfKC&;2-i(m)=0NtE`wQ{R7D0NMF23(8~ho++M>#w@f2A8 zpqcg9jO7+PsK`3@sS6nU^aVoql0`uWJNIl@qmx@VVinJ-K7|eCWdV4x3Hz&7^)c-L zi;SIY0>%SnHe(sr_o@I6+pkKBxSk*Y|6b3A@@FzYk8QZL8yEwdtBG*8X)9w*Kp^Ka z)`WKQ*^F&@_W6vR%h=Y9=L2$I2wxY$R}*}JEssF2Rqbj;_IWP#3ICppRLH=804s%5 zdrQqK&U>a0mp04amHGFMz`C{~m7N4?Ll|zm z^wMiLGAz3d1_m}G@D?CL{C8H3c0Cn)aT9CaGGxuW&hX*=7c!RH^rPC*OQ-$-2-tNh zjtwqc7$H!+q%!yyh-3po@ho-{=S7|wTnNA)kVBXCb`zIQ64+G97%Isu}aT>!e7#lqY3Gz+C&)tl%JE$GdqJB#4 z^aAW)VHsn48Dpc=&NCTfX=>+6#@O%CZ!i;P>GwXE3$?Q!@REM_Lz`3v*zFIg&8rw= zuchAy7-J7m8IT7brr(1=1N0j_u(Hi-7-Qd|x`!BJFQd7DH}(@$ewZlKo-qbA z3ZGHHXM*#!jIqxGaWKZl7-MgwGUJS~Uiv)&x(M}km@)P~`u)paG%^k4|M=KdQxju{$0r8*r$)vG4-5{EgGAm;l`qpqv0=iknNVwE|G>V( z2lQgk)QX*Flq!~erFp`rRLf?%=v1K2`TbY-4Idbp>gyjG9G)5&>Kiodc8ebe-{!M>!5SyRbwN=69dEjQ-{Ywqurs^-cofu zf7Ug@Y1q7J^uWQ9@d>@BoqE}l;TzM2hfq9YbYy(uz}Ud}RR2Dxa4vzoT{hUK)jUHa zf~}ajdIGH5Yq7OEm!CiS1v9(UW3Pts922ZS?TILxcOH zFalX9@i#j9ZNdJU4ysPA%9cTU# z%r0CSf!)xbsv1IDnqfdS0?uM`6h1?Epc*(I3HCfxO44j7{}5x%XJjA=WTs-4EaS5b z>^pX{`FsWZvNM~)cYCS)#hC@e&6KU_j9mCz${9cuRr#V&Wm)R!*z40s6&ig88Xsc& zWE1$eVfWw}^matN-SXixP}QOWi{|vXjJ<6=yOs^**Q4G7y1&>cV$IpvxuTo4oQ!80 zcExea=2EUJ6B>&IR@s0woBCRg$2OTeeUoxowKfBAH;HjJvEytSj+&>6Ji(2spMrx; zl)`WOcJ)Nw8IoG!5^A@UQ@L&dL(5BbKxwg=nZh(QRmZaZv^S^9^Taj@6X3+hf0x~| z=8MGGU=id53b}5?VflB8F;MlJK$iinvzf7`1Y=F0tALIICIsleu&TH<*rIk%p2XOe z-<~>k>dEwaD`Wh;O%Tme;QBIeE16!=E$}|cKn_7BTaOzM%CTUU`7~^*LKem9oZ~zE zxKnfC>e@wfnj6(>nXb9cco3jq20;;-BsYch)Z!4KIMy>3p zimq8QZQnA=9t^Ky*#-RG=9w;BE$9`takXsln~R7dNcaf5)e#_K0XP_I*rfvBOUK>S z^3vaRxD|Q6A`GKC%iDBxAevqG9+ zp#`U0s|X0f2ZG^AR+OFD0QDMiDs01>t4u){T7f6>UEP&wF%{Ru9sB~X*=5u7Ql9Tr zt7d5%$Lj_`7s1LH`&HnlXAfbHgLN^WM#3q@K{G1s%odEQg|Fj)iBh_tum#IK(JyBsA7(jHIf4EVp7TRn>%G#LD$( z+J&PoESl3;AP!NZ+J~CBq=TIjWJ0}B?<3&H4mgkKQ3WowEPUSp4B)AF=40gjAhOQX znaXz1jLzK9$o^T!wrgtL1~}~k>ezQsqwj)22lRMW<^WqQs0pjobZylA-QtOd~Tm79jXMbS+a^g4&!o<+ooB9E4lqS zD9~znyizO9wei`S>3Mw7apxmy!mQ=b)uzFW48RxsdR&wS1)&g?uVew^2|L?WfWr&R z6ZT+#0S|EzWddSr59+v>Kuq9VfS{)%*Vq3KUt?eg0pcSsxNu`5Ua)~>G+wX~Z6ja? zXYK3Tf6dsy_{3Cy-$WlO#lRJTi|K~l1q3ttCk=_gp!zwg`u>sOs|L}Zp&HPw*G-wC zQJh1o`Rp6|4@~Xv+kbFi>fng*D5xrzYlGYXhXbIKO%p?-{ex&eBdB<&8Mpi|H*6MZH_^SE^Ugn+r1#@R>;ql*+ipvSSCWY!ZKm zS>Zdjqm_yOf)`sDnq)^dv4gR!aC@MC&l;}j&&`^SJ8Pl{gT>OAp@PxcdExpvUO2u^ z@hQ<9fodrr9qsaD0IVXsyNsV%bhIYpz498KKD?D>vs%$ib-^%}FS z*hy=Qi&}~|biju4OutqQnK=^ALkw$WU`EyvqiUqMq6Z+SUL-SOPTD&`E4?u^rOJkB zq*qXndMgN`7YGEO)p0sN{X)3+80H5?3gUSo(!O7*7F6RKAy0hQ`bIpF!5+)oa6j&C8yI+LffH=Yn0_%+G)koBVM(9uL*d@aGv=w#%bidT1 zIW4_b5ICv_kRm^UZKbz0v1}|eIWNF+?6Hssux%8*uh|u{0hq>bBCe1Rk^+ToOOCN0 zfXnm3{ZVxmO?ReNZigJkrdxF_&rIPx2JPIbnl|^Gnp-r9h(QGudoF&dv@z3PBS@s(EU4Clq&I^X%ccRO;hT7(QkX5S zvk2+L;Tn5GNRJloSHoEUY? zW7p0CoTx_zBIbc(ii|?Q79eHXeu3XkqiSi+Oj~va+`jb0f;$zOd1{77XPr^QD^2sG zyWx^Gsq}De7UvwEI1-x1QI#wj5KpU(=a+=Pj>CnUWuEd5DaW{LET#n-);!atA)^6& z+_25!t@AaVLNgV^^G)190-g{WWXf4~62TDWoJFwNiv?r4xY8;Wr^LIvJ6Bdb9y}UI z6!Dtk)LYebE0*WMtp}k0N++OM_M|G=2v!`n|WK#}3Ui(K6+1Py$puRiZ1G$G!LU zLjyyyK%h1@F{#XL%akl{9(4sJW45YCLdr;u?Kw}W+hzwFdX{Gj9cW{Ga$;wg0<7r)MO{hCqcLq>7VvdxG* zkV8iL^PCxf(Qr+T_iH-XG8=H!K0>+z{uFhZhoSg!x_G-Lp$7 zPl93Aadx$ggJS@IkLpjC`&UKF zwwF+SgCCj_wGkhz9p^X4sZUo*oQKXN)(;uJYn|Z5vSr%f!6*taax-;Nd2M+A!Oo#2}&gs@-) z$9Lwkow|Kchv8CpIo)Do;|*+i*y1?&ctH%1R;)9k?b!|aeG}7TSI)X|nepUB!NcWWHw zE|J$=>sV24Fcxs7T{q6*iA<>gvdQ3(@0SSGblbUzeYK{`W{70b6=1smhrKroawN$T z!;o23T~%3EpVPmDJ zG)Ai;P|7OC2N@NCEQVwQMqrR)*(ft1Ny8li#uy}dUm5?4o8}rZi;JxiqF{}YfCC_J zxkouW(s>gl!i_dSo4^nT-=z5jP#WSFXcFN-Z@qXROVb}DY1c02@uk-b^NKunxjc*i z0Xey~zPnS~YjnERTCG)YGn;G6_w2EgxV*dw8L^-X#H54sz>t?pj4 zR_)Xi4FCfy=xE%)Tge7C>a}{S+G*?}V#uQcak+*_02}RldY>7MT0lX?VF;W zyk8alsCLPh1K)ZY+C8We4-&4R)~fA#7cQmhJIv;ruTMi6q%@u#BEJhdC0N5bXzdL# zfVj10wR0c#P&5TLxMIE+D$K?tUg_=Xr!e&Oy;cii*|qAQ?A6uG+%#d6I7B3(9<6xGZfwMq4pyq3$CO1|VN0n$m zwI{#%d66yHtRM7?KZWXVit550fHjktuRQ4((MGFZbz$WPLMT?w&V zvY)eA{4^~=u|{WuP~k3*5usS|1mQo^vgHuV6$2nHzIM?Nd;t#%I2j}jc$`R!vI$Hx zNNg~g+|aqaS{&OA!f8UP9H4|jVBDz}X)H4!K|6j@1sU~JNti*VfyN4bvzQ1gD5>PJ z#WK`5r*sOl3^JWW!}K6>C=l8Sr65Bb zcd}4Yshv31u0vEiw%Bzf@>h7u>E{sLN|5G?x#fHPs%NtRZ0#s;y#8KD?T+7e`d(*1 zKW^{tJfgjh|CD-*^9zeW(560q)af#tTNr5EvLs>?1u)uy`|PWz><11b)(PDZBf*RB zBvbwmuQ6(;^{1FX-{-7$=&e{gwCK35;{lrk*|nc1Mt6S7c1=gw{!<}6^S%_)27Q0Z zX&ZI-OAr)}+Qj!Fy)pkJsE|loovRhw{8(*P0+l&#X~?(@q!EG z^2&*}wGuiEa%TAA=%qq0zkSYQY;mXgH96?L0M@YZF)FFKb+-Pe-K7K|AwvFsu2tP6 zijD%q?x6Y%oRD0nH*|)k>-tuS=>lg%e|BfLSx21Os&$*K`qplhnc-Ug=xAgH(UEGR z$8IiOZa(hZ-`&~US=-y#sJ9q;%L*zMN=r6m^#z`$q>cCzl!M|R=}q*KR2#j8(DhJK8}V>TlJ4aY-d zH^w8^H|=mv#Oar}+((E|Tq4d#+0}BnBG*AdSit$x(DY334e@{t(g>`~^@f2)j=0KU zB7wih?tm7FSLYWD{1T=i8F`TlhWLX`Xt)>&um(8=kYh81+#%G%#TK|gdPgLnBiFRx zF1HByP-GiZoG+qHf=N8szi>pU4dIs|8~dT-x*%JV=n&ptp!Qe{0DQ9??}+rAi1(yijl-vu zyso$Q`-1sUF6zI)Yx(#c`0jN3foak1hz5>t8>F%n!eT{(@v!Haj!RLU1JvV?+F%Y2 ziU-FV!+GL4;Q$tIJi_&=ltW_fM>IgqYd9E30MG;?5u0x2CLadD;3;#5|2YGIpYjDI zL;(o+n3fe=DZnQ<9NGr?AukS&68_kWLRnu6;h<6Y**A@|K)@v>LJI!3bF~YX3m+;x z(q-GXfR+H2PP-OQ+C5dWf3@9d?e1)LYiqF+5!BNA6i?bcFc=mGh1yNlhj`NNfjfjK ze7jX|ZdKRo-A9ei{q7d@DSe>2_v#I}%?XEXz9^B>)|T*`eC8T+VAunzW@MM-qsshURM=FErNxDLQS#SAYe0wQJr!bj02Y{wHFacXnRs`Vu}o|FM5VckKTSe(duxi$i}K z)Y4#G{?tKRa@)7YaMYS;bPj6eeLonI-q>-O*?C0GVcNEwx0$jAJukOyC+*JUT4gs1 zNv7tEjU7s_jl=Jw^xU?gn+uFmkMrnt?S? zkCba*+v?Ji=iAIV$#z1^KcKZX(fB@?1fOBsd2qW4Flv z?F}Y~!EZtk1G6#+b@k8gumbQK7q|kOLNLHJG*;6RY(-p4jLBG?U6`$8Ck7X{S+cJf zo;`JXrf16PFR=&br};N^H2-a`MNW)aP=3W90Ng0UC~$gX(6_LS#nZs_O!o-(nouxU zqRKgdV#N#zEfWlOz}mUmP=hO^&j>z-S<6@CJJyw6tkbJv5>v?`Z^<&aMTmYWbe>*X zE>{fvI;7lO4djsN)%kMSz%KzCdA4lm86@p|5*V6rc+lvj}--atM$iop|Ls1u% z0+NWNuYmq-?tlQlF}_QaxeYCnz9;#O18PNn;0)(@PvG;Q@_6F$xxIXD>5#U{6{Ng% zfvy^3Fw~8bacK4&*NKj#MS}RJ2T6AzZHMI#M`q-(7b!gq?`PIg5i|e#hZoO*v167D zfl`YK$-OlQY`YF&;kkidLIHEkf%@@_TQC4)vDpZ~UmXL$s-y0dV1b!~@0Fe1TD@D} zc?bb45nG1-*GvRTIkhpjH4s~~ zXOZFqD+i+dsld51(({A*%Q{fE1gOVLA)sB@KpzgAi1vIluu(-5K80LcptBj6o?U{) z^N8y_r4R?8A7mvH+46D1iE2M5Yvh2qETH_Uve2nxW}#dG_xl)TH7HOb0y6GNh(Qd< zGMISeq+tWg9)k?4=U&egs3Q1>xtD6H7w9CK-!qmD0*XQWW6IUo!)79yXv@4Ge)!nA=} z+*|S_fXAm)!K0co?M@aqn}bgAd-+#pwUgj&x`*Zw3z3vUwc<*71#Gh!wlNtlgF#$J ze;i0+f4~ZI_+mnR5`g(DWTbXp?8YR43sG(@SFF2$UNbSvBm>iMd(z90&~D#<4nmNo z6c1k`O2KWFDD^f3AOsEJ;o;$I!tDfAx*LsFePj1i$gBwi7A>fU*+~H-lJeVslc&c6 zqgs&P{tI5|~JFrre#EX7n@cY~HV|HPso4saRb zp3Sn>iQ$jJK~iOwSYA>#va}VdDJF%{1K=gO&6GPCikf^Ik3-WBm+)5dIsA(PxUzEI>pz2=Emj>M)3fa-{-KEAW(oB%8X7Ls#ja z5QPpdb!tFOzAjv-D2Wv0ujU@wlZk7ai!cMc1wdPZSlZf$5GhZ5HK@#m`FX(0+gIA{ z`wdO`woxY@P`n);SXbJj)!K@U$XxIjEZ|S=mR>;@d=1u zqk@4N#JtXr@vrGH{@)TuI9oM=@f+-)SsNGE=?|hq3g1LH^}+ewr?aGPhDUI7DMCAf zSm*kOWN3mtyO6T=%z5Q-BP zJP)M>{1{|@o)sd@l7-pV0YvIim2t!HjqfvPT9ycj1prOw=jRRR22joaBi;~(m24Lf zEB~ilNm6B{)c|qBaY)C*m<4``{X5A4-pvB>oL)QbQR=l19%YNy_9b=u9uwZrB8z=5pQ@?1IDw+TWqf-HHH8DPxuCSv5d%&(vUdoIQI z2)_wgUTf0<}#~y?P)!4_o|J!3=<_g#apUDRPDsE)@LU6Ka8JQA9Dr_AIHoE?_969RRV` z2_Z5A+)-0F6)n?cp2T1lPQZL;UCCmAp$K!8^Vk_(PhJ zjoB1t4;-7SYEt%ZRei)uGPKs%CoPmia);R?5$Z8NPnc`uqs0+Moxt<^zziIJ46!Cy zFlof?l+W_k~zhYKe+}*<4rKLp!zYv+QWmauzX$f8|%|+J8 z;CQ5aJ+_mtHDZRA5W#&k51GKSEdM)yBA{7Ca-_}w&#Bms$-&2Wbi1jYejsa(Z&H_bPW8N1s#D{fo%2ADl#Wf zJ1{UmJpH=L{YJ?D-CRZ5MBy_<`Sq)RPw8yW2_dEid(*$TfSCZMjf@qaE0iYhuQ(DPyT| zj1i%5Zm~7<`>--6p^)KqKN1%-fm02lr_(PN)}agXMCdP z$Er7VSoH^-iC`TIwCV#Yu~3E}a)Kc=zfB4nH(22+d1j9H36eQRH)};>V z96xUn5$e-AG(PVHLMRGw&B3JuM1!1VB6pxSA{yG=-f67uwPTO1FU5PXv##0@9qWkr z(SQbgu(LsrqqLC41{C-&YFYzuq<5kaIWzF;k!^{XiCu_3HZ4?keCw3lP0SP{CFxJE zl*{w{l5JYFSt8RsZln4LrT-jzj_DL7a!u7N1Q3p!_r>TaY}89+T2eTPhwQcF!KNV* z1@n0O!3i)7bc>@D60YCNC0vsjZdGXQCzmiE)0NszJJ!j))c4Ip^GG$D2HOgBO1u83 zzSeGZ>gmFgU`;9n3j^e!oE-~MoL~uEzs7MbCPEkD5Ufj}##;iJ2j!Uywik-%tnw8* z_H8c|d;t%Dguk)8Bn>*ic{+R3{e4NjM*eU}=^R^)1nI){IX~%oOGmnXN02UTT#&9U zMblT?X(wE2-~umZ2#`NFZOCO~K}c29`$3I;$BigB9A?R!2uz=tsKP;A4Y*<> zCPh-kA(-D}yfD6=NTiY+2Brzht~r)Wpzs}-89qiverds2T0kz{_EgTFJqPAqd430? zW)sZVx^G%c&|u;~c@=I0R~J?30(&B0l}I{UZSnzJJq*F(83HXrG5~6S$Om!Fbdgf4S0mzR_ERdFAqb&v_GF0OC{S32Waw8 zoFPT%)1K5CM$m@TUq3k6BQ+On}~x|zbx5P)_P3hVge?^ z3xK07h$uM@w|WufT}g^~7vdL^eernB>io`6k>1u(BoT{{cP>bhVg{&Ke8M#Y5+f55 zUr}=4gk#fnzF=yBl&wLU6tM+Nv0Ovn1B(x!T*s(YS@IyE_5iBFTgxFZ`74PCr@_}O zcnH`^W;e=~6Zx!$4l~b5(6ADj#ydfAG00FZgSC=R0Pj|@6@Y^4FJL27=t0~&%8dej zxuE7Zj6LArTHmhmXakt8i3cZOITy&-QBJ>FjNdwRRfn?+BaR6(DD}avDeyym^R`b z6G}rMcfl@QQ3sWFQ;XAMs)4u?`f9z4T3k!}vkk)&x-@v{=coMUcYbKK`P zCQ+C9128`X+45x1thmGE-O+z}9ATR*+|%+{4l#_;QCYq`GMMs&5(DLIO8i#RM#251OMsJAqPCXi z;i%&yRt%J<7R4r|oFo(WnWIr+swV+j-ee`Yky-Z6LbLdsu^A*i(j6*IqlCseMSTo{ zgh^?Lg>*?0+2evXa1=LUm`V`?Y&vx$EtD(s@ri^5j^P1~^Fuu#cue8&;Q3#21=hT) zZM|TbBv1btH|~UAjR**#xUwSPZJhxV-1C@W=!B8!p|pJyo|NK8=O;A30)!@=yyLG4 zLX+r3kemDdkj7a!AP}wy?3_#nkgS|E)MW2?A`jpDrUME>cXF+c4=Jc8Wy#4Tuw3%V ziEdK!*TMVrN@ae*z^~Y;Cqs^enuq;jGwjdUEnkU7z}|3GmXNQMm;}5P{=>_4J$g8M zWDZ?cA(rn%T34Pb7`uj#H6kUC9N(1wHTFW@7dc%Cq0gyBMn}=W_eg1os~qnWDPi6n zr!U L@<;u|EV%yuRd<$$yBT~?SCBB}h8B-yb4O-{g-=PumzpbojVR!6<>4QYwG>@I;`ZmS<%L*$J>dcJk~17S z)&Mx(muqV>8kq=%$KR{LYOcl(`B3XxZLJF#+*1`Gw|C6KinCOd7bi9ho_CN)N(s>e zpzLLcx4?t?@p8wuD{{ap?WzK}8cy%l;j z-BLqoUIhDk1T|hZ)wJpWb)ntHNFKLpYu$Edw^iM&cRP=p2tiWUqO&JGEerNz*#r>866hrb02r0U5_25127X|dXBTG6rBR*vs?tci+_sl5bsNVYS#I2)?d?vt{ z;k&~U)q~CrZHm(AA5(lF>m-$=o<*I~YS#1&7~etU0aBJlxf?B*rO0$VD)Kw=Im3CZ zQMa);&5FH#Dzz*j${7a`G=W9LIm?_-K~FDBkKA$J@#Gq`;z}9#V#fvMEH#V*&QS zGux%?w1YgN%$4ccmglvkF4 z`Ya!#M@U}fh+Y{$am*_b4jvL`WI6r{G34`aaJ3V_gJ|<-a?$2OAz>yW;v!$G?sax~ zY=3C(@)Of~N~7omx6nQSxtbvwis0pyU}G zNBMXa-d9ZF{FwQD9cKO|j+wkeftb~1gS3@Y;ApqLZyxxFZjm1ZV9yW*uth-{*OXAn zAG19azlxy<@{+3Cw|XBdrjH=b8AqLlRg_cGex$H$wNklj;FpN#p*#FA&&P56qXL_X z<|xCva7`6wUSb3l&|*kX!go2`1{`OzXWIc4VG#ZP`&{&!NJQy+N8Ej8Bd&pf{3{>V zx3(T{GJD!SJ!d&~9gg?TTD>pQoD=FC!;Ul4Mc_vGT}s7yun0x+ma5=QfNQDQeK6_byYcBHHd! zh9>y-iExkrPQ>QFe@sMNRo(OonznodiA|kZ^i={RzFMtqH+HtGjV);T5__wt9Isge zaK{|d$~-DbS$U8)W%(nee0zArf+b>0m`4f!61TU~Dub2yb!%V-A&u^hqy3d(Z}EK~ z^)z@$14wpzZw0h5FwRU=SvFKvlgOSx;hWo!+n;R30yvHo$F-!4^hRP_N;M%$%WA4^ z$aS#H7PEm`ud&WDruVEzb%0mnHGz6lte&t9W5p$@yikB`0HNVEH0i~jHTQT+KT)*#l3I2?&smh&c)*D}Ih;9;b z4Zdu6*T&y5BRHHGP?y9zfw{b%z|usS1fD`>9f{3YE_2jiR~%B3ID+Nl%heMg4-4lo zbr?HwXgWEo#zuhO0#UHF)Va1&#?-JZ0tgn+EO1Qjxv`Yzq?&+HLA6>ZmYUe+ucrrGPFHu_tf*|3aA>WH^j=C zGjY=Hfu*pxT_n%9s~h3b7h`|PAMQTtn2#P*j~;f~{m@;0xEen8a?Z#}yQkj$C3;OA za+7vXjbqP3jYG57*Q@LI>)l$b@sOE%zH2+-$c(H34Q3ciFcW&iQ52XXdnP;zUBB=3 z)zo*%8%?-e7Pp9}YU;kS5Q!N;OXB+bR4v&`OQ%{=xMUZU3wH5Ty{H>Exr{8*RBcVD z&`;gWvC|f;$*BgU=Ki}THxJDSUad9S&1z@;e!bPjSc46m=#(s`CgYR0+?!lQbE*OS zDP`Sn3dme2AF}^oyx-L{+-(nEL{JNsOc%N=UVz$OkbFTw!pRsLZcGOE2#>8CBV?Z^y|dPc<+-Gzx{`shZeT1~kQ!(9JQ!m+P&1bqf}L zqqVzz>XldR-fw+c+7Jdy@E6SXrfBtky;?g14OLezNkh5q#+k@yUzs-9S#Q&=r447z zug;G?ebA{KS(_g}wCZaQ%Ma_%nwZpGV^4Cb^;Pq#qtF5l2fw1Qa?Nf2;LWN<$t-U5B6~mN=?Z#)PM|c&dPPGBI9#*#= z)E_5KAhr%*LLzW|lEo0d+TMozgnKM)?4@uRjcnC?=ElD7f7BnEjtkB=0G6zVfOJ+v zwb8i=ZOm$_2(V*SR1=^JJrg1R1`b9&IayiN+U&y83Z{`|!w|MYtencU@cFSO+ns8w z)7fGg4xFQU&%ldb!QK<4RJ{o=^{Obvl47pcSrS{#K=*xLu9rA@Svhru8Bo0F44akK0?jn>(8TgjWP3CDjfSXv7Q(fkkAkA;v2xWSFjPhQwXO z4>&Kz{vE3gG)`+9Twm~!PG4}jaCd?kPfrwnqkuA`O-dyu;g>KB?1%;>j2d*WLP{k_ zsTGtgGo(9hl%YMuSpFqY@jx&@Z74s>`Cwq+WH$o&)~;UCU8b3cvBo zA57u)>xv9*299a>j0&11P1?O**P0{!imV}+q4y zBqgw#qMq%0?h!enAt{vt`fTh3nD&mmo1!Dr>KcChBAYGTep}9sjWIU0f|)Vu1)iN* zTl|w&mkqZKx!<+Y;bK6JlPqs=diWB$rR(vk?QSd~&DHYX8uA2IL_uR}) z5@S&Ik2N;GY{bUVXmm8kiTMVg9@lrIm1SZz6R(-RO#4b4oyLh`>J(^9AYmIe%`aVZ zkq`^TtNh|nAKTTeSBml&C-Oa05D^$pHT`_VYQ=wGv8=icZjqEQyqck@!i+&c#=)it zNs3IE!kR%RAt~0+AeFdQTA~3{IkwzjQYfX0*lKT1u^wcvnRsB3lnB9xB}GDmDB>c2 zt14;Wz3m8COR~$!cd;Ow6ugZXC>bD$5eP9|%F{{THBEt7E;dL}5u=5JOXdn6^a_b3 z=h`Bz9VWBh6d=Jz$<0FL9OUyeVHJF&+QuNu0tlo$)Nm*$b}OAU?YQChU>m%+t?1TMC1nehK1A z`Wd5&`@WwTg|ML|JyU=qjs(OP14>KTW(t!baSdh83JI8r|HxaTZ>a>4X#FjfNNU|V zg#J>g1R+v;AvCxK1ViQsAgtwukSR+GtMAN>PLj?DArdE>;V-^Lq|}l6?QzSlgq53< zQ!%l>^y8MqC?fPQr$i8O_w_A?;Qa;P|8E&mh4Iu%dVi8JMCdk8gCffLf+q`FwXdFA zPl4J|aqQq_{kz8)&8mLLFCRIz`qPau4c6{ktDk+k30mDNg0)1=8@7uXOjW(>>C9e5 z9M#`rfpWAt_w->X-qYE<%AqLcG)l4I4d_@x|1RRUG_sjAL za(k);M9P$Q>yi!PYmJyB0K_0^_`wVnx=tltl7XFJF0}jWbV_`feiundu{yZ9>_1|7dJsP38-^*n^^e3loG;yZLb9-`r$9MeKfr^ON^W{(8QiAeD?j`SHyvk-f!LHqC%~8b3)vY! z6An&@B7gZxp3T=wXfZ1;Tz?Ro8VYAh9;<3@)Q1BOPL-FMn_!LyT};|N_0I45Hnkm- zC85E)(sVF`NxSzG<$AYLDpAk!ZO7~1o8IeetW3iVn^nTlViCPJy)GU=Ds}iL^#6M7 z7~0rrbZTqeYHJfOO(*T1YI&X+jXq4mq}@|*Iy1GhArewGt|_5NVSH2TyE_|=&2FuM zSML07N1nMC(aH`8(a8}FZisC_Q|seWipluuGB9dP;kXNn@E^O5iZ$!2ggOBxYW zReeZ%l$a3I-8C)D@r~rS?R#br%#fA|)Mtk59?&49G?*cK-UwaY0&M+b@LPcw*mB7H zsV;FI*tZpezuGy&2coKUgTIjCyHmwD$T$@ zbWPDW^QcR+KZ?&?VpG-SJI?z~Sl?R#wP75l8w%@TB{Vt@ovLJ=I;1^jA3m4hu5$0` z6cEj2lY}d}&}~sn}YE(-W(LghyJS zi^nI0Fw|UhoeRTpaH;clrCeS(@d`{5VS^|nQ9s#)RuDdt)0NbeuR4TuF#9y*ZeZ*m zR|~%&Z%wE>`YmCwi69I>`LC;#6nT=Y3TLyE&p zg}FZ2y~n0Q-+-?KRmQdwy!Q#4fLNFoblJiI;%4X=>i`LA3_4gcMO2pN7s>{H9nu~! z;=lRFWdi_v7}z1&Oyq_boh+yk!mh2~ukLKtx9i-6^0n>8PGdLgy>V&ic#f|cM_vJE zCAfbEZuXW^4bCk#8mJ;U+KDqHyZwL%B!FLundZn5lJyUHfe#Y}4rz}i{`+&BeViz~ zUtos}L2i~sc?^A*mcY`Sh9M~$tL1W~s9J<^KhKk^6mGvJqVD2k*|(hh`6f44B}IUWEiWu*axv(xQLrWY?&` zQt)lWGsgyr`d)H>>Y_luIgVW@(SP)H_fbL}5`cekN_CgalQs0iXJaRde8iMkDnw&h zAvfMsO1Zui9WS^(PgyTge13kJovrX2WAMe{vnT=+Xh;GIs0;D-5-2=%D3qo=X}vyO zgc8q=TCOt+X(=AQBK2L3AD$l*r*)Y4r+5OJxP5_*bv7EZEf$k(f70oYAq_*bPf0KE zpVD-^gt(Ek0vIbnP6$>18<$RCl{^pg)KP-nl+wj#;b`T|D8q9gLjIL=N~wX3(dRL8g_~SS#|uEIeRU^3Y7_ zINcRn%S<3&*9jx)(Et~UFOTWE{$bbjeD7!oSx6xa5P!vg;#xp-__Gm&DY1MP%tO@` zCHnS&wRrDTumor?!5mTlpX8$cMT}x8)Oc|OqxW`JcDnVQjosFIz1yyLI*pypc6Xz( zRqreWi=#OgD}~$ev+&u z#ev!HFoFcXG0BoV1!xVkTC6uY=D|E2f6iO+*f;D84C?%Z=K~$#`9018cq?&umPdZ@ zbRV+b%LwNr@_iRMc+2-Z(APtftkH;Z?t+@6PJT86Mb{$R(;xnNOJ{E-89yaweGo6w z-1YL^Rby%S?n-=8Yfj=*!KxDLh+vHrXlC9k;AD^#%y1OWz^iKdnL`?gz8Jvo|qd8brehVy8O63Rim%WF{{guYrH@Yw!~zf zEIe8Y!*FzHM>~5P3rEfu?T1gCR@q=%*IrOpd~pzN`-UaA*5FS((VJk?I6{mf79 zQHYtmr0OuoyvlCW*1C_XjZU{#U)w{MGG0^-wDU3p?T;|#5F|*&yBU^vL^uX&dSKzk zSuw%y!+!9h)5`QG=a-Z=g_j>Ms6yb?#2Bu###yLbrD-*W0*>NUUa-B@1rI(rwUy#( z`X?;@iY)%1{y0@Sv4}YA8?3k*`kl#VDi@%@0$&r@91)m+S5OBoxd7h&Uc26Hw^hJA zu{if`i#Rr`~#4 zRY#@9%YO@1MGSt#52`P5ySMALMiuoa%5JEOCfDHBcD>VTtS9&;K1>xp7*xN`4D7ja zS+!GLtG3k*SIIyUpIk0!t8jT&!thFCBnrPJiu- zDw39%j0TU?^}4vcz=G>1=8?iDwSt_-Ep;AAFjIYZClCg>)3;`6RTxVyZOR*+F9+z4 z#gQln^L;j$Q!MA14;ziYIvO&Jb>@vM(%QKhSoI>U|VVY4=0{~~g>cl}n+ zTwH!u-5xypY+-F}eskZfdE4u|?((P4X*5`@Zhp4==%Czqx_MMvb}e&l0}-@cUvJer zKm-*8Rkv79{w9Kad#_n>7ctnSuahg6*_Z%jmC#M zjmCd6#cXI;ze0~1`tCS_bZ>AC38piy$n$Oc))=lZ;osb*hI@2p6dE`a*X*UQAy0DQ zM&hZ-wkymUax|~;>&jV7L{5@px%MGpHp15mm80?voJ~gR-T!AyMNaMFjjM7h2k-Nf z7VJZ#n@UOO=XG<%xpI>l(69>+ca-yUfG-hi;>>Gs4w`f7H8@GPfemH!XQ`u`+0jg$ ztGM`MLqS;Ta_QW8dUBNcv{5)AdXdam_g^vl3ms4VX?9QFQ zdM1}M=U?_h>M;1&SP{X+8RB|^KSrKbWipen^H#sq_ zRD!6pOh``Uq!4b2mD5ZjC2bm*d=pY1pG$=0y-BgsAYWHb6-|P|B^Jw)n;bvpp&*cT z5%q+?s;rs*J))g3o0S4*rkz-1HBJvNk<|JSOnvs>+co!w%HIbFP zRMahj)ilUqhNd8Y6}QNxEnQLm3h#23&c&u8FU@E+Ugi8jZpPFbU(@YE74ffn^m$~t z{ul$pr|)sD+C3i1_M3IRNT>+I^#{vGgQp)4wjVX_KiFH@Tn?T2rLCprKhc0Wr zp01fvIjLI3DV_wS(Zr-DZ_BEk)?T|)uXR~QcD%diDkjy2FR8_p3zpIjt6H&S6}{p! zp%pucN~2bcohZ<)ZlTovW9=nZ>asc_g)6(8kV>Zu-=NY-*hJkxv(dxD!?{5;l(`9% zAcMj$_OCN_jm9tb!g+jT{(q#U$?=qwR!=eJE6Ex-G@M^w@k5=y;xF)Qrg4u#WznYY zehID+shu!%mbTT01IHS`J4j?2GV5xd1TLi3IG|*I?4fgIhIe^s$_mjphD4`b*S18#bG9!OyLFl%A9l>@WVN! z2;pa1`lZl?q+Wlk4#|(8`6o#o!svXCDkO$}?vYVq`CAY~vRZ%@V}<#lgEmd01Nd6- zmh}ibE0iB6O`Y^EPuxnJv!_&25h9rj#?deoQw5522`Q@SOQo0;nYpUb{3$c=&Ikj{ z;1qIehyxcH@h^Xw#1~jP$$BD7|67xJ)>&$>fr*0TA;w{VUSu%A_-;wzA%x?@-#PBe zXClXE>HEq->07?tn`1wUsq{GL{EpG%zC)jROx1 z6pwI|AyzAKyvQe}=Hv@UrjPSK zM}J!dNSg-KMibpqK-E|;m!aE$evLpcGdiIBehie@x`4_p|B!=a;P(S_ID{J}xPGDs z)Qd`X;2cm7tY}^C?3}r8V(q1@_!TQ!VR#FW#|!5Ip>|Ppa9CMcDT58aJj60^nAkn8 zNr%(!7(kpq`)UBpi5)|r3v=zzRU$YU=aRdHbR91_=DcYCC?SCVHpOaLh$;}j|oTw84lo*e4=oPxr(WtV3&~501@@O5@LIfcj!=?1_Or% zI8vDUMHtBW$!AFisefHSYP5eOz!d%_E{#Hn8$d$p*<>^h2jI==>{tyW+q-YyQ5HDaH0@R1jaO6^Qztd@w=3WQt11m!yraBFy z4B$umN3-ETF&$TKSQ9`W?dN5p&n_y0XxfJpR{~%+zTv|i(jmq|xxA$Eb{Vutfg5xG zl;DSL!c|cWW?Tmen*qf7UxUAX*;^5V9-`dtDN#<)`D1fLpDotWpL>USPr$F{9LSO2 zb+L}TFM53%u_FxsJU>=}E60_8`PElny~(p8UM&>J?+dKL#syyO;J;X`qcIC-B+?)A zAV=b#crF0yI3Bo6v%nX9JRKa5cwh8T&dwkSwx428n1cEn&WXzx@%X4mtdJ4We(wu! z`R>YU5^-_xiNh*?=XA(84NV&Ol^^{`EO0vAG$5h41z^93f1kYYEmL3)(di%LqSFQB zw1uhO6_L#mPKvj7oAsSX^|jWg8rAPre?+}Q+6$hmarqSOZ@RM3{>q98lT}P%cCEeK z1*7F|edi%eL6()8(1`*Vr8Da{5T9J9Hy4j3K4~=q$Dii{2mEUAS{$E+f;cx}4L*>k z<&&p0ifG`<-b(vp*HuIhIo$Ij`kW5Y|6`8m@jL~to8p8!q&=P$BJ}s8Lo=Ynru&XZ zZ4#Ka+4(8wAU1NGnoR&s0^8#8CJ^qlOR7V^mGWH(hH`h|IL|5_ z=MZvcG{il&U#&%DQ6d)ZPazJ z57}&0A67doJ0LG9iQR<)OdW{b8@O6RS2Q;sxxQ&Drnvk85MwC*PO|uD+;bg^T_eXd z@;ZCk#j{%w)z_01G5KpRt} zYjJ)`TG3I`C7vmoZHXYGeES&BBuQ!Pe9A+_0KWtkWjbizqh1sOn`HybL?NUkPKj7f zV2z!OgrU$|-l_QI8K4xJdvcH&cEj-_Ye221Qo;a#b$0I}h}nM*%JDY*<#~v(N@kj5%pC_zA+FCdok3E<-_jgHS>J#bbfh21#H(Z#O~V z3{u}~@fQgMHw5sAG3L@?TyYBgh1=sUf5+}3mmV% z?b}R&IC2KQOVxy<2}bw(qBg`dz?4N@bL4ad_OQWW6OuAZmG?CitJ(XQP;&1JAeI*j zZ?ixlSC=LWg{w=F_q4q*`|6d8g~DxkC3HT2%fpDWUuY;%Z-+PZ+$ z?yomV8*zot|4xY%m+uLwHmM5I^e$j@_p}6Tlyj4~B1h zArH&~!vMz-5)S;aYePiUkVY`uY14H@M`C0d%4j5t-61t6G(Wnb8c5(F&OxGaOWj4&z>34^0K+rxK zgieSX!(ju~h~I<7JlN3pxK3pZ7A4?m$8FYS&Yb}sb#LX7EafP` zbL#hUqti_kMv5e~-S=_fqKMh$T9!ZdqS=v4pU*}IbCzp5LnzRv5mR@ICr{y~1~lVl z7*XOxWIzK{<4-lW>YsMkx2g@yZhaA&lBd(;3yuE%TYs8qMB!JSUU7^%2y>J5&U;Iz zSA$W)8sc!zfA}oG;qxz2+R(qkLs>x|;^=9*^ts^PX-L3a$)Dj7;Bi?8e&qA}0{}PQ zGhL?3L?q(gz*eb>)y_ z+EeAsI;6dCTA2!?I6;-FkBb8p6K7}MMkD&Cn9Ave`NeYCVBh%)R9p}vW%evEnQKmS zqzs7{26>@aHzmCDVDg+)vvuISXv#@4KtvoiwHbAL`ApWG#e|bBvq(lUPhq_bbWlnG1q^cKS1jO zP@91&=C!!E@T+_#jcYI4z1S3CGPaHRN9>yS%HO+|BDi;W$id537)6F(pvWjRT=r-L z@v|Uu=!JqlVYMO}@Ueu@}W|Y--8+`%-Ialx0q)yhL+P`q6HET*4;Y5B0hjnPi8F#dC2>w=3_%7t8K@Qc z0XcM{0kL~{T!bcGC-apfwiyn3z8To$zzN5u%Yz7~$vpyczF6arfNSB@LM!7iHBVNK z5i5_RFk}C7-1g{5^L%+}$$&4ERKy|ym1P81@i`1JbC5x%`3RJlh47JK4w31?`3o>f z6fMb?LTf;W=Ip2+K8sn`oR+dh!^j_X`+;fE?uZ7CZ!@h5fKuM#aFE0KrMS-$;Yi6; zC4lIn_%jzPXoQZEYF~Me%^AyrJQtf!0#V9+DJ~)IB?uHY5)Ovl(D{NIq&UB{JVc?8 zLt)MYb=Zwfr4HnUa(UHQI3dAumUN4;Ca+bp7KhS27a*H!;k+fhJH_Q=sVQ7{dBIUS0sb1^YUw4&*bV^%4yF#9C*Jt3~0xmzYP zg2ONnE^VtB_~vuLlScwMf0_s{nm}*{YMJ1ow>g~OCYz{)aK$c*=i-;xv^VZ2G_VB%IO)5SP6q5nG(|yzof=xQy3oxtMol~3#)A`eCBpRk~WY|@kZdG-81;1 zq&$Rp^_s`1Rg|cW7EO zb{OIBfoppB&#p0LtJWPzkmGpWq*nHQIO0emH}{V`m~ioB>!Bs|$0EK=sgt zY%h2guJTdAtAOqYG#udWDY?6G`5Xx9ePob|aPd^0b_0Lx+5Y~%L52gRJ?zQ=jZoA* zSna+yeD87kZI>M}2D6yr2bg;7Oc9biv2svjy;ZMv>ZAixl8 zZJyA!I`U?#v0ZIFCJ*Y5$p=6cW0ac_sKoxTK_805k;5_m;!_5HGaRaBVp!pSi872b z!j^zSNnMB!ImUnZYy1!Xa|~%=P@vKjZ#>LGg*sK6GIww|vXGq2mp@eBCziq+5A#L^ z0T5ap*zH|03~xM~QQQ9zqRZ^n+k74$lxN7aGn)QzhI~+gKdmAA$2|O_&;PM7L#F$E z_F@q$P|q^izn5mnbQn#?C|mAf-!dTjH5K&j#QISyhT z-URqY3~?T7hJGm;En=Ak7&LgkyU;KBU;*mbytM@^ZI6PIHH=sXi#W5KffLbEFtV`KRcOV0UYcKG|75GfyI93GV<@PU0boX+=O~R< z%224$1iNr-qEcZi^StDEVyu-4)I13I;3^eZDR-W4U1c774IP+?0Eo&0R0%CnW&sAe zZ%qrd*xkX5Tw9Ix4ncGwwOycE_ZvH#DLme6Rd+h1UEiv&cV;;L%#giit=g&2kXn7K z-l;=-D!)PiyHKnajh(g?Mj8^;6*(vp(i2KdIXsOyavlmkO=JatTNy5Rv0CscamA<* zo`vMY7ZG`#qY*WPI8qV?pSg+@sFY@xcm_=3xv*-7k010KwlL3QpK;(O_-gowtD_Vf z4Id464Ik#r{Bh`ez}m~1!AD%^8KjtCzQxrid_b_v)(k@zuI&s`wAq!LT7|HK&oW&K za)1zuluZ&6=W%-^mVTOxhf=!qgMQaZEY`m7+8|p@%R+2hlzTKnn3hV}T_P)@n&(9M zmSE({-8m3@l6vExP!uV|2p zKx*+RN?=a4&FjMI6b(}3GcKkZAfz~UY$#DGkxix(C#6zymkIfKx?YibAO#hfc$#@T zaO~W7V0gdoyM6$@2K}B1r|LY=x_O}cl@Bw6EP_fDN>}AllJ`l~r9l*CON%+jN{i%d zey*(cPvgIp85XJSpx~96U2)$5Xn#!2pdFb(wC#J*plGO~4y^QO(D8jYaz?3FxX{WT z7G1}C3PADsPvr_0N2W(zd>Rif4HU<3d%OUA)Ah6}yKZ8Y1!)r?pISaSRQMG49qQWa zzPIo6H6U2zsFVhM4xSc=gEY)z%RqQw*P{W*)V^!Sb}I6d8V%O7#$n_SHG{#ort9

!$%l zeAM+x(iicGSJLcZ?4<18!>1TVbd-iW`O$3=Rug+z><5&3+7-oe2c|oQ{S<-Ak{`{) z;d64Y0ku!=Gmhw%{HUZrd?ZN_pLD6rP>cQn4FU)+g1DRjhE(BVKXB}(uY;>1P?ClD zBzh52JS-Yyelhd-d6KxWPw^`i4c5>{KVA2PZ5yeK6Uy70NP?W%q(_s-}fU5 z)I7UcMYJ7h`G?RnLVS82f`UMSVy10EV1LIJHm}k{@hOJmVHW!oawaNxsA>d-E= zM1Tqd|L{IFZR}S`HpM=v@7Nm zN)MmZRIxT3kA46Kt1wpxDv+8fmSSFdP=cMMnvD<4!%xOE0GNd})|Y5MbD4fh9LrB~0Byg4oKRIa))0r0-6#Sp;EsoQRHXNneRP#@ ziAH8%4rxRK9ZbkiUVUss9NJ8GqZzsU#7CA0c+?dAXE8{8(zH)}G#JJ{nNIX=Yv2k# zc~gC%OC@0E+r{F0runFFWrxwXOQl&O{)v}L=*z!dEU`4%PrO)3BK;?4$ux7*(!ydt z@W-PyINQ#8Du82O5JAm6a;TjCVFZEd^h8#Be6vqXro}Kd^CDX6ub-{!3>`S^m$KY_ zddZUiPBmAIoCwtl#WvdQkkXGyje=n{YEV*e63>FM7|I-ECrSs!Q9!{JQLurM;V7~T zQ^~?Ds$zO%W`wU|M2C>R9o9a%Pp4GspvN=bwJY2WPNNG)I^$ZDSO@%?cNU9;7RJJty;ZB)*dURQj3eys^yMtT6KX1 z)3WbH*X&Vb&^o9Ol1s|rOz=o zAx#v{7IWo)eUI6*!mq}|K=0=EU9I7H;2*kXfL`=h#6QmOX|SZTC;fZE(}4FSEJ>UE z-^`EL@of5>284wv4Zu?E`4K_IGx0t2-v1{UJ`v@|Z^%T59 zz+a}1&RuAXit&&R%)o)H&CQ1`Oo%%xdk@DWV4FhH^P>Uj_(1?pU7f%LXk>mfdn_(Y zgAFm9B@J+P;=P0~RSzYK zA0(Uq<1vn6j}&K%@8MlqVD@@WG<-J4ZiMVEH#`Ja=kK+uYio_p_9r44Xt%kwx7pZX zdCswCQC&JO6bj&pe5n8#=q3t{pP;5ROE8H$t+L-1pmz(ns^?|~mk?*TDe zV^N6+omhwSlmBHM`Tq|&`4=4v^1nNx9ye$w!?7DVCA@97d~hiXL$i-QVuAmZa<78w z_9soGq1&HyI)ZGcXq@OIP2+qI6o$EO(R~PSXW)0j^;tBRpgbq6rH=S4E#IAo4CnI( z01f9wN~D61*f;pFF@CcIu^ks6w&Q{UdmBGqfhYKdP!T_e29~gyC45ujwxSxl`(v?z z8*qwAr_l-f%eP1u)dcn__v2>Jr;$O}&9^9*Zl0CT^D|ZY&GwXY1OB<_sw-ok&&X%b zBIRF)wAY0vKb=JmapT26X9BN~vfa)NEv7PrlP}aE^&fwqQ5N`($%b@DJwu4T0GSt< z)l2Np^V5pEI$H5NJaQLnTu=(eM=>^W=pQ&>F^>L5V1CE>MU2?W`843O)|^PNa$v2J zb}D5Z%%X>D#+Ag;!*4ez894sx+{brZc*EIB61iwQA9lmu+SQZ=`&9WlElaB z2Yvph0^2;br-fRqR9;0qf#j#bc4O+FU}81s~SimMZsF( z2t-IMG)^{1tKRMq7N3X15)6~{OzY_wB33vc=AwkmC15NS(4ikuUMfvB6Ofjkv;u12 zW@7dsq76pqC|LouA$6mTtLR^3je8i6BkiPqEq-hFAV7xjrcc(& zx~r@8R+V~JtbytE=@2{9JFKf!;d~HXUP5m*kR9J>?e6W=*7w#}ddk{bxAVA(GUJVS zxI@!%A=bU9t+uLf1F~?iwFHMNSP*DK4IyxGX>kGMPR#&B#;fE2Ai1*`Kyt;hQxJ~+ z$rd2^plBhnc5i3aK=`s|=Wv!`h@|w%VW_KcnYt#>16YVxlcQ)qXzXOWZz*&5P8hnz z+?+EsN3--f`k{kJ2yMNSY)eG9({Bre1rY0UVRd!km`A5=JuGJ{Gjb9=kf z^HhQL!s7B0jOoqfq_DnzKvK&wiOI(x=E7T=m+IXjn4ck>g>Ah9t0VXxmmoMu_pTC6UeCj620Q=VuBG9aC`i3g<5c zc@Yf3qd4esW4qcUIL`zhz|*S7(Z15U713ZSI75=L)Smee{EGF*V>uCpB}noBqLbWM z1Y%W%jqovP*OgELwY7V3(|FQn0}UMWUeLUI;#kph8}X3x@CmEwq7&pM<$%=J@xTx= zv5hQWB-ZUDIL7K4%}|LXNeDmf?y0`pnleB(<;vMohm~m!$k9DG*>D7~{Fx#c?;)N^ zemVViXq$v{=ENr9Jh{h@o4j6mY*d`D{%|>=CeD9#m4%haj#VM~y#4e!k<)%m>+dZt zGZ%iFj;LpcUEgEC0-eRH%C{)PDIXplCaE@dm&e7bP|3&}7SDjCKvtCmV#yRIzEG~* z712|H@jiA6fCgCV8T3Q7pPy?R{?p_qQ2gCY`}<}XS$!5eR)Q#! zxz%zxF>&~a;+fgt+xR1jp>Zo|ueTb_PIsfRRR>}~-nD&e4A-n(Sh9CTVdl__3#(2D zJ`S@%Nw#~MY5$P?WcGt6qyCpqMzsHB-`W3ioZ&8gp|pQL!Oj`9bv4IpA4eZr7`=Pj@!E7&>~dwFMpXI8S#<}d^%Ts-$dE=Rl(z;1 zPqH-EtLVH^(@_;(*g%qzrMAP(4>G5seqs4RH5{6rZIH9<8`jJmhP;K83M}uq5=TqU zL7tjB-%9K_b(F7^S5}h=5;feWKw5$NG6(31q(c~xi6#$ zS*9=k3@ZTdB+9Urgb?rvOviFL%L){D_H6J6r0X*85{d8sooftnv7ja!xi}XMM?ey< zu21_SAN@-Kn<(wU%waue5!!QZAQa zAQzjP4b&5zSZ*&}PEzg30_0u+Dtnp7GL1>=%kkj&{=KWG?>A*RNrXkf_}@MzV7xx4 z$x3~+1%E@V;U&jBDj?irgLMOIXkh(TJXoBU06B3iy)Ez&k#5E)8Sx00@&2Str z8#Bn(frf0B>4_H*OvMi5Y+PWWkoLr!*q2ABJg@GkE0F z$azYGS!*EINFkkyX@(NfH=fvBf~dxi6IALn+o7jat8i%*n_g(>6ac0{0G>HD0EkXJ zh;hvzfPcK0M3Xa6ws>}&#$_nFEWp?gLk;eWluEz@YVVYbk7LNwZ~U@h2Kmi+ac^&KKW=}r)fH(|kc>a()_ z#mfHkkMDlrf6{mcZN0|E)!NukCHB&8u^m5(#;H zOb(@H$`aFisElR-BFZi=8c)~P=6}^4t_S0ezqzxtVm&+f*dN|~vhbAJ`=2%f@7aUV z>hNH1e%rbSGsbow)G?`+XjeTIFHx_w*M^c)FyyV>_3Bn)ern+hd!2PCdL4?2d^hR@ zRY;mXl8ZQElo}v$ocSpi=ER-V=%9V5TF0_*GuKJN6v#e(hQg z4jXFjZf#XNja|GT5p`#kx|fDW;WHGSZea19o%;H5)UJfT6eqNxxdS(AYT>ruJzWDKmI6n$#xT)0KeyMwN^tuR8*Z;7W7IR$Wp1% zfo_#L=~=0Je;L$61HTVdu3|Uh>Q3~aV)RAOqT+&KQTVDShNEI(ylpqIunrs&TURO1 z;Jr-iTdL4V}Y_+=&>#fGd<8HHl z>P652nR+B#SYo{Xwe9Ms-B!K5x7ESCiDEOGD5dy>$5Fu{HH#0~DV@cw&-9ynpp8&3C6!cF6R`|Y&6Oc03xFzFEy-K*3X<~yMx`>lIEy!!;*8fTSQKM!931;DIguiH zh}A#8+;LAQcRakt?iTr?2&n@SmkLvEGlZ-<(%?3AiO6e05=+Y;>g53K6{6lCQmh@a z-5EWLc*|B6%fy*^P}6IO2Jjuk<7M;X74fM?DoApg5R-&)S3)%*Ikvoag0w*VsT26o zWTOc-(jdi?I8atQBS~;@mlu_Y4xj{LGs#&{e4BpKrIyq`U`KpN+hfhLhNPllSg1L=LtkP>hS<=M|5Ll&O~s0+uG^p1#Sx-MuCe#S@? zdZ_tOZ|sp$DHx&$+GsE$W)L}{>5-@O$cURPl^}A>&t}QGKRV)xn4lZhJmh0ihACKV zgG}#r*2M)JjEM2+kcG0eCw56WVZhD1Ebf}VHeBpAA>D7iM&Oc&v^%@4>Sq0gz(~$9 zXW*q9Q%Mq{KgxI+e&)TfxeEFCg-nk#-WYF)Gvoq3IfrbJA~4O$)Ad;5Fo>W!@TskF z_SYc5J##2g1P&uXKCpsdPBgD1g*}PD@}4wex^bd_FGtC^{LI*e>;v8}<1hfZNPu}- z*h$3MmolJ1xUeVtieul~eb~XuckEC61J*>B02-F}q3SW@y0{C;W z10Z$)GY`iy^7!ftV6Q>*HZSrNU~vfn3eeyi2>|IgDMmQ4?pQUJTMY2SRb?A>Kv)X+ zZ-Yz=IY#U)Hlwok$F?L29@iM;?oNnfkdQDI+ooUGt^<7_&DL&*X$AO%&qZQ2x~Sxl zlvX>5w_m4I^}I*HmuxlGTGf`wT5yMS22Q9Xf$ZCmh!J>4$9np8dXB|xgY;Qai45B% z)V6Sk1Rf`XAA)P5?;giRt8x))NSmi}laYZ1u412|?*_3Xqj80J^A7VAgJ0p{?6euMkQa+M zD>x0os1ojhIY5FVf*X`Z0kr~ZMuLYbK?+Q`&_-Va%F=PZ4}f&?asWu-1|dAnp31G} z#rh?Fk3$>$YM|{5eu`< zHVsH*I<60~8Ni+EIRC_N*y)fjOYC$wGW*mZBEu?sI~!%QY@R_DXN@GVM0+#G))0U^ zB?3;btb*wPe0_cA#H|;(JAf-3vJhMT?5VJ20s{zu+UeSyN1u;FR52Y#fBy|`5cC%l zu4pm+)h8)b4Q_nTgs8x*y9I?5Ut$9&6egw$znCC}Lg7Z?7ZbM&g^6OJF!64oPGqf( z7$zQ^74hy9rwA@j0zuTHQ@3^eEbt=J@u<*Qu~h~Hk{T=dEQM4nWjKGzE0y?~JLmYp z77#+Q>6{y5WL2L0(QPeY-c7NY489Np`)9a8#JnCyK9KO=Oq&u z2<4_%$}3>r&TLJDj3`(4a}#*=J+NVuj&K917oQv4-In8pgt}+fHaf$o8XB zFYrymJh9@Hw7zB`| zl6e)30>2-aL$o!M?sv#eYXN7NcXgxB#9M#!B9VA50a&H2g1x{gbD zos$XKfuIwecrc{4(Yjd`L z=s|Sna1Kr|i0T~eG6o~Br#?78 z5vb{Sg}={51+@!729&^D>llM3b;hf8df;c7FcP7*V}8@BGIaz}VWvtGYKa6k>-Yw> zFrr%qlLTlO8UTtBRKp{rSb^!)@@mDvFI1nM|ImFUvq>3Us_fa;=)rz$v>ps@LWU>4 zyOvkn2=2UMEG-9duXeFA2;;sT&enndB>&_3d3}BquYZr=bq-u|`CKXXF#?pGqff6;RbMtl27T+~hiKT(}hdYgj;whi{cvx5%(2W=Dy|0s-%l>sXI+StYhb0Xv ziM7rkWP8c*g0GVCg;K8LVT(k<&+mQ<=Y6`sBa;eN7}K||L^swEMrun`i);LMP-9Zn zg;YX~yJW(Y5yvJMoODp}8%sIV-#Nd`3O-_KuGCW-iq68L;^vwIT{zE1tQ)^Dwj1mE z2d;d@qGKyYiE*nSFw70gnlqI61BDAiN!+g%lNA<-|=KG@P zO~S_}U%^y_E^YrMjk{-XJ$U9$(>WZjND+Q)Kejq06cw-$T-{pG}{ z{z656(MphgWv*YcyKJ|gDfT#4CALb!UOV3`fR(@sg_3|HFM3#M?$n6`YTYE)SfvG-;IGZ0{!5Ov-)%C)8UrNn(yLj1{JSZ@{Ch2bj;203w3rkxIT(UG|+4z=TrauSr`=n)>NnBu@%Z z3%p)4N;z_%6b9=w>I}NDZe$K6a$>5)LXae{4NPzKz-S`(`ei0gH`djLHu`0nE76+e z91>ZF1V&VKRsl@8m}SrP;daex&9X;k-otEY*2ESZ7?tHs?E|ipN!c*ry!4HRfgsD2 zY$*8CO{z;ESwfV(EhVC8maE#!{SUFNk9TG?;642fBgIN{6J1Uqp!K?&B+JOS>+g7v zjp}&k@*Pj0Ap4#@ruW6J-DQrf&MX}{gsCy;Q`H?k8g>I=OgFU4B`YKfy2j2WDRhnf zOJ>syrmwk+2^guZTCSJ1(975Zy$o~Z;TM5=;PN3RV2u8QW4+_)YqlK(wkBZoVkM@_ zka^O@*iCDGOrxM*mN9ZuX;%db?06;667N%qWfZ&w0P^livNGs7ecSJ*uy2;h(>NHX zApM>SU4th?x9e*w!&_tqEm9t!9`eC-gG|gfD6-pEFNiy>@E*}WN9#7>pb-v(a4|>F z>AFD>CN!#ua#E3qX)QrOkrtb z_cuyGvO*&qkZ>sjvTpYi}rRqKsAcOmkq?l`Ny7#OTcRTA0NX44Kilql_Bv)cDiGOb(9>VFI+ zy!xJBtJP}ZO0bq1>c0N}BcEbymZJe1l0PwaIbI-d)U?mn;=||8rKcB;o?LwTJkDL8 zKY!%p!rX~PrQ@Djx4T{2u`_0jnrLH3%rUP_HDX%`=Up%;zmlo+;Kf%ZUZ+llIaY{q zrNJ^y2lq+-Hy?JT>flpXP#r+`KD>9jKOJ+^LPdqN5m#06`iInlGps|p!7X0(#g>f?$MPN_7O zmp1P&j-RQ{$v#!XtVt~ahQe{nl~L@d#vjg8sXOqra(O;vS;pwcA$Yw?8;!=dAiA$& zE!KY@*fq`p+)YGxHnn@*j`&Tz9=mQucLh~cak>+wG!*+yNH1OJq%l`ck0ZyxI8Cp6 zRmzk=PZW$)hu_&OAN|G(E01$&5xS?ZdvKs_wo+j#VeCL>yiTKjdybwyxp-!N z@rd-scHMyBr9!%|&DKD7DK%j+PpEt0yMnu!IKROBaHZwylubi{?9eSqilcM4B&l%5 zK&MVFojG=Ten~Nqo=^AOm1QB7O=lrJYr5e&L0%;$tG)ct(;#GaZ)*Q(rwG7ZPMFiK ze#6XOd3gpi4$97F@413|C2UI%&u8~5+Z8*G?Y@7pqDWNf*}lGtNQpN$64c%4)F@G$ zHS3x)Y@I~cKQAthnioI4o%N-z*&7nr5)CqCu3my4ON>w{z_GW`jC9^iX*tnq7S~C%JRz6Q5@S8Y@y&}hUJ46_wqaH@{xSYkCA!cx(fF?+-5W{pJeqgk^z{YbSI$h&EC$ zYHWFE53rRLdUiskOB#KHNf3{9B(bw}RT{Izs;Il!^6P|O`^m5n(5)+=Iuf6uhL62t280Y1C!ed8F z>Jmq6Z?r+UO2GZ$So)oylYp&ja)#Cy$o^` znZ-~m?$LSRx>}Q;(H|O0J;sGhXX&eCE(o(&kx?>P35*_LBqa)X}}9?=TIc&OF`g zd8E7XG>?AQa49<4YB}}e&2I2qy?wTRWMH|q!yS6~Wc-A)+U0)BZ(W!>ePZs&p{!S7 z)KGe$9*_PF@Yl(FLMrT;kVGS(uj~Dk*L*FDL|)4R=W=qIoP5r99RK2&$y>{`pk*p8 z+P&52(RK5}Gf#LYtH&1>-N0FH%w0Gd9q$^?JtdsXvs*$W$DpnnIQ%w6DR$ z9dRS-m7Dvu4Cz#P17jcP&+cN!Y&liL>pbHXZ^lzgi(M>)ZNx(^K)&0Rt3i>s7kGoN zwtuvj=MllsTq4^o`D|44ufZ9vO#7}>0*;%=Cp`z&QBXbu>fOu(D*PS_Wb7`D5`OVw zsye(y%yfDr&bb1@EAkNNMeaW;59BrhBo{B$k++X*gi z7*;837msK9VVOb4K*Gy8G&1*eI=RX_aZ}l)JaGKBKJ1R(q}2>#vKUC(;$jzo5w#g@ zUh`mzNfrvU3A`c73KA@9uV3bTVwBAJB=7mdvb3S$3dAMuGap@%P6j%xdkxNU9 zG+7U#)zU(0@R?O$b6Ddo*yM^pyLEiFH0SmF{;WU)B$NiEvSFCiBNq56(Z)0%OFUu~ zKXQtlz3Sw`z>SbUg|(^hA1lRA&H!T&&bG47E8}p^PVKWLCAY8)+*LQ9`ngkPc=#4k ze0r5m#%E|sY1DYx)~9%bL-C!U-? zbn@h58QsTJ*I#2@ELA!Xf;CsVH~IXyHJ3c({SzWV#%c8){hDCDJvrK0)qTr@KW>+e-dqk7d3h+ZYjm%V9jkOVzDfj3HzmhNYK1LfgrryHybSG0ORoA3G; z{V45Hxh^EZ&v;b#vaa``k*k!4`@#7^Od~9sUN@_^YNpRg@R?4x8PYPo9wDogOG69; z*9kbkz#Mjr>@Y?fM^rVXF!m8!Mw>amHQ_f>T^)VZ{`AOJ8vvb1F%9cH>zg`}#ybFa z@d%y5ZI5!D0^UktkUC|@HHE|40&T%~!H$D|y}w+wD!mOq)L42u{=R;8J~N7)?-%S0 z(2|u;oYIZIm?IwUI5CU@oZ5(S;KcU3)XSu^onVmg!y_k7m2A($hAKOMB0L@BSX|q3 z*Xq2mapIJ=(Jr#Wd!jyPFv>8V7+P>^ur&IO;y<(1ZZu~3Qy#Fq(vbbsOGOy49&232 zb|2mp+g;r^KsqKrDBJ?#owB4I`mYdru!lqfywe2gA_44W5A*Epsgffa#7QR>FD51O zkn3mGv!j^xkYH90T(awNe|e=G(ukQW_HkN?pOX@vX~YV2=;;4k&weiGmzJvI*;15~ znte!THzS8$o|^gdpVhuIe9Obfa4wIOr9yznNf>R|T(E~7`YZtk%r@Lav4>>hF+vQJ z)F692vQ?64P0Uz!FCoMaW9niNLfy{t9zsZg5MmPk!yB7CFcR8L2)U7v;sh>=DC~uy z#x6VnbWcQ|9nd%_?#ma+yj@o6Wa)x+WrW9KV6#MDViCD@!A0o z6o2XR<;yP<#pC@l){ibtA$$k9#4g0RIn5PxeRt#hauf_gfFolCrmCOX$wwf< z(1Ii?TcJn@!E9hB?uvynz+ayfW#IiuvS1w~NX_3R4h=`nt{Cw z?Dld(rXQYVrvIg0yjAqgP{MtJSnSNw;xf?ikx0Hz=&M*@A*;D&pyNi&Ab}d+?%a^8h-Fxqo=o|ec6l&M_ zVNuPRs3th)koexFeQ(#kcWB=a7YM<5f$f4RKxjuzt7r*#M4k~-`CwSBj!?F-zV%(Z@i4by70D#N<*NX3dxP1BY zBjWo7mS(~FJR#2$@>}frn~bl&NJ!zcgcLqUNbwSQ`V#afJ8;x(gAK_}RJPZb;qUZ{ znc4V+5dkPD70kA--N)YR$gD(^tFi)Pm34}H^0K?=q#b{`XZI_j6f5(UJ`Lpl*yGQy@AKv*#cmDky zU;e-kZ2NNUZ{D%@m!Esf*Z%m2e(rV8eebW;@Bi+fI%hun9E#+=v&t*$|3-9}CI$yF z)b1DG=rC^+-{>&Y;u{^ND!wNPAzu;b?$o})2#Og_`mX#&)#W!P$I~M3 z$8R8{S-=iI+V&Xi54wXW zqWz@1QG%h`GWANwH$obfpDeBUQ8KW*r6-Tgl^%@f+HA>q=pnGj)*uuKnVvK*)~ogE z6#q19W^Efb>aSGt1R>M6F8FQ~;COrKa1ez7KQ3_tA=7sPNzEw}OkSg)+okMi(jL9a z`xV(Fq1Z?^F+`|2m8&_LP%W$4H0KUg<_}dC4wX)wIPp}ibYe*o%jCq`Iut>$rfC|2 zU@fE70Ku+`0f@HmL_eY3Ji&GWQ77`fWp@59rBHLmc-v?SZ5yJ{n-qnN(G;rHj6+XV zo_VTrWwyF+H08+lT0XNYTGJQytZnM{(%f;Zr9Bg)L6u7Xgf-p(#7HuE zCtY`DHvC@+JSsl55O)$RXPG!J@ElXIox>Gl)w*)Uj`;B^+vDf+omR2y&77&&DDcA- z6Gc5v;)e-at~H!V3QrJ+E~_umTbYF?*m1h zR@=}Aplb2$Zp*40kax5{6{>q#(Rfo`35nTUulxv%5eNr!rx*)7t@=GRdE!=(DTam{rkj%8SnRz1#1T( zAJ{=|BMTPPvDgzMgiOH@7Z(NJEcP4-*}GGO?aZdNCPnz9Ogq&vd05AslxepMc+l8> z@o!rml!-f_$0{vYHxWXh2)&1p!o7qPUcvNVO!u{~_%Igad;tSnIgdhh%6?eEi-=yF z_%axJ=rp*Dix?x{qcR#~5YcO0yC2JN=oK8?PbvdI1}9mmV1HJI0aK9~%6_+>L|qwo zLpF|HRFI%{5V<;@)CTLJy)+bPxOSJ?5-e2Cu#&38E)CDS_IY;Y5X?V<6nW4nO%x=d z%#GTn5s`w5ilpJ(>QCl@R>fWE1btNjhEz8gcrpoUC{VOtVOpFQjfaSoZrO0|V;Oq)(G_OcPxC7E7QHi8OdW z#C4!kw-Ca#)i_=&G4F+# zb_*U%pRRC@XxH9QRZ)at!IA*zO{{{PM=Flr_x!$Ua%`LE(fl~F%#2poW4qLjRY%N2 z=A>2V+@8zJqtC}QZJay=j-rB)$1NT>eX3eKAG=2TUZDB_I37~D8Xg$Y{CHJ(!o>Cq z#@4%`rW89|Z)eIuLf*3j;n>@`^gJQY5JLVPA><>3kT>y^1()B(&gkw-Z9XgAig7Lf%CP`PYOLevAS?7>0v^q zzKsp$mx?>*MC36-rhat~AtyxSPY_bP?J*Jfga~|tcz+x`6bNv4iuXO@eJ|#S38Hwi z2rmL`ws@s@-zVM|#rv%Q_h#|OgUG&}khh4xUxUa`F#Rh3{Ri#)<6zsJxEV9{oFB#? zKZ3`Pszt{;@aF~|eU|Nc2E)@p{4~<8*zFpRLL&^ji`6Mno=S zWAj_^r-O&B!cODQ$8jLof3`n^yI9MHh0_T$J?us${^~4S4IM|i1w0<>R%C13+bA8H1Me7@cin{P%BQTzknn#NA^%L}d3i-yQBA+Z`gicO9Jpd*##E zN@wI@EXbz&ATckB`Cbe>d=6yc5btCtBs;N9<_7&fbyW;z1rY;d1DOHfMKEko)Rd=% zvz=_29^#uwAF;~_WP}Dk8gx}K;JCfW?e>$3-_MGyZZ8@N!xh@NC0c@opeDo05n_~N z$4g{4ZpTT!MqOHt*`X~pEkbBmw&O4g08hfl+`1guAufn#A^~&DCSx&eXJeh zS2o%W2R+)8*@xp-sNGFg#>e|`v#d}a&j0Ly4$}Br_3~Nsxzby5lm|KRYU4gx#rQM;%E)A5+FEB0@N2iKw5^wVJP)* zr;0~aqv{#gmwmMWL0PQ+<#j)z%L6-77(zPqmwRCt1s69e%d}4;TXhMRPen2a5=T%Y zjp}t2TSFl8L)bMa84z8U+vNBjyoDr6u*JSGk6EQE5Uj}qQF#cPY{4N*hOp;H&&oeh zfmPoVyP#sim651`7O4{xeXMIGp%7SQ4(xJwsi#TLlgNx)&`cBRW3r7Lu@0e;LzHJ037aupcIkT#igs&+ad$ zLluaua%s>q;gP*A3zzu%;TU`o!HWP0-R27e&j^bwShq>OjA;$VI}{!++d}-60%8AND3HQ! z!mjT73Z#Iw?-aRI_@M$R{KYm>_{(ji@VkVNuWlnK0agRWeSa$c__J+f>c;;<$e)Wh zioXq2fQd-)e&Dd5;o!wd-%h?Ohr^%TN7%pX!C_Lz0hIv`cq<%WzQS-|>mdydXgy%W zBa9A@?b~77h{s=UBgMb|U)u=GJ1-S)`D?^}9glBrBU9ba5M==g z&Bi38EwlYs+sO2R(~E0In`caSxt?r1b;wX47bamw#$_cU zEY%%?K|_RP)q@ykqI#tlcH>GEuZ5M+PK7UMZK8T53I>=sD}3Ot#Jcc`VNgpF#9^mm zN2$USV_!Z#Gyj7HhZ6MT1lHuTilfr>slUA9q&l8a1x0p$SpmsmI&hXlwg8ZY+?7Q{ zR2G`dL0^+JUNJHmy@;cvxuh81wWQ>;>3{>0CN=K zP~2457#Sa@@#te(UECm4k|BhCEvjSp6FXM1=qgdYvfK;H7lKrGjnPxflnUoLy5}Xl z93E&fDNNvvAKn;YrCoTgsYC}XC$RMrS@NYuewb;49KW#WTnpszMiThplLd@`kneP& zYHajymczBMs|G94IxMQ|aoluH6Vzn!nE@f6k@tkO83f-bz&t(}r~y$Q(pbql@8%;j zEBAaPtF9!6;2BkJc5ROql;bG8mXFHC#@7rs5CLQ^7Ml!IPAnWF+w%vCq>S1uq~iD8 zpr@@3Sn;;E=2gOocKnO7ct&LwF3wZP2&j&tpckm(FlEGjztc(QEnpDSC~=j1&+L7B zPP}4Aslb5=DDF8}6Dd@&wu*a>nLq?690peX(xT27*MlF07h%&FK{ki-TmDvGOF6{XPCS)A{d`Kmby zqFjC~4u;b(AtNa#v=_1~+GJ_icNk6`+3RC-NE|XK#7RW$o`QIsu>5*~?Z@E6N?}SICMt^kg|BWS?BG%ng3{ER z?_q=IG{$UklnFe7{S0o3z)BwUeYcxa4gv!n&V4sXOwrzhFveyL`>}MfGt}H*A+UT! z+cL$L(VALpBLzD#;{}Qnz&((@yEx3!^_Nxm1MOr)t{duk;(idQ-iZFWo`f0#n7Jer z*Hu$31V_wjT?5L>=V~3>b!n^;gES(-wcQm(LM;Q|L6oiikD?g7 z|B)~2jF@;2o7=XiWO9&g9v9e8{P z9^Z+_ci{oMdax>Ui`HXG*V{%M<iED%q}ra^gf&wu6IXoT-R2CK0Hi)aNc9yolk(oHb17#N+R5>ZzftpF`2i8^sP9ysFUrz{*( z;Bvb5Mk6tZf#(cj)`Bu6Q){AfJSwJ21eP&QA~yhK9*8Q)<0O@kMt-=Wt6R~oBGUHO zXq4c_N|hA?mWn+eC(*!VcO6R55>p3ODt5oGW!3QEVpk@U9l`-2ZuQPo4?NfnBD<0V zVLI=jZCEH@k19Z502bb-iJw!S0th5>I#7!m$PO%gSt<3)M}1p)=jV3vKmd>X>=^N*|3b3TXm?}YP4FNTHCQ4!|r&E zR^77O^=h?axh^#=)2%B&4a;pAhU+$)cH8bW?2gf_x-F~bI!@bbTejJ7O{>* zcFcy+aXTh8-FD0AICaNWfLyCyr?lGeEXS)iJMD&plBe5j2K8)eH9f0gG|V>j z+Kr~!Fj~#3;kpge^6G5`$Td5ShGW`w!*XhNvqep(ZM98mcREg^-J-PFZnUb+rqilh zEyr-0jb^9OXx6Chwc51WRDc}Y@v5dpJxc3d%XG|Yvs1Te%b;!3u6L+et=eY2VO!L$ zTV}IX>(r^+vZ|eqD+qP;QvqnvqHcYo=wJfXC^eoS)xwTfiVR{Y2b7`yNwrkan z=QX`Ltu`A@yIrr-R?69R!|gO}!>CzS)oHe!R<&8L8V%cY>aJIJ?RLvLdwH0sTcM{8B1-SW(;(P}&OmSbCX)$Fu7wB2ep8!cKj zyk^VobZVV;wQk$AT5r{8N~4xrtvYSn^_-SnuQ%O#y-{}!k2cL(&2G32+pSicj$_zW zw^_5QZNq3bJ%>`OWw)B`X4?GqPSbEYX3I8O4Z~;}W`nkCEyt+Y)T=rz%QUKXwc${^ zW;W|}r{Q{D$L^Sh?b52-pdGGXUnCG=+w9P2pV`m9mW3Q;&pLY=Ec{94yhqwu_E!Jx zNgPGSTZTY?0FwM$WSEq`trap)Bf74m^=mP>KRtR)9m>ad%_*W z&4d(i()CtC3OLG)O$k^Z9mk1DLI{?PSP#KM1J)LA=2lFF2M8&=g%I*qwtR!~7LpVp z#T#FTQ_N8D?t*!dF(4!)Wa_2|2zeH1B0{F#c?%&iA;oQXBjh9=PvCJH57@grQf*cn zRj<)*whgyhGi)h82Ca4|_3B2|vl^!1xn|34cj~6+*33qO-b+a7 z1I0J*DwX!zk-OsKirzs)_s^F0+dZ#Q+kXI2TxQxoTSCH8Y5#mbi8jK(?WzephTLVBN?MleohCUd_ZS{9>y&q8J8vO^0}D?#%In+)E>F z7GMPkFNW-I#}|L1WFEmj_@9p7PYXXce~9_DJ6JaiBO45tn+KT*R5l#mv-9C|=Z*<5 zX3NsxApFGQnfcR4=MK*wwAYt&aZ6_pEzX}gXc{xE8Dqw%Se&w~(#Si%c;wW{6N_gK z;!>6r4MZJTTsmmZu>TIUX4rpef>TeQIev2S?Bb!bM~}{*os6>c(hWWXf zaU*Ic)B{^thSew=jk3``W0|wn+HAc&W7S&Eq;(n##iL5v1f)&m==v`0#}r6zCV52H z*p=2u?le0tZBwgl8Lnq|Ub|j%8a2nMS`Gx6j#G8*y3z4Afdw}e0Z?|0(QHNcA#}=) zSC(nNVy`b-aIrbide2x&B!1H6o%C9A4WjOgiNqR>aQ`Rb(9kxK+`02;f#l*dc&h6=jD2ZdIfm0=QMt zb_n2BMcg5PTNQPO0B%*}9Rj#j(RT>oRz=|K#GPz}Y=CFh4>21)cfEBhjXZN8aF?1&wTfOYu}CiYF@iw(N47KK`4nkk1T znYKJR!0z1Ou(&t16x=@efDmzM;p|*%`X{p$fJQ_~3KiO4i_Z{3P80~46Z(`#3q(|i zkjDxHrsM2~JC0|?_qP^Omrdsj*dyV;Hx;;Wj^BS}F!==~Fg-yT%h(SwjhVKP$2!nF zK7R7>+~emL=g$D&qTTD$=X`s8nV~B$mj(bJ1^^Qc1NrtHpIbb#bbRiy`SWK^EXcrx)^JnHx9~)UbF57?`Din|UBRe?uFBK+pjyvp6<@o=N^q0!V6EetmYF& zflN=?Js2SOyOjc&-X-u$df`lgOy4a9%7`w*>*z+=oKfx#8wG|Vqe7W|zl~|J>mnS# zY$f<$^9e$5tOBN7?1wj&v-m-mEx%u_eZNNgKA?SRnedND=0EHQS?@&R$26GRMF0@{K(i< z3BFbNRu+9g75#DHr0%LkZ&ebOMVD34zuNt|O%i;I>Rws&j4B!mef+Lk>#a)HvgpdS z7rj+ETo!GpqQ6BPQoL%dw<@vAqD@uwgPSdStFpZ;+EPV-Tfpr_u3GD@t^#DyRaNxY zesq&;w$=55EV`zO{zGq*L&{cH7P9ENDtaC>;AT44R@Wf1=!PnK)BSp@s}*kR(GOw& z0``KJNc=!_`3>FpecT7LJk-tY2bkyu`*7x2voJQz1k!v2o-Ze`yYCG=I%FbCy3T@wkKl3t)lOrc z4dOEM`YYO0S|%F`mpog*Da7y!`qT>g%CZNZ4RTP} znT9MJ*?b&Mykdu`O<@)fv~1argRTwhi_v(nG+k=LqC}?1mcSh}%Q$q56vreQ^jBq+ zpn+{nXMEh-U1OzsRHj2?h9qBK~tnj)BW z5?L3?k}@tmq=!*P0!uFTQohqm3DbjiGCkbN^v>G@Wju<3AnwJvJ`EXQ(8HRA{rI2K zNiqWlKP&7&D$GP>IutG)xpY%DN2is+aTMmQ4)f7o04=>5L}2{^6C%w}3OTaoMby2L z^-;#u4MT1wv!`3vfqgQu?n+8rv{fcjJMA$Pry&Gu98{q<=q7#{w<3irk>*$fjR2eD z>_In77@TYxC^jXe$2I6$sJKNKRm+nc?C^tr))*Knr!Bd2k|-hs_`?VOIp1Z0JS=&Z_PiVKNcw;!cLY zhY)hFsQY`haQF?AX?|M!e!uqpGurphYIOLZ_WdF4`{%XqU(~*T368%74j${ ze^d*HGj>Vyk7?h(qJ2Zpha*||{hC(CU)MxnE_#1?9C0 zaOeX*!0)qK`p*gdB7VQ6rT@H^{tH_AFA9f1`2Dt){!3c=-_g>4Sxb+zvyu*QkS_80 zJuUt3Yw7<$OMh-B@-n}0MRv&rTe85l6g$#-haLqFZrsa%L56R~DrYak*%ci-GT}EM zd@oiuJ2FMw25(*P0zVveC!%I$l!V3*y9>~6Ko(UxyPATX1BPm?c$ZAiuwrL(Z)4$^ z(jPz(r3qfT%EF3x2u1uzrU({ZLHLg${2^Hc3pWt{p5gEo!r?qMMU|z0Ey52Vyp@52 zt00QzaQH!l|H3ewIfQ>0;RiEtjv@S4hr^E}{FB4s*di)^br?Q&Zi;`7@DmyM@S0z2 z45wd2cnjf=XVSkL;Vw&mug*yCK{!SDySKyFznRJPUc|m)xD*_9FQVa!@6DwDX@uX0 z@b_iH-;eNrISl7#5dJQNzdyqmKMTgVQSe?i>Vt^7Sw#J8CfA1$^{+%!ArtlUh&m-W z?L(QUUqsZqM6M6v%5&JvF(&yXM17Bl`b9>cY9{Z8k>K}7=KTnw{y;>1nB}!Hc|VE- zlOjPD+ZPZ80SA=%XeQUk5cS=nBH3Ix4nOt1BI;wfvr1Lu6QFYk(B6YHHxuTJWCGT2 ze+|*gi2ej;0%%B(nZ^D(Vpmk`&iOv`W1nf@Pa@3)mIgP%tAc-n;UsGEOQLK^V+Q?G zNb!9l#c%N9U!@oSX(af5J;4sY9}bcXS$-3Veo!XLpzxVt6s#-?pVd+L3`gMs9fi;7 zD6j-Og{~%p#Bb?Hd?tg$=ZBG~W|8=Uj>P9V68Gy!d{IY&C728bNuChDt>f_d3=UsH z)PEB+`pBrZ_#LG9Ly_W3BXIaK68w>#K=`c4(BXHH>W^ir3=Urz#v#`jzo+Byl@U0g zyD1!40^x5Wg9Cb=!r?0rIql~Lk#dWP^#^`<7rCd^;&w>N;)nxOXjovtaUgzpzlo<~ zBLkb2KfIqMnl9m}%gi7yQ#($|)=U@$-psn+^@C)FdGEyj?G5KxK`WePH`ppc!$&_6k~=ldTnVt#vgb928gkuOB(>Jf5PYj=HH=?$PHh$w9TC=^&1H`u9c6%7)F;qVbp5R;##&99NMoaBp>LEls5 ZW4X&inJ%tVX6`&BcGx22{&{4`{{|Zf-@5<+ literal 0 HcmV?d00001 diff --git a/MikroNUC/20260629/20260629044001-Config.rsc b/MikroNUC/20260629/20260629044001-Config.rsc new file mode 100644 index 0000000..121f7fd --- /dev/null +++ b/MikroNUC/20260629/20260629044001-Config.rsc @@ -0,0 +1,4912 @@ +# 2026-06-29 04:40:03 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=br-awg +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/interface veth +add address=172.19.77.106/30 container-mac-address=5E:0C:7C:E8:98:12 dhcp=no \ + gateway=172.19.77.105 gateway6="" mac-address=5E:0C:7C:E8:98:11 name=\ + veth-AWG-VDSina +add address=10.9.9.2/24 container-mac-address=7E:39:0C:32:E5:06 dhcp=no \ + gateway=10.9.9.1 gateway6="" mac-address=7E:39:0C:32:E5:05 name=veth-awg +/interface wireguard +add listen-port=13822 mtu=1420 name=wg-AWG-VDSina +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/container +add envlists=awgui-env file=sata1/tmp/awg2-webui.tar hostname=awg2-webui \ + interface=veth-awg layer-dir=/sata1/docker/awg2-webu logging=yes name=\ + awg2-webui root-dir=/sata1/awg2-webui shm-size=4096.0KiB start-on-boot=\ + yes +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=*DF +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/tmp username=amsternl +/container envs +add key=HANDSHAKE_TIMEOUT list=amneziawg value=60 +add key=LOCAL_NET list=amneziawg value=10.9.0.0/24 +add key=PING_TARGET list=amneziawg value=8.8.8.8 +add key=AWG_ENDPOINT list=awgui-env value=10.30.30.10:443 +add key=SECRET_KEY list=awgui-env value=RanDomSecret32SymboLs2325272931q +add key=WEB_PASS list=awgui-env value=zoomzoomrulezz +add key=WEB_USER list=awgui-env value=vados +/container mounts +add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +/ip smb +set enabled=no +/interface bridge port +add bridge=*FC interface=*FB +add bridge=br-awg interface=veth-awg +/ipv6 settings +# ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.19.77.106 endpoint-port=\ + 51820 interface=wg-AWG-VDSina name=peer19 persistent-keepalive=10s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +add address=10.9.9.1/24 interface=br-awg network=10.9.9.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,8.8.4.4 \ + verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.19.77.104/30 +add action=masquerade chain=srcnat src-address=10.9.9.0/24 +add action=dst-nat chain=dstnat dst-port=443 in-interface=ether1 protocol=udp \ + to-addresses=10.9.9.2 to-ports=55055 +add action=dst-nat chain=dstnat dst-port=9443 in-interface=ether1 protocol=\ + tcp to-addresses=10.9.9.2 to-ports=443 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260629/20260629044001-Diff-Config.rsc b/MikroNUC/history/20260629/20260629044001-Diff-Config.rsc new file mode 100644 index 0000000..dddae3a --- /dev/null +++ b/MikroNUC/history/20260629/20260629044001-Diff-Config.rsc @@ -0,0 +1,3 @@ +4700,4701d4699 +< add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ +< t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" -- 2.52.0