From 7b5ea714f58f47095fa854691ac70ad4bddc9ca7 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Mon, 29 Jun 2026 14:40:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 29 14:40:03. --- .../20260629/20260629142004-Config.rsc | 3692 ++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 4 +- .../20260629/20260629144001-Binary.backup | Bin 0 -> 362330 bytes MikroNUC/20260629/20260629144001-Config.rsc | 4931 +++++++++++++++++ .../20260629/20260629144001-Diff-Config.rsc | 20 + 5 files changed, 8645 insertions(+), 2 deletions(-) create mode 100644 MikroMaster/20260629/20260629142004-Config.rsc create mode 100644 MikroNUC/20260629/20260629144001-Binary.backup create mode 100644 MikroNUC/20260629/20260629144001-Config.rsc create mode 100644 MikroNUC/history/20260629/20260629144001-Diff-Config.rsc diff --git a/MikroMaster/20260629/20260629142004-Config.rsc b/MikroMaster/20260629/20260629142004-Config.rsc new file mode 100644 index 0000000..e99e67e --- /dev/null +++ b/MikroMaster/20260629/20260629142004-Config.rsc @@ -0,0 +1,3692 @@ +# 2026-06-29 14:20:09 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +# channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados wireless-protocol=802.11 +# managed by CAPsMAN +# channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ + ssid=vados5g wireless-protocol=802.11 +/interface wireguard +add comment=WG listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/720/6faffeff\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 02:10:04 29.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 endpoint-address=\ + 109.107.177.79 endpoint-port=29185 interface=WG name=VDSina \ + persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid,clientid_duid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina new-routing-mark=\ + To-VPN routing-mark=!main src-address=10.30.30.0/24 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" new-connection-mark=\ + VPN_No_FastTrack routing-mark=To-VPN +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG protocol=tcp routing-mark=To-VPN tcp-flags=syn tcp-mss=\ + 1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 new-routing-mark=To-VPN src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc index e26460b..9a463cc 100644 --- a/MikroMaster/tmp/Diff-Config.rsc +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -1,2 +1,2 @@ -3634d3633 -< #error exporting "/system/routerboard/settings" (timeout) +3633a3634 +> #error exporting "/system/routerboard/settings" (timeout) diff --git a/MikroNUC/20260629/20260629144001-Binary.backup b/MikroNUC/20260629/20260629144001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..16c3ee6e673d63a747ddd38dbfc37911c49d2eb4 GIT binary patch literal 362330 zcmeEv2Ut_f_V4T@Ktho&sEDBnqJf>Bs3;v#nl!tZ3XwoC2_TAs*sx>oz4zX+9eZ!s zd+)tBc;DLDp(vi?{l9bXJ@5U^$G7*&X3Cm1Gi&{3t;wF^6?4~i9%_Qj5kgwNe~v<{ zQ)x1Bgb;=hVj#nZT8%cTMw?ZmJqbFRgCWGg7(XW8lv(h zPSqYlHD+>!Qj)FKSEnt=*2xt)Dw#rO6l4ZjI0Yf}jieh_qe0r+K;j4?HyT12D4LUo zFpQ`hLl`59f-r`qCBhh}1zb!K=0;I#=m={P7|j7u$Pq?|avoC=19PGw23D7b7|5B1 z7$)^-h~5lCh(<$fQ$sC}sFmcmYL!u-GK_*Sy2hP`ED=WkT2WC^S*58$pQg~VZ4l;W zClkmeV!n{i5(>mp7LO+p;RtiHRpQNs{N{XlbGD*6U)fy5W7PT-I3F0zv8175gx*pS zhG+;`A?WII^oEMCk5t4!pWyNtE`GolwDGD5GPJR(c|>cCZM1_vYd}K`>T8gMD+u8o z6)`A8<6mZXb4?jUG~Pf~Z+zolZ@gH^=L&EImnD_+6fB;SC#kjZ{8}5&|8F*aa8=_6 zZ^J5w86AcowBHgs-@gch&aXDu%!9Qmd8&dH6%<29m`{H!n&X1X=OEAx*ieMfaD>nZ zgwRNY&=`bJ2|`GL5SE4zra}nyL@=xora=g0A%x6OInme9=Y0@D{SdA+h zL@*?XachDQ!%sVNIHQ`Xon&HW`MHo292uaC~HFL|AlCNRv@N zNjUoZghfyTF;=Vh9I3CRO1V*ofu5ro<~GO;(NHu8bhT8c(B>GG-1iCKxhzAHsZvU0 z3Yjt$G%~0m&`t0GedSKlZHVUv9Y`_gV4?#_9c2&`p@ZE~GzW4TyBJb{+9t*rkpgtF zJWZD6FH@@&nfeq>mR_aF)PW6oTTxLFL00*$qM{;*q~8;I$ne>V5Q-pKfhJ+7oDTWG z_5@H6a zK|Q4dI)DkUK!{E^Lr4iprh$&1O{Td+f#(DsLSW3z5rQf( z04#P0frtr(W(F+K5u!tfS|P-s)*&aUHT=gG6dLGHVZX!?O|H_V|9kkM)Z~ZqYy2o=X_|je zk5Oy#L;WRwOtp#(jb1UkW{)9q3?Vy2D3Jf*7^2nWh*k?nb#f$fjV_S5`f0O&7*QsQ z42en&QwU~_Hd|eVqpK@OBMtM!NW(la(x(WTutdd#RV&7bxd!uuPJ$1bap;4}bc3SY z2t`UkRe7NNTJunTo(JY}t$CysMRsvd(nI_ROWoeSkRE4}5GfSZt8Y;9=r}@{D?(T!gfM_N0C$=og!v+bu|NeA_7ov8 zu@*$A1wshaHY`+IA%t2ZgaQ%5f)K*MxBy;hix6su5V3HLLkPpcV6YKlxbhLAQxT#F zNcAg3h+!rI!4u}8GeUGc8=)@bJq`Y&BGFP$K$_|Bg@zDdTzLkmlmY9)T1bNs{jL{* zsTqL)d|d(aQcqeNR?DY|I}M$-Mg}AOmb9L5CzjOb2UeO4(<;+JOn;t42&%p7~}+(dcf6TxHLeBVeWzu-PswThLAcC zp%ak$BqTgV;Le00YRJ^{=xWcRs?m|v=r+}8pK7#sHQKWp?NN=cLwX2$Wh=53`n)WKt~WW86G;aE zD35L=4KvF~gM#QmJ_q#Im83scR8&Yw`b$Mcg`A{e8F$yc-(usl?oE;RyFxp8$^f^N?w2Ol1 z#r6p8p%}8cQ4t;F>`pcO--BxSKR~r9%@OjV8qzg}bTov#;f@f+hic#yOcG@%coB-> z0wa+#45$%gfg|C|D7cKKB8J&GpvJ?6g&{^uKWL*rv;)Tw!-0(%xSa?I22-m>AHXD| zmhASo%aroJR;D(D(DBK=@`^csJ^Mp(N z&j{CEmzOC^(`qs`*_HC``nSv1mJ4>yR$c@@T{&z^2QeDD;SpL^a*a0Lg*W_kam$B^cka2Z9M#OObc``Qp z&x~SwO{O}Jl_t^3b0t~@i@@FLzg@%tu>W}?HvP|t*d-%dtydXD%lfyYH6o<@&y)3c zD-830(+b0i1i>s_hD1$x$+9$BeTrHmOE*Su3drR!EF_I|IYCErm_$6i0gC3h!s@vZ zT<8e7nM26hU$4(gz#EWW6L5|hLJ6iofj^l-cq|C_5v=S9e{7)_;kR~!K#?1Afr|%R zU^zsD8q9PGtxBTC3x273_AgaW`IoC_gBxBek>|+$iD;M6f7YE87Tmj|XpYe}XmqJt zA;Pag_)0ob2=_XJ3IeHgutOBW;9esF2ZV>s4xUuH*1L}e8Bkx zmB0raR946k(1+ZV>R%cI%LZAp)S6UPr3(;TR`7v4i*x}(7@dd!R5C%tf?%Hnc13>*m{8&ATb6N0u6-! zr#II4PM}l2v0%3P?{h_-|fvnzLlK>Zcr-W>U2Yh?UuWCe0Y=6 zug9(z`qXvzElBM;`t-NDeg_(qoVwcO5%=VFjENB2Ccb{;i`B2~7cGsQct|*+pBseL zOeFFQRc5W+0RM!qwKi@JC(tUnfp|@IZrVul-A8wyeKWmY`T2UjW7{qIWcFx)Pyd^Z zraZ5wUUKQ4ftwZPLyvnjY-`$1w|#Ht(vVz&8^Xsv_7`LWF+yU@f@}hF8xXP~COQP_ zU_(#2n?W{-)2t`vID8o#Q8IKPZ}g>E?LysKuf1ov=g72E@9b~97-Qh3clSn5TDE!O z)biwl(Yr2tS^_upXjQsa6O$AIv5+4+>pSs4Xt1)gYA^&bKnAUfp}w1JhBWB^?Ut}p zRM*FH6rlV(e#Ky)x0_n1#=lET3bO&XA=~D1zrp$-N4xyR2@!*uB&(JKLyQbyC`BqE zqD6nj5riEpIjS*yOo1blDvl`Ltx|%h(vUjH27hBKKbdiU!LbVKb!tSA#h|CT@}TIso^h?NQ{%x7zBnp#9&Q~F$!YB5Yv%x)q*$Q z#<`w{L%`)58?N z;Mj#Y2YkT0YaBAMM4D(0sk=#cyfcUweDYv!+^oW~wVEu2f3!v?)8slDv^_?|fQ<9i z5=C>GAw&;pAKVkda>ULJ*gRpZ$AhdJ?jDA%e{L2r8Es`@(M?4igW_Psnj6qG!zn$lwgWt10oaRBg|1qOhCLwqi1#s8$>{$ zW`^1zyom-Ha3O)xAiReLZ%#8qh+g2HJQ{Yl81Nx%jw^OS2==}8@PhFVK%W9pHtJx6 z=yM@3gb@8G1)-tvkl6DIm9jd8S%W>YKnTBv;YHXbya?+thf2XH6kD`_l0NT+I-gla z>)&0mXnY}VZc6tZ(&j_}jY`G+*cLd$l$t~{wWlN{u&r=cH(I$3e}xESZ+#HX{96%W30I9$G%FYf#=mzRUvn3@sXP%u-IrUPimohn7NmUb1( zZ>`+lv)7umFZ6~Uxi4p5?Q3}^Qat8f)D!8MPxw~*{AbRggW2z%##}hm@%)v>+?!3+?|nwh+d(e>PY?vQ+x-Nxw6t^L}h<&EH%K5zA<-uz%ZkZ4;& zYYeNP(Wn&66t^~|CN;E&?h*(7>ACyegu{`G6k;KcD|t$(Sf&*5IZB)(5#l0=gfHg{1cKoRv1=XDBcO`j z2)QvOJe(ttN;nFoKqi!Na5)d>2^D;WfG-hKAn zjZ~6#P;5Y`DpeJt(CV3ynKFA6n-q|no9ic6rK)5Kt=>UJEYB! z4^|jvVuElr& zgKFlot9|`Xuuz1#S8q6Gf~ZB9HNuN9b4n40q1!EP*=nyZS#WlKhh=f|##rQ*9GM-;6DEDhaO#{&Y#)%UR2JX6XyhX3@+vk-BP1fgl z*B#S$mg~fR&o{T3PrrPAbstNysiL55w??H-AD8cZ?sGw3(5Ls*PJ`1jyLxci?TXp` zuye+ptX;V_yS`%Y2VYteYSWRkG~4;y>3KUNZhQB9JB|A>lHOxPS;~gygLchb);6kN ztCO)Q>YVO#+6l+by6S#E=7JugCF|Pe*N6zMOx%L4&=M*9DwT!W)5U@}N26bqi}xP;>lILHb8$2$!|7w=@5I zEp$d~{F=8nR?*(&<erIX3I|a%-2JOJzGWU+hf(kE96^q zy*l8#8+gvYb@kDWi2RKkJn1I*Q`QcPU17W8wl011WC~`t@=)=CDZG?X<}D9AIyZ4* z#&xirpdc!3=bnTxqwV}Xp$+Q!JDu`-LjRu7|J(^(g@|}uo=Ac##5^8PCKSn}906Z} z^F?yLLL}z#q&&HZrxXhW9I2cmkV`pyp;9E~@+3SSS0=>S0ycq&YE!g;h-&=@fs$|$ zSE|7I0x{0x@B~t}ge~L?Br-8yEN07uJPDwrpV{jygxr2G^8lr4Kmrm{O|$r0AyowD z7a&znX%B!@71nHBbx1`8NEK3tfK+q|Lc4!NRrEQArD`=`8{;aqOkCx}~%D4))hPS+1q?$2T_-P z>)Ma+HL*_5pb1_04L@n73-Q?ziIRJLb`B|?CSOK^H;*k`+0mTdDz~} zwf+2*XOZEF1bf1GCPW11&pR}u-~F=a#MQx5m+Yba zkvrpjo4Y4$Z~7KaeHoH8Qx%p56bjD*6__WVw3$F=>2o_PCGJK6mfFZjIz# zqefc`7*iewd>&X3p_*$zSVdS7UWE0>?J8IFbleofDkvDLwy4(+F5Im=ctd#oc{pB;Cq0jy%&6PeBv@88M1Z~gi6R=a1WPGiJBAUDEE;6l<_ zqTo438pCKk@ig4i_#MZFIH&3LSXB$B;JIkZ)=VhMSq1 zqz!{CU)#QBrx80u`_f1&7^0?yLwi%`~hF|C$ zGW1z=RC3D7J^MGBF#S56u4wyij_<`a6IUMgYun<&;`f^3CSUQ^o`bgU-Q0J)S+mtc z({s4bP*VK5PP6WAJ@w|s1MBi@ANOsw(GFnHQcg~u<;Te$eR5jIGacCdh1h^~%8VxU z*D4tqr!!05ZvE_!IqdJ6EXOYO8@fc4FndI|@Qkhpyax>^>pybj{OR!z4irBX=KFqm znbcXNwYiAwPe$pkEEDpVG#Q|pkyCozxo=6?k&`b{so!Xw-RiEbc-;EN)uMM#-gX-2 zVdd#N(JSi6+_Cq|Hm?|}U;ip&{?sd<&g~c!INNLrKu}Pql@PS2l<>TR`{uW%Kd3>>oDEm9rX1v8YfW02#XNueIo7`u?*3qTz2x-Ug=Syh)Xgpwx9@xJ z6MvIFX6dLR`@5T3FQpFrJa6Z4$DRe(E%t7z=U{T=@!lo02`$3&IaY6w(*4jVRfb@s zt@Gxy>s)$l5PhbMJaP6~xY>2{R!_R+AIkr-rfI^0aZ*)#FB3`q&;cWxEe)CEabrdE z0n_R<+3&LSQ8(93vu5Gu;uEim3%|7Mc8v3Mur$PrM@ja^#%^el<=Z-Q?ZX+xSijk2 zpROci^q9G;*@KSDx1@xBJ+ZF=wI$<8B)h9BeErP`1K5X9-VdQWh+9^V?Nx>Hnok>S zW|Qi(>BajUCPA6ZJrgclU;l295>R#Om2P?GK27eFN|n6o-@=rg&6>*`9jh3+;lrXC zr57LhpSsfd`APjq-3C$cWs|-iDcM`TEnItH)%y$A?T;qd^dBC6dh+MZeobwcm#pzF z{Pb{k=SRZX%kSP$uOI9*GvJbEY~EP@`4rld!hy@DQCJ&o-d-#@NYe#A(|XNWI{WFY z;;(R6=7zjJi!+b-q( zowls#{=Tg4x)6qC^!vr>8>S9Y9O+Yh`*!Hgt{)z|ydxrwP7jH_t3;$xJ_CMUOF-4% z)BNvLM!%=|?`i&Do90zGjmKy6a4DC=6Dp))nM@?(OLqmQ^2|MMhpg{&iqDkyP zdP{rP2tdb0H9)ZeNtvoX3cZGzsF0;)YG6~7LdQ(-3-WV=Xf(i^>L zKxt%>L~XWCuaGli6#86^HvN~P)5Dx9+5jvY#=eqO9hNZwmbG;KDJ=UwI^D>?1B>K= zMe@K33HlC(?E)CK9WSEHH^49|Ep&Hv8wU~T{?%|;Tol_KXBu=`y`M^o?Tvdu8Vh^Z zKbM!WFsgmMpGu8@U?Mio;jlTlkSpx$WW^B!1S7xx*ZKP^t$gQ8zxmp2f4n^GF!WtI z7IP~z&}>_VcejEMU0CZoA8enpd;w>XWay?$>mg@w%H)q1R2}9zi@Wud=N-U0t!T+^ zE6P7ZJJZhRAv2|g*}P-Xx+`y1#U4yP*Lm@zVV~bDPb>2n(#iWI!@G1vrgoqUuDx+{ z-lH?O^x5@x_|EF{oj@6+qHET?Xbw#1$8UT?ALx*6B!NZiCvixZC~4v7m}`YG~Hz*iO6 zqURhxYF6R-e*f`j+e=Ds4-$rFfA|5L)e@>+v}C3G2`pgI{0ix*HZwSX_0 zDl4l?%XYa9h`VIEa7o2P;i+Zix7WX$$_g7a{9Z8Qf}Z04Vc5l~k4nAEB1Ubq3U|pp z>9D|M>jL(^89sU{uYy~z@xn(|`pvB-AIN#=J!!u3+O1WugSs4wiK#?ULwK`wy|r0DOVAF!~8WgBZcr@5%kA z%KDd-&+p0odvgERCU+I&;>-9Vom)vQh}T;;B$pM ziA*WtN`!Krgv*gjg#wX`$HPSm0&>-+V=Ez-DGniV0(Sk}7DFidFHAZ>v7aLY0(Zql zJ+m@IsZB^YCy!i+cg#A@KOzYby-)>F149AalG3=T0H!^?5Z0eRi?{weY@Znmx#!ERc~ z5-UC-sG37erOB*viG2seZkymmCfD&I>H#u(jeX0&zs^6>eo2E;c^y8LRo(bmnjm~Y zaWz<$lwfp*(e2Hv1j%+F0-H25dy8uFWV_-n1_b9=t6157cr*Av)!wVJC4VMd0BCF+ z=T!HRiEuVsROuu8=dfBt`ElPN1@;|M%qc|_3>DfboCJ0DUZJl)wW5Pn&a>m*XQNie z4V2to#*AjLIB1EtODZAe+PqucJ8u|UCY4_)m~Z;3*tutkd&|;t`_M`cW7Ap^FQ?Ixw*OpE1P2C;W{Nb^eS4(F_ zm9I9L#BbE0^X7^Zp8_^F+w?y1+Mx$_&7)UE4d2{#+J?={fFlL&yjA^Mq$#n`2Utva z!gOwr4-$7`B@NqWwP$=HUeA8T*?z*sPr5Z%^SfRN zx?p#CX{5!Ci-p4(r0ebPwb*5=D$fdS=znsz++odZ$Gr3 zd8|v(*{Jo;x>Q`hr(5CCf`xYRlk|+pi;*4c7mO3!Z$GZio5uZIqMb?)KMiSoYFAK7 z;L_00w^JW<7&tR&>lZXtVX506 zKl|v%lT%F#8e9%>oIQ(@)M1jttN51QLnrt=Yt$SQ&dd3l5Vw2K^aJTJ+eW&@&KsR1 z9s5S*c(Jtj&c0<9-(Dr0I@oOrNw2tfJz8no{^ZnEPn|YB>@{}e^~myT{9f}M zy(hSwl-y~&T{Az`%dOk}YYi>@(i*fVTK#lj>fo{|?e%N7PAwc(QP8_y*Sxkp{Kf^Y ziW2%ZJA6=js7|*Jf-XmHdU;_RuGKf2k&9ZNx_a(uK-uT*t&a^puPIo{y0Mk=;oanE z8~K;_rmh*`JLGwB!wUySw+!joaIy3CegSn~ zNk1JaS@Ml=l%A=mbd-Y4F=F-K`u{&-s($PL-}?Wz{{OB2|10{xYB{G6in%he6z3@A zB8h~}RdCocE}O#u}Cc7Nnx{toF|ZR{3cSkcwKQUC{g^_2y9*sCo+ zNGH3*^zYr0%>C=t-0tYl?O`<+$o~SXIm7Q}Er_L@yJ0E!-A}xJ{=37}P8zJGb_ zl*Kklm-gZPXR&5KA1$+VdTN&S?&Ki9z=1O!whqc@vGVK!hfadtGpQlZZS2+B>#K?v z&rRPLaw7GrM+Mbo{_R%366YUM4d1W7(q_S@x%)4!5(FKym8qmnO4}W%-dof(gexd) zw6gTIy0u-~(=72`bH-%d+hW1UV(;zui$}!`UM%}Gi*sE$-ul(CwTv;>)XP7o7tEpH zVr7><%E-- zAi|I}I&)zd8v)|)0j90o_D=lTGlKhjfc>ijtjYp$*%G-xz!ND&Y@EmDiey5rNXZo| zBs?w$XLGq+F;~HruthQ%&f$m!3Z+;m<49y;g;F5ovgJ5ofohvM)hrO7&*uxIG9`x( z#qzm)8CSx?m2$pB%Hs<;KmW~31ovP1&C9i4-C5_1VgnNN60K6DP|IrscnzEEnt?;H zDgiOfsyvE+-!41Le|?u7tCFpMX`9_Gi0@v*izuX7s%4wqn3{gXU)*Nrg?ku$h%S|k z)etDT^7HX=G~sRnJP(k z-W##$!jS;J->{Gmb5+x?53m2to;hPfWG<&k^0%!|M_zOPti9?jnf&~H=Rr?1>unv@ z?CPK{=k#CFQ}z#AXcIpyJn8M0Y?u25cN15&`hSe13l<#Tah1c)AA9m8*D9hLg$~m(gjRPEDy(=l=Dtd!IHcc~#|A`@v22^X+%}mYhb5 zFX09I`lZd6E}45`xmg$Q>RvSq;y2?MvhDQQE0(I6Ftx?BMn!|gWjQ7jy5I5{pCRqW z_+!qJvNhSFSG=Ax@6H}Rq;dQE%}yU+Wlm(a9fv*LGCZ{}`*y0|$cfa(ejzj4vftO) zXt{m!ZDE1?HZ;FZ-}o=-+gt2Ao7X<(c*)yTvwDYGhWD|;`t9%dAmjdE+-aKUKAW4g z4>w;Ilr1x_2yQ5RHsPMUlN~cxbe7XfG$4DD?sM9hwMS1h+W++PjQ%J4uYG04+VpkT zkp;U>O*Uy;`qV7zXGx2Qr|CeBSsHaz5TQ8cfY5=f6QVyx0(4c1tfPid;)=*9&L_h0%Omzm{{Rr>P%77mu6EDam-kbH4-!?df1jXs1gJM`AK`cHy zn8Od_S9X?TH|3$D_t$xzzc+~z#uhAJ(yDyjQJ~Fh=qi;KGGrF%6Kks;`UFY?E zG6q{QU%#im>AOajD2&_dcCFzMK6jCJ!kgnKe^
()M_V)FwnA0?H@pJ!o&+A*he17s^+q>88 zuf1v6KM%2YJ?mP&F`-*oz~r^;tER4AW-BH=!d~T`@3yiRMNzV$w0p><#0}GOU8e*_ z9JyH9Ys{yWit|=8R_8o8^QGfK!RtqV>%}CxgcIu%mX3xXl zCyhv1I#=<{Y4`E`C%I}=W)kln>z)_J>oY=eX7-ZT`Te-p&*z(8i|hyNa zjzhCPbjTlkWyf>%h=uL8Eiaz?ZEOqEt!1(WPe*2Tf5vLC<=k$QmF&<1N{d4w=Zbdk z+|jbaBmb(0rgFPJ8O(;R78&wuW?u=esM>pvw- zTfJ}0#I2zPb9Qo1M;~6l_r?UTHzOC@9v^U}d*svw9>+)9q+V}UvHWPk8ppv`iWw6o zhb$=TsGXbK@@r1x(9<1uBn{KQpiV2CKHc_Nb{F%p7xfMIfBZOQPrt}am5rZG@Z|$& zh{P{9$**P(oGWF{6zT=L!Jlmfp ze31RP-JO}~M<#E?Cq71@DyM6dfFHX`|i!+Xy6%Cn@s1@XK9m4gS zX7#5nDYW4XT@|m)X!FYQNQ^`p;kM-oci=hnt(Rl{N&K|^-p9*ac8mycq9tG4%<6e{ zeP{L9it*c?kMK`s4B%bKYQJYkBx8Z&!h0civez9wSnQX%#QV(YGmS9w27O8^4tt0` zc}Cxx%S#J#aJsth(UA$ua{uU>ACnj7_`HsFz*=8X>Po72hspB?&CY8dJx;LWNyZD? zQF*M39y;Ir0biEKe!O&}Z}`wQH)3zL>;9?FouH|9&39g8Y(HPoK%jUhemyVGulIyS zgIyzb_I;ad8PKLr67|J_rMIP+GB@d*_)%!y*!pDxV7c# z>UOt-mo^MkQS`_E$mN$teR#k6)|;gxA0L_7@#QEd?WFb_>^T+9Xs5@_vq-gAJ>~tp zZtSPaB7Hx&3>?;EPjVT~?%{0cl502cPNm$FiJfoL7?zkG)9> zDR(-3tlOj&t{Em5VjLTU{ee0LcMV>0Hx1tQX9){II$ngmH25d!j(6hXiX&Q&{SH#& z?v*c)vizC$gB6+(b{!dh6va0B7DYIh&BKMAf2oYW0!>@u<2p9m^my}#cX-F~-b39Y zicCkIf3S#Vv)pa{Ze#BZgT?OgtBvRCKky9{Gm5psvn(KKC?J!f$!b> zqgR!6X*{G&$+{1NFMn{j^yFK5$cdQ`cYWzTJ!}2dYt8q3>JxUW?F42&@y6n~X-y`D zHFaKa4`0|ks63>7khXq7#C+`ToqP6u-(>`jbA8`)?Aq>wKd@7Exp*LJ_6%{h=SA$Om^E|Bb5YAvfm_kHdEZV4m)>Z-cg>>}9VSj*C0kcV zm(p(Oc=3c?yJS<62WY-DS?uuqneFm6x^LYY(?3i}xZ@=dtit~2!oFZV_{@IpyDKek z+$iGw?eJyWns@52A~nKI@#(*2Eee*`n>}Kj`16<}^Q(CQzNA~>S#i(QSVt~)W3Vasy%6EPL#Ao4P zKxp1(lMO6wOi=+Jr7!qiadVidZKjVwaWu7<8KA0 zytx~&HZQ$m>-I9_?X|r~dAdGj(y$F#E>5SmuUJ}mVnIDTe%k2_NaT8Ni$viPM&x+sCAvW=ePOq9?30zb;6~$$F2okaJ1|~ zQsT`Wls#Ey75<|SjIrIhZ^-0R?MHmIG=1>KW$0mx>Ds_nulI&JC*Ij!78#nnmUq+U z#qiEA-vykHd3SfLRp7SHvdreL#i!!>x;9~(Ts(Q$zr&57`nJy>M!moCSt_`ZwefYy zt$z8e=k1m_y!P!j+4k_fQ=OmA zWZBKRe5+N)rg!(c`W0+CGJ5}5srlwe-ln;sCq7?l;8b*5{OG}%Rv8J0RreQiCwV=1 z+P?Xi!!dg&Jrv9CGiI?TQ&UAjWnL>kyt1$DjDH#Sr0b_+lL`+$ z=z4YJwtxYThVNdpL)N1XpMK88yYs;pUD}V>+@agYh5hed-!Xpb4$1EO^SgxDEa>EM z;fd4d(R;>?!WDZr?rt2pcW_|3PW9={;yMScG}ev*-y+xFSHxyoH(TI3F7I6M1Yz>5 zecU_spM8n@q*}FGbDCK{b$95k&HYRE^~ts6rx!=AV_J3Ju;HzD*qS=+*4Z6N&y=h< z^0D)b&8_th>^~yv4Xw=Cq)9 z?Q+8x4#_Uta_iKibHR-M$M>ggPjSBCGjm@bzgt{oudeH}cJ>Ggt{d=SjC$6+i*qNZ zeEfX*jtRBH&Eol2*OV47{lLF<@QNwN>%&bAV}^HO!XL4ho+OMpypuJ|TjyE4U93iD zyV~xspi@gWIIqgzCoTB)>1G3JpO*T*78?fjKj|`Y#|V5dcG+9AJz~$%WjAToox*d+ zJ3gG*;+w4HJs;i4p4S3jjJai(y)S?H@&gz8^h=J3e4BVPW;3=dhdO9Qvt57O*u=cA zS1wLy+jq;WwJNM(BSthP(D?yKbz3>O^QhnQQ z4=axHt@rujrF63!FG8aq4Vw`X*(ukv^=KY-Z62mktfeoX&`o9&ae@_5S=Bd7G_Q z4n3RS0Pm&=_E_19K6`<~o(mnpVNnkp7LIrk_KkE{^f`;y9Wi1}(0A+EUvf75mBXSD zyCL3y2vl3vsy_eHTX9CydFVGqx>;ek|7QKOy$a@_9;(&dC`&`elx*-lSavSEq``f0 zrd7Q;->mtnru4D{gA&gz%}dg>8*JTQ9#gn%qC8FN8k#imz>dvz7w1M^+ZF1gy4I4v zx-3>|J?_xclcqDdvK?P0O|`#$Z$rlcbI+QzpH}X*NbZ+0vv}?flaY2W7QVefAG+;Y z*5}0b+v7LYjbA*sX^G>F8QEyi#wL?H-`*YM?P2@qwRNt)^Np^~TVwch<9(g;S{)r~ zIbrm`C#vA!T?=i@wg_`VE)qn`@#&~ig-M(W}+@LKBPrKea5;Dv0+vVaFLz1sue=_uu-C7Rb zgX^&Ktovr2IH<#N{+-=c!*i}J-KyCpl9dKrXt=)h!t)CkjOu;omLl_+v+q$^!>RcN z;bHANwQFMg@k`xThw9sZxpBuy*mcl{VU4yI#joeiVBh;RJz*^8;bv*TpyPWtb-gpD zgGa~JLtDq!8TwX`l0KR}`;YfUtxC_^Zqq&5Q?J+O78*|H{a#&N>aTlzc%G!{V+8A6JzcKJ{ z4E!4d|Hi=obPP1yUotm?&_|*pgZgzsbDu1tvEe}85etB#2#TJU$4i`$6 zDhju6X=fEMceJ2OLjT)>N87!VRwssEc@lgv^tfd=%Vv*L1!w&Cri9cjGJW`IrSnBo zWP4ZJ(%L7WkzlCLSf{1(VAs3Z0UHMOeBnN1{riIUMG;#?Pw&)y`eX&e=TUZY$fC!~ z&$Zsx?b_jq>R^;ocu&z{S$Bs?hjZ=2^XvV}Qei>r)cEoF>D^w__Rogm{;lUj{)ynY`uNE z^MSi=PugZ!Z}_YkVv9{zoU7OITfJpF*B(ec-DRb(<5Lfl4?QzOk{i-nmu611-+pCT z#mb>=&mdXJvY^=Ry}NA+@|rGg({a3H+*a9o5U3Se*v%Y#^&9mT1jP5V3Y}FM_{QaEs*IqAuA*4hu^lp$;_+Y4Y zM3Q!k#%vMN$q&#$j`L9JXAn@C=X6LMFda4||7$;NbxH0EAEwLMRv+&P?Wz2TJqFyO6v$hu>+ogi9;p`1gv6 z*5o}9&g*NB84mb`@CR`Myy47g;z(d~$mK+qV?40B9{C*(uEt!*FK~b@oU}@uuw@(HcWYLy~WpOPVw)%~t2Lrp0jcRwXgi^kWjUswAlr ztt3_9SIG&;77kLUS0=HQYceFNOqNa|(aO?TI)xt2y(UhTCkKV0r(n>5+?tR*040T! zw1#*d&4C_*(lHnpmM|_1niV8WZ==!aV{25>g;xE+n+ad*fX14zcm=BI09{ z;=J+RI9|!4T}>X zZw^P*LL;G^T(wLhQ+tx-h^sZwNP{A?C7;6~-eMHZF-PUdt^_g6DJ8^Eqfko_y||*H zf>wg)Ylz8F&cMt|5Cb!TrqW9YXwqB9;zZDFkef-4M6S_AkooCV`5XMC5K4_g_(UOQL?Qgt{wSJ5?}3V`=;d2a zWE0|r@UdQqR){c@LWDutl$vZ&fGsMNn1%H~bY=`fL^G(+mb$>VX%9qSLqi63%*ij% z1WI-OiQ!d5)^37&n8%{RjhkPV=GIrAgZli z0h;sbS3e zW9QHzD-3#&7IcoVs#2IxKhMdip3{UA!D6#v)sd@~$+IN-G?_BhsQZnU7<9kU%0?0v zI+{~CVL>^eLd2i~BNn}NtWb$w5+~88fuX9Nic*=1ZcG9rGgmFsDL}6oYX$HDAE*^p z8}P{|0SSXiju$35=P(Krlo^xMS*E>ptOSLO#zb!BVjSLV4=*Yp=3M}a{xLhHW_DVK zxFAk#nZX#yHF|b$|BQ4Ai(H%;Em3`vNx0WH=xxKA#+;ZABq$}@Dv?NJ%2Xrx^CPpu z9jrDDES3rUmJKW=h=5oax!HE?*u3Un9az^X^!}lIok6ATxCJov!fp{5xj z>cal(-K1r*I3}j9+fj-V?Bdnh8au-9Yd(l z977Cbfgy%DA#4*2HL;B5cvX}$5ECv|7;0i3&0$uQ)6HF7+k-HGdx>1GC6F*!^p<4h zaBoQ(P8vdxp#o%50Sm*%#DK#LkIgBDJJ>yFn*n}6;W}BGLY}QwXrVArsO!nXLDCyZ z+8-e_lcd3_!ul6JY=qE7l1`;UUc!oFewbm^!iL6Xz}gd-Vf8|Y{xThdm)2QN2S$dW+*cC%w&mHC6THXIu?f9n)~bWbb3XGzfPuAW$BrH zncD13W>7Two}v&`Yk;WJ*uBW~QdvtC;l~W>~aDrS^k1uxhrUYUmoWvkb!_EJLDF zlcUu!D7uz^0h5Jp7^mZS_T&zy;s4DB2!4d?FnV}!EG+Mnb zku)W1$O#Rwcr{5wjYb;KlaU4uVx$4Dts~QedWHYN$D4-G8Wha|MQn`_25J?|gd;+j z6GE6XLg41Wz$%!ba?}7J8KoekxSnT2DC>9l}LEPETDPBQpO4> zJMeJXgYqF({4j?putJ~_&MY@vC`DJ8LX@{t&}B~<@BP%bHW*+Q)vQKGPNdK z4kvR`5pru7txDHwVv<5y){>wVgavGL8Tu?gV8<^*0og$38=?a@b`eGeoKny`Oh)xiFh_{4%vY;S5pwoK zM@b$GA6Sw&hD60Cg@#83#fPyX<5)p*IdD!0`!5TpR4=@-snPND_Y_X8UbqkSBU$X< zQ#h@9;hrYOMZn)vxJk{z2av`7j|*>Dy+ci_7w&61Wq0+`|8G0gta{~>#SJd~i>=lli&yby*jYj}v|6qI>=#?D z4QPd}R_ovWsMY$rzs`UE)sI@Ozw(dx@8A2V)%pW44|r)mVlOS8-~Xu9`T`6FeSOqw zO{B~peAH_7rQbjNsMUG_i#NQvAGKO9#hmjWeAH_FH&W(5{HWFXBe;ZHt=3=vsMY#A z($0VMQLFW@h$-lAeAH?kf;qKXt-twEt91+}*J`!?+mBkU+rUAq)%rUhwOap3%KWci z{6g!0y0)|S8?Ar#x4+f;vx1_HDk&@Iyl_gNv|8W(C;!7gNJp*Kw|`~$Z>QgC{mHk1 zK5VJ};zw_GE_DqLqHZ*6)Ns$=9{B^WNZY6K`|J}&ESv14E|D_!bZ=pYr zN2cE1%2873_M66U>m+X{f}f6T&p(ex-TM)GjTWiw!s{Av)EH35rU?`!oDP#wd~ViC z9%h+Tf?rc_U{a)6VU7G7^mrqxXIHTcSWS`3mm1R@nD*o#3O zW`bBLz$i$VNDKuZXx=+*rGRDA*5ZpaX3*V{Ig5)d&5lg8pLH9b{cK-AFn#K0uNdrS zKe_ZFQbP}Ec9^62ecQk3n;Z7WjX4Dg{5}JXzfmj%`O6UbL^h1Rer*n!q8t$jk~iNm zBHCKqi2Vw4Qh!H84(jPg7WU|kHifmK3;BqZVj(!MG>ss6n+&E^B3<>P*RMAwaZx5_ zKhnRxG&J>{=sf|ma9OaT#ZB|h>_>0jM4M)xfvf@WCG}$!v{H?u z*-NQ*f$<@WsfK3;OPQ~7jLmnKw<-)y*^*+vECvnB$o7C`^p1pgjln<6$CFV~CD$>& zkFOal$a$Ep$#@#Wj95>PWHd&ROl{6v=1{VAom0V!h#7@xnKPJq#>?b!QGh>iKPy$9 zk5&$oYH)0(lTjWI`{zk%rp2h=X|n)~!N)fRL!Et8@j)-RL7 zOyaUU%Zp+7=|x4^{}aD(=mU{reo8-8GhVNs%e2ie2mu8L(_S^F-kJiel{JyF@4ixO_|1mhN52d zj*1E{k`ho((!mMC*lAO=*C(jIXr!&Zs(ABe)6}~F)b&0Xo}fuIg~sEedh^aCqcVZC z68fc)^Ypd}7_>@s$|PEAkBaoXLhnAlwowocOxxmuM(8#tAt9L8ZGTcPCn^&yMrM`d zw$B4!x5IX+07xdJulMZEaCd9-yZc<|o#q_#z7S4)K1nifRzy`I&_y|D@9n%W5A*4W zd|4)WTNUvD+cEN4CPVXl&mbx%OGf6f$j7?GOj#9acC=xBszZNXZe>GRU_V_JNe4Lq zoy2fQ^!Jh(kn?nuAC*!J3W!|*0UZhg{l-m)#`VdnrOAduw5D8}gHc{4x&)bWqD5j6 zUKtstE&-)4stXjOsM41d#@lzq3;+1nlo$Sn^1|L~S0vkZmR921^?Boe`G5W%@y5UY zPyPz=Mi@fKgWk*=f4#9m@XE7aTM!{?&{b-8{U5U-Kz8PQyU*k7bT=92r-`YGX|h=p z$mUCOvHKfsTS0U;QIA)l9&ap2+q((GB=;Z<6aSUZTVvLMN=VG;xT+@Q#>z^Om&;^R zUM{AA4PlrZK0nKn!bJ2LWa3(Sk``sPJ7rEs%WTWOvy9moSHX1+q337<(;ly zh4i1vaS@kEKe7!_Y{fxbrUS4Xci-_@Vu}QfnCdt&UN7XEXFEw+nS*oeA&-)R-YlCP z1U!_}A~DI^cuCeOk)I+2VqS~O{C%H#YjTb9`kh6Hr-P_%-1?c1vm)1GHC zTDlG7cOFL~uIqEeKu?N%f}q|$nqBgM7ZZ{9rXMA%HxCa7@$l9`ueWyV&iZPvcY6@W zH`n9UwbgiSZFo1icc<4oym@$VZ*X|`*4kljExyyc8^^bXw{G9QZP6T9Qi4U=H*Np7 z)=-6q_A@1^%<{}y=hCByafc`Tj3^y6$$NM2^WKw}FS-X5Vi7fbesD6On2Bzj4ZG9H zP{E>2CEBUkZZJnTC`O0o zH5)Uf7yfMC%pe;yFgs3-yzwPk5IE+4kl-=e=c+IuUeDr2gw3l7etQ$BV&Txp(4U%F>$b(~MD?w}ZbGdze0h3r{vr$0g@wY?ROpJf6O@c3<7g00(C zJm+=e;$9%m;nfi4u^?t?+h}ub(?rZOrZmr8#)$no`tic`q8vaQ`W&ZK_KWZDXA96x zlC0{(d8Tk+;RL+oN)EKyYTIziyf(b84m4;hPT94lP^f#&1Az5TvCuO=_1$qa2mbE6 zLrx&CR^LR+#(Tk4u;H|BDXznf6UDqj z2D!MnxCv)ACZ`E$Sfu3A?*9uWq0ZMvh|hGEO^s2|D8G;YFD`E00+u(edr1gvadGiu zKG*QyeOpZ*e@RUrkMgq&_5d^3dU2yPFXF*Te3X>F@#8;@{wWzhUi`-Ik?{kOA25FW za*o@Obk?%b+gSZ%4K+e*W zbXmJ4c<^RrC(fqvXk(8LY&=TK6M$gy0%C7EF|pa*+UerGIZb18V`Z3@C!`@%=aZyQ zaU_QR-yO$qyJh;bq`%hNG36+)`b9jxVU6~~v@p>M2c8V#NjZ+Q?nEdIiXa<8F>Ikb zLr%~1(2jG7ytB-;5w@Sf4v-$2X$g$nm`;w0c$jq2_ze+9A75KZvnnYL<3X}=mL8_s zHEl7adp3x)0id?Qo%GQI!aC4ocN}Lc<2Z|tlH$E;FQ{lK<8jgzX9xQycpKo%wra{& z$Y=*e{G4qPQrW!rlm_CEks}Ag3T+<`d^wTF2;e$ zrQt!D+c*8))a(Ds*}~luorrq50gGo1i6&u zfkWCF({*u%q@uW8ah@eBWLUdbGu>#ZaeR5(1Ml6~M zylkFlCN?*FH2XIfGY30y;2L;v*b+h5%JfbKrlt{IomR9mEvNTxRf;5MMBFwn}q9#EyUgnYnbpY zpI5L;v}XXb)=_9w?_(gfV|8G5V&2J$DUgRB92T8(ywpQDyn7^gD{N1*c!b%gZS1Vs zMrl+K#K&oI_K}R={my%$$Fi!x@28z0S}(eS<#>VQTz~`LLLYthghT`R*JNYof4|;0 zhw-QsUmED#i6x=CH2VG!G~ooY79k- zut9o9eAuq1-D&nb8ziz+v^1RJ)Tp{^^#kuZh#p9f=3o?7rgz6X2pOo<3(HX!&aYfw z>SU4EhP@#K?-lOgr3Ei|ORy1C)-?C380}3D57W1%ttjOx4DqXC^ay(+m`*t+-`0GX z6ct?W%^XT9E*tzMJuF8ni1LN(l;+XKL-K19tG8}V9|V-K5sB&>b)I3br6{nif{1V`ZQ^_`SGJ-6r5m)Gf@y>lZXPXM?v5T z+W7gx4)Dx^$^J5LWh#Ny=SUCb63=F*CQ)YdjCzIzKXgF`Z9_9?DzEp=YB-e|Hnx|K zlj;~#nU?0P$g?8@N02$sr-eVeCB+`I^UoTJc1~X6bdueH${1gcCr@Z_WP$SFBvTWM z1kWZlJJL3{fT)}RY{3S%OXqL6;4m$b(u5-?0yB`x zEF!g80E~HO=zLUvwbvV$W*oomulAT_dgm8N#W1G5J0@{Pjf#}1hihYjSVLm-{84ph zQ}m9R1+l|bUd5yCI2pr6`o^r7b>hLaWa#LK82&yGHNQ0}X zuNt<(%j{HA_keU!dztg6fUvNWr3Pdd2HF;TwB^gZdid}RElRdW2GycB;1yBiFCcIE zw0qcMJ<_IYT_$hKw5*h*-ALPRfp{Uwb@6?1+rvC5Z@?l^>jJ2IZQ9C-z%qi}hc~Gl zDBIi*PzsC30MnfeuX}7jS9vg(!8nX*S~hri?P9w}{4TPS5;5|{$S#}oK-hUp0#BVQ z@Wbtc6V7c(D^H6|Nlq$zYh{L8@JH*CB96h;0(;|}N!*EvDD7y?4H@B$3)YOI7a!B? zA?B`iCWM^it$!559;JaToW`Jw4y*bi0?;`iLKEW`k(y|qMz&6N4brkE&fC zmIQzx!K7|bY$nsCy^CN=Ea6(#ttD)5$%0~`4cUPY#hR5{jzH={-F2Z0 zgHb*>Aqt@^T5sljtWq3VcJ>n@#hTT^>PB>uMFE%%jjKbXVVTx+?yLY`(!Rh4Kic$O zQOs08aaV}qt3e(5PuyW=b=BJlzFIwNqY)c}+OPz8YoQ5Z_b#_!@e!x`Zp2x!+!UBA zm})>@Oz0u>WQ7t?g{z2ON~alBjk7yX8B`=0zpx7`yARI0v2go3_sBsm<}clJVE^c;Rtl`JJ8$QR@Ts&a{SB!dgR>?8g%WiS&iCN_ z;WHs^+Va#s=|0o$gQzUFVs?bi@(|h#v8WhWn3VT4rz7cD!c8c)on@L2DYNJ2+2d1W zTI@tJf$P0;b3X%Lj;=Z-`%&97vh0I}atmT=(5BZKT9zD?^XGd%`U#sberC3Bj7^mm z$#8jjnSP9t7|U>ZKYK|jHO|t}$Q!l1e+P9sr*0khLV~MieY-t8M%m5FkrFe@n-2tXLx-=uUZLu7W?FBr$W~ znb8@s$IGd`WwD=lJ3dw}Z4m{IBHiHZ?e;1NFc7@Bf&B zy#Dw8Kcyfqr160xHAudRG_8IEn!4402e<0K{_9tBtNQhzU(3iOWN4UPPlbORhWLgqrNH=ml}Z*iGW$xz*6&z6H4a9Y%lh zr1Ciib*LhegzUE{InK)pD}9(8rdcvHDdo@wCCi~iL}{r3Tw8E(b4QHDOPsB`N?c*_ zCh$_y&y-hnZ#phN$I-5H-7&c?xxVkVlTDRvfq81Vok>?(0ONg>988ZyJ>77PzCgkq z{zk2t1>N-2EAcAec!Gf-1b$L7_jlT^q35SbQKUnhn72esyMo18cyQho9X+p(aVmzn zqUpeJvt%fj-xBdJ#99@moKA3PZqW?l40AUv5!g_gvt%@)@StroMBrLwii9b9DB)|# z;5av3R4_vi5fmJj#6#23z@nlYEGK7qF3QYrUo*Ik|F!ae!G<=Ns?_3O>}qtUhnShyX$K=H@3E(uK#4XdVKi#?%K}n$#OU%d%fH1(WY65Zr-|iv$uZp<}DhNc~v4#28OqM zHZw83jWs}KU})OF1&)e*I>F>BcD3V|$3+qk(e-*yJAewWqwWq6lXIR=&2fx_#JTVm zP(9pEI5S?EbXb}WNR;})&+Ci8a9&U<46-qm%jPMdC`~*XXMb815Zj*rsL_T zinAo2mZS6KS)4PX%9qkR30e%?66M>;vZ=~jAvdK{en_NzXLMiwZb11y7$r+)lxIg>#J(&Uq#8-Hqa~18 zGRh}76yruf$H5XwXka3)4?Mdf*z)ZrS#mblv#zdq7*MSEr-U(3&2-h-c3#5FwRYC@ ziPFJ9ikbxuS|NS~;yhh1&b#IMpjg-ZLeb5vR~@ex{##Io-yf6~>Tb2(-F8_{li_2^ z$mI13;zM`L4tQj%-9Z-hn;^jUd5yo$0S2wH?3Rq`TiK8WJ_S22nMr*L`K;j*D)Qt| zq(@ihK1bX~T$(5^iNw!27?;V%y+ah6>7aC)Ji z5~Bf|lsR&G zl$_$^%XT&xO^3<$3*`n%ZagA8y@XviA^w8$5YXHR=n<)sO!OitPvYVhi9aHxCof-U zYJPi%goBY`*p0JcK7K?Q8sT;fA#^F7qVlksY^<#Cf$XxA@Krb^dp^jYyB?muk?Wc`s|&XoSFA zqhyPdJiLeL)?swUwQFEEIKLZj*?fCBd)s-d)@3_hH$P2^QG6bmH%qYW zeo&iVM?Y?Cbbo(&xUx*Af+$(B9$XQfpeZ5nEVz=q;pJ2A;`6vb81B*)23o7ht~{Gd z7(v0cP!k@!?t%q>h^BUaEH0uRXvLOqr<-HwqkwG2InSt_-_Tnsy;5kA;0e>lp3z3% zwH{%{9?ymuMf=$>IVCyVH*NWo^tyVPT~53w#pD-CHcZz=#KrE&ne*skTH1Z}j83Mz z2PA;rYZ06Yh;XX&syHsiQBNeZ(cc|bSgoP1#v0=i(z z^aw{E&JyB1*i@fODrF~^*}SI$Ui@$3gN4(azhC#gKw^Zyg(xa$_ORgo1u+P+pIz3` zU-?IBuKf!$=33CaZ>;^dPVaqzgyXlK-=$M8$g>V(?XG_!_v66M1ygPK28P=I_a9!- zP|K?paDcf8Mc3`Lb}gXHjE(l6%W;<_=OD7dg^%B+)$<=%X(cWu9s`9w)FRidjfI@> zyVLBq^8?e~!@XuG?pvk~)3-=0M6W3JN?w2lxI=YZF4%Q=n7(}v&iQrZGN;#86~ZXy z9X@cKa0yPrW8V^&nE@CFG8o?a0{(frq8!^u#h?O}sUNfyn#(~oPg6czmBJ=vev>r8 zC8!h0fQ(gv*Gdkex|U&UPRR~OM$$XI-pb+X&BNZkTa>@Afi| zdyyjxBZY!x-CM$Q21yEKhfj&Y_2(IV92b&Yl4kWLc1CXWFw;Lui>+*^QPHH4uMioR z({Z`{MVZr3T^(!c&|}CKpZCz>d&fuut@#)At?8N7yL|XUkvU9GALMbtAx5^3Ae{36 z-|4I~s(KYk?Abcr(KcfLunyEJJe(F=#o*Z03HtHRZZ>uIa9Sv4ZKpv4LT)_31-Eyt zd28H6rAIg^<;K)tkMl-6<0$dI`Ia^@(#`p*b~x`dTQ9tfy3EYQK<^dw?d&ge?*s1y z1G@lG-h$anGZ--~=g01evj3P2H(U(e7mt*8(ky)xR|%|IdsRHfX&MD;2Z;>oAF*D< zXdzzW(s;fdQmwt;>g#c>ewH7RD@dSzM8_m)iQ}F?@m{&&+a>wEfxx8VrH1AT8D)Zbc0U^yUA&)xshdt>HS_( zr19t(<$tL)ckp>qY{3i`v=(N_l{Mkj48PBQa5VzpA57EH5L52e*nJMiqJp4czc@KU zezq#Eratlq)1pW+@ijVfcAcUq=>@d-*U%7*S*S-K0#aXH~fJcTOIqK5FTNgjaocj0yB!;OEoC zXX~%B^zGWC++PB(iqYe2z{_7@^sb`tn&Y+bSw8S30j!Yf;_}M+{v@bnHCB8S6PZ73E}FnK1Y(RxJvfUvnuv!suq&qb?787xWiH6kHLN0 zNsl<{$*Ut!C&_AVy~8){AvuLd?16vb0}_dL_Ljw>-NI*j{L6Bh2n9C6_agu=(Yk82WJ0=W1j79TD# z`)z?(PKENX+9_O?SL&E_MhwZ0vBHBQZB|p7L%Gz<@EkYW4u;OBDREM>U2Fb&zgARt zp0KaTp$}}>k$KMUBtu9j*OEZe5Bq&*zIw+pc**pkBxniXC%b$8m_M)!UsgOU`6a!WxIfta>aESlzBpprsz zVoQ5Q(g+!e8W~83d2w=tou&kJ!6?_%H1Rb!Yv70wlp!XVLj&tGNN!Nv&rnUN{f^zU zgmcQfzwTjPAPI9^B`}q9e$GjZ@F06a7D<0`Yv8nu7U{MobCo%to$-ASDp?&COc@JV z9_&k$LP}=ME0vbcH>>st8m_<8*$QWKC^Qsc?}X443>e;ehsj6ogR-WM8s1=H906aI z=I??HWzO8~w*%N@*#0|zy|>=H5m<*H6Mgjq^bu{50zk<2@F?T zVa#yc$`YG8U1(EHu@WN6YarYLzj1N|d<$_Byg-$65Vs`R=mz*bb2~gd5*&pQB6r0* zUe!;`Dz928_45qOV?!cBE@V8yXMoNoB5}yQOvZT>)L1Fxa85pgLwjwjT(|!ly*3;N|2AvJW9ucU*klf(n@z-{}S* zL9v1L$hD>1rNQILR3^>D!iTydraJ0JzZGrXa5VSK^F5GL&>-(WoR1!fxN zgnoH(cFvR*bMVajz*Ocz)nqLTKl>&u?@MS9bLOwPMM99IdSkt&)gRXORydh=&?yUp zz})3t!}x)F*qW`}BFUwRtMe+YA*0x%OQ(F6quqAzN22IiZliTYkEXPvs7hx9+hL25 z>F6LR?_r+r?wjR68$;}`!<-ih_*Dz7)nKOhLXM#5vX}}W8oF>U2_wi5YSJ|8k9)BM=$J5^>()gq6%Nuy?fi&`@Q@z0L zOX6ATg|cQrHT4Y~wzqK6TczLO&$n7I-CC4-sWNC~`3%BA-sFf>@cq_xQFyH?Mm@$e zzg<~K+H{z5MjCHukk&QfgNMieSEeLgo3;mo6&s|@gb4IQS#&_c-$)n-yp8gj6Cdv0 zM+Shz8C(?7z*9B9av{Df#~Ed$GctO98zuR@x_t40Ybf0QS;X*Yf;FNGPY3Mu1`o;Z zqwi<41uSg=X-&f1ho7ZwgSm=(@g#j?twvp*CXIUUw4FkLjC9uR9xXPFyQxl-)C0;w zO$$SL|(1+`b={@e?I2dl~qP5a|IEyH0IX{BsV&V#jOlDd|a1exw&Z)hOaAs;}SsS^ebISKWpqr;I>H8sW1{hRc*M8lG zo}*9WVhEPBQOAZqB5vwvmQ;oHt-u%H8`>Ho~FNE6^{1 zkZQ0pP&L8HY-l*Z=3*noQx{~q#ZrC=iw z)EA2cUm=~bT`-Mu?tLk$raxVAIz^R>V9eGfz?&~mHZQYL$)|lOKwUKIlY`OKqcfqg~=pmkNt+id%6!u$2U`(AHt@!~<*fD>rGr~R2INcr{t~X zyumbRhyGY*RlG|^^F%dLk2D(k0Bv;dhn%sgug2N5%s`U2lrv1BzI<3S!41`viz?-? zJqq4$;K23TqAo?6q#Wl< z|KPKoXU|{!o4b22Uw!_=AN|f>jt>UIhaNK?F9|p7ofPn-Uuoe)OEe1Jk@=5>zGdP{r@0lvU0C6|h z?%lk1`_9_ETVxky3x$r(JMn_RF)~^lCj&hMqwXEmg6V2;x1(sUsvazU9xn)y(>^lk z$%!}wC+gpI-;?ULr1Y|HPLCbpG)~jKA7A7L{;@+oK4z0{^8KkaA~fL4ZgNr&wdqtD zzOpv&JImDl*unSi{b&*+6q%TJ-$W^ll0eSo?FU&-m(yXtp~W|1m{e0JcL@h5-xx5; zk5VYo)T8Gi#8Df&E8y*d(M6A`bn$v_CN+G)#`ke3pCm4%&7#~d+z!g{Dg>h3(((3H zGac}^ZMGF?uksQ%j?#vP43Jt9h}GjczNuG7Y(MgDlntHwv7^o4-cL&7LHTOMUT(YS znY%t`43V@8M^N4;yQjL8vdI)fXK>lg^cmDk)9IN{JQlUa&3b!I4fS^6-0q{(4Z~gS z?4*ciD;p+RwVO~bW(CpiVqX*qE*`NPeY-4eiO=blcdx{nBYA&N-hkF!2_YFfA}?SR z%8#7_2r(VCmND36blQxw@4{t6l9O@`w*~NJ6N$)e6QCS~!AyXmdwD)dp5wN8U6yU0 zm|z$FS&{)9bqO_;5ClT$@)61_&9tQ#0an^35|uBwI0MJnL-JHU^@HSmi4mPAK~X1{on`A1=DF-d`()R5KFSa(K`|HhiBXoIQjN3| zc`iRj10E4sN@%knutmeVNk13_w1dT=vd6+8!XTIhq}I=J$|G9qk$9LA(?wJ@L-lm$ zD5;)~9oem_E+2E>-0gX)wV@L1g=9qc%$++-i5!k)Yu2ZiDa|)z3D|*5(PLE}y(t4~ zJ`_ijCM?P?;T?=43#YPlI<$r4SDt~*enh&cw%>|7d`JB-JNoVX00H$NjxX{9KIgB7 z)S5#TVVs$PjOA1BB@T z?=8+~+12%Kh`C>}tU90N6msoNTZ^MHZd7 z>=NY|#19YSDt6Js^icRv|CU}NGB0csN)90rJFX{mAI1mcB*JEdI&bjDV%}>R{D1!b zLP%u67MxR9thYG8#M4H{&d#3I`nnfL>odZjWuDk zB1pStO)fJd_-!L~{mn)#3D}rvZUGu^pxH`5`keM=8}eXL?N)k!!%CpEeyMQv4ru&61uF>)wAi?Bf6V9c|M6TvCwq# zY(ATgp>IiCH=zy9M7@Yd%#{m@9TVLI5K>TiQGJ5?i$>botBN;oeCq^vp}}2#AA)1Q zNi;>V=|%NMr_qu&ja!1t2pF^~+X#?;tvxEz^9sQlq%Kx28}I@Rt(}=UK6*O9dM7u5kck>MQ{^+QK8T|c@4>6>7mzHTzZw*!vk zqwot7^Y$b5Ry-m)n8nl?Py%c~Kz&GXu7xJN2XXV>IbG{jaRke&0ye6g?{A&EkYAO^ zD$ux;i3_Qv#$9;g9Se5mr^aLl)POHTr8AH7qKN3zif!4|Ah}JNRY^8XknEf;nzIKW z-JNK}2BqEl0ZFEH20#-Z1?gB0izMkD4~N|ns)>1HzGv>P-@SXgcQ^DQ)$T71?#3Jx zqpsd;Pa~rvPr*H?msO{0Sb6`?cfAK2@_-aAa?(=ng*V4>X^>1CgE5DrxI8vIoP#N+ zKC^ztD8;=td}&9*d!zg;qa1_Ye$71G{ftwKpO;lKR#f}QWC7=q*Og}US?*KhQF@wW z+PE|M1tBU{{)7D9_omWs;s)I--=C|b{nb|v-R7#*n{Uq*y{tw&m)@Q0*1X=EYuSRs zvJGmUnblf%-W^Lg`R%Ug4ZE?Ll((M!!|opY;AHP!{Tm{>EU#KN(GAMnY11p~31(|c z^KV&Fe#HJx;ddZNA|-$HZv2kQ#76cF;o*Mmj@bH5A&E~| zUy7w=vv-_NM?>5hk)L>2@;o}ECh_n@DkMeqd5rkq;I?6St^&`}1@q0Smpy1HEq3om z@d^2{=-N*3Kwdwe$Kf~sZAmr!S@I=D4MvX|QLpbeBwe#9H#o0pxdJV|)R z5ZIr6+wbL;UPKr6=>{4$6dxz?Fe$o+X)+r2J6~eMHiJsjMp(u>&q2@;XMZ@;fDxD} zSBRC`VJ&MsfE2g$?zK29t1far_gyu$K@)WtLua^U#@tP=Ox)h_A5YxX)K@hKtA^D$ zkrz*$o8lXsG#JSv%e2ai^XqE!x3>kS?$HQ>TdQd3yYOuI$T< zXnSw>DQABF(JFS5q$Gx#F`nz+h^EF5b8yuZ5otS3M^&12>8cu5w4+7ywTbAyEZUw~ zH0yK4Mw+!Yem+QdYd{#HrG43mhd761s*qGdnq(?q6>^JogAzrp2zT~1AuAKizmRo~ z>u4jrugVegisnaMiI|JPL)3qbogcCira!}#7=7d=HJvX5KK2f#Ogp`oFZv6YJt0l@ zlF0eap+1)Flz?Mq8-%CL@}R~=_>r6X8Yf|v&os`xIJ$lgJ`>$=+puP3fz(I(U!XFw zh@uSmlnvEmr<1rWC&xuxCjBT1nQNF0pcy;w&uzlp=*&a}aL>Dj`Rh*fb~8|A=AohE z0oreK7kLq07;N9twFvxk5zgqIXX{iq35|Y+zGjUyk$IMzF@{tZ{fGH98>&{;wBQ(% z4K}=BkQdEGP!O6ugH7W@7>i;uV3)G3n>&LufmpTqyU^bgI%%x001TBpAl8DQ{YQZ( zMjRdLDMWs=ZH`r41^1^W0FLh!@j_SNqq*Fd1!m6q66-^=Y`%dyd7co@MLgY=u!9u( zMI)S^)9y&|iud9qNuFY+Y+o`Tgd!~%ST$-~Lg>a*)H+%ZdD+sRLG|${_tNSVq{cPK zjx9iR?@M@FpG&ZUVp}8IQpgQdzPUXha<|rz%)vic%j|vmZRxsD4Wb$Ej9vgVLe}N^Ze25 zX^g$ksj)-%!$IrIBlPRZnsIStep3?V8J+Arefi?C&4!3fWiRqGBeAvMd(>&*;-WXJ zy|tR3_(2MK3gXtdXrBr%nkbE2d>=1LM%?!d6$}Z9zgd~B%t`|5*?umg@MSQ;j3IQ| z`2TmMX&Sq_z_`~H{)FCNH{uE8_l-fPR0HKrw4$dztd&sb8?C~W(nlel4518sv8be9s}@)E z6RaYXCPG7~Y59f}?Q-1kRl4cTsjQs|-=UTR*5eeGn$E$Cp#k$OmFKGsv=Z%5lm*gQ zvJJgHL6 z;=(rLCbp|$lFbg>9upJcChA81Zk6~Ce~8|3V2shI1+JxiYG;UDIF1X+xM}Htiv^V6 zCC;}Kr79RMRGlk+US+Aorg4Cgs#mf^8>LU}5LK|IIkUVnW$JrIhb6s-g#f3(gUxkk z>qlm_hlO2ho~EG6voaa*Fe(hF!)-5zQjA6u;r=tIbZ?j$ZDyJGXuR)S(lB>aa@#$5?OxzX20E8{OY@(eE-XL`}>-l*i-5M6xJrINDPB4 zERj#-_rL=0MEm=+`)5iN(=I;GqgJ8^o?hi#4HWxW)4bPFjt|d&FrRsmmEMn^vNX#W zr7ZFO_j-I)U3nr2ExjTOYCI~jB?$PPi)*ItYbueI8uYPeprH3nM8*+Msz!PUG%^u; zX(W{J8d5I*CzUL=PNLxuV@$&V${)CB`UQ@ zI)oes34}Qzfz#~U;R{x0ux?Kz&cV8!mANWw4X5z+VwknDT?x0}6lQCEe=uI%j&7%Z zBacO_m80YIq{x}x5AuBEf(qSje}fTUH$h^G5q?S+C%=Zd1Ann*W!pR@CP`oMSN-cS zKRoo(wnn|Bn@hKr?kwG1TJ1%(!aFYsBW-l^7KyL?|j89B^XVI*hbw!slU7q;!^Yin0@b$du zSglXTa5#S+Z+aDP)hmAbsb7&Ot7pubf+ui|$1|nYjk#4TRhBcQZW}{)n-TVSj8`WVq*V304b;Aa7iwJ0*l+ejj zA^cpG?+t67bx8~83q;uF&;{-czKn@xLy#-u`mR}b{3%e$W^IoEAC^`HdM<@I(J!Li zqfY`wl;h@L0n@|O1_oPMN-|3dnYdj&FkljPUpB1Fx&;kIi0 zD4kJ-9;JmSfu2E@2QCN^RPwvo18H=tJlr2cz50E_M9Zcv4GXQyVo8g-C0zTLK1tq4 zu_m<6_P@Nm3}fd2_L`)mn8M_3T2`~p7rSD3pX~Q#&D|8$tpf?};@bnJ8OG5kLiP$-LIi4IkSE7w6tVBqZb)uP2W#g>Z}I)3n|1cljE2>8>S`he{%;Hf?5RGQ4s4&cMdZsX=$r3nIwx3 zMrn5Bs0!?f211__GRr^V)1P=~BJtEF)B8qz%MY|Q4~rzGkVrIa@&f)nT+?QIW*Mb5;#JLYgxsAi>&d2&A4tBCNhn zZ_qK9ZYwirR0uDau}e5HNS9cGFFIIB2V_DKp?+#V`1D5zs#9Nmu7qvVm`R|_vTP+<7Y z`mh!|LQPsz)5Gc)tvC^>HVV2u_(_q=IqT4Y5)}Gj%D%$(m^cdz77=wNUSGuLpgqMaA_v$3m`v$n{*}RG5v3sTr-?tC-*3A_x|S9!5xW zW3UDZV^-*ATf1+1rQh0usc_EnEH6$YS8`m*8SKJvwsB7+Gq*>F~=zJ~ceCQU0RNMHxAe6!w~FGC6C8*ChIHin6ducoAs z6k)B6>Ef6*GrTj#Pt>SO)mEf6>E}G-l_B>@`558(RQ6I%M-^oWWmQB2Vf6$T2gAC% zC8fb2xJIzTzCc?s>XR2$5lT8KcZ!rBcCFg-aNRbxVUc1rdd`?K+XM)p35qam%k~(w zj6ra6j($XomDLTxBKL>4ggY9FU!LUgYz2DlYJlH?p8(_C`v7B6(t!v^bQfSYlqDDz z9S}T=D#p20PkQUo1x0U()kEy_HgwWbM?-6v1j;&0;#&8>|R;$RvRneCBoStJ~N#Twyzt z1R4Z6qvW;;%TR(LLHy5i_BJoUTQBm1%G7fVQ-_?)izYgh+vOt@ao$ySE&JYQ(Nm>9 zX{w#LGNU9eD}ywK>0vrB+E6@7tMf%uFn&shd^8#%oa<#IH)|a(2Z$9Rk zE5iHfXDB}(diTCLrA$aubGPtPXt33Q?a)12ok-S!_D4POjRS4!g)&CIvj-gfjRCT0 zP?8GCIoIx)PV{*^8qz%t-`EboUubni%neQ9)lCVUOz-U~#lNs`!?FfSh$-&`admZ= z5eTNI9Z>`b?Fm$4mdF=`Bt}b`VA0B;Z3v$)P4u&*$fHdY5evW{-~#x!7(@Y5uhv_8 z+jP*|GX7dd$9e*Vd8&#)=K5(y;cWJDWgg6%rSL4YASR5)=LS@yv&3Mm_8G6W)hu#U z^))m`x}($BSkor?)1*CrVtQ{65B=y-^$|};RSFj}{ktN)&xjqbc_-e$duRq2T3wVi zA&62uKT>Qifa?U{1B$Z}bY@{e5^RKOz#M#^^iBrVEH zdU1eUVS=~;x+&gULRRH&XRtp|uq_VtZ8#d&c3 za=p1xe|u6xZ(Z|cb>yz?-q`tChzDKXPM=zuJE4Sn`k#!4oXE+CW18!K2&Pr@ z*&Z%^02#|XU5JqFAug(KGl=1AUS(dk?H+C3oCqP$AeG#a(+LmDa~>+vFXG)7b4*3r z2Vg9eVY*x!nWMiY^~ZQA))wnhtkx;KrqBsk(@aM;iystB{n#s+K&390n%mln2=l}j zdrAbQd?+x`bsP5RTO#wQ?of7`(gN)?!$=diN0hS@b&kc5B4II$5^W2^3}A5^F*X{| zM(kOx;Bb_Q4@g?-{l8ZQf+?d8$NfIc1+xJ9tD*r>JIJV1k?=1~bsT33jX+$^g1m%; zt4Re9uLm-lqj+RZYLiudTokdVtTdhVuWKzc;(6y>7KwjI!&5YkrWFS3m7-N3?l`VMy~5@% zoJizHfbHM0X2CGQ?-XYM=7w~YmfgbUtp2pHWg*Y5>avOpoR}EX^1`ypvq1tQfmpz5 zt_DXl-?K!8TOyER3OlPIGVz9Kt~aJ|A@@o0q*EAYkp`Rxinh{;gi5&^Clz zSOHZl4{xqP^3$-HHRN;2i}VPWpY%3OIX(Cy8C3oD>ZTcUcHw?|ZPSd>?4;jb-!x@9 zO0ufozG-L&#%3(-^f6A`@R5&A!>3^607x4dlZzraATkS!D(SLPgYl}{MFg<_O;5r| z-g6bg`Wo?-OOMiW5En!2SLR%$rkx|DWMk{y`)$9;MY5O9DY+k!P024$7C=OF1a*{- zof~oQe0-3P9-P0*(m_7tJYou)B1W#UaBf9vMscG~!Qdq~TRwhU6)}Hcb|~*nM^x!3 zK8Od?GU`YBPkQ_Jp6qYk+24}$-v)M_xEOco2nmWjUfaL>WdA`=V}Rgw%FifSt9;&i zxPSLf?elcveY|Zy4&qUg4dcS~eQ$mL?k(?oG3+9?t$UEa^$OkDzq{@V9mfSy{11vG zM&3WK-1`3Ad$n?D)?DtcD>urgLjm{R-Tk|(?n{xEh+HZZ6ZanN-+gF5Cvj07yWa0U z+`s$CemqQz#C^MWbAQVX^Kg_;Cg)uWL$tGSZ*Bj9n}wrHOT=+TU_xqQr@5cGOL>(`1xSd?45Nw;Wm!GggfGB4MF} zoBIzOAfvcAO1gOwXGckQkQRfH-_(=+Ek`n3v`B`t-)@85HiGR_Y`T$AHG^MPI8f8Y=_nU=?s)Ng*> zpY(E&mStYh^1?b!-2DBXTK= zfBd58@$UYEE!QKrd6s5~2%{z$OI4m7O}*yt-QD*=nZ(7(DDg(&&3rjYlEHEJARdkK z+(*RP{+2hI%2Mdoqy2kswj}_nPJ&*6u0ix{Pl4<)qjrAX4 zYCG{!N(X$&JMXq9#J4ColMcMSF*k8cSh%O~L-?-Zksb!|3BB99+3l@*^S8DC;DN<; z1I5=X+)s7)k^uqX326S6&(2qfMt$~)-LDxCloC>7zkV2J$!f?!tWdHSipWbiZZT+nljV(NNPL zHOa=B#;1@)&xU|u+y>WB+iJiQPfGn7aS6TXY?NQEV6*u6GN-wDNv=$le zy>N=@L214;(RX@Va6o>i_lW*k>+wIU{LdQyv(EqArm$Yp5O8a7K*KOigwT@8}kp zL$tlCRFW|^jL5b!I~M))FdiHy;kC5e_Tw&0TFo&zW~w7Dt0pUh zQJQ2G=?Z+hqWJ)ah}k(c%POv>d{`tZ&$GdCk!R`861|7mIxj$`GY|`+c=^__hnEDo zHCn%#kQ3MGI>9X*Q~o+{`MACnm9mlouiPAPZIw2|K(pY$Bl#%MbwO-8rMBMp%=);A z*0{ewGl|+gIv$f%6T>qE8?3u18$$?K5Biu7RiWiz|1qV`|=^_fe%03dys9uAA7#DXJ1kWPZJihsmW zpsd-LYby$A+r5G6<3Iuu?PwF_r;kBWGZ9Dd4JpNK94g(6d$kJ>e3T<;d2knj zAB?Fp0sqO&0;Cfam3}y9EkA)#Fb5^7FW$MkFXzU3>Z(F)(NnW&8op*$d!EDu%p*Ba9|LJS>x{ zZyOsNPqPy~ySl!1=k{H~j+dof3C+8BnfDbUjTDf}M=TX|6uSA9&3vHRS?KOJkJRcf zlodtDhv=04*F;`Ab4@#-8UF7Sd7cmn6L-=_qv2G7JRRi+@rV~Gt`iA3Jg)Fas|Q7z z90u>}mKdc75xw)2B5p&(Z6|tFCPjDaD9Ne~vxDqeReHkronTKlEe1*Vesr1?WtwN; zc$`?w{}>ko*enOtwBRKDo~uwwyEyq3LYC=}f2cleG{30<``)mb;V#xpEsU=1tgPbE zh_7NH#5cJG88?DpC<8U)5F>?4Jxk8eH(&TGh8N?)-*nElvlQ2WOtI~vB`n$i!@V7D z*0^W6FXrLyXHSBeWIQ~~vqK3|558{WM&Gmw?vi|0hlgo+0MC-NB1GaSL)Am7>|RYe7?b zzCzFc1RrO-u;EuS3fAnZK?yzZuy>wSafk*XqH;SEx>G_Canv-0Cfd#O%KXmb$lf0V zRsI6uq$jG$r|;kJ6owuz>@caocw%HS`gY; zr-@^?XBh_0lQi=QH-nAp6)_3A%mQGQ0E_g&X)zK)cvaX?A5jS02wu-SQVJEO%Jb0* zUCDHXTg9x3ZQe)8mRrS0am}aIWLov7Wl}WhKvrJ~PPaOo1grXSQD7SetdbJUS_+XU z&A4@a&}NujA4(>(5s56+zm9$!t_GZO^Hw?2CATPCq}*ey#275ScjJ zv)mchXabcJYseb3M~^JY@d4Xs$(fLLz@m;^6GL&n=cRNE&c85ciS=t9N`GT8+xJ54F@Cdoeb){gzs*u;m>Q z4L<>qTK2VElmlYn78a*c_!JrlP^(t>97X5Y<93S>19B7Q9F@c3g3}COm;Ird#W$>5 zh~7#RKzvx!D@5#uW9LblrRDLA2aYPiB5Xx2Z;**u*miI$B9@ca(>qGUfyXx@;+eAq z#NtPa*cExaXnvmk4-bzKsu42quvLMRMRBTk@jc$`-JFr9Rx~&>96xqxY4Z(y5}H^| zbGnFA26X6hVot~7^JU!VmBXVX=?^HJ@cY(a&5u)UigZ%xVFQ88n~AFr$_lRwg`S|G zSsrwG}C>cv((NIgijmncnGOSwu*Rs!6aE?o+W3^BXY~clc~>g0e42I&ShF5L!E#|AQbObc6dF5s)t8pfn0kDEx>ybo~NDS`X+WiN|i2GeOk24s|ae5#r4cKdy z8$cCKmNA~%?3oCg>^}Nz;2tfqVa}T|e!hW0v1{5S{#dHq%#Px+72>IG4U5H3B!$(| zGpje{{NE+)){QY>wx8wsNohvuN#dE4>{bWN)RX)y_$6sFXUOS{(-IN%raVp#;_S%u z&5gGFePhw+E+yO?UApjSs%I>Nb2c8T%1L>-A+Sw18+vP@6Ya09tJO|+(;EnxbnCay zmHZZogU_x953e3;f&;8fVDbmsbapyMY~$)?ohmOBG*lEt>>wYWFDcsT(o&qyLmIAT z^v;)ZwYvo5@i}n_n>9MH{QBxEtS0~5G!utc>^hEl37PungNT$!JvJuNG({T`a&4`- z+~{`hUlC#M9KtIGr+mbUhDhE6k6=S4sG%&l7AeR<{(Kj6GL$bS23xx$*4^FHt6dj5M^fHqjPl-i=e2fd>2r; z$3qE7PJ~B)v-uZ~NO$Y^c)kZBZ8F3md;!;_&M=diR8>pFPvFHBU!dD|$s)6Ptkll} zi@v}4bOoO8nW(qigUOMUC}Ke~J`OyNBm&+}T!^im4Fv8>=9z(z9kpgT2_QonBuVKn z@?e})a2lNFQa+7`2S{o#l3qSHo(n*y$1W+MfgP4%k9Gp{ zzDv>ZB#Gg+U9t(DEGi!D1cp$j)k+8&uEkKd1daxBLy}?!Su82<#=KGuE-k?hc#j8l z+y1>|Y$tY<-g2vN@SL6g{^!CO=*XC&Dn>ABzj3b+L8rl`srz?^);?v?AVPTD(>$u55F4c!^M^5hHV{? z8+bpP%=Lkjj21fmkB1!8o()WMMD4uHTm@t#VFend%H)lM>zcaJPuAWL%;!Qw-QKt( zhw<=)q-4G$8zsOE;?MLfRG80<2{0w6pY92K{N)U_m!qb~YL@>Yeb?m}&rOz4TALvUPNsPV z!Q!jykz`*klG8LfBSk>WpR6c!xy^2VniQk>d?S8hONrM}n?cq;{?Qur|&y&6{;&>l0rrKQ6V-I%M zVmOV>WMQK3a(Zu(ayk!q8m2Ci;gBXptWnlAzjw7|L4;SFif!$^C+k^qRuVNbV=hfx zBy_~D#*cLeV~s&qrzW=g%@EwC9YKRiBlAcauMT)lkB$j>_j%U)w1qD0)t2)5MP?-{ zbyfFzd|5swoZM$zEf@q~nsJVxvhw3=?-^5vtrlMxE=<5~AN<{q7hxxS()yRZXnnS8 zX+#{f^LK&f9nMBdYieYU9-k(~xp@?yo4uq`5FTfzX_04iXyNm? zNTH(9&2;{9bSFaW!2CE#5OE()+r6aXkv+~%LA2x|aho4E9F2ao;n%aZ)jFc?4;ziy zZ!3N%-y9u%?bDxhq5@ZM@h)h#I|N(K?TIyD?d~F|A!6n>V*%#u9`6Z@hMWp8GSc@4 zM%%H-VrZCH*<7SXE<2@jXmw6$qA*}WXCqSX$-F5zUbAWTg)@Y&Z6ggtN&y|_NnV5y zd^m9uOAPv-q0w2A2`RLxi5WtjB}saNg8>d~KG=Dn^}f-NkKy#P@Izt2j4b zGI#eBJ}RPd7EC$1#p*=Dcvu_dTZid_L1>-k9i%7aXzuf^-?)+c7TGt0WCBpgQ-lGN zjFE|@qtu_}F@kA4-MDVB#6;uh1I2kvvy&`8%c4bcGw~-nuEwTp_8eI?J5ptTn4CVq z>3mJ1w4bTxNK~p}a{6#u=$@MN)-CU>Sx^cexQOl{mv`*J>1h z@QXWZztQ?!{Vb{!6Dg3v<|NUH`LQGfAsu{?aclTwCy? z8*$d8k3+{Lq9d(kgqIVJEdmY82l2_u7zYV|auA>Vq$uOxTJ0^b(|@bI<;fI5_V!eB zbV}9DSj&*f|Ljr!8=(R zaHV{NhOTMu0DZlA?b`d&ZrgV2QE11u2-~?Uu}Q15_4_SdjlZI+Q7&SYmG~{J#J~3| ze=EgG{Q8gnW{Q>g@A)h7?+;qFmH20*iKNxK{vAcErhfQXhstwB7YJ{HQ?$PL1%>4= zDlBxnZ}KqDsyNM(!siZu`5wdcorAwcF#W#3^b5`0;a6)-fkXU1-;%i)OOi-nHoJHrAPp(KNP(bhLVzJ{bM0vQzwptN1s zu`#qkeJB_-Z0Tx}7Zo+dzrz~!mbM87V2CCge;uYrq~{j#xQi61{X4hs?wBGuO3SJ^ z$KexZ=vbcma&>u_4^EO|In8lB^)M~^Wn9IpAT^drt%;REe_knV5Emy&GD(Vqyz`#8d8_^hdp)hVoX<7Ac;h%^qw6Z)Ya!Sxp z76Sp>77~Pbg@$F-Ux9d8S&qx&0(rsStGCJVWI4^!3p>*?)K^js@Z#>8z9wpSQ+DY9 zFY1cB5KLTkDDh;{*e2c+$ngXxv#$grt0T=Y>Njdreq6O(o!qiK9?FkKn48L3w3p?v z-vH^uR~l6{ZpIMaQ|qU3fge{L4bpNof=?f8i}#hGwGn{>#4_CH!y4x?9Gx$sH zfBe7xXIgUq_pkjg#M%EqmfW}eCHJef2A~1f-(mgzJ0FGNw;x|yaQ7FA{t3;{2L@$W z1JG^NhIyR9CSmeILuE`lQ3jcm1}6%zsS-wK!1(A42Q~IEpPU!z(Q#!ugGIB}>)q>knrM7$9J1?tbY>$w7;fJ#I@nD9dBQ4Fd z=P%9P8{oe@v|N51Dm- z`|p`n%jcdS2Q7eihHt<*|Ko+Lb54e&iEq9t6Z29Mr@}ouIF2hm;YRVOY%-yVE^$Ny zODE2T#HMGs=AC~&TvOJMSWNVo)Ya``)=W~f$GnHZjE(`-sykzv^(7+|W{y=2C|$`5 zXLligTceeYv!aoeEw~%jO=ft3W8(AX(Mdp>&iKRQxZ0xSJNNU`BA-q;?5L@B zEfJC5@b<8LSxj+oes1H>Dc#rH&%4tM=}a5Hi(h;DQ8R42aW>4ykCIW`Jo16v+(!Hqcj}MJjBf=f@J!`g;qh6NO`1W@C~Lr@-hYn-O>9XXS0Obifj|X4>0v_ zlDmy@KnrznHI{)YLKnFxvpkeHXb9)_dh_ z%hum>sRCwoq)4X{ffki{kXKO7BrZqQ2aOZcvM9<+TLQ)?O@0tEMwo6W|E1||(tmQ% z0*UE){dlx09l7M>9IFs?;}>U6D)XqM(zN_d^fWh*;^FYzQ0^?RjMaIT?@O%y@afqAeE8iE` z225!*UQ27uscUz3wOG3=@5){smbAWBYi(<$CABrvJ?`$2Rz7h;IDQiD0O1Z`FoYw7 z8{+^m#0EnW2MGMZP67l1;l3duyZ`rIy{fM6>CsBEP4fTWKL+hgcb%`^U9VmlO1O$6 z9efbeCH3VXEU`<)Ly%&c#2T?DFY0Bp_}~n%+N%B1dIBURZ{gFX9Kz9@@R@1H$G94a zb|eG9dI6Q2;^Uu1IViR5De+PD0`yMp!M&Mna9hiwS(*~jTwdR$-Fq+1=jn>COY?cS z2q4IcswJyLS`wdzsCtAahx)JQS>C2bpsgBD@tl4XGuREHX7NbqAm7cqf(>H%2_hgU zU^9e~=#8ehiViI#DGiC<$Ow$2O`r%Q31NMlFpa@sp6hNfkIQ+tJ`ecNZF_BP$w9c` zdk~KldRj=CiVsv@q*{+s9jD$1ErYqMaK`ZL4GY4&XT^1n@__%E$&bkDs_~IwP}fSP zXS$YAhHR{mgRJjn&#@uUxMuc=Aq(4wstMd2+%J=^3L0HSR(fTs(nh^y_q8QqFsVHW zaVEB&J*!UJlHzM>PeNe$lvPrzpx{XQM=UB)uSkBX*)*rMv{84Qa^O$~}l4to9e65L6#gy(40*)nPY=Uy!@P5I80Y5_F^DY1w?RdYkKHARYn z9;(F~wk_8~YL6T)f-#82Mtp_K6=W}cJcpKsB&RUrfh#m29RXp%9^PGP$IGY{fcNyp zGp&4>6VU8PS=X38(x8AjN`HM?U??hZt7C^(LV9Jr7~pn&G4Seu^FS}@o5y1soR|Zf zXs}clA`mR0XHmf*PnFaTo#6eexMMpqzWuaT>H_{NS-WgF&Scj6A$<%GEhNfa{RJF zeV`x0jMN0jhWwvpvOB~_FkZRHeLV535OWb9#WyH$ImCRyh=2oBw&Pnxk*7p(o_ZD% zaAayXWPs>5a0Wf>LO+L9>VsTs5{m8W{!I+b2&)yGyTB=Yr!Nk-kR5V?VOFUxDY3S$ z5qSeB9GH&H{>q~_z=*DG-y)5&Sg+f!2x*#tWWtdGuxy`9)*n@bPe=uXIs~%F zJcF}Ll3;1l5NIbcMXMeqPo*r0&$5I#>?|V5tzccniY9oXYIvTtfN^tm$daIpt9T(v zJuycUC9Hj|W8^42Qu=^~77<#C#ad#5C}8DrFNqp;ZgpA?u{9G7sMe~*b5{5ecOCZ) z-<0Y1gAcvMKpA-thP?eM1%g@LiV^2$f~&u!UL!wpsN#YQx>+OCB9LjUZ6`kg7Ev&D zz-@V(%*(di1scHz7d;#h7rcZ|oj)e{XgmNu!KlRPn9!icYBt^%L%e2r%p`k<*1QgY z=5e!F^JR9hzP1D&s)HQR>0re%#xQiwNnCxPVz=bQ#t;DofmI@=eG;yQgNCAr$`hxk zUvg{{Z$*Zfg}yetmjOqS&1y=S_(&Yk9Bm*Dip{t| zeF3Ku$i0jtB)d#pW=e8!&Q!}Kvz&;egB{%St#TQH-*Hhbn?pF?tn1Y5Qd&qa&Dw@f z1Xm;g0-vouf3XxO0UMJovG7yQOuO8;eqMBtVbSvE;E*wr6N%qbOn_8%$M)f1K=@{j zWp2`l%OD-;>B&;6o*=b~KWU0pShZ@Pvf+i%Vj+n?6yhjfJgXyOxHum9d{lc<=ZfWu zlAwucVHqmIJDJ7cMlfr5FgC=KND2w@Sy_9-4*B8IKo@n28eZCiA(R+J7!fET42y2? ziqEp#TW19#i+cl|LK0Nnah<5L0SlpTUaZM>5Xx5l8a*NA!~f-Y-q`3_2}6uqzo>1X zv2^vd9=C{5k_%zNJnr+h#F$w$tp!NzAgw7vE88c_8RO`RK5DHY8VoDPl5CYNrHpz? z#NEylz}%gh&($m5mJn&u$xsVkKz_S8!z;nt2KNgMTJtnunlj67Xf20v9z~wiX_SdW zcHHt7PP`2hP;8u2RXS||;vw>X(&+99p}HsCXiwbW)YO?lk&Vq$3aVf|OnoCx z&_P5|?;1mECR$}Y(IxfqMEcQgc?19t;|zXYL=?S*f-ytkL{AOEi9!uPU{RxY5MuQD zNN!XJAd-iuqQRLH2f}T~1se(LOGFZd1_B&Qu0B-!?+GpH2nAMBsLYk+nl~rMc1_K! zK?Hz&dBF7LE5Ig;3Bs8#NC*K@AoBfa&7C!6?P$Zg9-`IJA46Zpu!x7`HHp@U z_dnFJt1NG$$W@tB1}}mI*)4AL?!Z7R1e^E?4l9cY zXn2Qi(J1r&ayjfZB{c|f?~rLLzm{BVd?EKC#j>n8pd~R?kA7fH?TJh~@CM7N z%P1FF2OMIwPsqdG<9Z4c9|HK}k9feVSu3VL=al-Yj^|4ODL$tTfzbCbe29dD4Ghp7 zGZ5uT6HG)bL+lhTX$WnBsHZCna0tXNu77GzaxmmfLoFdF6!05;cXeg^=fTc){f;Zo zAwIw-5c%R0&r)bV3el=mhl6Bd#>Yh9lqB(meeqHW3vd%d7Gz=JXo^ycbU#Z%ATrfa zus&YQH7m|SBuW}1&l(UafhVN2VMmgV0 zwo3ARbX1zIR9*$aoPorOW7s%$Iow#O6Ibj1GByv~MNG6#&Xarc@$;X+`aLzTQFyw1 zxK%dn;C{R@RRMZ7mMErQM2P}Ctsw<3FH_eT&a)2=8cIU0kHewRALIq1XhRvPl74|R zjzS%{ORkK-3|oE{Qldpi0@sg;{vpUL;G(p55OB(16zG+MNKvcAEl)5+UD{ySh=^LC zd(3c}dXboTj(U%KqrSx+e52lDVnKw7{rD0*wF;94f)()2Tnj?EEF)0MQ`|gWHH*H- zVMiLHVY%VX)*zt{F~4v&HDxfQ_9UcouWeD2BB7fYJSjw)WN&gmI>htj!-3 zM8L8!{UZye>spjcG+H|l*P(7hk}CF%3YY*%7;RO)T(;{t86f+mcd_;3IDTjp`{oSS zDEg)gab!j@{4(}DKoEctYA7sl2=1e<<2yyCJnp+z_=@7#y@pVOhu!jk4M`WpQ?dIa zymmwTbp=+uK|g1Z1XNxUt~Q(L23VOfJWp&$y&pJUghXQUeP{5V<`N63U^ydTQSCxC zj|Z^~3AnZ+(RUkMnF;rGAA{{r;jQ94Q7s#mjc=#m<#zaU1pXX_KW*@*9sb-2e~!VQ zJ>jhe@kzA8tIOd}3jXxLpWETjZSdy~_>+b|EkW<3tttBf1}@^na0;nCNdTd)hbj9} z8V~9+4+JLGqj>*>ZNW{Af!P5cQooLatiZxLB7$T+?o%Uh`KZ`yo-1?Z)B%XTU*h{f*A(b zuWb;lVXl-dO;we{K{N_aTO4s}G!5}~MY9Mxqb4;4MOh>A6<#$OTzG>4c7wuwLw3Hz zAhd-9@{o5yn%EL9fjkk`w(a)%Swx5R~=}07HpwiEY@asqI=k0*&O5X^+>YZ#Iic zFBJ3_TGB(N%;y>?j}bK1;+SK=6u|=Q%E3D6U0B=^zlPplMn7qTzAhad_FW@ziZ_HIpxg21%WL?##?^ zWCIGiZG`j{o|5!NMA^=_^ISH|GlYN@^qyTh1#zSjB8e%5bh?B*I59CQEN~QrQ&tI& z8c9Bx=80`|Onyo?D6ml7B6wEWwBhK628zTs-1XEBHOM~ds?+wU@cnHghy{`IVqi+b zg!+(UTr{Vrs>ZB2RTWvSF?f1g)o?v?3NyM58SZ?^S+uXs6LQ4*C4>NYa{Vt2JprqB zw8w@Z;vy@p_VGJe8asJc;&dT#yo^s*d2ajKk_ssS{oo`9F8vV>_aF-!BfxyaOW`@C z`eSTJ&%ZP0ZM=&oa7EAoF7RlF_6>BZ3Ou$jbDqM@5ZD(2$w5X(BjtqruAoRSqnC(M zN+r>C`jvBjqind9RI%(7=OY3j%J(cU#Q4Zx?OArw6wED15`)cQu8|T%86OSNH!3!9 zWqqq6$|j~TEd(UKpEkKO?Kx%Bhl?BH7$8kMzzqZo`t&gqy;S%JrtSPTPWuvlNkU~> z4Z7Bv_90e-x6+7|>q%);PI)%Ffrngb;=09F-q$jPs3LDVqhL_L}Z6DX~Pphd)gJ0IeRm1hE2f&&(9!N1L zo3pN=TE7GKyD0dRdXy zpmESrc9)77O6GP+g6vD?cfn=7^L@!qb<`-?C8B%+W+povSZR9sRRE=-_c1iPV4a2I zNVgQCZbto`a#|uPgq02TF6_{3OH79JO0C$Wa(rS0d#G3tWpn9@VoKhr5}a`vQ{$VS zAK2vmc1ijx^i*dTc_LrWg|8RUH7}*;nh8BwPmtpFqK1t^G|eR&37)vJSF5c+da4~w z(4&g*n4(ru?5~}nQlqUU=#^pZbKoPU#(*w%P@P$|*AB4`L6f{K3DsI~`vJcu zp&EutQ8N>!=kMaJFlOID;gHDZK|9y`)>;I1DLJt3c)rWQ6A3~T3^BY04x55I9_1@| z6LwQ2^LOkDJW-vyAfG$=KP`XGbVu9(i6g!R>Mh6=fd$%w@B6=^K)v`VW?CI~Nvzp!q_$XRMOPxCH;|X+3g`BZCEpf1^ElGLXLUf{n81bb# zR|rwEx)e`H2AAM;`8)Z9=xz(FjW=4G$1U(!;VBU8IAov0+(P}gw80L$6F z9j8Hu4cp`aCM?ws&TZ)tk#|%Gp0XBJpe<*R!#pNhQa^r`7;s$<{E`zO$A;SDQ{3ol0ifG?&Z;D5dKK+)Tle@wOqz*XY$; z6VCYZIb#71b3qc}nroIgt}FLMz6}u)>NsVOr}l_f?E#M$>_NuT)H@WU4kc2wLCSP- zB|_u{5aVj^O2Cv0|C3X{)v>t$FLKu?(jTwLmBQ$EFXfhzXaBECGAYF*>1(^~^3g!a z@>M=tJrsMtxiDzYID>YvTq~J_qq^#f6$a^M7M|!WX~}8v-MDYKKBOt+iEL+~D_6+( zMvK6qK)k9+T&~oM*DKZCT(cs#)i4l-*v^k^KMEb@(>$5yDXt*i zW~OJ;JdrCUcw5PwF=}NW!g}FBJJb@@I@3Ja30=Zsa9jThj$7*RY-?tw!!vEqg4Dhpu2XUB@Q?rjU>&t?d(%AGtJYvY z_!McbHyd^)o6F>O_BL1sa6ks28+LqCVA6J8k4Ba!b(c~H(v0N+x|RTKElk2Ovm}P6 z77Fs(x+V;Ws3Z;9sj;5GNI4t8O8hPs1=dtufCqqXPXmr_-wp^m!zFfT_^(cJRb6Mn zD!~vX)}hbbU7-!1nackNtLs~+-Y!}sQ>sGvc9D5u%Zd9se7=ke?$Q%U*xROI0k|!!lDFF(w zQbOq;(0>-v!(>(l+)qVc-3nSox(@gzPYf-QJrFQ5q#W4g5(*#v4I$O)M<-2|@Pwr= zmn63$FyWGr&WgZhl)(={K@5Koz6#}^5PGU`zDn&(3X~w8N|~@Ayk*0xT&P`O-0BU0 zFx+?`k%HEh0j#$k6s&7Lcy&ZFpJ2ZLxaQGtpHjpHJ$A{^1-(aEtgb)#q5*piARL*i zOer7q+a1@hELPXAe6bQ18=f(7*P!E`xQ?k*UBC4F@pI+ypm5oc^#!dh%T)x~nQ(Wy9 zyAcz1Lj~9az7=t?fu@}Rmy}mcV9ZZI&ZoNAKyYtKA;EY-BLjhN+QC(i!DdfD)_4R% z>rZ9qRTwJ-be}{dk@FW;p-)>wEfa7+)X1h(mXp|J2^2RJT%-wV%LKQT`g3L_v`Y2U z#S04psL{+D-IWQS`Zj>6)wiKvlnM3ZCc9uN^{qrkBKOy5D3WRF;YceOi)Vm_-JOwf=<7msI5xRr4f z_5=coTGN=Ip$1ebHvK{tc|b&IE+ZI(g_o(o&GJhcQw6>yl17ATT^4heC9I36op9RB zK$T7I5(vtQs)D-fR&*z6iGJe3q2VQ7OMwpJML42$?P^vz)3t4{mCcwqG+0g2TP~AY z=t?QgNk!`Db8O{@@IljS#=1AKfd;Iq?u9-*IBq*^E=D5iWyHNM z?2@vWCWeXGmNh70n(2(%9_5*2egE>*k2vxw>(X~sZR0y!b{z6mjbvT zMalOg^~I3*h%v5S$-7=V9V^+4xQP$d?Cz{JoXx=uA? zkIbieCUz9iyzdm`mJF>U?8>Ak?HiohWvmed+@RfFB>&moG1eu zl5%5MHt*)1S#<1@o;(^a(B*J#Zde*>&H#-x;MQFzDR&`pl>k4~cHZhR1Z~l{35vth z5JW^_J$8ACPihM>84z28!{%Y0qL55F>v1cxH8>ct;wT(S?3RLDPbqOzYpQCvz6CBC zumH9FP_WYD!~HaN)20#tV)`i2B&bB9$qw$CGc^xPYGA-cNOFZK7i2IKS--?su)|1V z!d4alo`q*CRybSp==WZ8~4o_wrzs; z66B$Xb$+&Tx&qtdRl_gNQGGbS2D!9j#tZc7c%qwx@RMBUxbwoDam@4KdbVTeuQ>*h zxGCRsE63mfFbv2;zl2~j)Q2_0hx)G?8A}fh4v&oS3XVeflW-F&&-aKgJ;HASu9lv3 zS64d6y?LuzHA`X;5ZMBoNiz;KX>i+IG+o|iJ9Y|Z)-JDX1FWCHWPytLTejyLt@sc$&W4dDTriCL|tRWSIrV7=X&yOTQ{TuW&$_7H` ziJo*molA&+yAnq^Z{?IY5qbS;8t6>t!VMtjP&6DrfQS=v!E|#f>Q02mESPSdCq)!u zE62mUMUhaUV%+SA>)I-o?V#(l>e#03QhREt(>NuLmuu?kVn@*Hxy;%IIux6 z-uzKHFH(Zql45F*%NOkytSSP_NfFxTRI0EU2P)$-tLMz{X~&B!;gJn}3 zNl;kryA;Gcurh6Yz*saEAf_f%8jmN%48gQK8Y0wiF-anXK0zhT2vPQ)Kr!e6)HO-D z+G9}Gc(M~Y9p?>2zoN%@;jdmlxxyd2nI&sV$YnAZ)gJLN;A|m)9g}jsgIjjB=7T5= zfOZU3Yp`ls!8Wn*K!QqnrM#2{4bEr+p|3)PUIy)<-zMStZUT1vh%@M~6+uHYG$9e* zCnlu2cuD%{+sHK8dNOh%!-yQ%y@Vt*-G&ZB(miK0RpJ6vPn=KqRABBrH%6#tP8{Y#?Fw_>#vHTH|T)O0*dw z5-1H3S=Ma0g6kDyN&_8w{5EQtdfKJ^6itD74C88T<)fxMmnQlVzE#i1tU;QNU?(TrxjEfypUT2 z1EPRX3x-2L{-{TB!Rr`4q!!BzHHbm9VVSX_WozZ*cyKCEHha0{bK5jaaHbR}-#lI| zTSd!w?+sk2 zID2{LKq8~2TdATZXu6&$a{g;eCh0qjQsAJWy9?^t@#dVxR512aGz-%Tx7`?B)qs%? z$ZW_#S8%**MN1T&`kYlVPdQ}C$zm{wIFlM51WG`#tCUs&_mT))H%Tz^fMFQCZ25i} zEo=(CA|3)7kl1m9AROPc>3|k_1@m;xZ@{mP;5`rG(rmG1C|V*~IvR3)#Zv~}=B^Kb zd$nTG^gNLt6Ic?4(10F_8k(pPp85EaqT862rucZ`o1qTj5H@W5iZGl~hv=f@0NZmw z|Fb+zC8%Q&rxHohohZDC%K%F(?+V~WtVmn1wZKbsCo$zzAPe`odXR;CQ=Zp`f;u{nv8-HLCNcAh%+5Dw=g!T@glP)lSyM(VELo*A$)k?rGhweFat)z5r@LC z@EzWUB_JTuH9e0k28bu5TpWQ30ZE3$FNpX8eH>2gwq z3RxlH=9Lvf>sIGrR+<{ZMJCE1*8!BemXES#`~`vn7E<9;np$SNj2;x@Ubpf zPR%PX$&=HnA%XRXsluFtir|@ZYW}Ee@}AJ$?C=sZ=b0|Nq<11mAE03K1GHEcSDA!pjROv z>n0JxQ9#$2c3dBHItefFSYF5@ahV%4J~)oT-N?-_sg9h2PX!?#u-}E6xma~6W?>gx zjU%#LyiLHgz>~|vuN@BjBX+A>XLGwaDQckDMWELf1t++m0=1$QSr*Dt91)^T$&pFU zLQ9GG>N|ZAM3o$?FNrNk(gn6fkC0@6anWy$RK-XzR0Ix%_38R@gEf`m$#nY=>aKXD zRhr_ta5n&q-UZWzI0OM|d0Z!eo@jp=q0@>>hwFxO7fS>^g3ErEuH6WsGtWdxBAyT% zQ=ue5LAwH^NN)0WwdK%DOjRiSo@x6X7y${6E6e7`bo@Rhv0LGjBzhfT`0fx<=!A#J zrVnpmsv;qZm{m((1cI<~btS@VMjuB#m(}Q>R!jyQ6haM4G6E(Gl7N>T2kmdv zOCz)tf&)!Ps!5~`=XMF8XcQPGKcqcjeE?Rp@+&PH{L^O9!kvL>1ERwn8<{MP9nq%_ zXnj0^N-+rd5HtehAm&5B2x-u8!lSXok+XuH8*H&Y*MhBEm>Fyn%&Vgl6yMaF~y zo3!1-n{LA0LsT>e1w5sDRQSqeP^Vx}k{5>u5!QdekI)$qIwH2<*krdU&6*#ZjMO~_ z{!cL1Jk#$0$0}ZkWZAI2j$T_4SCW=n!L-XPGwCcN84%;Hh0D)_0}>^3#7T|$C?0WTGNq0s=y4#E)- zRuCr7wzj9l zXfb+u&=`-w@GHkghE6pTt&b;oI<1mIAVFG)qJ>O~3$FozE)2tjkmZdEsUV!?iwX9P zv31KAbUaMAv$QORQ1C~vZE|cfZh$M~Ab?CU(_16*$dl|cA|wXjp#TvCwFp=u(A2+H zAxsTRz==9YRVsj6-$Kb;Fw0IA4>m2wkK-U4YHbxT4cA*6DYo)!h5nD{J1|_)0{ag| zI|avtqh=5S)(kQ>F#@#`mM0d2c$0AU*MgWP3@_CK%RuVHp#~HZZBw);s=Ezhb?SB! z1l5J0vpOUQ7BHmRDUs?I=TaCsC;ITXX@gP)n@4a7pt!h_0+#CHl>ka4VAC8!R2qiU z;i=wQ6*g1AKS#Jja#&>nTSgF*wH>I(6#qkEKJ`$Ec^}Zm@?fFS)ngArDinAn-~^J9 zmeee1GLj;INIAh^P6Z*yjf*z~1`{569W|^NTA;gNJf%=cTw@WV;MJB69-9+4p5U=L zrKGsVqByA~cL#%#;*^!vYRO!%ilzvavP-lY^8RYsKt}E!;VBrod!#ob1PJV@PMDP{ zXjW*IwUK0*TEHNcaLgA3uV7kK`CQ_HdQQP;;Qt^X1pVwa;kG3a?#A0R=dKz6G&7B* zrUW4%7*a}8B7I?B`ia^ITHnZ0;TyUM}ftPD+ zN`zK&8)GX)li_&FHMSd=A%evg_yP>KAtzd6H+ySVxr8n?^wWx+!!R?Oh9Y>B>gXCf z5p$Uapz|xQh$|4zj?LlDoqf6bNle#izq3sZ+N)wwZ!$U4B#~ z&|W>29Ik?JX$Za=z80WsZRLZb%JwOlzKK^;N~Zx&Mh^tw(If~C48*zIZ#rQ5qqXTl zy0}CLz|q=t*(wfJmFdlsvY0#zv}z_G+SJBPd3&RMVVtG#!$ zoNMwISeE8r=ln>)cSPJ{0;67q3aPnt`gjhN)zBl|^Mc;TMsIcZD`}DXeg`CFtXOu< zH@Og<=!&syNL`GcI^4tuFDSU@qyr|{+JHMnQPmScsI7c_Vqlc#3bdmeZ0HIj9(;_p zxv0d9$h#42w4sm%H_<8UgW!aqWy>2j7e_pyM<^bkLS40ThYYabMm)Omn2y7M zd(*`$V6~zn-Y`T2O*nf=(TTZe!lFJ=UXO#{7@W*;9iy_M8XO0&vW&!4eF8d4rNwal zexzV+Cj+JmWk!9_PL_F1jR;^hY#{uaoQ{BM5-~_V1ZG2w^}b>|PB|P_Z0u=UoobVi zsAgQGlZ)C|=%*K0N$RW&(g>pUGF78EZ_Jt*Q4SBNla1CFt}Az8qMhSn>u`z+)HL5$ zb6r^Cz^)0*8O=%|-B25(b^}`6P2Hic#RSlUDVQUCF!-VIY?1O)GmcBd3yxX5vp!Wd zW?@b;4ZJ)Pr(Eb^un88THzc7&MS)r=jY7JTYv> z^Ovw?3LR@YKwwYBbPKkF=chE|3VNrg*vB;tB<^q|B@91`G9f+*7^00_M-QA;19qoa z7(x!FZ#Cw30rSyH3kDitW^v8NaI^Yi4cJ*|`bstg`-?d8IyNU(eOa)(1Z(_U*}PNRi}d)2}elS2yc@ioE*%0B|~t_+#DmLLh6@1XV=LQI5rl&1_kAyF)c z7($Bo`PN`y0rv&^l7lMl0!X$CErbW+k=SA(6%5R!d#; z2+c-rB0j$95(A0Gt}5V%cE{*W35->MBa%`8M$s+JM}_bp4N8Wg91F3iSXiHmVl-IA zr~o1fa1FJrV3+_x$CJPdrmVFUfqOq43FS@^X{AKj#!xIsktP(ly17r<6oeo``b6-z z&YF+Gp;0<&DsGJt2n**;9kC%S%uIxDqup)H%3_;7=)Q2byR~4!P2a(K3dx{H1}LdW z?r5Q31_9kf7!i0WwdM);PseMcF@f%AEYRrcjw9EXC)U&Gh+~B0Ll!XXR0CxP#-8{D zj7aR0hM04pvjo&l$@wtPo)L2A23n8CUsuk4gB2$9wc<4J5O<0)W?j~b>A=0UgbkRX z54O1_Hu!L>iqN4t__SFxYMu$_0LbC|vyUwMp$2v=QIB_qCr@^ay z42Z7qFB54gMFagw-|ss{woSK!UpN347H70+!& z5C~U0@z`q3tva3w=R?DI2We)-&KEov3||aV6H757jy3_Rt_j=CnEgZbAFmQNCYdOZ zP~ed4xlH-}@noJ%?uG$Qwd$;El(aw%+;x&{a3LLGXE0aorKU^rHkuAumIWR*E#-}R zsEz=ou9zQ?e6<}oz5?t`=M9Jx7!_AuqA*=UJK#V|9w4~3A|cMx2(tYUFKv{$YvRE! zJb)z;)+5O(|wLY znuku+>hvi0#ich){stGAw30*181em(lZQ^|G$bkM3nD8<@CHvL^Pe_NTf?IAl59=5 z`|v1%JY@vFK)_|Cuth_p6dYoiRg6_CC?kGWBCzt5lhU++AQY1X5zRER-oz`^QtQg9 zni{Da;Zwjmydi;w=rAqQmk`%h1X48YqKVWae5xX!3ej}nSd~)@B(3E5F~X^y;|HQo zs70g5WI^=#j^^-H(am9xq;FPp1b>bjgOYpW#wsysZL1M0U>Lh}Jwo`dI;w*hfSNBX zt!yjscS1;1qMf7rPw~dkAOw2~JrdXaiDV3Mt%^uuX}iba)DzL|Xc$jrr>%4>DLnHK z$EDuEx{jp$3f8^Bcwy|}4dqFD zN`2^ha#$NEs5alFZ*xWcBqr@6+qZA$69eNDe0-vRY=Up!zWwN=Jqa6NRuOl<#Ws`J z6Qf7sW?{YZ!0>*ms=TXo{sS4D5PrlxNC|_eF6g&c*PMT?1?foz=~?KS>{x$;7reOnfs#OWV zcpipw-N5j)ldKxg5(h*nt~=VRWK+UDou{)jf%y?Dj$$||ZBbE@MA@ox=ZP7Z3#Pk- zcbWqa7v4b47Sml{9emc2j2Le@s0TlaS&`!(-wNTRfF4#c#BMDpIe<@GWD^P)kLB$v zJGIh5$MemSaPh><63a*C1b9PY5#yVS&<>x&hPdn0eA5*kJ5s#Rol~4RO~3&n+c|-E+&ngoR(!+R#7lR>=S8i@oTLbBuEwq9pNLxIKq1<(#s%MD2`#Z zYF<|9ln6U8AvI&gSrE2@Z+P>F`0}U;-KUPBFqR>2zh6LObZ)g-L#8ksRWA{=@^qY0@cJDm1>tUAVFHvo{OmkJue$RPBNG7n5Mv@e1W%( zI-Z{rx=A}f9CDxS9qAw2uLL~?6OGmEAP?**Lx`dzguusKuCakc`CxA&PInR#dJZt5$aF468R3(6k0hpO)()?;!RxIbAsBHi()Ng*tp&% z`6W^MghWwvNHLWHmxH1C+cdS4G)v3o2Cq19a)lTOtTSvP0IQLHf{_1@Hucb>1~*Uv zmdfD=;&`PhiPYKhvHFxaR)9Kfr_`Nd^s}gln@lVt06_~|rSi3lPm25jRIfXvv&k#O zh)KulV7n44QME#=EMY2EN*pQ`!Fdqh*IA&W(d3nF6Zshky+s|7laZtGg9(&dpDRgZ)mBeG?qDu1%YdnuzKu6^AYScZM@-JS;6L*7a z5qKK>6p^nGf~0#Xa5Yj4g&tWCp*2IPrLk5Vrw@w$g+3E_2FQsKLAc1t?^svxxKlBe z6JXJG>{&99g>4sBB_Lf47|Eg^@&K3kNDv!?dr?p%vgjn8#E6CYk1kN(taeI$s9up4 zR1qnTI)QZB3aXCGoA*V-3<9Z3K+ux8U_`9UMTQAREVC4Hf5`o_0!47FozSsHPqGA=M+{D3-f(l%A=?Qz6GaudKN@owpznmnf|E ziZI!{^!o;G+R$U=4z3@s=36|~Zkm4FjG~zvZ>)u*AyACzj?}>JqtrRNTkpRYuOrq? zm^d2YuqKwntcj-QLlR8jKXLQKDr6490a#*VDiUZJs@4mI!-bAb+89o0tT2s zl5EcKD3O}n$cMBPQMIo@g$~&YIE;bA2YTc&4r_}94<~nUbBu)FfJ{cWizn50@pa^C zNY;I`GcC?u@#KIDiRrhp6D=LY_kl~(ZWbPQ!BhxVQ6!P@9X>E*SmpPuAId+SoqSUh zJCBJm6(C5QPCbooVJDc+7@KEo%QxQqGpo$lmVbQsXI2wCvE>yT7^^V0wfz>xw)}X$ ziOn+BvJr0rnPIHubiEyuF}{1foLBUe7975%Des#zAfdnMj+xc6Q3PvHz8dg~M%BF1 zamUQr0TAu-#bLKRU>BVd6n?^vg26y|8(a}0P9Q2jeDvJb5p_fiA{DgTfiOF6^mta_ zYK*pXl&8SD#}s;i4+0YeFNQ$0J1Ccwc!DtmkhfdpNJHiqZLzJc56He`xb2W}x>f4L zYZzvZhMAGWgyw(}RFuFl7(IPFld%(!iVmOxF1qLlkMLx4!RsN0MIebK!dEyk8?~lT zp}rZcO}gM<^^j>VyA+rauQk4#1|ZAwB(^I8R>JTQ6W0y_E^~s9cW}t_-AB!V@<)`- z&eGh9^UN`9UdSQT0PPmQ!g3gN!qbZ#dU zne+XsSIA^s$4ko=G9{;&nORK1IK&{*74XFgD+1W?$ki%@r~VRI$&^G6Fh~F8`rh_)z&5CA;m zxazV4krE5HZo&1y@7M+RI+|r;sjoYmt-w`k$NRcN*+Ipc!fEu70HPfB;n|C_-eFhl znGpyPQTJOew$YXdgSwP~@D_EAF5QamFQMs3vM$XN8B&n-CLymt8^I^&8Nx{P9)-!H z*Bi7;=5fe4STc{N%bqW+Eh?cX3(i50)O?&lccK+SER>B1c~M%fb*C@}rujfFBd zIIt#o1yMq|2I zGG}JztefY{72B!a;(C5E<88?tn#+lHo*cxR_{0SqcCAu>ph@O=9z;;U2Nle~ouWbKfa&jb4ZAp} zjZ6YMwCutCmU2u-c%kUn3#RKs-a^}hL==6MQa4O_&OENlC38FrGE_DPFT_N1KqCAo zJit3606^luESHzH)6j9q!aqhg48mH=??|MelOTGB+#n#(i5+Tz@}#jyYCzCvPyteu z*Q>TADu!*$LK5z!=+&qpG8L4KR19AwMI+&c3i_3*pk~=U_N-w|4nWwguLyc|RlS&b zlIo(0;6>kPZXL|<3F#7WBRGUj z;L3obhfH)ST*0TT%TSJttwR8K5Nf132pjOUQ7VGNZdrPQusabx)Yg_9)LINM7IEQG*EgKj{$@K6xH|tiD2WwCQK4$r* z+Xu?GU@;|cfjd`0YTX7onvSa6fn7j?~GqooxA*qQNSSsQe^i;4-Kq19L zvA#kQftR9~y6{KqE|HM;s-6lxMhzD)0xK{UwdFBx6;M%xmf|Dxa)(A~05Gn2{si?D zM1@$~XZ!u766JGNP3*J%F%$evG6E?mO#v^F7lWecgV6$O^zrwK@_c2Psyc)0|#osWlO?=bXx*2U1OEdvQ!4K zD7c%XALovGO}8%Y4+cmh5CrP^E;gylQ_v~;ZuT4-xU+5Yqp3ZKqE&Je?HYd$$DB!a z9mn{IDadYN0-?!9n(*bbsi8J$%eZ4O5%P(VOJ2A97GP_PM)~wNH(?e=xw=< z&O0V2(<}MWmXW3MceFoiGFb;}wZOv=5gA=BN8gZsyLryicEs*aZpZw}T)sQ+@n zXas1}p$P$l6_!y_R79s^oW+B^!_vdpkS|-+0Ig&<*`S@Hf?DJU>*Bc8+Q~|7)VH_* zmFyJxQrDKnrvU=uTwqX17~xS4NDp7pxaCRg`Y0%{M|d)@k9nJTvzvG3+j$#+DJ=@O zL+LQc6wbg0he39o$PPw7f}w}u4Zv$lh9q`sPf}D$?UA+Gc`^{FG-JJEp$-`<-phowQkFI+!4>R);#z?b6x4+iRzGw z9>>)6m>apYxWaWJegNzuA>%VvH6vZq8Qp}+Ag2{a*(U?02l`-NpbC=fTRf3|kBF~I z5R=5LBg=FN;WJ4wI2ww^szM^{l)Q;bOSOIl97^G?)H|dIk!_$5fmDul5^i}@3~e9q zS^$$&6GM(Hff5Q9hfe~+EgI?G;)EAAAjhU9R}`Pd>k5cXK!(XUHNQ_bqd=fzn7dLgvn)6xdf4hQw;@CNe+hS23hE~qcZ0yi=zbzF1#MG^ zwm&pBkl<}1NTc2Xt5LYpZ`*k;o6QP8Y&%p8HI+&M5ksEEMr}evz%*1V;riSKk$kEK z#0E>_CP3pn#TaNWMzkRq1RNDql&v=RR~NMzgm>lT7VgU9qh>bAfUq-VK$x*On=+MbV?p$M&SM8I{ z?OgS6t{NItGs|sZuc2~YR?c>m>yJ6$@OG+W_x#Z zcjr^$>&~v7s|VCU1*jZEN#%ET?dVF;*WRw&s$n;%V7GgkXOCyI*<3c8>&oYHd84Z< zzh}40bNM~^Zbvqs&t|hbdOCY%db@hNd-FYJzSP;ZBb(om&1SoxY}cOEk3hkDx63>8 zdv^P4XhT7Hw_D=59vDh~En`v8-R8FWiHgE zj1mwKE33#{U^D2@%P4RN)9OydKn8{en4>Z{U`X1gE?is$3%lMUQ zMh!P*R7yQvY2R?uv$u+DE-=@=1=F7kCdEyA0j-^&9!RfA+-!mTK6nmRz2vUr_^FcR zQjfulvNH=;2=pzP9{1)dDbKpq?CTn$5+i9a2fl??41eKYC^!d zXS0O!IU1bvsYP?TW)Xm!;3&ph-zNb4imwR(zncKOF&@Cp#-eNmWcx##3e}p=6LLeH zTNPuLavpoeg30Hs3YbYXZyI5pXvRz5GcypE%4=@9FVQG)dfs#aRy5>Pan6N>N$`>f zcQ5#J;RU2(P^7t8j479v_qf3N1L?vb$*)uu2~el@Jl_r4s$7g25EjK;;-Z)4bpF ztXUh*1;FLfI1=c*D(8Yjk_I=;D+lvZG%d$N@aszR;r@vNuNdAfH52o^D$0Uj(wP~n zD0+~)8r(K~?4~$pSazT17U6;C7BK?e^gP*b7Wy^tx|Y76dD(GynvXiJ4{;WYcsbbN z{iD3AtCK%V8$ers#WruXjOz~YYYq?Y;}xr772T!wWk*y3;`AZIgYOiba$l`f75L=1 zejoHeV*(t5g1#e1ZmO~8;VD$``cO0FmYoVfXhIOSLXDp2Ob$*=jE?i2(aBtAPV>Wq zs~Wmr)P{}?u5Rowgk?r9@~Z-?Qx|{(&r7FuDFUwrUP*pfvy>)(-N4?d!{Y;EB&zUC zgvQ8DS$DL5e4Ogu>NpknzgsJtx8AzaM#cyBjSWmpT|ICEH8W<|`<=?TS#(XmGe5pm znRX6&`ObWIzBj+KGk42M8wML?V0i!N$l&kXoU>Sf>VD1ZqqDAw=H?7|9I(6;flk#b zdUqxifD^F|^_z>=o8OCe@q0*ou8S9+=P5ZIGzW6@mQBQTj}*cm%E=jiSU8%X;__c`YPd#)mn_IV zQ>o5)iRRV}{sP>B{nb8vEMBH6#&Mx;cIMN$o*n62HX9W~qP^x&pJGU* zQf&Rska*S`7GgaF^dhcdsBtl&OjPR9yaMJP*A6WN3{BjvP93Bnb}iA2IW}?Ps9*%z zUuxC?t#rl;RnVA1rsC9WUjWT>i>Is#f~+rNRIAi14nQ&H;*9J^j`&n6TSz|^PMT~w zo6e=O+0L$zro2+6&JYrNaW-RBW&sk*w;E`A3DVM+FE1wsw4gD9INg6`4KBa(A^sb% z2!URK((f7-ZPDp%Nb`p*rXdy!BnS3FM&L}K+XK%KEhIQ%2Z&t{(6WAckrC@~;2IzV zLtX}*0fsftbdmDmOGDbt^I6xaRr?lQ%Qx%EjaLoNTXft~U)A*H4Y#{nUnbJ>1=Hoi-t9m>OUx}D=9ht~3|s>F02#>vFKWOfd-LgBFHl`r zQ4d#-$bvc%0-2fX1qhnsn;2uB=~ialV@!Omr+=FmV^`7lb=vn0jIkkl4z;J~`)2L= zR_%E+^gv}kypFN!*-(BHWA`$)nVn$G>_pQB#>S{*w#(wz|Zp-+j8>c z$&*dw!?)~BwA$4!j2Z1T;rZTe@k6Y}d-D{mLtYl8MJQ0=Xs@vG1n{JYAQ)tYd7;d$uqZH0F78*qGoJg*E*%kOn#ZM-fp*3Ho9g$b?E^+wggu^Lrt&12mP&0eH8yV$reCkZw?$;-i3@IdHe~`2xCYdZ>I0N)-(1e zO+)!}0mn8mwgoU7mS^2o#NPXg(m8&xKi}O`SeolOJbm@fs|JT}*}wC;gT~G) z4`r{~*?Zv7{>sduygzq*%-lJj?HsC(_xEjJtmSOiGhh&SZatgJ<<_fA8BL7kU@Y0E z!dN!LXkE`>jID2i;Wjm~KOK8rGV$YyLQC2=o^k&pU%Kb`Gg4<37eD=+mp=N;55Dl} z8(UudvbWy!`@eqCC%^NK$v0nh%|D-e=e9HU{_)Sx`fAHgKxR{dGG({5AAr_m#+W#mh10( z_1jl6RcY1g+bNS`_ z?V;=Ujb6LBaJ<;xKQps5Y8YL(Fc;tj^HbBt{1uup2&=PIy*c#?z3v6y_{PFl??2jp z=2^ESXWQP?`t|2_TzJz@{@mE}t%n|Y`%nM+w%6SK{?32;W$%Y~|Dko}H_purUA%F_ zS1a@8(NWb8nS`S)9Y{jBe-JL{Qe5}5^x!RaJB zeh7kxG5q(38;0_yG4^~xb0D48GY0$$sSQNQdRSC;I?&x2@CV3oeKTX(_dzppwDI64 zzW+J4d*joexqj*6pK+hQkfBWbAK0Lhf!l|pD_MLSb zT1#Vod(*++|Jw`m_rLhhFa6$iH(#*sp*I@oyI+3c->`?Dw)xJF48G*yK459a8}GmU zt%u%McuV*D-tw3K`t*GpPd@6MIAi^*@BjSeKYPtbe*KpV{niKa4}E5I_ojC|@DJbm zvyGoyW&mR?AA9!B%_>25M_}({f|G~%q} z&bRcw<~bjK`;R97;Uhc0yZHXwkG^Ys&}lQ@f9y5?x!bz`{mn~H`}x5$zw*Do@ZBGL z@vQIcz4WoWPkiyFUB@=wzwpps{ota{eRfNG_a*lo==kw7YWIBKd&$_*+~K=7JmbJO zH=i&*^g!n$Q-i&~P3-*SU*CP#u@@Y^<7W?Fp5OeATfbABxal|E&EIU^-p?4jn|-G< zx4-revk(1rrTx8+yyK6*`Y)e8?>D(k z|Mr!$9+~;q-WzXSY8qyJBDFAFG#Mvj0b2pLyl|-+bGBFKYc+&*-_|T=%M9eCmIF{5Lp= zM|bvL{GOiKcUonL!V+fN_6$^7i>wLgE`!cAxMM|R!zu^&D9*DYf^AN%p0ZNL1* z2dgjt^_?%h?I-=OK7ab2hmE~|dipO0t~mLVTk<=f|GDAorf!(`cRcmEXa8g7E8i%O<$b>CZhzt-J5bjeG;e&Z`{`rK=0p8L~p_^)dF zdSwoj$Y(D-`0(9-{i4TiIC;x|JZ=k{qMg2!42C_ zzx|ZbK)-u~$iU31k<&-&prK9#tt z>ubHA_!wx=i{)Z*W)}RPyGi+w`Z{nw`F%ZO43-W)z~|)i6DLoeJcpjYvI(9K<|Dm!`HV3rb2>h62Hkv=ZC!sF{6VedEcmvOo!GkWoKe=o&W1l{jIx$> z`2%c}<-itTz;sWv)U^-e+DPM$X@3K>zfQHkKGJ@7UHfKa{LnV^0rEh#-xMDIde#1h zaQmCPXXkEB8O7x%(S#kuG>(JcAR9+}CANJ#+Wt9gC=Zb|us8tLCQvaK7Z=feBc@>D$+0)MPRA;)YvxWJ^YO3PRwuy)B z1(D)NX(&5)0L(~&BF+FTVJ*R)gAoB40tTLjYk0D0GdsEEOm>2u#!hZIadInr8auhQ z>1=j#>$*+s>1?UhfTt^iObrqU$RC*;C8C2RbX!|DIyo+4{4QW$LRm{q?>B2fD7-Ow86Zp54 z4du!9MN=x##MsttV3ELZura6xjTQZhQ>vBCgM{3&8CWm?9((}t<#SlPPI?ZDcrks4 z#gyg0MneE#Hn9tEnS~*aWDeFfSiwmJiGfHFfMd%Bf5xxEOhhxMT@2U~G_xL?vD{)O z6vb7y}cniBP?1D`QPSPvD};v0MJIl1OC}b&tXx(Uj!fE zLub-+82lHhP2@{ZkoeO}sSM2Nuc$8=${VN*SQl@ly0FlnqV{2-PSSUffgZI3G`*L~ zpT`(`B|QgO`86sJ1oS%U>nV(}|DfkjWsH54>H@h0y zbjH{VfLAicp1~OFrSg|B#_po;&t#1K4SnZ~v5(OlTNq>ShL^;7l2isc4}Aw#@CpDb zW9(9`{cV5?G=|F(jIkbQ7-a!ty#(_f#@Ij7n0py8FHvR(V~o=n zcEZ@`Imnc65q|DsjNL))fL`@8YNroi2Mfy>+rtYAXW-2qz80(|&6QG?? zUxyiE@2Bs-`ehSiXAI>pN1tvR{=E$Up2yg|XR+t7p*(Qub&R!4K&($8lR07(;o|7Q z(W8YO*<4RY?Bj0v814)-?NVV!Rz8_=9ovUTo!M*_IRE+k#>cLlnixAgJ~6O=YGiEi zz~JyW$mq>f`BH5Z8z$VE3AHxvAJ}{NfL`obTCsDCQpK{bFpnFRYS~N|oeI=BcmGxW z!v{vD`u7hF4o?jX^$#A>8|cv**oX~4r3*rpAh6-Ok+J=&tp~vr!~H`8dcECRf9Dez z>!5S`m185r69dEhrw)&WM!Q|By`}1S{;X?)8?j~6=z)VH;}d#MJM^+8!#Ac4521M4 z=*alQfw6({sr`GQ!r27!4%uM8R`WEG3%z3I@}1DpIjXV_mAWQ&X-#Z3N(-j#*IexV z4AlUDC$@hbMo)=FwH_Es^XTEdhX(gWVFa>J;%{{H%|VEX4yrD#%9cTU#D1wymKs9hK z66`ssccj@+{$a*iPRl?ZFtPkyX7ONp*BSY7R~9i8M}8q zyM_(r*Q4G7)_~YLVlCO(xuTo4oQ!80cExea=2EUZ6B>&IR@s0|)B0MD$2OTeb(3;g zwKfBAH;HjJv76a6WLrrUd4d~NKLuxdDU0p4ZR&}HnCDd*yr*b_4hL)G=gwi5h zA%&UPs*Yv*X>U%I=ZR(s6X3)*|1P^_EfDS7JaMzIRqdxdg|RKaJ$drvQ|a|q#`rm#V4tXB| zxoG(2tOMEbs;*P26@6>L@|T)R=8RD*`>CR9mQ35XjIsyAt5|jc|2D&ZvQ;#_LNiy( z2H&{|s)d}#5U>>iA{Kz$5QbeU@I93AMJ+G=uEVX!^A%wj)mawLsEp`Wiyjmc;asun z{d)^siV>=$-T^DumM;2Qii!e+0NAranqZ*?r(CND2*L->gORK#JF@}mHR4p*hBsH4 zf=KKFPvpCMD$`;ru8A=d1zxkurst(R->Fv3QZvUJcR?4y${7A!;HPE}VUB}!!5X6l zhoOUJRM?R%7*z{j#{mQ{jCkgg+j7Q%EIV5ms2nt}|($>2~C zRI{iFT_Kb6Rf1bkWxa+;1>>~DMpdM)8P-)-s+7uEfPz`z3D7ttDeB6Y>Rd?+&}gyp z@~DiGx1dRAtkW1tRr^?O#aODU3Bib!>(R6uM_pJnr?EgBqDHk3HE~G?J0!@2dZXS) zz>ghp9?_!;TxwbPz5y7(Q}L|F$@@WMovt&LZJ-&QzM+x*vyN@k)Vd9D;1krb4WkDJ zQUBjMZA>ps*Gi?O2IUS%%LS@h6T5^|ugw(lr!=iiBC-%vt0pFurvXx)u6SmQ^3=o* z#A-UpvL}?MvSrtfi;$;`8nmX|1T$H?BwrUN$$!}-B)RHTiE)mA!*q<(#a~fB!^3D#gGRfs5&e-FXBv`Uk^% zq54^>`o59jD+ke^p&HPw*G-wCQJh1o`ONG0ADG(Lzwh9{)WH$qQBYMb(+0T#&c{I~ zn6J!`n8KR0VS z?yQL-3>Hgch6+Y&=Y{Lzc;Wau$qNO3NLF~AIh_K3ObNBoT9tcFxdz$BMcxdrRt2do z64yFKql_G_Saxb~gQ(*gv!+yIy~b=ScG4Q-qL$(f9k8K1)2~%SW{$-35W`v-n2~kF zs2VA*=mE&756O&}llD%~N?#03sj^`j=@ZnW-U@=~0|LQkb({`RzYy*{hWUY}k9b~) zwC`7{1=To|5_nvQLv|cML@(R9W9N!q5iavT_l`OTVWSK_e(9B)6#1Np`?09De@E8R=T%|Wn-DiIRTbqkA*yd zZKLRY&90CQz%>3d;tKf?DNxw9eWm%oJYb)4`pp zX>-r1xkZzRSVX;B{v6&&UNL;DNaq^i41jOikWle}la6o_>|Q94pap4+gH9P)_H2kb z2)H0_lfhC4vv|tGib&ao0Fkh$pte$JDFbLy0Q`wOkE2?w5JS5WirbL|b6rv!bk)_> ziKhW+f@s{68%WGcaPzVun2vcI;t7m$0aK_WT^4@_>l7d!5^LM0l@RN?QyL#_L}F)) zGf76-ns!Y%f37HYGdwcfrLb&%Gnpwbk2h1UjwPpUaayj{rzV?E(;ly#(l*A4=jsNr zpjr=--V9zWn+A}EZ(>pbVYax=BHXCaffr}NF&Hp4WbPjLZSHlPd5_n`y&E<+k6WG( zFZKz520pZ~S5h-KbjwXpP)Z-*8r_w-d}oAO)dGiTc4Z5LRHzPZP1S=Dyh3%-zE0-G z5Gl|h;aMSyiL%!jYgTi-31(N|m%+ZxRK@fSU<#KJqu}b|<;ya~n&&$e%r}vO!s${5 z{z=I?X>Ts528SXGJloqXoEUY?W9NBQjT%gSWF8vgac$WWHf+pHf*za>wHb8&`ibfd=od2fG30onR1q$L@=~L3*_1<%*S^uixFf&5IOl?XCihe~Y>HFb{zNKmbFLI2`_NuH=y<+aqKhbb zO5I4wueDsiW|aAmQJk}EGa?V$@Dq6O^gh$HZi>5?v#0P7~`OR_a(-jiup)-l~Lx%5K$2lFGo^gso z6{@;c#c-|i5_fFwSrDSr!OgNcYuLhH>zPHkmrChd5qiKr(w3dkXaIImYqs3w)wg5C z^bvs~dnfoN3Lz{Q!SNlrY?p2y)M2>PT~4*w*mwh59=13RK2Z<@q!sIoXnSTue&59O z*p)MG7&$yPweQNQiIJ-ZhJmx6K5=+>c;JwD0Ii;euBVx@;hI|L3C23!i_y0CHnC?D zW;U^lnP0PQv&>T|+esNU-=PQzw`S`x4Hqw0jJ0U|DCl1MT8fTr?by8~4!f_B*bQu4 z%w6KRNGpOC0rC}m%O`Nw9o*oh|HIy!1v!#riDAgBs;;W6bNZM*b`CF8cW3u(A`{4~ zGGnJ^8<{|6p(_tGfUN53o*^a>;R!@lAOaN;$gFJjkZUqgw*2Cf;whtOl8G`~9W;GN zCUK>ekz7fXWHQswn(0Hwn)JaB>4Qc}e_GnK>^*l6_lWSwtE+doQlr~|tO&pTz31;e ze}_qjzDJ^g84>zoc zlcoDR{BXL48k3Zj*d@H4PKxz^Oqhxcel;rhvxxO_-INnaoyhqy_o@zakGR%d={Uw* zITlc*J!%tpBBBbx*<=z3dCw7*1~Y`&zB)aZCQuet0W`>H&3v1t^<_3apsqg}QZJfv zEZ<|7<(PatSLD(t0U|ma;k~{Tz2YlgFfxK5Ey|QjuHW}(M;@3_X)Kw3?D<`g^FVa} zi6NjqNn_+bj1Mv@0$B{n28_TU#j;UmLXw6%1dK6A^1d?u7dOo{Vip%$ zB}Bm*BLN3M-g1v}cBJzrN`xD2fHr|448BS837|B@FVG~yf!=!gK$fOINYbud&f`n3 z7v>dt>@tJ_D$gRBy0yN$Q`>8Fy46~(Rc|w!Ys>fSv6HyGya-7lf&Tn3uCTSW`?$OQ zpuYaFyRqBq?lo)GPCd~8Fu;P2#tpocY+$2atGBA1#x61zqHA#D%G7)(S+iB&Y_vPs zx~fq$c(dHODeB4lRnd=XmwY+!t!JU#gDUYL;RNy zv}z)K1!DQaCovIdgx5p^X0`VjrT2@=mF0U-^ST&xbGO9|$u(ec`^X;$v;0y3CSTrszNuV3|S7K5}M1&-I> z3#r}l+fLu>4Cu%0-JQp@*YTfGZ*hKM5eVAU$B#Q*W^)Szja!yPY@z^0J8++U6_x$K zVZ=J28)77Q@ttJK|G_mz?X>ty{!c6ErVx z@et5cyx>B)ymF##t%MGPoEg42da2OMZ=drRTij`WO%8f5fHf?9j7n;5ovr_AcPRl# zh>(AfYgIRiqNBjDyQn?`CnVSD4V|Isy1rFny1?1cpWWGQ))A++YTah5zO`FrX1JC= zIvSZlbflW-v73wA%_p4)yE}V3YkM0T^%g^KSwY1@X~~AHevE=TdANOxp&tBd<$ctPs#2;)z!^KE|HOMJ|9GfBJE}lZ^ zN@Iz<`K2Y2fcAbEYl+awZ~!r;G5-mN2KRO zyeH*q96qJwb-lIU7tDupQU3*A%g67)ccF~0VB|2vPV>tKQtIuGhPd8=VK;E$CDFKy@F~TkK4!Hk%5cCVGHyqN1T`?#|ML1Oz`z z`YDN5eh{G?dl{M&4%>WDBBiY@;W_!-HRiyu2Ug9S5TI(5tu8OzTZQ^pTlHF_ovtj;#|x+!2QF1=JLDXa zOzUO4*9Fc3AOmWAC+0QgxS4T$xQeyOGy22Cn?H=eSvNe^1gYT92RZed)7r0N$Ht~+^obAHB*?FbwOZf2o$Nml7vHv&u zvCqdW4*hLVOM`X!Gl!e3Sz|bAO*A?Ower3n3`uY7xa?jlqUJDdTh7}|S%aRJ+qRQ- zXL7Bw8-*lObH>IFsOX%^FiIS6BFF*rP0e{J^~YH}#D+3QKZog6?y$;p>Nih{D8K=g!JlO&@CDV|7qMJ<(h8KfvS{bdkG z(M3$(3{qrEoF;>;WJZdsEF`74EEI6+ouP8LbH_+l%jZKxIG+Wr!PEKg?^{r~V(^!wu0lK?ET{Dav zE2L&%4b&s$8rZhFwB-3Vb563I(DDyxa5M{fE3%d4kurf76L3I$U$L7=^preT&>;!V zfyvk{@_&DW31aY@5X8W&3_@M~)4Qwy{Kf^Yz@`ukc@2%#v;PY-8~>Fg?>f zg1sgb43?;J4xm^uLqf|0gB`GTt~S)*3h6U~k73sG75R>Jr5Ee;s+h!7a>!e<3~mvk zUkaV4mzK*F1HTR_H&+8WWO{YJTsH7az($@e8+rywJD)_yQlX-uscFPAPQ*u?0fCKD zP|6?*%1sf%!3xV}4igpTnDp>XgFqHBkVgH(T)R2uWFwgDi!0?-WJqtvk+et<|MVd59AvJt{Nc!q9QGomhvEIqIx1r3U;psp zIWTt2k|9uPQ6agv27ztYAuK#M@JlFQjyX_2et8Q9U@SHp0r;z909bX@of0gtj}E?9 zc6Mv^ZhhwwG&n_Hfb)hOn1>RACoswYlau^WGzTYX7nHN+NV?3%N8dzj8T#Ka5h&%< z#@yCGY|WlUiVv(Di1Mcb=gLUW59+sdpl%6JkC#F~yRd;i95@l}`DS3FiY9yp=_WyE zGcY~71d9imk)BbA1JDn$l8J2jIN?OKpOZCmKwK73{#04$)G@PAu7LY}46_;(C=me} z_a($224opbJaW>ofn|?DhShVgX9`pi{KMQ!HPs7r63y=!O9uhPAR;p8bNgoG2Xg@( z`Jof}fpiRI%5^YMflBXaDsfXusWIRWlKOzZ!pZ*c=*hl5w%DvB`*M)+UwnH@!?7DV z!1ltjT#a9!A1%J4LyLc(qea}lz>58VQs&56V!ll?M7=0Wg||YCLFG9h3^W!ZpSJJ2 zHVwkGfm+;K@+5%Ar&PhCnlkN97B`!NPVsyBS7x=7;BC5x<`D~#ltQ)QN_horvl+HA z87_lCTt|N#NMe7$3Uc^jLVXf|`730kc3$qrB!LT2ZY@`=yMSIZG0P+a({Ovz%aDC* z-+uu@kfsz5Un5GvZIvkXHUuC94dLP8;cUX~1Xa2ljaGeQ_ftqN4FeV}sE64}0V9&~ z+kcy<#{;8Ukl+4GUf}oCpn+E*)fkSH9e3;6q6_MyyrCmK+)?SJ98u1Plhv1g--F2&689>9o75wjFiaor7C;`|ef zf;hlsh?5r&OQ&r*#dP701Fz?t=&0+DIPZv8KGXu%)EIks8{|=&-1SGGdNf_EradeH zv?1T6uqi2Fu$tr(1v>BN!ZCJ{ArQiULoxbH(U}E^=mr74;zJ!Kvrw*7;AsV(GLU3b zmvQJS{S%_l!KF?OsL9ub3l$}ig8a4ILwhoDZF3Q3fVTi>OAt$2`w$}Ksjmi=xiCKu zczNeayZsHPe>0o?$q`G3M2 z!myI<0%GO=oGVGHth5>+Za5CXNN)1(0*`$ZB)ki9HT}GBpm|(#VVk z1|(g!>5Jq+i~T3iN6H}C9nd2H+kJyWg$@adtE;Fr5j-(~edn84UVv>5A_&@lE7#I1 z>1LR4ta@Xk)!3|d>fKhS-Ar6NT;30yz8O(@uAJ=K1fdu~mb}RfFy?p@G4fpISI~ex zm*RVb--f&}g#!M@2MwG-f)BmM?-AfPE+F|(xW5K=^(nVNhu^r^MVMHTmw3iYz;9gQ zmB+N#>a6FL`3{8A=4BYitB?2izOYa1x#lz4b4}}6IG|=A7QqN3uqR>^i7oBLXr~p|!?7X`vjFyUZSmP>=a}!dxRCEsiki1fJgqX5jc^ zh&922Nh5Bje3p;jTCAZkpWr&*E0Vh+F8RJ6sOu3ztZAlFwoKO=yNr&SJ^vu*-dV#a zBU8@;(HTjk)6%9T;GyyBkaEr#S}3lp-m4h+6|>Uf?iSuIEiD@Og~)_0vuaCAOYmZ8 zF0w`j$0ObAv7LOa5i_)e2=1eK8tfuc(tqbq1vINjjnT3;Mdeum=J zRb)<}c3@zBbozCb`;CzQd%23ViNa@!^6S@Id%F(~pF7P~W$?+-+M)aLllmjtS@>+V z8T4B_him24<$DXyAJ>}w2FSp#Z#Ftx)wOPGcej(^TVClqk!$uO+j5}*M>}BEH8Eq? zl(Ez}#)wcjx7eEbeOMW_+(qC!lcnHRAYBU9oe2jbipbhAQAG3>Z+9eL%9`gtC5tM$ zGd|JtW7V5FtolRFM6iwpTJ-^ySSUjfIl&N`-zE@n8cA{btZwQ8=tN`!f?=Ei3KDDp z>r#hwj-R)P2=!?l8lQIpAru9;=HSu+qCw6wk-N|v5e@Bb?=;r-+Ofyhm*PFxSyyd{ zj&(%*Xg~u#*x8`RQCi4i0}A{XHLU?S(mPRzoEdoa$hJhx#4bc1n-(fNzI96OCT5C} zlJuun%H?@}$u=$8ERks*w^4nB(tnOU$8?Gkxu$9s0tm;=`(ktyHtHoZEh(JDL-tzo zVAGI@f_c3C@B|nJy2Vin3D@uE60S)Mw<@&ulS`P7=}K*<9qZ&?>HFrPd8C?6gKY&m zrConqUu!oy^>krLuqG9Pg#mI<&W?pBPOyZoU*otI6QK)n2-YP~<1K;AgYwJ;+Y3c> zR{4q@`?ePfzJLcn!rxe4k_H{%Je|Gi{(+=kBY!xgbdIe?f^^~foS$^Pr6XOxD@YeM zE=bpwqUo#cv=c5h35EdqbJK=gHWq|bMZF)?*mvBBg2Q2!%!$DCiHRy4#0eJx+|ht5 zHeymFRUCr(O~wo3>xo1v$zfocpzNAs$pi}Dg_+@FWaO6?jHLzS(rr)W{MmD0?v>|v zA!;_k9IpGO#RLr|4wP5nHgI)Ol`gO+0#=Env(+Xaz}3SLES@3IA|wN#_J@2RcTv_@ zFjkfppid@AXee$829Nl2e~G29f$mkjx(}m}t=51?*ll(0uki9P1Wfz$d9hTo&2WGw z55*Z$1i#cG^90H8R57`dSeck`yyQ#o`mL8BjVg zA@LO@2TnLPUFQp?7D(9|q)8E5z!b|h^gXcn0LrDkXJBql_?={?SZg^1CVwRn;WYS~ z1rGsR$?Qhiaw4DA&|&5|2^v-+(|9K+E(RIOWw2KA3EN4Zg; zFBjDOhOr0yTkG339&G^AHSypCEGOdyb2NISAl;%c&o}1g1`wgl_N_Q(P}*Th6aaZ? z3VNxn2`3|HSB*XQCU-S}%%Z~UK=@O!s=M3O28N1(s%qepOZ%qF5?bDZKK5E$5YtB7 zV?t>N5Vv|x%k_r3F(I_$1lK?GmvXb1$EPH36S$xje43Zw{4wa@+LgSpG zJ_bR;q%_1rx+ID0aX}k6iW@OZrHBDGojQ^h%9Z)}M8X2c@PNkop&k%Crf_)h{I9tJ zYu?qiUa(A(r~jNAcfzkm1cXprSrPD#&VUK-dCV|$!pQVc+P(=-O7Wxf6PjNGLX%G3 z@z({RNpvE}%>#c(<18Ey2v-DlP9_6LR!$mfvUlSM6M6XFHyuzAx|3^ld`Lk(DN9Z! zf#s4(Rs6BXj7o3bA}A(z^0g!Pqr?tPv@BTQ|pzbK}UpO)=EPP5LzSLa#YeWHmD-ZvGtflAz61Tr_Eic64>j@8# zSDfL{u?E2L-mb05Xk;Q39)GU}tGOCGYB7OaIp61zNyNyw$B zCW^7gBKhGIr~?8saHuSKn>QH05za9uOLtd!RlAqupTHy#^j2Eazzca7fWnptwYz=l zIpc7Sb)ag|*^{1@1^bC?0tjLW^pXMqjLKq(ISyI_Kd{TQ3$x|YsLvjS<=Oe!a%%h6 zw0#sM+i+mI&*%~VF;*b_(X&H8U`A@}<@x!$@96}|w=S`;T5J&nU)R9dGJ9XJWfaCr zV6>a?-C>F9LFa}xMd|d9DL#;Ol1fs~qE2ZwYkCHZ?;!F3Da)eVjTX#OWI7%d`JMQj z;XKx;+gO}t#a=&^T9y#yjDv(8JjxB{O+ZQ1uD9R-l%kt_C+MK=T^ve+RaS;ccnkp?S^l zBT+{3%Cx~sh{F$7gN-S}I?*gjr2QP~dDohD7;`ef|mQ*dnWC1k9 za2mfkCv1=$Z{HoiuzL%dz#`(DWlpG|r?NWByK^{@&%Jh6pgCk6*jE*ek{+bj7Lg=He5O~* zE6YHAmXFaRB(HKruMD6#=9LHs4~a9f9Djuv^7%Ko+6mx6wE1(nXmg>EFcT4Rk*`(v zI=ei!KQwpwscAiG7q6iz+WAne3BI`$66Ue4dg~N8`JYD>8+3LLH4_ss(z(Jk_W0PGo}0JbPd ze2m3sz$iHIJ$!w>U( z9LGN@u&HQ{GQ11dRB`4dMo&ZrAr`sI&Tqhh*yNy|$_X70Ty7H8|?$N&EshB0qwU0^oBW$@c60Ty- zElnZ*O@7qDuLiI5R$1TE0t_E6(ktBPL#zPOoX>B>Ch~N_R}lnRXAK%mBUqo_{TuE zynWN4M)7NCg72IN2MORrZ2r%ViHNJJo4$jlEgwM^Q)d=^l>mvaR%_dho$YF43tGO! z-YP1`Yt{hVF^9A=k4jQj9;8iK{zxg`9v-n^iP#e6QNq8(?X9%RU?qOj8kj*yqx<7% ze`VNPd>=?X4Ia?|lHJ~40c{M7GZR&o4OP`7vL{gZ=Ju2JCtI-qjw8i!Eh!_tkriJ?l{&;MI6dpxzX#Cv3x5aY-sK6kr>G$#@M-da*8w z55V`u+{P3>$D9nX*--wwsq$%&fla)`AA@ogYTb-Q6I`jdgKMkef8B>laLqc z#Il7uuSs5<0qY905D^wXtA)FT!qth1!Y{899S`*%@QYWRl%Vzx0SB2{4x=r+pD=<0L5FisQnUegIVkIb z?k)&th}ox}1+oxm?J&Zc=g>5_g}tWEh*LTktAxT(h=A%=OuaeR?>k9*Iku)Mccxiy ze61n6NyIhyvf*7Df5(jAaAH7R67K}&@_GVG6J-*33Ym2zHev%Gn6u zu0Q+cuu~qHcyj;UALd=-eo#0*4DbM>P~HUI|<6r_N3iY&zmct zYM|Z_D{IcgNxKJ@!s2q0yx6X8ghyYD{Uv|6`?zC1epo$v)M@uaclpt3_ynT}@@534 z@m|%tzeKO8LvGUUsd4OCsBt(9udi3vAJn_GR^t&f^?cWM!jTzS0~*XQmS86IhNCDj zNA^s36uN%j>#M2nk~f-gxh!rGPu0`|Wg!wXfR@Dd_o-U4m6lGmq;ScuuIH(GQ8#XK z8Cj&M+L}B0pmP!Fa!?X}H^7e^9UOZ6QZ{szrfBgJRIv zSO(dyY1@ne-P+ykHk#c>)z+y;4Ec3Md+|Qqgv4x(o#tK#+CstLRD)B|_u~B0@-|X} z?fUj^>q&R3vE4X59B(P(x=@*4ftGIXHW^jfu5ZW5CQmgmJv0i1;i;O~RR%Q0lhDmE z!OYj%W_NHj{LA_c#0}WMIE=fbV?Z%nNXkVE& z*;#MXt)&fT&9BanK7H7!99f$mKeFm;kIIkg&zqRkU1Lvjs`XX#s^nRloT?#p{_;G! z*{-+SjoqEIo=B>V4KopXwcV)I*Q>3rq=B&K3hh&I>OzHK!L7X}Bo)Jyhwa8^r$=}d zr%ts2w;olu9@d{EP9U}pU_v5reUilxzS`b~{DgZfZS19R7>#VzeCEc!?|;-EnvM(3 zHvpEbhJbWdL$%Sl32n@3stB-SRa6t83q2Dd{ss<4Jvmuf)!OXB(h8=LWy27*Ladz1 zwD9?{Cfl8AtJB$H8V;PJde6X%UcufIrBuBMFZHS@#gbyK*I5!<%|Q2kU#^!pd09Di zg&9zNM*tO^Wt~>FiRbCnm_t%W!qd;iHJ-G$b~kr60SK=MMoOw3CeVl(6atILT0@Li zP{=S{+YE`jh#zoXjQu-S8)%%?Hn_gvBb~nBa^c}HAOw!_uM0LL_<<41@!sY2{7#)c{fEzrqwn4_+>U*xbwE08yjP6 zY6UZ6)C)X2v$psrt;#EGvS8qst*mrw1?Cq=L-WPl5a|PUi+}0w8&2w0Vy@o9>7@EG zBA@@d;*L&x^?SFOS($(!p}+z|e~}9UoWq+BnseJn?N7E!EQ%BN^j3T>^-=IdyD1gb zNv@jud-vSTO%h{J_K!6-ziPzB(P(ru$BFp{pdQzEq?Ki2H50FyzD)Z{9G%9AV(JuV zOdw$!Hq9?xbCD1W#jE`CP#@dXtXGQi7$@>QQxFjtPc{8~#A?NVV6m*a4Q`Q?FuaYT!9f7z28Vo=Nm|2oSYm(LHE5?|3X6w2l64?u`*&sf<04D5_;LOv{ zJ6j5aoqh@8O8Ob2iu=Bw7=^H*B|TGsBaQ^b7XwO5*=7opA#n|5&I$>biT}u3qi?AM zk!bxbl}KvcIfVX7sRSWXdm%Kq1_VRq2q3KGg^(#r3#;$UjZTuz2q6+Do8d3MMWob` z`t5Pcu7s7FlT$IVzw+aj#3&;4FsDQiargBthT#1L-~VqJQibuk*hB97|svp_l8oO}8(6z}P5Ugb~}b8=;X=hr6{b^4?OZc#3~6&j`3@NsuU zJn*N+mbFvJ7rh@Rc8ag`1AE#XxMz zq7&dt{iW;-pa};jM3KL8CC}#T6||TY7p^~yO$~)JC684#H|oOy2dBy_%}p@JgDxiR zo_gnZeVf{j$&%3EU1>U)!KB^$sdBwrDV3;a`L^Tr?@#Y_HddzLhRrHrXt9XipI#Ra zAeB1&6Z(HWb_{LoG&;4lZnd?Em!^|;PqjSHj7A?OVbboYH=UVU*$@e-8rPIiq%gjz z_1&F~#%8zHz$&a_L+@?)G#N!@gv1tlp41dNF>Za*qSdo|ZH&2^Zs``NH-C&++;+VAz7$ zJX8Nr*ap77=ck(Q>ZoSvBD;b@eB~n$v{Qw0prAwFrhyD!MIxV5Q0Al7d4$w+=pQ%~ zk7P4Ank9`0s;WMuJxWXn>h78r=J-bP+x9&(2xdsj1nM(Gb`NL}QX0&VJ#U1rZUMIb zG5D>(3v4-LesUq{JgTkX`_6W44I3QN$OKHDk%e{}wRJ4CTOCIOGCy0!lIA!XP%m;U zo)g8hWtC>&AG)UKn|aiw*&oH{F0rZV@*U@WC#>(SfZ8w)(+!37uo4=bhfY~aJ%2ypi zI+%SLayKyckE?}WlD8(*9sQOt*hCNpp#0ZWN{T$m>7p1+V5(o~Dg?&$LpoGK3ths0 zCY^-5*IC3L_|>rIdUJ^%%45r;ehAI7u9UQ4th4hUHt*>Uo4?3ebexDdWvcvKIVSh@ zGtWPCApkKyZ!n@e&}q+)z&;5h=#N}8f>dGhtO2JU%;anxLD;6y!kk;k(qnBu=$jso zd7WYM$05aGrovpG?A~M3p>M!ff+}NM3EumJO+YM63%YFK0C6*PjCFtnH3l6lnIbAn z^9yAIzYb{+81di!7i9wgdl=Xu+Dznz7@aJr5yGymKdA0(*0<~2h4QuS#!h25>%DPl z=y;B=8b@9MXC=6Q25$D2QVq^6HX5iRIogRcB)k292PA-BiJ9ie5t8+fc!3WS1rBMC zCI0*KoPC@qykB643_)&|MR^Q;mzKcNoQ5GO8mr}UrKnnjaX-(Ks}%0MCZg`*WZAcz z{P`)s`#K8nKMD!}3o9tV1IPo)6a8WAES?yUyCd>5mU-btPS52TwyHz(3*RH{g_QI5 z(D9PNQ+YdjMoYkep@2~mb780n%+)Ly$5x)`;dJ|@!_HMOc)>4o#0;3=j9!HVIIzd4 zZPKED>SWibz*6vS#52bRiTYl0f9j$@zd4RwDA9lPb@x$19TI>)KBc-#=E)lR;q$Q* zMLuFmEES@$tdJXTDy3XsijEgtpQo%BDLy~H%+6N$jWPJ*@Oc!02{a@D1=NLjdkGYt zIuuG%p0r+{E<%ZCM=jSGg|rk8Uy=H*#t+YriPJhv{4+d(P29e~#yT4f*%pgQwm<1~ z$dHDi*{7rz_|IrMUP9bRS^!ZZgyCCH6qDDPaKF~=;{h%TOR+zv+0Wg-WBA~WdI$RN{7YpfOd zU=|**DtTz8be!&rtz{;Vuj_;n^=N<##h1r)UH`CadcJowge;^G28h4nKXEM}I{euP z!jxFP3+AEfiV}T$z*@X_Dp&%vmtc;l|BrJ~{~|`Q6l%OUg3)_BD?8o#&c<$Qz20rt zJDtYPX1lx5*s6D%_11O+y-iSgcEMZm)QG%s6R$xNt-YO{daK>7?^M^e>Uf_76;$P) zbWZyY)WAeG_3rxa?!yN9kwAIXz4R6awx08Ro6gO8E9mBV3u*$F(cReH;_gIHPh~YE zS%WayvVM}RCB=c+?=pe}zcI;@JOyYCvs$b-Ip)DU9e>VS@z^))3k>S~gy#bt;rV^e z0(dKNc$UY0@N6Hl-pdH*B=UV1Ie5$WJkZxelC05)aqfbeq)vV|14Y*&+tVNZdP`?- zB^f^@XMGSa(%kj(y;Wmr`QA!=Qfp4)Q^Bed>xf{D6liANE8t|16wGiG&cLf``k6x+ zlfZ{)y?XBb5+H?0{@=fyr>mbUKnz%cZQ&Lf1vEKvRtBp>#R$tpgmoi>d4YYHcf%Zoja|jZo;@u2O zJR%$eH9fF!r5JuF|v`LjgzeDlgdH z>VgL!oZ3opHT@G7|BfvFu>K@fI>I4O8v32dXDSzc%#>;;TRYeSb#1E=3al5zcwMG^7D9UcAize6L)^@$qYOE*tCO%9R zJ{VNL&J66iaapxfU8}a$4OhuP5}|LaHH8N&@292!tQ^?8YK_JYXV%&e8%;E7e^hTZ zHZVp3Z$Uv#VUSPrX6Z1&nlUhN}Z@$j$;ES&3EmfZiOrD% z>C;8NRm?xl(W3-@S7XnKjs(60)TL&~BFKEFRo|*t+jZuREYjccQBkF|TXrpT zZ37XsU0-k2J3s^#1XZ_KPW~o>e0#51Z>3J1#33GhTCCqccI(Y;#RuVW~1BLeOSj-eSDf=5hOt7Hj9a8`$N<5gveGPk?XrmVP#rk`1fHQ(+cW^@0KSbhHJSf^{47l!-)S`OHc zj`PC&I$acE>D=*?&e(u9%oY2eoNcNr;KP4@U-Q#U^;}&XKUGCc(5IOcQab1^P}WOR zYK6|6U!(D%PNVUkOfef8*00c`hQ2$FAl(~WLxSmyEAo8XzBPs`O!zmqso@^o8HEPU z#5H^AYsiyaxRH2jvh519h8)dn{JL@$6OohTSgw6Yn2qqYLglD@180+wdiVbsQ;}1< zc;l*^%E9~mqy_uX=%!K<`gz@4ajx8?1~lx#!yV=P9NOXE0klxSUuiugoV?sA%?6t35FYXjib!I6qI;51L2jOW|X} zi?AG>oWu%5}~%=wqSkU9)LHdaJ%afY~_;E&O(d44HTmT4Od5^ExoZxt0osx^4U z)d{ILTytQMWKTjtkXj!$Hm(g&^{YgA)!Aw%U!}zSgmPCa(HjIsem*-XsvAVZzNyC8 zDM>v!3{}b$;-hd65?Pg)+|FFi)9IYl`fPhZP zoMLi}$4yR5E0rMXEEAGbIVpr&V&ycGNJ*OpCf|hA$LA7Zd2dpzG|1PLQ$>@YaEZmT zzrwqmrE{^V$V)StjaNB;n42;6#@BSa zP(}Q!9(@s6u0O`W@acP;t9Flvvi)XVFA^%kaQ)%((csy~gYCzS2M_mFHkU(Zerao| z`DF0P)5UoVzN^2&k;6^sI}=mPUgOAGXI8E0E?<}csan%XHOgB%^-nwNTf2L;E=IME zQBV=2)S=6oucvFKR8Fc^af&BFX*4nE$=kAOr?uDa)N5Uqksa^uxr#}(;Y(^U<$|TO z!>U#+Sw*k-OlZYUqSB}pVK2Mng1VYX>vRzrPWi6`AV_|4h`qmSNuq)ulS2R zn`zvmP+7F8yI+DUL~17touzH{;lQy5@D380hRnK}CxHv8H4Z4*AA9Ir8KT|;B1@8R zU_uzX8FalgdwyU>&H=@IaWiO$J@f;bHsuhcK4pK6p(>f55~xu0W*w^bLvfhNCR2FH zzA`7B2K;bNDMI*}mVPO8A*t8jszdT4X#QzZhcG&yqY8TsX6(=k!fWPJ?tZO;=yu4QwbAlK6%9WOgu04GPyun z(ordwlM2KfU{!Y(8_Kay2Aki_m$WoY#KZ+bcpRS+9)<6B>LT?9*xz;oYIk8hlXsAx zazlUk)mY8y^U>c?0n(-cwb4Yk6i_wR%Vp>`pkE`<%Zv^ve-HyDwl1J@%Rl5`8TkFc z91h`z39g^$0rjGi9XJQn11nmWJ3D9Yn^=1(D}Kd_Rv6v_xsn zsapeDg6D#0US%pFwd55VSy+a_s1UsVi(>*3L52gkB%df;Vylo3n|*h5yT4^hXD1VGaR{;Jm_?qq`B9D z`oPK%h^bD)C{?TkWP)x^_8`cESNBeo1=(CH8Ae#2!#FYTpjc@pHhjfUsP%ba2 zyj=z@QsBniKPC8Kn{ZVWgBjOB!e#)m{#W3yU-eeRpob{8drFiObpF^J(PxWw^ylAU z-V^YvIR|nicwMX`?~7iaM(hZ~KhKX<;L363pMUk$S8wvHh*t{*@&^K|uyKJ`JNPda z>uAiv8Hx1AJjjvwC!Py{I*tb}(=6~sA5RCzBiAPeajS> zLv;H4x#)BOIc;I8cSU4#gp=Z}-DZ8~aeb}zsYdmC)gMvskoJNXYFs`=`CMGsiBDRM!0{KjzyZG+ycWl2 zp&-spSc4DbY5DXSjUpPjvbWOy*mV`rLk{=+h(4!7^#7P6dOS~o>!vv24rz~Pg$Vuq z=+F!(vFX0!QJVy&?f4|17Ih9XE}M#hYj%FhIf#uMr)Cp?lfbrkya|Lm?UL%yZ>4+> zf}z}7IL@<52YUQcke`L=5>mjA=fP}}6oAaV*OQ`r0u~Xq=g+=FNx(<+{b#S_N#R!$ zIV_ps_dC_Ct=-4nYNu0Of3RKO>2zzmk9Q!`6}vtenL%Xt58UUfj^>iYcy~jtaV$|0^^U*c6ZcHR15vfO*4o}wKZIs#!kCa-C3_o zGv(}pvyHkA_92_C>Z59hWe4OXC9%6ufT;tqdjnTX=!)jXBiA==#T1u60AdWq-$@o9 zjeD+Rv1{a*MqX!6yLfgBqWXHWA|`+B#Z@NlUQ!_W*K==zCJO6XKhwJk`uC#1_Z%yn zgB2>-y^2Ci`C6Qxl2&w-bctt*W?Lf2DBnKDGf7e!JD>6pF~BcDMVSuT_ox?zz-HON zGEoRAiBlq$6If#>BVj1?mUk+Cc?Kwj=AIm6hTU-d*cwplnUpZVU!C2%2x9gV_5OpV zB89P~$fMACTZHs6E!6N;%~3!LI~$hO_$;)66Jt)A41R*}r%5u9w98PC-XK&^fALsg zwLub?&)ZE%Y~rt1RHeS4#`1tHM7 zwik9;*aFAvZ~Hb=AdZ}Y?@~44XoAuGfv62J4KQU<*Bm)rfjw++*o36aQssRO#cK9G zCY0R!0*K{>!rLrR$knCELgDI?`99bx9w> zd*CHJ3E}=ebo#*jTQuO>G&*&cv9u*pTwGi*78h}-viUs^R8iE6NHn0NMZ@3=YO|Eip%$m<$EyEyjESuQ5z z`30jgzaab2Ty)+gZ3y8UpMIc2G%X8aWWmfJ+JoaoG}t#S3L(!U64D6WFhIqKs~OM` zcE<4_Mycu9{!q5oqreB4AzNWSw&N*?L8b*U5y4>Yl7?8@8pKu)rXf5k1BjpZ0>|#t zp9|oR#|Oi=y^sfHfnk8-2nh%N*tH>|YDgoP?X>B-q9ZY~3}rMD#qN@t6Pi7jhQy0T z!~z^8;gM%Ch!xyHXvvp4MHcxjp48XYsBxtVjgVhdt9e728$B#v~gTv)m|dgLf=9oi{m!yGUv_! zkGi+=NS1OG;5qgCxzXt+3L`}l+V1s`00qTlG)7>s!?ZX1BfwP07<~@})+9|D8X}G@|e;Pp>#e z9fY~bdgr~R)2qQKVGVJ(=RbTF;PCn5ls5FQ@=#XLhd6qgE`1@mcN!8fSMq0g1bAH5 zfgkz&{s6$u_e_`RGI{7?hXYy|1=JiO0l|$5hh`9w&ZBUKzXD|J`7e0!q2B|OC!1on zgY-eic3nB-nD$gTvkqzRn^va6C{9qN>f_=-#l+c}x6z3HDW-CIVSce(HrRK*0u>j; zNSQqgOy-)?94SNMg+X2_)=dfTJeWKu)odMj`c{)k4)jGt0}rShM$`h<`Ct7P0}f-% zL)x`Glc!X=RDis`LMJSBy64q6l(?tXx9ipOJZ<>u2Rgx-HF}G1@0$m@U zaLn~z=MT`j0Murnig_(AF8nH=OXJ$hb}u$Xn2c>>{vo^Oz4G_2r3mg_9&+&V6-JTa z7br3c4VOI{LHsO;9D1RkPgt#p27IjI*Qm_TV(dk+8=G3P{=QV-upOH7_Fqco=&GB}LX>yN%oG;e+Bj8#% zwb05qOwE&(W5miMDa_da9Jf6>(mY>YS~B1ZB^9wqKxG-hReTOZ%p7EpX+8oaW+8lJ zm_uZ`aQ*^J5=Be0rO+DCp*cJ1htFfyHK(O)(J=By-F{$Nv^%1Kg=ap)S|%Tq_<+${n88;# zdo;|21u;J~LJu7uq#?99Re0=60K;uIP{?hv$_|Y-T>o&c(cEZ!%8Tc;&&S#Y2seY z#p=SGBTzkbA=?X{g{yp2@G7AD0SyPZdrIzZTs{YadLJ32B3wL`r`^CGd$zy7Z;;_Y zX%D+HKqC}&4_3SH4c~i`e%ob7jKM6X_yMLKJ5z)tPpll&SZ~#HSI7uM@@hka`I%%5Jz^ZiJKvgbhMg{ESD=K{GXJ| z2L7MeRMz--WSb|nt&Y6eYHU|qPsqdi6Y>F2#Teyg1S+vVY|w`yapZ7}zxb5F-wcPU znHX01U!n}7jIbr3P*NA-Lyqwu{s#Yp{~SYF7!;^9#TyT^P@zuMrpz52jw~c6^W_iK z_lc$O#>2c(K>&nS2X=c`48t1_XVmsTgy=GR^){c!2jv+u?Tn^BoFN}n;7@DF{xJ{# z=<|Op%#i7RpS@Vb3e>Yq_V1+`G95=nI7Bx zA5dyIeu0CShc^Mf5ks8EnxS8cMvGWx0R|18?=JL9K3IS{Hg9bKOWUKMWDO(M!6MFV zbg-<9auMbP&q@Jk(XpLHHn)T2(tcp}*&~=u5FYS`prd}kN-wdcJ6JAR!O=)vfhEyj z3DTNjJ4>)kOfSj)jjQB_tlcG80US)c{!2IwXx;O@7i#Ovalig33bC~nd=&a6zLP63 zxdX?e{55Wa(+^m0E6}tbj`o%1ScMkCQQ$BiB}Ay+aUPNNpFW)`P~*W(totTh*NoY1g;v>zx^nKQm;n zS*v#HGo)7Es(0$pp31Kfz%CT4MPsLJg^`9tbwv(}g!F_GQw~pKj+{q=PZL=I;8unU zUaS^;N?b82gl8f7@I^#k=V(L?A&!(p!RM|b1uCW4C7uD3cpHL z3BDRW;_4{HM#D$LUBibtGk+ZV9B;ImAZf*c@(B4v|=#ChBviKUP4 zc9+PCsOC9QK4yX{bP`V{M`+CfyniVMg`(+seuTGuVbM@t5K;u|kD@_7j|;;`R%M@J zZ|t~H!z&u3B9K~qiV~PpZS%UYIz@vN`HYL{1_&vR9UDrNN@SDi#7U`?++{+3k*-&y z9!Nn&CZ1;A4jeo89T?uP`>r2AuR*_O!l^nBv~C{ge&xf=Ad8?9h0;~Il;nLOQWrjs+J1BT%W>?&I0NS5WGiXO<5N-QjG$H6)v>0heg-%o&ivN{xi9P#gXYz7oWz1O9RF6+a50f-*i2#%C4JOWkK2m$fuT1 z4i!GdeTTaCy6^2feGLc}IVz<=pM$5x;UEq3*fJ0v*!5@tGPUp8v7L(iq(+1FtZ^9m zL(O3Dt?4>_z@;Mi2xb<6H9%c=7d74bVPhcyW!Q|eQ{tl;86ic-3rExfq!-jO`O(xW z4$aZX@%m{%5g&DZlJrG<;*~Ue7&|Gu_wXr(5gn!BPJVP-gw@0z7W)CEo_0mC+=1zi zVLwISvgAiIarm6vYe4Oj`-~&HB|j=D5Fber#3x-UGt{DgK!X6niy$s1fFV`5*bf}L z>FeOC2$W=DK8aq06c39AnP1F2evu?D>{C3-EO2@NX(9xlB0n)T@KXe2ctD;00D!g_ z4l|2g-1q&60yWQWRuOGSTK*w4jS!!nhoB%(pqOc!5ZK?bh0UwQV{V`F64Ro@qWRT-jmt?NVvhh=1ax68iFQ7fUQn_7g8wl1TsQ zSu)Msw6w6;5B%|H4bHZ+o(kaD7er7qj~ptee;7faIz5rq9^dQ}lW8$b&Af<~`s-)w zIztBz`=u;*pI)-$zf;W>BPT+&La~i@JEZgzQlns4jT)2`oW!$WEQT@%*@@CYaTHK+ zMHFnHWH^fK!c?+wi>jC&nHk}$7||i5Z-=!{?$ariI_U9?ckK#ygVX53kSu$adXVW4+&`<~YDJn#=)Ge9r;E8-vL_cU12*^~Y~ z;c3A85|*S*{%__-?07bPK?B0Vlm=j__Tq@3;+gm!`tpqY(bzQuVg>;L1JSvFnpX5Q z#C-&r%X$W0A>c35N9QgyM#XqY2WH?v*5>A;7AC}G{!sbo?Lyr>;(5 z0yHwenLQR4roo07&XNW=JMmsZ5>j*M(lB(7SdVSrGlO7;v`ia+w;c8hE)*?_4~f6O zPvO|a7)&mWD4#fbl==H?)O<}s)~x4)(*+D)j07B*#v=^RxnOOJYuZ z3#Z>OoC5KTi4T&^|LGVd!}mm3~}tMm6;)wQ)oXZsV8 z47A(a+S_dGusrA3v#2he7YYUNM7~sj40IEP!WBr#J;{G#dVA3vJ|BtjoGbTP3HXgm zfX|m`;&UD@5q{$W7l+TI=nn7XKPs{&;5ROD2}*>*kKs3XFYp@|xeP^0havbeOkkq- ztoOhVrT2iCt+A*?gifr(`N{vXj{N_JocxQ91^M3{QI8w6li}EnoD$x)TRymyg`wF; zAF;rHM!8o(b^DVh($MWsIvqi_Q#4L=lBRLK2MWVnx9C2Ew=?iN;rc9^OHiH@)>21& zmX`0$Lx%Ht1AvC}A|+D6N9-GX*ciWAg4m7=5ZiIVfW3_$ufP-hLa2zJLjz0L%o4sS zaa&Q1-TkrHzzsOXq|@kx{pDMvi)sS2cr=+np`?B-jPOE=HT=lPi`{bqa0xdH!N zbk&uy&u8Sb=aKTSL)z=Ylb_8Zhq&=_pfiD2NZIb>h89y9!pWEFkou2)z$gp+#$-b} zq@E!}Ux3UD%<2{P=lN;HJsqw1T^_lMH7+OxwBQU??{31qd<$N0O zS!+%tSUIp(NjsIY4rbBAHRD|ppY;i)1B+cm`Z_j0P!gH1K*2E5Zx6*5VxppI}teyoG79m1XyT| z!}OV_1WDrK^@BeDQ-N)s+S5WUR`Qg?ktCq%xRuet)k>wDN~@Pc$N_F<&N5jBA2>pU zkKZ{J0i7tk!~IE9A+0r$4nN|s1HY0ynj?pCR3B?$M~TY?Gj%Nd;Zdm+5W2zM@)zfa zq*Vl8Iy0Y^UkGDi+Jps*S6QT)*c5py2Wu{F@k+-$N04AcbAs<8*Uff6`fj;Nhr zWa1h*3=ChYcju4ZEib+MtUvy2W36_yb8r307md%tqt)JUyz4w@JZ#ZbXLinY1? z$$Im%r`vYrMQ?kN(!Rq9^-F*SK*S_8BR>A)8+jV8n*}w~)m8K_vc^4($B}kYzZSo> zdk`Q)c+)3qW!=@)daFvkE7rjD`gDk$=^fV9s&GDtE-#_C8pw`sw08G)YU_JzEInmy zt=oChM49nMJlvt_xDe}J)K**7w*gr=*jj?a6)Xs}p@tB+xU{$ca;IhhBI8wZ0Fc~S z3?R8;*(nG||6~ggd{DHISi83~Yao1CvvWAhFho-N^5za?#S^lL_-o-H?(alAtS{2*pkR*ZpNMBoAWaT zhK?z?dWG|sg1iWZ;Bg%ExUpSr5}ap(58!Fl<7i)L-HK>16`Uc-SZdFF2!6%-v&)Ynb<~_FB0o^5*%Z7jb^Ask|czmcK21^ZA}>&2IS~IoNPD( zSpG~AjQ0@FB)^<~JG4#0Idfu@aGu=f$4y?ZJT@xMSAV#iP!s3By2`>zWXGzIeBOTg zoXBZEruFw1mzfK{O-IzT!>;c!V1dr!Rpnch;gk;#50g|IyUXKZRj6d-4U1>MQXs2J z0o6LBc3Z}BFPeb0^tqu+oH z6d%a?j;ge|MECHCf}<|@HHGBeap2(B9GSz$pqbx%*9`ih+Rrbv4gXp4Qz-s!ru}_0 zjI2J39VGeJd=FegVps%9)RS;Gv`xfkNId za?Kbf3u*}a4|rnYX5dHu&y2Y_nW)$hulykT*&Oh!x7+n<>(iahE{2ZYYi&WtJb9~{ zsQGQg!jPK53$H)NgO8#=AGGp@Xr*26bQ(LG?QXN$d7v~U8Qu#8xN8IMHKi1~c3`^C z=n=Y6ia2D~)m~!`_9h=jiD5THwTJdz#RH$^5aK1`D%V97&=N52SKJ!@&EvF|lZC&{ z8O({oOo5M(lZjF(G!H0QD3b~)fhO6d2h=5pW&nYGL`IIuLgCKL*(w(9DA!x8D*rK7 z6h@e(zy^6Qd)KHmAomRSPEm_}?Hs+op<{i2hwH<5zk=~ab)$7u3MhI$VOHINX*~mT zF*2l)3FWN;!ILb_^(s2A)O1vZ7dDV&WU1|N^MlN(s9#uqPz{HsXB*@!`-U|$haqnv zr2@-4uEf!jbC9Rz&bJafP95bd<(1WBf;eVWG^J7v%UPN*&imnmx5$ZFlM|L9J!m z?<;Lztdz@T7|6xuW&`y^Czjhwmy=X`vH-bPfXZIxu}ovqdOIE*-@kYD^!=tRCyB5K z82`792^g;r>iDki&Modjp>lHC=a=z+tRr+Ag3yVr6{M~W51L>(;e^B_Hg(4@C~?h* zde#vcQZpO}%*G6|b)X@eWqRTT1XJ+?iWjK16OLT-NYtGXf53|luxR z>xW_5!lr5eer*RpIE(4Hy3M`TW}=E3W>{9a3fX09^|ifC zwRv?8Qz9XckIA9bOj%-jkCf3YKt$Q)MdR7}+WfD(!}Va?@i%vtR;=d-AN#|5PZyq1 zd;il$;5~mhS{)wj&2L-xVaC|*!#XC_678y|;w9>p_S#T#3WmJ3yI$Q&%ug+RVXw0e zMXy6qk?%&GpbAOTr#wRAQF0MSj8a{!%j0N&W!PK9an{zl5LBvN$9p1C9L#hC5WmWc zcgLOs-mhKD!C^zq-L0)^r?HC{B%^@qt_S9eYfN$doW1aXfh-l@Z#>|?y{tBvjIX1%-BSX0NK-XcwzQDj;J zP>Mj?-`%b@wlG;-x4ykruXVTUod>&&3i4G^?^o zwtFZVh`fF>Xgvq`xTKP*Y9f{)s<|@6WC2hmt0j3$UO{p`z^GJa7iaMXQ=IX71&d$z*xe#u6d`p$;!nrt+|MjE7e5(mm^XCw&@?((7%(E*e|Y$iDiif_~Krd?OwPHJ7%rx~?T zxpIOqc9)dS@WHMLxl3C0PxczEdd+|wg^hK{i%5jhC@yq{hDFQ3BR;G@0l&nvv#w%S zp^?4T8KgwDVtwZkhWE3_7D(fKGSDP)=E+bqcOkux8Bzi+p*;H;WXR&v0CnM*lHL)q zOxFbs!p|9rLJu_`>Ww{8Dg{IIKpPE4#0(-QG(GZ+9vN|yr4mH0`S~na_eV!O5fgO7 znumN$$}k0sZIJ1`&bqjOgAp-49kNiC_QWnJCk(iGm&IMv*M^I|CZzkV*9cq^k#=Xd zRo$$=6d1`l<_x@aV=75P^hX&l!_T~zHdi4Zzm(~5#v9`eafV#LC+Cn2QUs=1dAc4; z90n0o2R^km&i)z%xMvO}iojtc$Ol#s%!%feq_8IuSl*LHOgByx@Z~5Om!BECkbS`W zWgG?|7YQ&=3pyVBb^yc!&0TC3U;Sqtux&cF$kB#?a@5-|er=vdFbPS3HJ zZIC`oDv@EkgxVJFkig?a@I!D-^u6P_XjLvk4QcaKZZa~kz*X!s^xYtqWHhc2Z{B5| zV(=?nA>!193tCa;4Jpb%`-&8D5&nIC5#%R25#)Q^MGTr&<&P2zs7xs2Djfw*NK0^u zW(^1gNr6ysX-UL)gIRNAS_3-k2kMmstCzfZfQcb+WP}WS1ve~V_L2c|)2@QkCVU-I zo}D%W7V=^dX9cGr7*)bOFb7C*L~w)BD4K(10D1uz>dXvU^i`X zI!tsaBmuSjz@`C-Ovm*hHUqeG9p|6;4Lcq3Wr>{*M`oWIL}XZHZ)c-ymd!KB;;fMb zmS}J0*ct+mr$oT%l~phufUmFboVfKecL#8VLl$DozkDienZN)7pmw@8=g}AA5LHaa z(cgcK8wCBOgezK1fAvWURf8MfGa)K4>uy0I#h2Is3WbTO!Y?OCp-{L{_~pc%LSdp< zC``OtC=}i+6bd&Bg^5dr!j-SS`s%AIg~HXs-9q8njS3lCB#s8(C1$0}&P6T>{ zj@Ngo&AX(eE;UkTl6V z!IAjii%s(83MG^9gh-^cPel83;fPZE8I7#LcmyVA(CMrd9;jA%b7!twP}RPs7x`W| zj1qmpN?lKMer{y1>X7}n1+pviOC2MMtz6%XoNz>)#1I8#XpKEMFdg4^Eaq+k`KGX8 z0(=y=Lz#($G7SVyE(FTp` z+3p%*?|I1t212>%mGTOhw=-K4AtMSFkDL)05Cxkrdkr(-gJ|~8a&6Bh@lHkD&nPBe zu_@P)XGH_YJJB>ulvD3(PKt*HVRhhOotgt9?z#4nXT^wp3F8+4T3?JUZT|sbf(`s8 zSWURff)GFdbdME)-?+d{7+Wc_Ml3W9+$-wJVmjelSoZnYu~=ca5{JTfTdZODg@&>4 z>$VeG5VHNK)C+vmw#+c%0esG4awb+zIp?p&56_SOYk>ageDTkP$(iU>AT!*kINlhd ztKrEA1qK0RsbpRSqrmS6<`8Yonvwq4)?XmSO(u?IE#E38t_pja%b^k)jonvl#!6^4CZA*uV4)UZznqGcL>!J7 z!tq6dxRl7s!pfq7UupoM`FZec$M3nw8W}Kl3CD2&!Wa8@5WT9|%DJBpXY%k2ddgWrFfUj6&3UJ!a-YhHE!x6Ox5aD$^gb{M*0hsiZ zd~<#>v99A1Ugu;&b|C0PCmsx`?X*c7Pi_>Rz2pV*I2!nY1Nn*$C^18FNL?3x18R+f z5FSE(?gO=MBZl!tDNX4ZMG^0kK%*v zg>#C4z=1h8n3$f>$Tt7q_P#wxj^n(q_W;}r4-$NUr1;tcA%b+Uw~xC64ktq5;YFN? z13(;Jl%kwwcYF5+H#;+&nZ3i&a?F^Lqu7#d$tl~Bts-s7k}O%aN{kdzb}5pgM~PDD zQIb`XT#g;*ALUUM{~_5<*~X=QUq7bjv4_KfOj3ytsF~UBue-ng`uo1_{<{0?grfyHYY(9+*)pW%Pzb-hh_9& z@am}tC4(yNS|gj}bmUoSBEvhOH-rYrKZ2gyeMN!gh8;V^jlne5GXplR1dis76+R=U z3T6>X4H%BOj*t(UR3C4qspFhwVv`7O+SaRWDl;*N4QA$S!h}djbKbbY1SWCINRncW zsT>B<0-7^MNDT${9;_U!PSJzRXB+QycV-$X!!aZw|6`qt5bD_7Hdsx{ew}Vo*P@ZL z4)K0z2YX+>9Sm+lvK`;u?S)1FcU~c;mff&3ex=;?L)Y@BCV+px__1+bKbFVqza)8G zWUjb;x)|Ef0L5i%k;8v6u62fvhWB3O&WoHc%`I^!;*Z&Cdj@w#^CSe`uP_oU`}U8ceM+-a3yn&eHx9z!RNQp#Q+I0}?UeI6N1Y}j$GV+q2j zaDtQLQC2RsYNgPz#oB&WIcuKASC(lXC_Zw+3!@^=HNSr9kt51hD*^}}CZMrOr8YH& zJ#K2A)=MnF!1qqm7`6uy(``%4`IVldl}$8JP?nmlsh!%loj)s2i-;W_dPnh1-9Y$? zD+yn5=8^23G7}MlJ(Jjz8)tRoC=Xz#!)Y#cO6kj$MR(B!%DW2 z^jGqAJ~*6k;fE;=Dv7yH*Qd2)c){0TVxp81JS>r@{L`!7(s`db;8CEG6?(|lT67~p z$hDT}7B~3skin!{gfyVRT?#N}#Gc@ilMZQqBgl-r3x1iBd_*v7N$P%0XX#OKea!(8 zPO}k-@rymh*t9A3VB@lQ zB2N~-n3hE;P147vn8B2#Ekll1l#9)9C5(7SjPfw_(|)yxM|$p%Ux#R3Pmd^-$ofP! zLDziwP>dzEj;rjo)JdjN@*~WGsfo(O#CUalN<39>h&~b_V-!9%m0~EJKVT*ZW7VWC8n4hpUJReKOIFv3maU-4T}+3TxG5}K zjo6LL%S@iUa49cF2})L`-J<2tYCjqF1Xe|wC1I^yEEZswzygPnKp-zAtT=sUW}lun zNjJzeS%RU(ifnlDpy`y?YS|6ja*QklE2Y;GjJ3+9<=UmT6*O$iB%CoCrJL>TXeH4p z8g=X;T?Rz56?%)7ab`OuHDi^^esw?sW5j3vPZN}ep+*%+4%TZwS3VtXEic&(T+Lv? z)Y5B*OrJKSe|L}QpYYZ_3JmGHWtY>}CjjsU0Ij$6hby7uwMA$1b=lbz*d!~7h*9Bd zYr5GCM!QY_(9}eAyr|;3AwNrAk!Q|OBrb|I7xO0-;Pq$1Mn>adry@j$M}gf4^=~4K z(bsKPfP!KhUgdvdo&bMM39#8JN`&Dn3mbC6sKi?>-hd#BtvK8YS4xprf}=-xq*A>E z&XZh_SWoF2l88D)%Q#!+#iz#_Zh7XR{Ca36;==abYR>$QM92k|-#`^;{$fTqu>aTvI zK@lXGl2pNeS*N)KBTEcrcf~}M&2r8Ca{pZ}>*Jl!213%`oI9+nu0!M`0*2JxtXM|H zZCvmk&l9|hX~B~yDA}`mNMG2n9CBoJZtmz|bd8?NwKz7p?|5=EU1pU_RY(?eox-Ik zbe;00k{KJOuUo`q9`Rnal$1?E%IEzJFW7R^^7z1v>) zj>%22s|RFOG4w-|7% zS+b)NMh-BymCz+ot-(AQ_ulJbtMYgsS~MV&q)l;t6A<;ml%}9Qb-A|kKvdB zr4P>?J975eIpt9;M$JUHuSSl_ZhPa!bMwb8otZgH4#(zCoIZb+eE-C$Ovzg&I*s~mJAU@`sdL9p9aY}g zHk=W>R4Dhg$r_k0rTS{*33WSsR|q!~^RwiKD=ychY#a(?Gq)sZj!xZ@q{E4U&YYe* z_t@EEbDDw7bf)L7Bn#Yli3R47hWCk$uU zCW$uQFP_Tl7r(Mu_#@KDtB&!a*h-|jKw43Xpa`)FOwev*b8&mQ?D>kei&N0z`oCnC zY1qQE^fJug>*zyyU0h0@>N};9PIR8@Ya;4lQk~rH$;!bA*~^JuFw@OR{uAbO#h#Q` z#@qlOK}XecsTgv113@PApqK?nKPQKDI~W(8$Q~q)GgG0j$d6G%mb_9%78dLO{KO)@ zR~8Qx=de{8107X?SgY&u(%N6c=4tgqHRXQff#S69_aKwj=!X=iXs1La8A%HK5cw zOsw<`sl?b<*In!T9!#p^^ZCq}WY;G4t2uTLx?n8$h8t8` z$xfDriGS5|nzxDJ(sZ@yDSJGvf0@@K&+h>w-Ihxr)3BQD7t4fj)%mnS})5zfG?)^0HT}4Mv5=wZ4w+>=JgUC;TPua{QhesZ&R|Uy)mv0{^li;?G> ztX*8PEizomtIE*b)B|rh~Z3>asLdZtgul4tu77j9V z-Y~T61x-KTVF*FZ@eJPAtX~sesXZXk*Q}d!ukE4N;fXSOdHL>Z(h*aoh?0nJwAiofl7^J$mNsvAH?i$)yCrUF(aGfQpS+Y!K z>PEGeu!b|%oJqiMt}zMtm>jtm*aRz;lywIu$#CtkxZbMdJKeVJ9wMJ}^DgZ|nOANa z%=P?<4d%eiyC1dd(aPxl(eY9Xj&CI+_3&#G4-YhBnfh7iFGD|Hrvr~OdHVV9lF7tY5M{;^m$G(l!ghJ6*ARaRFyUS=CLji-mFwknF$z`P3ynfw z-qEX98e)mdtP@`AZ+g?=OKQ)v(&|H2o4e7zWnMSEq;IKKDih@C-b|z1jmK%syM~Lw z@yW^h#EAor_w>ZU^AktAwZ{077C&-2e4@VS2*2gG&rYA6nLc_r=~WmtR34~%qrU_G zI>{%b#-0XAJOKKp-A{YXH%P3zS5)fHWJMmiHfJJ&SLP!hOVPhUPBoNy{nUy@Gd>6Q@1F{rDNoq2`yx+vJI+c)yW9dSAJO7;Cl zg1D>PLF@zj+1+%^R!~L0=80FDqfI@v7^VF&_324&ig*X%mR`q6fgMh3%j ziDb8?lX1hphG4i7cN@wG*sCM&Z`QFp3dU#TdJlO(h2KMojOFkk5*IJVro&rhPiIEr zoGWs;Kb-@=BK$|CGub6GNyRI3znU{8vuf$1jGLj-frF>0Z$}n{18}UK3?MB*$UV6;p z>vsGou#C+i8ebKo_LAI|F12IVV_df?g4*>^?Sr{lT(KBBW#NXgrinr`TcQRG!SU$? z_(khuZ17jo=R$G96!YZ6dj$aAdc(;U;&HV>^oRt(TZ72q73R^K87^+fnv{);#}jf` zqTHcKL^+3ZQ;)=*tGW|69=nvfb^D;HcJmi$jg2u$3>0l~u?w=1waMRJ^H7XQG8b4A zL_?HxPS{zy@iFHUd1KBC1Hz^)3ReTpW3k)LBaRh@#nZS`V9x6X4PHFOqh&8xEY8Lo zK9dG)kyq~>Y-&be+&Vs0oNjh(cS@oG5~>ZPs$poN-vy~UHeo~k6S2#aMdlke&LiE9=>Ii=w6kR@hR2H z!VaD6d#A41VJDJ_aiDB2Gr!c82-h0;P}s~nY5`+E}dNVVVPtyJPnTSD~%m@<9pF1 zQo6s&0P8+3oimc4pUO>vh`a<1D;HdJXPE@5Q_7}MG3g}ekTTE+ge9N%vfw9WDy=!G zj2vC?|Gr!mi>X;nR(Tiz%B6c{LTHwZz5`)t7$7fZjfV=u#Ujb$x^x~v_G%OZA2AJ0 zYdZtrng~-#Gy)eGC-_8<*fkFda4n!pt;+D8pupmmKne6ZM zTu(7~G8eQ3Z)X|1O3RnMr4`GC)n`!;;c~osytMXi;BRRo-eE@mtV^yJ@w(?Nj`}Ob zQt6cZHSPPOk+;a*Lwon8f|WV%(B8eKMepz{ksTY^^HkSb!M5bfU4I2zlCgrJku;2T z0}^24Bd4=@Bd6bxt0^jXMIJSVif?+Sqox*}&oTYknmUOLc`65Tv)hzsc`(FCjjv>h zDQlkTDHpwh8b3+sglMjZbR-t~)XR;x8ReJJDPjbb=39bIjS40w;f`8uuEmg}myHXu z_xLMFe#qs`>1HMgJ=9Y|3*<0eSsJ#{kwq?cc)^ac^W@BhV~0IS@!I6`z2;o%koRv(fP~ZPZRRz>VtF#(S=Ao34Mbs5YVsxh!w@Qs>c*vNE>Ei7 zE2T=6ucT?Z8+jcof;Y-0FFr_o1LNUh%kh?_D_T>|jyd)fJBURpB|<9u(Iz*&teY~F zJ4<=Q_2#=F4=`zZ{gm0N37J#bCxmW2q$R%28LO0v8HR!D1e{+WhaI^BQ#ptus)kV* z>xh$;gXH|S3cr#1>ga3A)1x=q01zV0G$cIB>pGDp1VFfWgiT@B8-+~)Z*4G$owDPa z!mPExm@re&FHM zMu-C^mhJFn0?w*?-AEiBnK@ImnoTUI()knV=^(}8#*({H=h>B+GsZ%@ObYLbW}iWn zA)d%gxQ)CF`sMLob@Jf;{Zrzp4p^?GvM;?_gaPYO;}YAwur9W{wr_w~CqE?J0^%LB zq~+W9OFP)Z5&-WQKwl()wd^d<-Vqx)f^HbKLiwUmq6pbIv!2gm*29unMdpfKPuT5+ zlFtL$uIS>lk~k+NJ=4e;Xy)kubjNzybBl9hz1dQh6L0%a&Tev5uYe|h{!_+xf^S85 z56%^ls#FXhQX`Cm*mFS-%eM&t3iBY`MA1VragRX^jnpvqc=Sd|W;8Le>~_YO?T5U9 zNeFMW+S?do1;$vFi9fut$b(HnTNz_FF*ekPiy{i!u~B0f4`jM6;7@gV7?p5V?pB?v z&v`KK2cGYRmV>;98DnpedE<>kI>>u~vBG9tLV;^3o_V6c`f)7t-@~XP#+zuLzAcOmJ%h%X1dhZCWU3z=5E_UPS{R9{Rv2Q8p*OIi#zGBcfWN*d z%fS1KY_@iYv3G(yt`?})w=g#NqfG$4I#l4OHD!A@*zGlpjXW|%TmOrluwC3ue%WU2 z#lU-#JC3&uXTwKNUp%$@b=!ycoO^7JyUkf1hE|&w_jJPc>+WJ~frEw_g#Q&xREc-uHhrHn&YyX;GDzqdz10K+4$aKd_PiP z4Ce(lOQry=1u?+v{ZRF!5I{=s(yjU1}$%3<>wIn>sb!MNOgsoQpdIi|W-)v?u$ygOIyrp` zE>zdf26q4<8`MNwbv8Mci{;$hq)ei(lcM4}>7Z~9W;u}imfh}HZrN@sxj!rEgEv;; zmHI3ccCqTCOQ*l?yx0ESm;T-6^Sgieft7#tAAV~54WD_($M5~GKmR`;b)P&k@E3Re z-JRe2$a^<^Z~SlGzWp;#zwNL7@?U@K^-uru=O-R~_wQb;KJ_$;6z;f63(LPHW$*y> zjnv+|@(uLxZ9YkHrDPDMNy7*AQm!^u9haU!)-B=DojE(eHu1t(g zj17v<>Ued06W0FMD!Grbk=tkOM&RMZeDR1E_?|d{v4gRZyMUzO=Lx%L1J7|dop#!0 zR(ZE3n<5k`$G!}qrgf?V`GlIRjUA{?A1)s|T%J8#JTo(MX}mZyr-)S*#JcfZB*6|; zs})JG$;#w@5bT;5fM`2s+=x4Af(--FI*B^^+n7QJMk~+cQ)p9$LT}X+s^n8>e7th_ zQu$4n%119@l3yDiAJf07=M@+fADVvb3@-A4lal7clH0}v0blh(G<^@&QuKYp4dUOM z{9BFMC+S}qt&HT;e{+WZhc*2VjE?1ravq0HA2~B4DO?j2eg(48G^{G2Ry;a#O&oet zsbBO(Ndg@h9UIdG+DV%4`BldLaFrzmdP{~}rYKg|ORkxt$0W6K1bSn+#Kfwm7%sQL zObmL{YCFKR`^YrOsz0C|X6P&uTCd+EQXjg9$+4*l{^ilmc>ka+f}*g&>oRIRlucGM0RY1@G4?~ICVG;yM0dD&+x zCW|^*n62Hy*z*N;7i-$#Vp)V&OOi|_a+s#r_R?1yP<{}HVY>KeDz3)y1aV1zakBFL$uubkF+$I{)T9| z?H_4r((>$$DC6xJTE1E8^0hkI8&SuvX8t!Q=dydNVpbe@Axy_=e*Zx^VaEG|Y__(A zv5#zFyVz_E7G5l~F~$b5w-zO!rhL6-Q+47WRTHIj^&0b9Cn2|t~^x%AVWP`C}YW2g#lBU80!ZOHwqjT zw<8(Hujrg$c95xBO=VyE~=Mlp~V z`6@MP8%G2>S5zbp7aIvx8dy~t3oXyp6(FP>uiI20s8OR6SP>5!t+ooi38CV&S2 zv84s&<8P<&-pOWbe_degZwie4q`*cfQm6BI!|~d-D-%$rO&+;CDuq14J#wMS^kE5u z_rt=hI(RE%WB|vBmBCvWgJpGaCu6kwfZss9xzO;%K2KE&vZPSqqI$my#|nfIKJWQN zcO4HNG~$sBY)9{r>G6J#7!|#grEcS66Rm>>~v>%w}tMNU3-YV{Cw3CF}Zj z#tOLo`!*pFL+pNtLJ^M<#s;sh4ly#f!wO%x1=jalgoX6#5SgAIybGWhg$#(wRPVzu z?N&Uno zAgxB{j#OF^Js9|SdB6EF2>luVXW{z#@KH%#$Yo&PWfD=bEjuu4`pod=uXDoE!pW2#s+_u zl=;=6foU1}7-NHfyp6FL8Ts3c4efed20kGJ-z?vs1rK>LySwE3UirQceMBGAJUIl% z1k_tRAm4lB`-*)346^%a`QsrZ-^|$C1cVYGtkDtQhVLV=IRQC?XMxGrV#l#WY0Lv#&U7CAx?%eED zr6Rr$pP$1wEL4?BWgOqLbH~r&np}Lh`1pZ?6BA>l1J%iTX}nS6rOC0@fzo7)Pc&-# z$E&S6FTcluA_sIPoonw95*W4ZgR-l=meQC+{%rMr&YEXsHw10fEYcp z6D86m-eHukk;6+NodeU|A_fg@EA#^o`KkQTx3&Yz$DQ*uBp^?3Di+;#GPdqriL=Cz zD;eGJyB*$9$+Phb+;XCY-tjg(H*1u$>7VNIZXAERSw1yi3V}rJ1VGc$ERmBuS$+;c z5&?|AlT`wL!0)*4MItj*S2U!Gpi#4}8`6wQHIEq;21|%l8G^G^hUUZvNUL!8AmvS5 z)6(R+QO$(QZCg)3P!`p{v}^~w-L(RZAx4LGyW{(TcV(sA<}ME`EfSPYM^X+7M^Gb< z>a;XlV?bv6*eapNfDm1=&Bt!S0ZF6>wpbSyF^gOWf;B}TDv!Y?O*mA^80^`>Q|c!w zuxK~sDyZymRU|54M4H5ej5)Q)mjhOn0;}8(Z|c%OQinIoX)Gu?k3#M?f)!sg9%|pQ z8on_)2M!&p5phS)om63{eusw(v<*%LA`91w{En}sjk2H?%4C5#q|2kS+>Tnpr7J2Y z=mixQ&z2~EqzE*BpfM4|>rp8&??ub0h?b4(id5dHzlw2V!2_lUw*6>-Dn%lyW4Y~E zRe{Jlm62N_Jg}Bk;R;{d?}0BOL=nis+(rh)le5VS8|D-Wz+fZE3Qu%8Ve<>;gq-=1$L}46?vDgIF?&piny;!RJm&5 zUvKSTeZg)m97a^MM_O;mS2sB6aIlr{Tezw~fr=o%Y+2gm0W5vrFGKRA$3+DVUh{q5 zgC|CDct*v5kC901v{#`(&X4@WAc0CmSZsVj!}nm^jl>sh%H9Y)#>$Jt1K@@ccKE6)=E1n!ZZFj1 zNpfC6f#tS!CMit2^|ntVC{@VaNkn92VG8QHhN`|l7mQ!Q@xB!3NG_;@c}f;Ig`O-v zwyNc~MaygpbQlIHQNh4p)V9bJ746UtX>evz8U{Wi3kehP0HYQ~sT8SwyAyU2!@N{3 z5}?&6MIB#vs=2w;!$9|-DT;_(8nL#{jSu5^$e2-=hUe?96{992s%5#673x@sN-$Aw zcl^?2FE;)`eHe-2(M^i(=`J#b2U<)i9=!2~_ck(ri#^4urji0!im+KmCP|kX*nXl7 zQv5>EsTN4#4G{Q7Qw8MYkQO>wHPRmSw!h>%T3N}~p(v**a5FhgQj_8n3L%|PNJ88U zl5cdzBHrt2g=nfYD%s@SbYx=cla8e7Dso7k(d8y5M`%H%N8w32FBR$61UBdcRVs>& zx;iCB-htJ$yPBj#Z3-#dZo}&sgDWcDYA!X)e!yGy6;(V@nZo5BcNKxTci?qAT^zcM z(6w8wxZeT>ArGR49w5<%$xc07u!6Y9MF$ji>KIgNR53UWJ9Wk17iF<{Ulhwc?-bh_ zvHKWBBWK#fuXgTZn~bn~VFAAX&7tE(Z^3SWtz@!_?8Uj+!`J}OKRb8g^z1QI2&eh= zh#s^J!-bL`*h^N#6P-7q>@^lcyOogoFwAt27zjtLxE}>Y@jEjfN9#m^)xtSIX_!^S z1}ZvA*r_z7AnFunH%emK5qUu>{q9^C8e~MJhk2Rs;o>~K!W8Y@ z^+Q;@>5t&TdZxL-LSXr_vE~Gu`;wlm0D?|2G(F7;;2sP=9UL%l?6wv^&`w39#L!F= zx}K+{5%Rel`33^$xl}HVhVE)HaMZzCp%H!(7gbvda~k%tktvlg=EYW{!9xuU(#VL0 z)mYFZG!lp<7}eVUAdA8KAJ}ZIk3kKPz6 z$0j^BJMmzkuSjZ_r6;qmyktDsm3DMm0 zB53&{+{r~9zZI4nmLGO3m-Gy-BT_kWJPN) zQP2uYVYe<%$fF z9Bx`pR1ZApc!5=pJU{OD&^8n*=A$|zFaU+SJhD^vCuD*VIq&L84aN=>-quzTG>Ueq zEicAWbwdT>IPNa#m}IJs*L7oDlW|F%_A!|?-tad(R$zr%fsNc&rsXE-SzK5^!fJty z>}fU@gL&VI=BQ9P zGbaRXw7^F0A^+}E<#NE=I6c2os>W9a?=KL>q&7?R{R~O|1io?a3==DKF(Jr4qe&sU zK-b5x0ML76716z^?-TS*$A#5q0ijmu1Pabs(jl-Y4t(rHM>oonK?m! zbbZ(F@TRRzCtz+JnCX_mya5kAXNd=8t7)16X}Y7LT3$d`i3hZSV?CBJurZ8tG%3(F zT@aQ+o76+sXBv-9e!6QZ`3HA;QaZdChb6fCoEfQn`?=GntQS zK9NtjVEOS>D~ShMwq%E%L)XpZ<3TVEx6silh-3-kEU}7%V8l2^LDyYWQHoa;?>KfN z#w=NTDwQ&hA(HJTBTL|<9430o6MdhpTT~&2nAF-3`U2pLC?hXbO&Lr=qUxepQpLrK zKhQENv*=1E<~y?#KVHC5@Yt@{nYX%nP7Os6cEXfQqr2~RCKMjxr#jC|nPLAPEp%e` ztl&_%+92q}Y!0DS!C~O1Cu8a8rU#pYRwC#WF|snok4TXmb@9epgR;a704g_;xM@y0 zz&?psTqLLJhqg*Y8bqK@54!rz@z}T>bMt~_MxqyNWLy*nLin@f@ zip`gNjh(bLDFZjzgv~WKktbgQX1h4QrJ8-fO^Pim1ZN#y8HxtMEzV8|UCvI2<6T zZ=9P~-_yo7&d{rH3_sQPjPd=r@qN_=Dmf5`a$u<`wS z#`i}JI{d!z{c+>_4~*|m7~h}7fpUq%3r09LX{zu~8{sb+-!B>8e`I`rjxk!P!r$kO zI)1?z!o!z_s^ga!UFbxAUpC793S-#MM}J>6^2bI|@B#k5X25@)G2#jQeZzqNrUCyg z1OD4`qbdHrW59pcfd3N%{(A=e_YHU)yjS@A(18C_1OCqp_=^MJb2@J@ME+Q4%7QJ+ zv~~1OGYTgIghPsg3g3)b&UWohW=kS`2g0{wX0s(x#4hXthj)Q&)Ln?0Qc)^5LhNqj zwgX9Y>EuNPE(nHhNBG?ep0I+;f}vd$o+y1UiYWGp(sdFl;$bBD^+XXAUPk!)5dN?# zg2FL{9C|JrK8bJ~%8OAY_}3wPAHpXS`M_(*P&FHV2;qO2&1V|nFChF-BA>?){>Rzy z6A1reHhc!*Kg#C+IKuxM!ef?y|MHy8{MEwDx&PY!Ccp~Z(hKLThkqbql20P)mt@o@h(2S9 zv@ZbQPjl0L3Q>P1qh6r2wM5!a1E605B(Z%FQ5fKWGM`SQdI?eQmK8~+`XfaBvW$8O z?$vZfJ_kCtklS-uis-A3DkdPg{XC-Ei2j^l0$50pm}0+x*aaOsaLgtD2#E&%B492P z3@$Iw1%HWfk~R6HEL+i-a{n?QenmojNfeLEI&|@00l<4qfGxJ`ccTPZz6zjURX_<8 zUe2OWOQP^K6NQ%r3VTfyzHXvG00YuilR)AdCK4|vkoaa6iLoRS-!hT-ra%I>k7+u5 z+eCr@`n_(HCd7A49KM;r;k$_XkCH~8%4>^10mPq6i0|g$@I3(hg$d9f1`XFrHpce> z^_L1Nfx{27IHVfmhb9g`$iV^Prg0#E{$?1Zae(A$9DaZyr}cC<(8sMX|G*#KL*fMA z&}NL3rR5hUG)ypXAO(MTzg57IW}sgA1za}?|0h@h81057ZiP{)Hi{c%N0)8K_M%Zb z6^1RHbkETV95BwQ|IiE_I-mQh-Cy@-}7Q7f7y82Ffm^3-M;+F?bT z2NsQ%?LHCwH({hb_3AB_p?jeFdhVai3cHvVe85YZDP^M iKuod8AU#LMbW%)Cx^7dKkLj)mC0kspMBDrncK-|VGJNm= literal 0 HcmV?d00001 diff --git a/MikroNUC/20260629/20260629144001-Config.rsc b/MikroNUC/20260629/20260629144001-Config.rsc new file mode 100644 index 0000000..5ca6c57 --- /dev/null +++ b/MikroNUC/20260629/20260629144001-Config.rsc @@ -0,0 +1,4931 @@ +# 2026-06-29 14:40:03 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface bridge +add name=Bridge-LAN +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n#\ + \n#root.mnuc.backuper\ + \n\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\ + \n#:local Script AM-GlobalConfig;\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\ + \n:global MkDir;\ + \n\ + \n:local FetchFile Manager@id_rsa.pub\ + \n:local localDir \"/\";\ + \n\ + \n\$MkDir \$localDir;\ + \n\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +add dont-require-permissions=yes name=awg2-webui owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + put \"Download image, and save him to usb1/tmp\"\ + \n/tool/fetch url=\"https://ros.vados.ru/docker/awg2-webui-chr.tar\" dst-p\ + ath=sata1/tmp/awg2-webui.tar\ + \n\ + \n:put \"1. Create veth interface\"\ + \n/interface veth add name=veth-awg address=10.9.9.2/24 gateway=10.9.9.1\ + \n\ + \n:put \"2. Create bridge and add veth\"\ + \n/interface bridge add name=br-awg\ + \n/interface bridge port add bridge=br-awg interface=veth-awg\ + \n\ + \n:put \"3. Assign IP to bridge\"\ + \n/ip address add address=10.9.9.1/24 interface=br-awg\ + \n\ + \n:put \"4. NAT: masquerade container traffic\"\ + \n/ip firewall nat add chain=srcnat src-address=10.9.9.0/24 action=masquer\ + ade\ + \n\ + \n:put \"5. Port forward: UDP 443 \? container (AmneziaWG QUIC mimicry)\"\ + \n/ip firewall nat add chain=dstnat protocol=udp dst-port=443 action=dst-n\ + at to-addresses=10.9.9.2 to-ports=55055 in-interface=ether1\ + \n\ + \n:put \"6. Port forward: HTTPS 9443 \? container Web UI\"\ + \n/ip firewall nat add chain=dstnat protocol=tcp dst-port=9443 action=dst-\ + nat to-addresses=10.9.9.2 to-ports=443 in-interface=ether1\ + \n\ + \n:put \"Create environment list..\"\ + \n/container envs add list=awgui-env key=WEB_USER value=vados\ + \n/container envs add list=awgui-env key=WEB_PASS value=zoomzoomrulezz\ + \n/container envs add list=awgui-env key=SECRET_KEY value=RanDomSecret32Sy\ + mboLs2325272931q\ + \n/container envs add list=awgui-env key=AWG_ENDPOINT value=10.30.30.10:44\ + 3\ + \n\ + \n:put \"Load and start container...\"\ + \n/container add file=sata1/tmp/awg2-webui.tar interface=veth-awg hostname\ + =awg2-webui \\\ + \nroot-dir=sata1/awg2-webui layer-dir=sata1/docker/awg2-webu/ envlist=awgu\ + i-env start-on-boot=yes logging=yes shm-size=4M\ + \n\ + \n:put \"Start...\"\ + \n/container start 0\ + \n\ + \n:put \"Verify...\"\ + \n/container print\ + \n\ + \n:put \"Should show: status=running\"\ + \n\ + \n/log print where topics~\"container\"\ + \n\ + \n:put \"Should show: AWG started, nginx running\"\ + \n" +add dont-require-permissions=no name=awg-proxy-go-Client owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \n:put \"[::::::::::::::: START :::::::::::::::]\"\ + \n:put \"\"\ + \n:put \"Add ram disk tmpfs\"\ + \n#/disk add type=tmpfs tmpfs-max-size=100M slot=ram\ + \n\ + \n:put \"veth and network:\"\ + \n /interface/bridge add name=docker port-cost-mode=short\ + \n /ip/address/add address=192.168.100.1/24 interface=docker\ + \n\ + \n /interface/veth add address=192.168.100.3/24 gateway=192.168.100.1 name\ + =awg-proxy-go-client\ + \n /interface/bridge/port add bridge=docker interface=awg-proxy-go-client\ + \n\ + \n:put \"add config-client.json\"\ + \n/file/add name=/awg-proxy-go/config-client.json\ + \n/container/mounts/add src=/awg-proxy-go/config-client.json dst=/app/conf\ + ig.json list=awgcfg-client\ + \n\ + \n:put \"Download image, and save him to sata1/tmp/awgproxy-0.0.1-0034-amd\ + 64.tar.gz\"\ + \n/tool/fetch url=\"https://ros.vados.ru/amneziawg/img/awgproxy-0.0.1-0034\ + -amd64.tar.gz\" dst-path=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\"\ + \n\ + \n:put \"Add container\"\ + \n/container/add file=\"tmp/awgproxy-0.0.1-0034-amd64.tar.gz\" interface=a\ + wg-proxy-go-client hostname=awg-proxy-go-client root-dir=ram/awg-proxy-cli\ + ent logging=yes start-on-boot=yes workdir=/ name=\"awg-proxy-go-client\" m\ + ountlists=awgcfg-client\ + \n\ + \n:put \"Start container\"\ + \n /container/start awg-proxy-go-client\ + \n\ + \n:put \"Add user:\"\ + \n /user/add address=192.168.100.2 group=write name=awg-proxy-go password=\ + peskar55\ + \n\ + \n:put \"Add forwarding port web-ui\"\ + \n /ip firewall nat add action=dst-nat chain=dstnat dst-port=8089 in-inter\ + face=ether1 protocol=tcp to-addresses=192.168.100.3 to-port=8088\ + \n\ + \n:put \"Add native WireGuard-server wg-awg, add address.\"\ + \n /interface/wireguard/add name=wg-awg-client\ + \n /ip/address/add address=172.17.0.1/24 interface=wg-awg-client\ + \n\ + \n:put \"\"\ + \n:put \"[::::::::::::::: END :::::::::::::::]\"\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +add name=manager policy="ssh,ftp,read,write,policy,!local,!telnet,!reboot,!tes\ + t,!winbox,!password,!web,!sniff,!sensitive,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=Bridge-LAN +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1/docker/layers memory-high=200.0MiB memory-max=4096.0MiB \ + registry-url=https://registry-1.docker.io tmpdir=/sata1/tmp username=\ + amsternl +/ip smb +set enabled=no +/interface bridge port +add bridge=Bridge-LAN interface=ether1 +add bridge=Bridge-LAN interface=2G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroMaster-1 +add bridge=Bridge-LAN interface=5G-MikroGig-1 +add bridge=*107 interface=*108 +add bridge=*109 interface=*10A +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface list member +add interface=ether1 list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/ip address +add address=10.30.30.10/24 interface=ether1 network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether1 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ + verify-doh-cert=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system gps +set set-system-time=yes +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260629/20260629144001-Diff-Config.rsc b/MikroNUC/history/20260629/20260629144001-Diff-Config.rsc new file mode 100644 index 0000000..2a379c6 --- /dev/null +++ b/MikroNUC/history/20260629/20260629144001-Diff-Config.rsc @@ -0,0 +1,20 @@ +4802a4803,4808 +> /container +> # start failed: layer /sata1/docker/layers/8223c70c099e85b0601ab69a5ae313476e545b84975ac4116265bfe4adfbe612/layer missing, need repull +> add file=tmp/awgproxy-0.0.1-0034-amd64.tar.gz hostname=awg-proxy-go-client \ +> interface=*106 layer-dir=/sata1/docker/layers logging=yes mountlists=\ +> awgcfg-client name=awg-proxy-go-client root-dir=/ram/awg-proxy-client \ +> start-on-boot=yes workdir=/ +4806a4813,4815 +> /container mounts +> add dst=/app/config.json list=awgcfg-client src=\ +> /awg-proxy-go/config-client.json +4812a4822 +> add bridge=Bridge-LAN interface=*105 +4814,4815c4824 +< add bridge=*107 interface=*108 +< add bridge=*109 interface=*10A +--- +> add bridge=*105 interface=*106 +4828a4838 +> add address=192.168.100.1/24 interface=*105 network=192.168.100.0 -- 2.52.0