From 8089f82c81b6c7ddde7e22f23f19201429346982 Mon Sep 17 00:00:00 2001 From: vados-dev Date: Wed, 13 May 2026 16:20:28 +0300 Subject: [PATCH] Backup for MikroMaster created successfully at May 13 16:20:28. --- .../20260513/20260513162002-Binary.backup | Bin 0 -> 119414 bytes .../20260513/20260513162002-Config.rsc | 1242 +++++++++++++++++ .../20260513/20260513162002-Diff-Config.rsc | 4 + 3 files changed, 1246 insertions(+) create mode 100644 MikroMaster/20260513/20260513162002-Binary.backup create mode 100644 MikroMaster/20260513/20260513162002-Config.rsc create mode 100644 MikroMaster/history/20260513/20260513162002-Diff-Config.rsc diff --git a/MikroMaster/20260513/20260513162002-Binary.backup b/MikroMaster/20260513/20260513162002-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..fa27e0e265b710c6ebeac7f9bbdd24e7a650e80c GIT binary patch literal 119414 zcmeFa34BvU*FS!4lD7ADp=AewlCp!eP11$3N-1SgS_%{p0U=G&HZ)B_lG36gi^}4@ zW&;NPw6OV7bE9302NofuqX5r`x~IyZoC z+>Suz3}1OG1$}?zULOnw8!K=z5%s4ci=OBSkXK|e5Q#*j6NrR3su$v^o&>6wD2D3A zU@#bzs6LHSs6Ne5ZFRaEGZN}WAdSImP30o`JT(EQyCSoutiqdVE3ZgY$~scX826D> zWJyx8Xo_!>HGKIup?&3fzT=Rw{5;BDz_D zyAe^X0(U1OrvmpNqA3b|F%gYX;GRTOt-$F-G+Kc(h-j<=XA;rX3XBFbOo7cDP74uD zRi0-NkynAUiKtY8bBJh;0_PG@KLzf^!Ffb;`UgNw(!@INn&5Lp_!rE7zwiPe_I z$d@MV{H2K``yCD0v5d)Jw9P30TPG6xhe}Z^A&%+^6(mx1v@8ZfmzFMo#j>=CP zV)X|~eO6nQvE1V`x;^gnaV5n@o5$^T*aA+E+n+|1mNKrScuKKnO6cWBLPW^2g=gt* zMV5d(wFz%dAmJk-dRCDoBNh1o64`*#nMo0l*aalUdTIiSZ0MM8vpKv0b+gJ8 zgFu_h>2L@9MvvR*^4P2{qt)lI8kIrw<_I#^XA%2{h6y2Y5fR-XkN`;xZlaPwBG1VX z2fH#3>WCx**w`(CjVTIIE}H4xYu2D=AKwc~~1ki{K;n@1LTjo0gXD94!&q zIz!n;w&p!bYksD|*4+Ja2tWft;gNa(Ki{gG*d66IkGs5&vE1qp1kk*vgffy_>}G-3 zKec?ViRgBLX;WAF!6Woc>COy{FIN zvIZRXo;7a99EW}Mc{7WL6cLb9I&#X;=F~itlila>8lCPLR+rO0HiWSu9)wt$fwBw0 znyJOwEQD2|e|SMr$<-mGj|n8a8NpnJG@D4AO(f(fcTk-P{3b2_%t-tJkJ3e59*?&S z60sXZVnKe1zbL=B`>;^f4M`423*-u=2=`F=Ovu`dtQDCSZiugjn_KvO^YsvkH>gap z;7h(~w~r*-={7pOeuvHI^|+k2nNve#Hi+H=^g;-IRwR03BzjLxK!e{K!hgY5nT4Wf zN9K?bnL|VE(im!(rRU8r+%U6|Sx#hT4L8j>A)I`#hsyOeF=;FOgA+O|4{;umGzV=d zC)E9OBXjE-DjMquR+r0I?(b_}fcD`F;?mm2{W~Am4a=mdB56y~Cf+2z`zL2!j%aa|lWl zBlLN1bq*TIo^C_fd`}+910JKSx(yj*wA$@Hhu?1;F?>v^v5&Dk#t5<8YIBr%JXMi% z*Y^AjvfApda5=6gq9n*~WhR6-7AbHt2d8i|Ma-?$Sz{9-TA;j-neoGz;}cOcBDz<3 z-kgY*C@=)tO$yAj&;wdfS*SeF0nHq=V2+2% z{6&AZ;&WF1jgWtG1Np}dsj*d!zN{Gar@~NQ4aJ`EL(fe}14Nv~l(UFP1`#O@5FrhB z`vcYrpS2ofgnxwy2`kVMg1jMaT$qp)5Yo5-LgGqmoq>SE$GD-u|0*Jw=G>$qA|`lh zN^8m-j0gn|5wYN0ZR4NgL=$kLX#+%r`ZA~p{RolquwLylcA|x{xq_G;MYJ)2Xj1~w ziwQ)V6Nt7X$c73uWC(9`EU3wCiKv}o6oN77JtAgE`hbYuC!#$>XlIaIO#gyf_c0ND zLPVbu(S9P@MMR$y(E(W%gzBvh3Yf~$mqfIih!zV(_X$Mz3q%hHL=Or?4+%tVi0CaC zpai0&0%4vW5(1A4M9T%D6#~&pf!XosNrBJ_X_Y{W2}Dl|M9&DU zb23T0S|EB}V7epJR@x*Gy{M?MTLgkoCrrM!3q(5vqL&1sU2#OO2t@x72nqqcA4l}M zK(r^0Xs1BT==HW@WU~^{H;UZ>LIQ>;2!xRalFphAMM|k$=oP(S1xiIg+VFQqT$L4S^(jQy?ig z9Y1|YYLV1|ikX0}LUJ{dYmm%h$b-Sz_@T;XD9HppfkHYQ&BxD$C_mH&!t_kG*(3r= zLedzSGy&(Bkh_>jviDT*7lHL7kQ5_HhhW8=&FXTYFNF+b<4TG#05lsnc+7COl}(fL zT`qYji0F_Dh*DtB##LgVG>nkuSowDcqBJT(f>}SMBDpstBrp}l^m8#cJyix10mj=k z0tx6J=xdm@q3xii95F;{C9#>#Aw7xq7ad2K!OZq(V$H#MhOb2gE5NdhBCD^;7-92(cH*eBxoYeVS%V81K2QS* z_yjCZA5wZ)-+*=GrVw!vIzWhB4UMy`M~Nhl`y!n^WdtFy6mq;bT^g8UK2qT!c~9$7m4GWK*#;plONqig9jwn@)D*r*xbmKH8PJUE=9MqEty9>k%?x42?7?Y?jx%Oh z?H+%Iuck5(@cLOlvgEVBgr%TN_$VUw?;Pf%zf8C^3hi`Mh~%WRNM;H@*J$-_Z}o-< zc9uY!-A|oz zk+8pEfKf^3XDWZC6-X^Wc8d_%$!C$xCJqYOTO%lfk4*KGsT6&yPzi=E51Vb&ITWF7 zs(vyy+M|IMT`ua;KpUfh;)kjSiBn6N3s1aW8K+n)#i%UBqo=Xi1jp3I6Rd8#qb>si zYKXPk>6*!O=gWo<9<%CSO+4#e7bd>3N<8yEbG<7>Y2-*GVu*nA+vyGDDz0FREEp9q z@y3OFGp+BM;n#dB+W?~dR2~29ju}py!~c-t@m3wYIwJbgAmc zU?@&q6d2xo6~>r4LV1pH^aTY*_7yUEHje(Tz!*nam;n(RN1sxjzu64V=ORlb3Cxly z2qZ`&bRe$&d%$TSKcSb+9%J^$87Cm zvq%j-6-nqe*HC16N~DGGVG~mZz!xY5U_9<%I__W~?g+cU9ZbX>48$GvjXM~JJCqOH z(KK*}(t*4B4>lgauxa@es8f3gkl088r$&x6NbZ-lh#0|}fS}8BKR(@Y3lB8<`6m5~TLvkmO+=b+B zB=;c6!yo#Ha;xquk`&($U-rl20Z8(Z+$WNl93;A5BvHVu9Sa#1@$6|N?}{V|?*ZC{L4r6imgpP&xq<}oSCQyj{P+Ry z{)prtejXA@N<9qd2$G+Xe23(FBuA0_g5*~uzajY@$uT6yk(@ws63HnfXG9XWe_28G z_(2j$f*wpaNOG;lO6aP&)EIwhg1i6q@c>=Ou_VYgjz>qRe%5~bx< zTWx(zbvY(erl~I1)YIs#oY}`zmz9;3-P35z>0_!h^)y;7^4;O^`aIQun@f~NKZ%q^ z4~UeOn4On5Bqu+w(41djc?M5+$5C1g)8k$iLsE?iI63QGoPg6`NWfVd6maGS1)LcI z&ij8#zzHD%2f-!}aS&?Z=MZM{^JE4AZY0q{Jrnd0_W1X25ON72A=j^&EaU`@ko(t& zHdUlSlle~ACoD=1es=%Wf~+}NT5NA z{S(s69Fk^nOq%6XG$_wr$`-;3n*s7nUvjZE zNJ!J0j5!U7xH4NqBCgB^6>~$8CDA|&WyKi%843-0@$Y&PpeRED{Y_88Nj=68B!3_| zjpR=~NwIOzMMWeTpqC%w2E>xABZT!;roO65YZFAEwlR>T#~64xj_6mYxT!#POiz+7 zJjiSb3;iw3I|etbT=Z0qXEEpJSuEq3MPXKUgUqrw$SnK+CT497Giz%Xjyti@a3@RQ zPF925aWu#s$NwhoYzuQ|8=8`SL}4+{rMPIgl&x^7L7k$kyg@FN|8L^b_Ar;WGcFa6 zEf~SIC6VJ&qqC)x+|zOtE;T&0G&RH}n+aU{@_b_H76Va=BAV(IF?C)M6@*mL8%T-| z3#-NuGLgcH$tfnHG?VMIgx;BiB&p``O83BdbRLnPkrV3Fwlq*TIW;z48O0PIKUeizyHLxl-WRT1b@Ev{Sd?#ifO#hvXL& zcJI@v+qmI_yDuV2OYGEb(CFcVhZYv)7j(bn953D)`Qkj}AkQ+w)%J1)XTC{5wWXoj z5(mPD!CP=dmnGm$ce*i;=-#Es@`mhXj<^uD5km>e6bIcbRu16&oy#T>*>q?)8;NC8 z=owyue3qXppU+?jlOv*7p7n~e{99DscSwFfatO(rMB=I#=KN;&Kk;xMk@!^3TdO}N zV(U&mC6ZG2<1e2RN&OC>#?BCRk1w(qgZ1pyA5kq|A^8Z&UIaZc-3P^NIwoNCxez8~ zF%~(ie4a5SWyJM}r1O+nX6+2G8%5rFfg%eC0t1`XBJ;&V`vwaH#sXH*Fdz7$>KZ6& ziy}*xV0~Kh46i%GuaqXkS98u{e}RP)5if%kqRNV=xH@ly@(*dqGB|!HihZ3b1<;e3 zP-8~I7};Nf(Bp%8O6z%5&1nC~i|r#ar{!8}t%Js2ky%{f9ya>ovV!8V(?*Xkvkn{L zwO>_L?5@r3|06yq9GN>|nAK7{rZ(?lkI#Iu(?4XSB~aiWe(Bh0c~$wvR)@(x-Bn%W z88W=Tva+hI+^()Rg0)vMu`(O0fr>1!ua@~8z8SFbLBWiC0ncsKR<{!|V%)MNtoXr& zdlzNd5|mR_e!&+6(+`spU?j6Lx@`7%^nAL})bv(?82&EuRl3htQDW3k5X z@TI#PcJR;Tuulp2oD~%gA1f_N2!|9dlu(6HLKQ{{RTw2yVKfbO(H%l#jM zMCh2)9dP*E4(77etSUslAzzZuT8rP&IFeLv5LP4lthE6_HsqtLWiqM9$3C8~5{Sz@{Je&n*mO6570C92g3cj!drIhG}= zksw%>sPY6Z9Th*8CHj>2`*82~<(6Kedf+I*^<4tQt2#hMc&%C79-OQ2=du80IN#(I z813O{j0lBkJ{YSIBGw!F;fIV|gg8HxzM7~m}N^DLs1kB7s9D$N5!&$e~E-7rF+-e|NLn}AK5iAOqS#aUm9PWU!u_b@!D_iW0 zDwUxMcx9+8=f~d>_}Ln~^Wl&2RAu-W%Vel3O6>CTI;`*uha5M+sPG?AD@jf@RvBfo zMVVD+6r>BXQp1WH$VmMYvXKI{&gu$e5niTreqMD!7G2Mi1<=OS0p)}!sqPAt-7bJK zAt1+01F<7Y#NB|nJ437lI5)%&k-1q@v`LdyFg@ z!@r^}g$21}T_~5>YSt&wl@zctvJ~fNmGV-v3*nD<+FYKR(16VSgpMljm2iH!D6cYO z`KarY8W1+2zo8^zd6~_g;dTTjMwv$rc$Is;Jb*S)%^&SG9K?Bk^5w;37h+SA%~S17 zcRAbvt5V_GCub=v=cp8U`PqeXOYv6+ycyM2rz;~|{bxNqtD&8vIp=|Sy)Tq!Y=vir zQZxnhMOism+$Qz85dLIeue^+Mzu%h?&M5NPS#@@f67@ljeJ_+_lGW?Xu$QGfy=V_; zAlfJ4<=y9RA$`>t^9yB|f(!!=mjf%UGCV%kD9?Hr8T6N`?s%ij(QrKr!+>&sR##-1 zL?qaWU|PW>ML;B16C$B0k$|WzL~J2itCh0!2NR8Vhy+AnVG9II$S}$3P9*do5->Ts zT_850!Ndd;lD%tL{kl$F|m6k{^EqaTVS?zX-*Y>7}y+AvR5lsZCJz+>Ej_1 zzv;~Ohmi)tJe~^6xcBylY+s;{u48r&SjuA++;Pes z81P(D?(xb!fk-SF!lLTf-;;>MsRvn9orsNUl8K~euuuiICNTM{o%jz!T-W|cg!#Q{u2Y2J(t{mKngFAAtx*m0Ujibg9 znCW%+>lE8wDa>DrrXz9b ze1W#>NL<*I=p~)}SsGTeb|dPbm;c^TFaI6Z)cg7nb=J%8bx~HmcEz1Y*G(@|+8jos z1&AkDhy*RsvIx*k3c{Q5;}#^h>Pd>b6VP2q(gl+GWuT0iD2GWPshL@jsl5j;+@KG) zz808bDSKK?{@Zz~`#;Om6c$tAb_B3T1vU)(`Za?xlR2u-L^`f$L*;J@psbS&fl2-JpTTh8gFu?C*b#bLV}^}@8GS#jbtLm z*8e>A#{7GlZxgR=dU}o5<+0jT>0tjmIIQD242|XgEQgzc!*)-to9D6Z@8B`7kFl`M z|2!VY{d-z*Q;*vBIvwczwL_#dvScuKC znPVLe_QtA%y%CZ4PA;3ON-@}B0;}F6HhY38LfMW2E9QI-zsEJh;mee5;B(l%a^dZ5 zVWCmCy#;}){~8lm)!&T?th#S70wC0PVDVA6$;Bj2g%R4J!iWn}VYuW~|24R9g~ACe z^i%!Om~yKy$X98A-9XJ3zGamjEdHCR;K2ew6^1!U^@GE#q{1*Sss48a->ANCEDFTR zZ(Q(FtK0TsaiIDf0XizLut-pau~1N@2c{}DFT@zA+Ya+S@iXz@iE5TcWPuvS1S1bN zQ9*D^d}?YMo1nuk!V^a35ftZvCrcVEo)~nPvNcp&VzIckm^E6^;)D7i^@xP z*Vq`wuvhUs7#W%R5JrO*W4yd>JcKgr)V&Z&LkMMz7G-k8Qgo0Sn_o1hv~V=`w3f~N z7s4JB!XB%|9xG%2i{+0Ep^MX^Q_Jsjuw6<1Le0m8P>NcViPi23ZOupDoWu}PDH3T# zc$WlL_~?;JA*AsUNWH$mKTBzR2x&qDQlBHD_+fWpM`b%UghDpdn-W4u6SYWFsu6h_ zi0DyQMBSVcLx_{Kh#PzAoOb6`4!f2QVZYS58mcH7SYTUH2y-JX=6Ji?pCP*-QD2RR zG9Pui-R(CHFPV{Tv_zAK$b!Ebh4M)LYk8QX>dvWegD+B12s~wt%(b@LsIv zp>-T+Z5={*krrVBLpZ_Va(QYQ&ZvkS3!E2)aJJFnl!+{I%F0Oe>P?#v!nRt3(zyJ= zBgdqx#f}PN8Axm!!q~1sjDJbGGy}$VA&jY7jIk9~pS6OCbc(*OrH0V8*P@G}uZ1@* z=4xNlqt#x}Ud@FC+G{g9XGe&16(f3`d|p4?w3uhG9a0DzeurVqGt}ppXQ(jd87iF5 zV0l{7>6j&8 zc7T9tL;+(ag5YN{7D*f?VJr-qZLNSA_eRX!R(J)LBo!UDJ>*C;Tij4F(pRNp~WZdTs$=<&SB(wR+a@fTERJQ0f( z2g}gX5J;`CjrpckrinTot7S=#c`g_ZFE!?Uk`9Z_IKIJO2o^|S278r-nClhqH~f6M zq<9Hs#?mmU+-3DwX1YAGE{Yp^^0RsRlJbq&*s zB_>hR>abOM{vEAA-!QFM_Yy6wu|7w&C*auJP%A*^K$~UKQE9VS=kQOqSwq9rVmVGE zwT;+pd>~6Rd^P82!7&cRSi$Oo9_*`eIavQipG8y*F7#OyMxRw-^h_0o_*Iu6^bzp9 z$f9HBD1iw+;6u+!Kx9)+R%^mh@Y?W4bg~NUgTF(rJ-PnUM0J6?M z(;skDqqX3|vJ70nt)2%4laOi*go(^dMHZO0njpxi2U{B^;bl1}2V+fIQelnH<8@>f zdHgm{Z7V9WG$O)^CPn)yVu$1;QjrDQ%$7_yOhX2KXY~}nBY^Y3{Az}(?G1NKa@9?? zAdX>2gWV1V$7W;7qB>=NTRq#_76Q3WS==Kp(n^E)PGikLEO+{kQZ` z({XTzlO08d>kLcf`xz>-w2DPsi-DyGPQf;3Xw(>*Kz2$j3CXb}+Jxj~By4!~$I7LsQSPPQ{ zAU3Wn0>qX$eHNoEal#-g35}2pj+KY?!dQ}o6?kk6Y?~aH zydGbGEwMu@Mz|U-bWRmU^HO2xMk);5NQKeXR2aKZ52YeYQ`VUqk-(ZZETm9XI0c2R z`C^(BvmxtA5c63)R=u)>-~89m#DvfcFV(RkD|>GIH8kv4mIkQF`fF(7LeyvrmHpSy zU_RdvH8~nIOiG@I#i%Q`B#yBqL1_u;Hg64T-RAHy(E)KW8&#}`@NbpyIXGg~1(emT z@J^BCR<!kJQZ9T8TT$vP`m z`-!vH)z7Yg(}8U=ST6}!vERbVj@6Q?JEN7OmFN)Ehr>q1rHDfVM;71-nsv)_WRKmb z(V0z&dec0;XqqP+U8>g!I-S`3>yna%Lod0*loTuVm_Ka(i6lWth#^x4v(c0qs~>C7 zC!PzbDYa!%FO$h^GMjLjuV|T+m1i=W^GsRhY*Vi*qQWsx=)h+!#E^cTkW8j|LcDIC zAkfCqC71Vn{@@EY9Wz~iSJwq;L+8cb{L%L-3@NMAHY|So#DbZZj%GlDGGjCdy zWR2;xA|^Pg@#n*T%X++pKlw57!|ip=cZ~@6_6+UR#(!qq)I%wzvDdH3eQQR2)AW@a zFFw6}*t@x7?wtD8XXaZM7Q8jZ(DtfJ<~-ixo9}L2w`XFP`NM91=EM!3oM`s(p)*wl z?=Jaa`{^qm^lsSyS)Z3qT~+wyrFR==^?q()$phW*ExfqZ7?tn4X!g*@ zgm1q7w&~T!st4YgdVJa)PhWY%A8W5FZQf~WoDRFGJvPWR(3BjjAKR{}AOsCDCcPj8 zO^xs%84nD4o$$P=9ey`5v@kU5dRNnT99OJ3-uJ`XPk5Hp6dInpdoj=D1jc27x-PnJ z>x}JRU;6shYi>H4IqyBUxGXnTw|aJ}unmu%D@Zlv- z9LejqYv3k2^XQrP2W>fU$tzF&xMuu4i`UtnY2=@B*^_tmzI*$2+kNBadQNv=+3d(q zjaLuzpPAf6JaONcuRG`Ft`lCKXx^KA!w0Ws9s9K3fdgB*)vbH#M4P;C>XKe~|7iJT zcdnbYIbmS$xeuS2Rd=#?%X?p()_4(73VI#-_(E<6_qqS=DgW&$swmV$4ECh zd5+%Yxw#gHIm_1Dnq|6?$lRcSx(Qj-;ao&>jw36_lw-=v%kGs`-rGDK>wM2KvVEKK zmxo{G9KP`ItK)}XIF>Fv{H7G-m!yaH&Ky*bOk`SNcx2@Lx;5865UAQ?igERJ)OKpU zWt_Bl@f$aszQO3;_43R6vrD@l*++fMk6eCFw^mbrx;A;tmEB4@Pk7|sf<0fn({%iY zOCOkb&F<}|3KJfyY5(hzagRQj@||tYwXHA8ZT8u#qw=S9`MvmsS;vRO-Emj^Q{VP{ zx?s%}S3P#5?~`j^$<%dSU-89PP3FXZy5;@y<*ix{Ps?@hUpM@MNxB2(o7hOIk-kxacYhOciFSWPvB%Q9Rm`_danD(2LIp)PW_h-9v zhh2NTuXA;(^}A6&iIdFFUUl2fls|u{FqG`^+)_4oQ{w7xdr$c7xy4n-q_an&R>qte`AK>$k&Ii?pCqm4s*e~AEtae>A)K+7R^XH^vc>1 zGcg)z%yL~BB zE=id9Xs79|daXQc8{l}Qtl!O5n?9Ioc=%xUiVrv4@!g3=KP+m!E${a;x>ENCXKEfS zdFIhS#vWh(+_Kj_F`H&QRDA08RfnG0-S)jlTmQJF{mbJn3H*3d_pIQ=C6*WTo5x;s z)2$!n{4jmNJ$sUihxGjZc)=s3iI$qYt=*@+KYQbuved6XIDTmDGqqi}w!ASVX5qJ! zf4};>74O8{lvg-0c7Mvyy7#h$Uyrxh{Or}q`@ad+KfmeN&V4cSe)(wcws&%b+1aDF zrN5i{;?HwB8lMucd4Ai*<}F9v{KLqP&J3Mi8ocaqMcl#8nO98y{Po+KPwJk1|2@}s zKh<;Wgn9jMoi1FmyOZF$eNW!vPg`%9+5PS7Cgqe}>pb-S*c<1+o1DHl-c?n!yY}Oz z!4cQ49KHIL$2Kp2V$RiL-xFIc@%0^3{@W#!SFHb`c=@_lD!R0qyY6WAV?P&cnZE9c z5zWl6E?Yjfb+YI9t^s-1W?g=G^{?wky6TU-bE|trlZ5*B=Kq@5=H<&fja$&7#}BUS zXJ^Mb=lnWhZ_3s61N#M5PF>w^*y($2`*_?n{anX}rdBo1K5{C3@Zme|IrZRkzkF1E z;E7jbZf%oOj6GLO%`rV_Y?>#WQlxQ%iY@ahBk` z;Jn~S@8J*X-Wa{`^w0IJYCgJhRn79tx-7ok{Pv1#`;AGy=A$k%w!hz{`_fAv{ASOQ zYm;*7fBX2gz6-87`DNaB)8_5GVdcn9gSs29KGSG-*}m|XXEP@^$$iC{**UoJhm&6&{qlud~adKkMgB7_SWWF+`pvAn{A5N`pwJ(+$ zf8*22xFxph2ody`5;-&$QSKL4Pu4}3$ z|7v(e+?jCd*rZR6$C}z>meA4A%G6>`gTrt{O*8GMXA^geWlcu^xp{o?vgS9xv1;>8 z1MeR8?C7k?od!B?&Di)#POGm9J8#)>vj6eEo4)$$ir2nLJ9KGv^0R+<<~J4|bbQ$Q z@-wYhZF~B)iuWh3?a};j$Cwk-+y&#>iI;3~-_vySr>lZ%7hL)Q*=}EzKk~}D$*|Ny7D=1e|=l= zmW^L$d$LCCZke!qd&lc->kh`uFN(kK&0l}~{f~bfon?G{=H8<3KWo|CGBnTp>HaT& zJkoaiBbCYf_dfO0pnIh&k0v#C1-oZvw7TZ$&$s;COE-LZ*EVD4e7_)h=vd!IPuiUy zEFbc1R@wRH3IFXf|Lrnb+sS{s%(q!(xBXZ1{jcWxU(NTwn(zMt&6n9Va%SK7RpHkZ@k z4ovZQ15S_I4_D{!!C+AJIvooJgNV?P8mFQ_~7o$@e1EUlANd0KE+<+wC6{lL6#vjjZJkXa|jJ~`wd|c zRV;lY5P(h~NCX`Tow^MhiF3V+3b{`!Jvdyj+5tx?;{vub#qx@pGPffD-!7ask1B=b z!~SuA;-f4=2|HcNzHLAV)k`28{)2cx{EAV3O^HuUEi`?E@HGKDhaj_5{AjQI=!h-55yXaN0_@LSkUh3y#HKD1w#3BI z5zH&Ca9s^k%SKzxLXwPx#kXC|ZPw9~gINR|+X@^ZRfup=YbkW);ScEz{DGa1n~T48 zYv8XR{U_9>gnswetCCf1G_@%qxRK%id#kdEx*pEqw)tkVVdFoeRw1&miyOu;blqi2 zGl7W1cFedS;?#3*asKu)Dzc<7k2T}nCrR|P9zUuqy>piOw z5^7HQ)bQ4Ai$)$F`HI-c94H)teQwiYtoCZB`__gCl;vC$1VY#+4Lpd$6eKU672HLPEtPsS7d#b$2HEVw<$;1L?SYR*{w}|jy zDh6~Nl?YXk;f??>lnLm}@raONM-*()tozjFzFN+l-B(kQr6n6$;)$NnQ4<-RhzlF{ z;|f1B802RL1S+zXsBB9rk;Nv74+`>@R9L+TB?Qtpk>qWLu;mnvWkrmX9f4!bP|3{@ z$!l*$^8P?9Cb9(tKX!4)g<%*=pqLm(xXkn#r>)BG2%s8psmm-84mFS)eAU31^#a~0 zvS1-CmTO{37HW=JG#w@n1cZQCrPA3bHR5>h% z?NN+M#eQcvuE4HiM;@b@hC{smE=D757CJ*?ODp_tiG+>Mm|7sGSg2NI?1&Q< z1cybqsQI-@jiY8&7y*hZjL%dU+VGRg`_PKjNOh<+YRhP1!25F0BbHUG8gz3athN=f z|6FTj4?1YtSoo{9AT0Jp=oEG(Lmi1q_&)}Ly+kZpG@hwPY(I4<;&Qt}+lfb;$5wZ8 zSRy;JJf3Mt9q^3R02sl}`<{b9f01dQevcs08 z^AamZ^Zt#T{ilgdz&?;E=Os3larVi7L7PR8Z?x?-1%x&}FQIZ|HWnx-)6>7LbNv-U z8>_S2^U^AZpF{YdTq2|h!f@@587`-vP34;q>9ENpE^G^_!ibtq*MyFH9teL0yvPYq() z+1-J$LLizmSYb~R2RGv2WDZW@;KoFA)D0$@5Y17y=cpHm1}o)kij`V(q0h(3IzT;w zf#)O%)IG7t(jizcCAAOMOHkvwCl^^d2kWI)P?~l;ab6rC^?!f^YZF8iF$x?p=PL_X z69tZQm4(p(mPUaihV3i?jVw_hDRm^qQ3LuI&tQb2i>Q|bZ0N{gZ4}~iqReG72J0oZ zi;5)3ik^xVYwdWPSOtRCF5_e^5w)ekgPfGJtDtQ`zpM>-mD7lD!5E|77gCW$WTDs1 zNDU9;gRbM4xhFQ_#IIlwc0R?jC%4>%I@Z_J2?vyHte0bb3Tp`2gbV=^Y0VnS2jbT6 zuS_rZ_-d^_yVD(7XYn(-EfKr_Y$&q8)+npX=-bFgRphZ=QP0*ZLT%AuVS^6#0)0G@ z=^3DjLl!>26(0)dZ-PK?+`nn~;i6M>zTLOH?WlVO?|t=p^O7dV{}^pwfAFgn-DbV+ zxv~2d3%6g_zg6-tjlW#|&R2hQ?Ol=bhVR)x{HdGwPMtZYbcJ{RwD;=ne=y~_w~ChS zyhNY%{VUC5?tXZDLhAOBThEL<*5vIDuWcJssNa6aQ>D#b?OF10>Lb_qPn}4KzpVYE zUrn6!*f)KHEnB==@%Y$-iMt+uu=huY_f34E>!SFJJf^!^cN=iL@%Pt0x;b`pv))g) zOz*Uy{iZe>E}l5*>&?U3{4jRb;ik#v0uD4#DIjzqZ zUu;{jP<-dTfdk+DXyf*a$M5SstGufHnct5$i#fdZt>?#266$u%IPvh66MorcntQV6 z<13`zv6g$^ylGcU$FBT)_luRu>4~NX9^d$Yr2Fa8>IwU1PjMgo;o6HnoZs!XQEmV6 z#}_NIuC?rZ==!RMgl5J&7o`1`b>hy?%R8>QqkWIDV=7)k zR{gmpW#YC?1u+8$#P>&om`mS1J*mxyO|5f}1xNI|y!VR}ZYtZI`rdSL_R&v!H68b- zam7=~U(cI;`#YA{-!HFSGJS-8;WPf3C+HsE1DS=#TNK{<@Q(Xu7F@BQV`*!v{W|xL z{^bvCZ_{ssYsn+AWhW2bcIgoRn3wkax~0c+ONR`qxaY}le{8?9eer~4Bes`J|8d#m zl3PZ+&xkni!WEgFYIe@)GIZ6iqw1GTX_eh;^gkA+3=0fi)aB3RNyBFE+qmAC(eC&_ zZb+hT0|%Qt-4`IDOp ziw*Cl9dYm4I{Mp()+`=YwD;KN6`h-pDqnejzu7hGU+Hky(64tdm^)==@k^_&T6kOi z6ZhPCxbew3r-ts_diufE_ib~|oIUW1ymiZaC-+V`k%JA3=1kmj|L+ff^Wi;l?dnGT zxa_`PU)YiM!u7wcTeQ-@*^+SG=9H(`Sb{~Z_P6!koOt8trcb@|@f8_&zWV2HFYPZI z@>Sl4A3n9zxaILH+J1Fo-t4PA`=9z^_Xnlh3kS66niOxdHt*xPYFo#ugJTCRd~b2z zm!=giKlZ?T_Z^<~bUWuo%YLr!cW?J^@~|X&PF~ThZA+(~{Q8IW_m(^nH{IM>ch3u( z=J)KeN&4c(p5Js`{_Dgkeb%%-eB-wLTaQ&Id_J&yoV93C%Zt`+e&hKYMlW0&KWpo+ z|A@bG<5#Bjn~!|cZ_1^IhU(Wm_Hg-zHV5;XUR3eMgAWg$zv1aOoWK9v`-)-x%q_pY z>-dPmD#ka{W%i;)Ur zR8ZAHtk6;6`2ya7BSQAhV2p!jhOKReI*M7Sd^i?6v5c*^Qoq0^Uz#sq5{UeQEo2mw zJkI(;*T5Hgs8qUheWBNW!OlHnU+B;Eg`t5j*a}I*xxR>L;0t!jS`0K}I71>!9;^L= zskE`@dO5Cvm*X%ZVzsnA-Ctdn4znusS=6~&SEzFpR#kd9kQ6mqSe7jB+#)Y{Y9N=5i(W+p-D!nF7+tvZbsZ|y?3uv%l85%1Vu0bidTqo~opl1eSb$Nbx$sju*k*xw{mN7;a<`n2b(oUFe z!1he5)vB5=RVN|t@YliBDbt3^U@K19{suTBE~Vh3Y5f}axp&mNw;l2h%75uiOipBL zd3t3nj$A~U)YH-MJ(exwLI*BTV07Rb1x5$ntH9{MZ!7%xH5Pbq=p8L(v#h1eu!G5h z-15*>G5-icCt`Elc)!Evw7T*vIVLcj`^olOfLWG%)<=+$Bky>oEhbZ0jX$%-UzTYy zneh+x%<==TSq-BnhB9TdrhId{$=JlL@*nK(jr!4C{YmjFt?O32VXi*?A`HH6i)R zvQ4HbHU2WJjgAkK3Lks35jfAxn3Iv4k!5sL+MH7=Z7_AqZe6`O-BfTv&RIg7L;J%q zi&~}?nA6P-F|EK?bCttq9AdRO0_SI&g|Y4Lz|#~gvRJaK^A#56-*<>>3noQYdv)PoFlVbum6ZtZLpK)WX?!iuf70*I*jlx2;Wv8(40z?kr zpgxs*^7?q5drZPyie;63*#8*~w!KjW`MvYkb}2U&I|8*HUzIW6 zZuJHnKE}kq5nZSe=9tt*n44!q(~CFPSu%2rLrXLL;F2Y35{=z_jv0N7rtaWn%BUKv z%jT)BHs%K^9X^jAF6Sm{p>W`n&x3u-LcC7oS+zIRZgZLB&ouR6|D`K6lrC3YI%|IE z4OOr#C-mgETh%&ZEu0lGc8)RWuTz#jfXNoW-OB3p|62-B z;VEOs3^H0W%qC-Yo~fwJ>xbYuXRm3HGfLH)GfZ;riz@p<)oTEw-#*_c0slov_OQz7 zsnq&~PnZVr8+r>DTc+wQ zUn{t9|5~nrg*p~hhLEr3?1W%A*wly=?8~IuLZMt@myBle!9$Y1T=8UKu*Jd7D9uS6 z;uGJ;I1_pdj(27|Ub%?Gq~D5Vy#^=yOx&?mU#U3Za8gdh{!DNPDL#KW!bvh>m`IbD2CoqY@aEJ=lE*2A<5uj1tm-?X4UKTS8+Rmpp9*W?xx%~>eLNfp^-mJ zM9(S5&%zpp1Aw5U!n60L5_W+wDYV#m%7z9vD6_PiiRgYJ;Q=Cgkcb{qP5{S@3|c-; zqs}4{2R9~!QnBLn!xjk2evLRXiv4jYk+>z1Y3l5c%ZQ{FmnjcNDPK%f?%Tj39Q1@f zqK475Q+}sHt<*8+VZ^Rg9hEmaDfc?%J`3osR(^C-%%s;SzuC!3JGi)~?Hs%f%?X`U z@3&j;#gD~E?n8(jB-!=&H4}-OeYKQTft|y!0)KoQ$zw>) z;*XQ@M>a2-gr8+dtf6P4@pA-GT07@-cZS7eGNqd=*xoWj-gVVk)dwUE!)rxI1|qox z$p9R*$F>$MbyoGqlitANJ|7+y+tmy2vN*0BKsd|~;bmzMNNMnb!i&HzIHJ2}WME8l z+8q8&uge-J_xP$andX`fwKT&7Ro$FvPB+7M%@_#RH3L}F#&p8z^?E!mwV&d6XI!}V zAldH9Vm!ydH_v(&^A5Amc zt-3J}+&nl?1`aPZW|N70e|4Ffo$3iuH!8=JO`bzxn{wDbFfU`X79}771BKEWFnY#L z^t(KP$r!EVO(Fx%sxd`_pku`rjTttws1Wl_CiazJTAv(KoC^|u3kHLQO386ALECh3%<_ z>S6)Oi9W}4W(~l}1(-U^SiKI1Z;IFF@p}AL)*xWyS7)lYW40-q8sv}xCYKRB!)Dr$ z%XP35#i$$&2NR&-Fy9`6l;!={3qDWE$Sh0;n26{HFc}x_&DiKJM+BA|4_+5!VC*6FiNGE^_&KZ!g`2Ihu`XSmwP}Lt^)2}pcDeO8|2LtlR032 z9`a_D%|)#9Sh`yIaO3ZHspJPL&iO-bDz9^CUN&tZ&EVSJ77UtH)# z>T_l`QJ$k`%~fF3s(O6=>w2Qg<=CbtLaL6;LZ+m_k=hJxCYFuq{BX`#*pd|pWr+692fRRvyGOw&ghI^th;%L&R?ip8h$)Rb zhOfuC}%|s_ayy_JY|l|M)t^1r54cc7A^)%g*nwtZ0~DED|(qGCNO= z#6l`33{zSeYhbmtwdsDp3t6aeRHZ^yMa9H8#T{U&Z1@_i{`T# zwb{kiI^AWSI^?K;bEC;LRL1BzETOcmBT5@*^*TdLR$%}Cv@Q|3C2p3_?ZkAQ(vp0R z84jP{k6eIO^2zW#_bF^9id(NREGubI48Fao9VQXXF3veen?o&g+WC< zIs}?7Gbx4-2Vt{Wwiztu&9UB^GMBQuGQ>`8Z7quzRpsRp1vTzV*pLxih~Xf(&_GxY z0({2AArnE0mY?YJWvHxpKSrVX?>q3-bEp4C>P>x6k0bJ_QAR1`QD@;P6#D z-Bwo&1!40AK@4F61(gLGK}l$XB$k4bFOGs@BdVvC6g0=~oH%3O+uP$QsKh$sSPx!- zko5=bdiaDwq8c>{Y1~yQ7IIbRypYT+kXE5Y4XuHcR$&xZg~6^21rMaOiU(3!g`qgW z4~7dYRlkMy(M@@d*^D|>ZluGWxNP3Nka^eTnI{`}m?#)lV$Lz;xVxV9j_h>6JMm)z zR$pL*v)o};rtlmpIXVlkN%A2VgB>%{&O#<{l8LtrMb6T3h#Cs-0E#hR4xPgb%1-!a zzaj^$u~+1r&VEIX7G$r;J6>mmGD0OGBRTpJuQaxMs;y3Uy5C{-*(#yuo?SXA#3*H( z?-7N?XTK!}eE?^8Gw{x#oY9(*b3zDLXruJAOOP0PDOR57b~_7CQs@E`)&Lf)=5eTjbUQwTZ1~ll2!ATpZ@{2a2uL zjv?|aLRRGPVy&t~XLSv&2fR4+ypjE}jbcGh&r?ap$5--!qvHj3R z^bVLr%<7En58viiVaiy8QEAg$NIO+67X^c8eCY%rQUI(`hFtXNkqGe z=tFr?98OFYSH%$F&}7_kXfm|pcaR}YStgvaoVp7Jnh)@E50ZUIK1K4GVgmRaKMo-I z7!;NTxQ_#g)#;^4y^{1XQs;ozS+_$UYe!ok0C@NXQ9 zqqHS9DIULXHXPiRgWGX%DhIdcU?T^oac~C??#RKNI2hWL%9Ab}+?9j7 zaWK49>ia!7_+k$3$-(IyoWa4F9BkrXvrb-5iYrSOmIK)woWsGn9Nde8^EkLS2lwIN zz8u_-gRwIFGDZQ>01nRQU|5vYcM3RoFb5ZM@DL6j%E7}p7+z`>=cOEs;Y@u#f`f}V zxR`@sol@T~;a~(utItPs@E8s*<>0X#JdT6Mb1=;ND$WTUd<6$jgYV$rJ306+4!)a%@8RHkIe0M# z-^aoCbMONk{2&KE#L2oP+;ePgt)A<+OcyrjJ*o?z-ubwW;IUxWO78h8UHII{bsYYu zbVP_;!u58dG=Fcu^O&U~b{)+{V4Lox}5zj;K;bNiXY& z?o!}abj0=y!1WJ#`)+oyli zv`Gf(3mwr)1^$xD_bVOI^~&?FbwtGq{0;Zcw>qM&%Jc7Z;U$gVb3FNhd;dp{{|9wM z4=dju;%GRmBU-LJ|B0jdh)#Bh;`&)fbi4A-Q4aqv9Q><}=qBZz-*n*>^1tf{E=6`7 zJ_w0(*vu*9!7010Jan=A|nAFutpB3l4^{Uwz(6A3jI7wLa{CxJXa%*RrdP zK74L%JMP<54sOrEMh;Hn;0_$zk%K#NaAywg!ogiRxElu}=0z zJcxq}ICwAz7jp0r4j#(E!#H?22Vcs;mvQh24ld&0Vh$e3!6h7wJ&x467|p?BIJlI9 z$8zvE4j#|Jmvit04!(keCvxy44u;oSrRPcxp2ERXIoQg<2zXV$wQ;bWgB|+t_*kx& z_xizA!M#(d51&Wv80(uc>yYxVNJ6}V<| z^kbp?VmVuys}IkG=jp@a>~);nyIvpG-{y1gFVKg_(1qOdMI3x12j9fOH|xXx{acuG zR=#f4hY!`dLoe_3gzIj7_#E>4_2J0;2RJ$()Q8VPe~5#Z=)>ozKcWwxufB{c*P~p% zD>-_e(NeFP>$+=X3orsd+Xj+Hc> zs2<&o{T(LsxYE&M$CMThW_IxiM9e|CY3Pt*9uW+#JRE&6jyZuoG($z4`K4h%Sp@Hje05FK-A%Y1`({|Kr}^ZNn(dxQ6lR2o(2(2>l#EIcSMJ%<>5;-h+voJ5w$#QiW1T3 zM>L3F)Yl+7J?Csh@HN39s>bCaQlW#uHf0Ib8ax6VBB?`EobI60Vu3G#!y>}w8XY3N zpeYv|5gJ7Ls1fNkh~UN0BGN}ok+xaG1)@b1WwY*}Pu5Tb|A`h+l+C(>zP$z!oG)5L zDbW^9+Zy4y(IPTNi)glnBDj6Dhz3T9C{Ejs;4{)7GDKVb$y!8kIB5`x(IRTEMFek^ z22o11h%V70f~!k|$QUi6*;+*KlW7pCp@5sS2rLh^TfRf`C|K@FmRL`%_YT10RxY7o5^Euz=8T?Af94WiehMzmei z*Wl9BB5FYLH#E$4d{0|6_(Oqcsxmru+!-xJ2egRbOw}OT6)mElwTR$})gbyJT0|$b zh~UQ6AUYZ)qTV-a5y1z{BkFx~lmq|3WNr1sfy^TsnCy*CLJs^>|S&X{#UZdLGfRMp0J(rL(k%;OplRT{Xp4s62o0iVqO3JnUu}a#WCf4N)wd+N zF5+6Hr3hge8bqt2rRZs`7(q;j2GP?|R{y-+T8a=5!XuiuJ4!?gTddb~T11oZh!(bp zvep*1ctL{*p(t8JPesSKZf*4={04}u%8-5M-BBXCFMqeDXo%h65#5&`<;?iL{Jk1P2>j6^`Y1Xc-IxEV z1`(o$w1_^57Lj(+kB}oRqR*p6q^&i?D`^pZ5gnpO>$Hdv?8GB_v@Xiw=+S+PH9SJ3 zlm^khyQ8G&b8TNkn3V?6=TY{xHSVq&iV&m4BU!Tfx5ben$+Seya)ok3ppK0k-EQM^CKd5h1cwMFful{thhC zaJN5Tt?*f^&xtA{=b0)V6#`>-U6v;z`?g0-mRd3F@2(g$9wkpPG(1}d8(CDR9Xi&ScfPiOi00-|&7Cjn0#Ouj$x$sT1cURamMB)Y zC{V5aQ`rx{vM@}+0^e-4Jw4;^QiFmC{fLw-#(G23Q_z( zWmhBv{vIW&L8IQfo=1g606Z%EJxWxYCVZly3Tp^>RQP+8sM;qD`hVShdz>6qo$r}f z<`E`@1OfykGnt@?&^^;VGd(jMBIG>;CL|;TP$X1WRreHA-Bqcoo`<0FP@X=RT_1Nw zqR6ra6&Jm_?4qmd>bf6a`&kve>Qz~F*IifF?BK5AT_D`g_tc}$Io(rL(@gFkH=lee zo%)^n{vPL?-+BKIXDb{*V4*;d33d3)?T@kw;sgT=1$s=VT|0hyAq#~A5G)kvF`Mp^Aju-=rN%V{n^T&vQpvr1q%gwOsL}v?E@?nPH(VKpvQ)Kk!ziC_=AUfF>dR8 zeBsNSt#EdPhx&3{TW#pv%PEMXCoB}`F%=wnsPskFRyeuBLV+F=>iEKoXR%N?_`*Vg z9uw;DnL8vF3g>26D9~d<{qXS>-7FN2-LO!g$AsF@d5AMRPVKNzpvQzdzVIAZ7;xx^ zg#tY$)SdTS#Q7_n8DgP8j|uhkjX&a`aO8-E0zD?w@r4%=4?oy5f)h)CQa#@edTgk# zakj#NCm!l+ac#BZ;5WX)N`>=MEEMQ5rTX+`U*-w}j$5%%pvQ#Taqt_htW-Fy#X^A| z6Y2+>HzML@V0Ik#Vxd5f33Yto>zvtfR*Z!LJvP)YI4B%7O83MbWgs2Afx zZRi{wWNn3mZY&h&F%`UBU(GdMI48$KfgTg;_`=_F3gVa@3k7;isGE`(-@+=0Q+g~E z=rN&=FFemlg+qRT$_Lf?`M6RYU-%UVg)@RY)UV=0{hEWq5kns8*Kwh)|J}E^76&I3 zSt!tB+De?x!2w4W%Ad}OF`5vkm~cLlh4QDEVnF?!#*e&kypo0bJ8dEEXhNL!#_3EJ z%AfX*A(c3%kHeiTls~5*14>*$!`V<4%3nc?0VOV>;%F%gx2XQi$ zg#tZhxe_-B;9x5Y#;wlB7fy2hb{y&zpyK!22`3fK1oKcNzEnTupm3xZP=&yY{&WdYoPs!!EI`Fq z@P$om5ygRK9_ocnv2*Yxt^dBZ;BM+JHWT9}BoP`2CCe-nT7cOI=a1xz`0zE#|9V`?M zvI|gm#D+TA!b0I3JP&oUB{tMcTw%a5dLHVf_=VvmPAZ(j7og%xbrOM=0xya~{5;f2 z8p1P{Lq2&i3xyZ}0@TH^ZS?}DAVLW6P%p$+@P&=6RER(zK+$6aF%%qm$i$tzfvph0 zfQ14*wt^=!EEM7&uu#VrPG(|4-FeUY+gK=sPhg=yj|p{r;YHl<7AT153oI1qF`+he z9&To#5WInf0zD?w@r9pqz8$e205x7|yyE-zlblot9l=ALj4u`8sxu-_@K7Xfb#Cf@ zu#2@70#~q5pvSfq;TkW*y~R9xRa@{l>p zN`;^uEEMRmrFwz06=Hs{P{$WusAa2K+tuH%9{vz36+(uvP@qGq*27bpRV0g~(A4hRBF8Ff44l zX~^S_R13305(^+}OT?040XrtC;rv3wS(1!~NQOW(EKs`#7z2 z^_mKjt3zNA|AvL>oG6=`X&H)CGXuzu5G=&cVX<0^Gd1>vgeirnJ1jz5K{YfpDI2H& zyloIhoUKZ1W+7k?3)3>~=TmGyfjB>axOJh)tvh*1R&$0i;Ul&AFR052Qwm{%Sg5vq zPF9j$>~9_>ET<4*h=u8tjiQ;*)l%(ZO~wTS!PnezU49R1C`2mqG2yyEhpE?0X(h#& zvdg9-IjW6dqfql~_y5VFCR>JWCet^_$t^OT7Z|e)5pD|%C%h`(J25%jmkNbTs!Bnf zP-mjb@5X4TuriC_U#w*3sj2ip|4>p%N)u91(jY~Y2+3#>SZ(G)42Ae(tT-t}vrS!^ zktIjcjY7gQlSQS<^pI64*->(C;K8b3J{=+$f}yd3Wi3Q^FWKdyY9S1~lHkD;1=T1@ zOD)}f0!XB~w}*&~m~E`c=i9m+)PB~@hB=<~wr^3YgRT8pdC*@sLv32lMPyMU6a+4t(6K1X~IrR6ZR|UW~>jus_N9AhX{wz zrL1uM0gT(f$XiCqQ4GVXuWK<>1Um%c!q=W!k8g7E zbciqrEev5wo)_K~1;&n@yav@B$;TV@T)Gte6Cr{l4l*nF1!^jj8OS6RTP}FbN1V~( z&ZWq+h`zO2m(9Dc{yf{dAXKw2E?O7RBU_hDI($_Awh;Ru9<^3#F zt=H)p-FBdU?ZZZ22t*EHO;6Z$Qo66dA9dQF0gCDpX574qZb_m$h@JZ$_$^xu5E!egVP21T1 zm}9g^8}SwK;Sh`AN&!}wzJh8@s#d69=ejE)wG|5iQCJU!$c8HpSlP}~Q+@qIeM_3T z?u{V>t52=Qa^ROwox?gUT({uMMMt&2eCnJKGq_G`FcseKsKt2mp0T4WW8Cck#>c$X zeb8et9tq9O2SaiI7fARF;Vsumsm$<_+Kx-Z98p5%3+jhMM8W+PtSFZSqg~n1byarI zu+y=D;2N!+#^0`gzyH-RNo=o3RXyJKJh(U0hh|ds(=hDz=EncB8x3VD}-g^#PwZN?= ztW4{?2{Jjh@4aLRTGXo30}tPJn9Ua4t>Q~Woyo(u9gfVF;nZ+ww$x(0dH4QPEMr{c z!ZHRul5r+tZtg=N zJ(w)WN+~HDVcatj+!s-(R%Q*HIAO4vg&TDsob7pj&?7TzFe0;RG2Xm;&m}BlT;Ibo z20fB-CLKO744Wdu9YH=rIxvj8nz4v=!!j)PN=aDP7#A6_0&j3^cP3XYDN9_rx%?IC zT029p`U9JxxNFH57yf4R?yLR~ouR2r9sXt?=jd>;6VG^Gw4=+U!nb6+HN@ZG_9&kr zO47NuVlOd6HejF9lw_%iU{$2D@+BLK7<}IW*5J6f$``{m_`U-%48HW<;=q%?eTrp_ zTe4Wjphq$u?i&cr>DxjKj;pwQhA{YriY_PYac!wPkk-{UcGw;O-24UBj@Pzapr+E9 zp%mNuiZgS$u{P(Z0m9jz8{$qg;O;SB8e}=>F)Y9IHhtj4iGO9Y92cFjj6siNJQy*J zSIesmoOqVoXOCOec*f7tefFXAhl3Hln6Uj;xVp_}h_co@F_~Gu{Z>&>VH-hkksK=- z_FMH24lilcnp~PTVdEy;Wygv$d>Yo8x}q?{b{gP=meu>BG<4ihyAI>4c zWnv%pwO@bqFImR8xs+uLIv6+aH?H4{Qvv)zgn|IcLgC_5ABy%a?V@8Qi;|`%i|&4Y zVYNKqv06+i32Y$wStB3d&dK6#Ri7QI1?ZgQ7l^0~|Dyr}Ru5d%>H|ZMD(S$5JFZfd zqE=bkyyt4}a4znE1)Hg0uJ~$tI5(n47T)`>#kh0dXQx>GaN#V=81(3}7SR=~#dzRT zpZqM#7`NN9j6siNJQz{PYcbxu=jsbs#<)tCWej>WU9^ocuaBnZm81!hy zec_WcwHS}ix0YCqaiRDOzfE=m*bT4ou89;tCuho+XPH}Ags`>d&Pu`|mU^hm~;bokPIEykVu z-u+dUF>aA&8G|0pxQ<@!=zJ?T$%-qh!FbwpnV?59u4gKKbiUPOHOBqe0%J1<|zBN=Dv=#Y%gx8_)laq~AA&s0pEi)1_;aXzb7;ToN9<*E~|85bBw zSEu1R>hb7&>o}`1?lcz|k4I}<$28#Re5=Yb#s%sEV>Oy_eR(XijB#7Lz*vsKcsTHdoo`*uGVZTtygHh3#K^stsWjfVxs zphs#vSYJKXS;iv*0I$crCIJ!DTZ7#3rxn_Gfm$|)~akR^f z+TyYZ<6~?d@2F;cEV6LbGY2v{+vBi|cUCiYq8UdViC9Equ0y}8nsIc8zMk>%=xmS0 zYP`Feu@$Xx9b>1_*&c4RxTl(N^k}i3jTED^JzOtyZ#CoSUS_7AW^uNMbD5(a<2P3v zNVLn$)H8&c?ct`IuB>JpJ>3+wb!3rJ&CO-*t7aTyE;C(6hkmZ*Uba+UB{H6Cxi_*@ z57yD=8l7w53fI-ujH3%zT~ms)J=|z9&YmGpvU+v6$cVM`4Y8kyhuIf zCSR`g7{9f`IC}CWQ&0DHuH^wXj}M8A=UN_!k;hA)C?B0`;et6Hu4YVwIfmzP9Ru^x zxt0f6jjyX_{9p`?m%he1I@>eJGCm?Qp6!{8WE{0qwPxX(Z{<3B*NcqjTcbOB!*#4X zjn4LPvpzS7jAwhIXMO6Ny;WFK-zYMkZ&e~qJzU2E`siHCoh;+mdyMb!>+xL6osozT`(Yq^JI{Dx}A_e3+UXS6ui@;a9BP1THF7tOey8G*T$`&q_stY&(=CeKA zeD%#D}WvqCN@2q&P z`yv@f?GXq&>7;rL@ACGgZ8po6JTBSlD~Nk@eg#8__;PQ^hL^k`$@yw3)t639FF2;^kS9-rf+wxQ>qPY!5e6Js~ol?TMbL zjylE|R(y4aA@*x^)95C)GEq-lnO6lL*9s~VR-cQW75=i|n`#JD3%9?j|f?l_7}t+TcuwY1uY^e#dh_Z&GPU>evEc_9vLPR=Wd$)SXlU+MwB zsQ9#D=OoI4P-(wKOsHkcFx6Lf?EN)9T15BYPlSe!&4Ni!!nb)YYD-B?NN=LX^U)K< zr3TDR1)s)MGwd9}lptbaNujDjD#s=q4~_y0JNG*6N%nTncy36b7=Zwm9&67J4Hpd_ zcD#Q^5O|%G8X2Ln!s5mi8f4-fgoTOVLj#0m@0$dfdSx?evkBYkg=O%@Xs9r2-6lwu zK)7T_vis5qnoJLhB!i&IV(&Uku8RVYnvtKwtaZC5(>-31>y^!@$<`%UD+($sI@p^9 z$-L-bF(Obcy*AW{4i?Sl;~{SFErRfu`Jv51%lOg-f3+9k(GHK98P->Ns~{>9$gIA& znQnB@2#FTa_5C3>y+aW65~r9jwY=hwF1m;dpLZuC9=dR#qp=8%pfv5jZl@5{&j;e}#lEW=h~A4G0JV*26PB_6 zx}CL7--wqB-7TQ`mkR}Go!#BtxC&_h_U`WP?y#$N-o`+oOSE#Tkerkh!}ji;S$Wth z+X()A*+YM>yTEG5|d_0Fd!WpAGq$n+S#tdJq$by2s#Yd%3Om)!osKB%K$(= zTq__im+#*c2TV|tX7AH`_v~lYypNF*YJy&+W-Xvk4u0d~EYSS|5a@A%KE?t)P!064 zm_T3u5)1TT70}neR0Z@#zKT;DiG}tZ9?-qs%z|HNxsLo=x8Q0esq2txO{!LRclQkf zI4j*d8Bi3DP8zSgEGZ)heh4{(0=#SgAr#>DgPog)o$wml@TC%U&iDY~HWH*JddXLBIKCcgO zrlS>APlGD>{f7_0G%GzVkTl0*b4H&Nu+QpCTIHl^7<#hgm`TH;t5t!GJoGb#G=ih! zILvz-?)RiWD;0+WQ9^|NfC!n616iFajK{+wkN#LZs#4v^>%o=G;{uOP*-Y}+js=FV zcG=g30DnjT=IEhh%E#+ zEXzJB;C7bml%Hpjz~W_ttoQr40Nh#_m#w5mx2uV=uGp(Nqvf1<*&qw|2?4I7pgH5^ zT$Q`<%9V#G)MMHWc<=mUTo{oj8DzANpwmWVPg$P0_A0k$;i$S=u%x6pE?(k?u32%< zdhQ(WCk05*MaZ^-C6#bxT`j;bUAOIOR{KwRfDd@>6X=TqiWLbGj<0S$$O8UP0T6T% z@Qmqksc1W@1tZr6ZQ?*bT?N_{4q9uD?XN6}bGM%nKtUHJU8x(klh^cO(wVG{c?*a6 z=T(@ugkp--9Tt6J=Tm>nTJ$La6Le9|POI!#l02bWXozZ|j-S)@8W#001XR$&QETZx z{`^61-`ih`sLvmy``*|hzfvz-6Gg*Pla3+Qb6TR#zK}bt`m~67_J#DYDvP;7G0MrZ zR15Bj9glGbGCwQ8fi5cU!PU}u$0_R?){dVO;6NAQR?Zk@)36Y6uV!(7x^&YP7W1zJ zOwdKlGXQAlQVw0dT6O5@(oLIL(9c(cZVm+%8x6N?KEcIs{el4c#Lg#Z3|BU9&Xg^! zs9I&)*61anwQ$GJ*?W=|_OAt8&_!WI+*(F>@B9g_e11{D1zp5F!*j_+R3)*6gAv|4 z{}FCO@85W!4|+ZnbP;s5WNJwk_zXfwNp*TBrKIgxuFa&LM=fkyE6DoN8zwr`j7D2bdB^Mt(yUxhVH!HfDFT=#3Zq$azn7$u{OwvozOt4;-Ugo|47Pd|bUW4FLO-!J zb3GYL`w2i;LHU^`E7NNmd48=ljpf+b^a0aNNsc_8KJ3};gPt8=w`Ul;-Rk{rCWL&% z`wbi3;{ApVAMk#|hI#Mzx0?tZqHiPQJ}eHOYB-aScB)2$ieKjw(oHVFql1tw9b@UP zmru1dG&D4<$2*KHZdQ!(OS=?fJW;mvZR3t(+S%UTkkL=CQnC}r%BnSUX;;Z`v^@Tm zit09Y1Z0eNU3p+~peywZ8S|ujHDM%76Vmp%2G`(?A(9eOk@Q{&nU{1uC&?3aiwqE1 zwVZ9cw1T!%wVbZK^g6AsYYoHc+POVisape;ID?v!S!g|cKR=Xu`aa=2bX$f=iKe)%lV0~}}|VPLUPOwAPY8G?BIji;(7K(oS0N_>U&i zzUsG4q`ias>;G&b?c~4k_`R33g`8@8`Q?{iMk~`n=TMJe_VT$V(tW9%+rGmo-*9lG zba-%RdjGEBJ-1$a&CGRs4<5OG`!)LRkLmYP(oDL^ zZ-AK@xG_Dr`?}X3Jm?JXzEa)3@5Wuj$F6rSan#{slY4ioX33sXb`*+l(r?`MQWM$I zIF^P3BxjMabOSln2D7%H>A_8BCC5zQ0wdM3FZ0a5!?PcpxBnZBp8p%p+y4#ceTA2P zv;ptO(#?d>cBwUR(T#+(BaCKy2Nk4&kS*tprCsT%V(H4z#^5US>7Y9cg+AXH7m z)I?|wL8zKOxuRl+hQJOjH4xUhb`a;rP>ij?Udt#uTB+dwn{cF@uA;MoOz=A-_}A+_ zP`j@sr)bmIhD0coD-IhNFrz`WOIkj!S`>m1@&zyJ@b4GMSo(W}JWgBe#|e3s{{9ht z{%`vHd;0tdeg2p}ze}G#q|YDF=Qru|8}#{g`usk9{xACc8hw6?K2dZa(zgjAYY8D| z6Via*5&9^<#0VY52i?$z9wOu-{J)Kmf56M{;IWR7c7%CrR~pg81FdY9%%ZQ_YEL!% zyPB4Kf^z6}hX|n^7R8`lKm5sf>G5yIO%KopbV(pmUzw0Ks5R~2eg+}!mmxbLR5$eK zCh%udre#de^vXsluLaQm;X&iy{|NeL2M8hP8eBl&pjv4sjP_{=MY@oHpKBV@00JJ3 zcr@YBj7JL|EAVK=qYaOCJUZ}Li3h#lsfCcX8yX4vSM=YN;B*!)R{yUiavmY=XiTYr z?*QdaJnq8dZam(G$J_C^2akL4SVc&8`;?l)D%tc*JM>>i0LA}-uRyk-jKZt?WfnQ{ z8ZRl*_`fZ$EW_WxEu()+HK4w?0WJhqZ+s0I6VtT)(exG1AQ}40Zf$Mwk~Mfx!J+_? zH6z(7pf#ZQS*mU5ld9F5H>@eiQdG-EuM|RGFIo&psl0#i9#@tPWgQDKJ z0^3MLs763F0jkZ`jZ!-47{F?}%95_GhHGeukgN%C%>i7$FIo+(NYR>sMPtiR(fX6J zOw}B#L#`HJ(Q7H%b9Q=4&G~|1@l>!`q>?KD)(Ry%a&|hW+K!J_PY$%QU5GZ*wu*LA zv#F+4jW#+&%D8Oyx~+Dvu1dDr1yd42e(jYul+<5&zfn^C->7Oo@!q4P`tMOv{cllH z{r7FmdkpmaG#yMD^dkKCaK8R;xI-Uj74!Z~<~^MA4?TIHnEx#t-#V`sh|1~zKAX^X ziT*)b;p?)F!8w-@@|=fxKJ)F?b-*7>pGC)zchPEajL`p3S93ohaBZ}PVGR0aLa3~7 zA+#ZAC+~pYgX1TvyAH4B@t*=AUiZ)acN{Ni6*cf{%6mPH|IEPKeC$Fu;oCgQ9}$uw z55j}mc$kEwkROB)9shqAj}PEM3&idCbsHhwYg5^Q;p}ieJ1Av`)vT&!rC|l%j=uZ# z?>hPTua;HSiEvdLPp_(LQrUc8R#CJ0RCXklRkA6SYP#_3bF-ZnEw84B!ZmF=?V9#w zhx@WaLs?bM4)kY-GgMP@$JD>?yyqugo;K17j{312#dwdXaeG5hhMP~Xy2MrPqLu6K zd*||IV_H;-*3m$(meZ@(npAcmJ0xdQnQVV1n;*>f4^d54yUq%BiX^c zt7+Tc+hx;5HkDNevZ>*0CYK!?&h`&vB{x(5`Mil620p&LnR->Ys%M^F zRoA4lecAL-HZ_PI#K=%qa%(Di%{klO|Ir_M9o~jz>+Ft++O{_aox;_pS5>#O`?q)f ztm(?t%UfEn6qVvTyJwwVz1ZHua2kE1yw?RB-f-8Qzg^ehj=5h+9=5F@2kvHv-bbNv z1BTwlZOyl?#=Ic1u^Hp;HHJGpKZ>FE*V_o0CZz4$ndV!A(f8vGgidNU1Vit(u|sck7t!Sl-!AmeY3w= zwPC~`zQ2;1z|TPK6E$pa4!qepr&qn^G41dXnsr^)N1qwUEWfM1s7kq(K)H3NS2@>J zFO=VS(a~eiEkhgB)+YEbC8((xucodFYU;UOO;u1+XT6&GEL&5Js+vlt4!sgbtLL+0 z)_<=55US@2jV?zoRwF$!%}Mto-!;{kU22FkN!r#fDEs+?N*Uk`nc zw7dTLPgs9F&?x%rRZ>Z@3{6R3Dm*a)uiZR$<>4b#ceg-#t|{G@9ZF}Vk*v~>j#PhU zF+;3PRi|ajH>R_(pQhJV9jwXP{zBtxy}4%m`&w_|5cBU?2FHS7BNpEtx}*^k>uqoS z?oV(qjxN3t#c)#7y~PO$i)eYxUD?H~p1(@wuk1F_tz)3jd1b6w(W6_fikg?oxJU zQw`0xQdUJm+MA9M(zY~=eecGtogJMWJ-v=$=)DxIt7s^yyEm%~yRy;G6-7&MtOKeP)R4e$OZImrp-M0A+U94L2xGGQ3-B?;)lO;#pHlx~!Da{!- z%1%PI^u@LH*+6g0mN#zc>N3iXS$4LSZPn_M?8Ky`m({K}CSJEuksN8`maUx~9X-8e zJD1`$hhaLP?6MmjaU)|I-AhW14mmBuaFWGRSx#cJTiH}Ch{)RRl^2OrZ0WqD)Phw- z!YztB>B>Hp|NpO&;VZlco?(xstEdLMt{KJFL6kh?3kr{4$;T#kX%_5IQcmJW$?dicxHluHsGlvf42agR; z=P%iN$&TFqsoqO2*;N|5VdsG(Q0>q`>p@_!5?k@?5n>r^JAmux~VVU+B&)R`~UWZ%RlrNS8clJTTiyU_V$h4 z6F>XqUpGGX`J?}I#XsM+u>X(Tf9pMQMo_*m-vC;u$5 zZDJ=8ns6#+K%SG z#?o@-b;6ibElX2WpNtmXBTwp5$@br)Y0WvRjaHNXL2=4C@W%HA|qUdVE?Ux0XfdvYZ?RC5T)G%+slFV^zxx^N}-l9|~cgP!_nlq*=kl32S zlV!79REs`%HGN!_bZ2~Vx|WyZF#Ka>wOpZNJ50cz=7%5vr=6QXkpiRE_?+ioBLOb} z909KqGJM={Y}0UDFke?xeV;(NNpOSQ4RT2g4 z?F*a<`{7hU3p^osQT-Fa?sT6QoRd~4n(j`|f?857DJbLgyMRa${O@3m3aOZveF8>r znu)XPK}APh)J$8Ido=|yM4Z3{q1|&S6Ke1hTf8(2o0;ezNI0P>vQcs@L+@48NlgyK zfP@T@wHAz_t4c7!_3==-bk(udl5EYGL6L#nMM*Xp4+!assyz6VW z|8U+)QWUG=i)li)gfl5Bj){3UC^7X(6q;DNd4J?mMY5=sSG)Ep!NV1+#OOB;g z>M-&KDJG|Nsnk2^sAj+sP7iza(PQ=V1u7YnX31+Ng7>haY0?9zeo|x%GUcdl$P@lc zH=WrlNr71*foYn(dYYaKkS#UHZdlwjO+%&U1vJJrAvf`n&83ILrekt#4CRP-l|Bcu z3unzdC4AXXhONQgqN&@xmOW|qVleL$(ULN|ow2{801XG(@(Jpem1OdfMke3rq(F|O8O_ZE%1^!yFh>Idud{#}mU7@3nF}lcx z88~vZ(F`dsl^n?qsHiH|U~i#lCT=w<9TPYl=A%kmD%jnhxb)2>$PtobmS%Ex6!M&s z1uF`?kwhvlT7y9rD~=}~^#HkoIce&F^h=87r3ybpj~ zx={|CAnTSWXSV!_M6UNM5~;d=R(Say@a6l*@bkVeWP7CSSJX#x(x8peKjiA*$XV7$q8>s!j}mdUM^{}E(}L2@7=@qetKk3*(_L+!Vl=mcCO0sG_9># zz03py7GWlXE+-1nlrBq>#3VsRqJyuiwk_#eAt

!zXxW=6tc(Z|ss`1f>G*+5bkC zgZ2cyqu_N=;~}vB)<;Ikhls+rx-91ltatX(F?vuQx-5@NCFU&^NS76KotW2@wJvK@ z%sbCIw#uSXP2FLRB+IHD2#Or@Pr6C+c#vbv2a0AfGYFJ0HPuV&TQ8#^YDI;>*BF`y z!AD$0r}|E%6S8EAO5km=#!Hob3D4PJLAAMQGsv2Ath}AD%ehHI zFBdEI4GLlg5UY69Px*NY!_sq!s-gwGY_JbrR+VM2_vQeLx)eANw5a}T+cL$vDUuZf zO+}DpFlKPXO;U8NGM|D@Ic&gW3&42$a0R2vd|X+oqAF}Ap&jI)QD}W@(c<9MN189p z(4>mSWHK$%Q|SZ(QTSMHnRDNvWixyNIsr&rEbESzFeTeI$1TYYvdn9MmS` zWVH{5agUJB2V;|=-4c=&B{`9kY;3)8|L_)~av3ExZIpsMN8lC#g^u`n96$S9OWWg; zS!tPgInX91G~3W6xRBa%&@{R#O-Pl&AkV=xbWILACw{qdxjR<56pZ9isVd^r&nlAf z+EcDV3O?UFVgd!NMj<+8*fktAxPv0h*}<3jBnHb@6JHc1lU4-ZNPdy@X_ZMi)My{f znJ!k!9m~b6Osx6ov4mVaDwTttE9$ddw1plP-l7LyluCulEHoUr>vkD`17ysE~uoOSwUg;eI5G_Sqzt^m?o9U zb}Y$EXr+AM^iV>Wbq(Q$2QsS26}ygQ>LD@YA6XknVBd*E8!tcv$~rsjKkfz z6^x{gT2kP@X^T|}fuK&BK@kx~*mTN-T_Hg63f7N=E;_Q#r%Add1^x!cc4t;iJE&N2 gy_SmT7^-{Hoeq\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/certificate settings +set builtin-trust-store="ipsec,wpa-eap,capsman,fetch,sstp,ovpn,radius,userman,\ + openflow,tr069,dot1x,www,api,reverse-proxy,logging" crl-store=system +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN +/ip settings +set max-neighbor-entries=8192 secure-redirects=no +/ipv6 settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes \ + forward=no max-neighbor-entries=8192 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=WAN lan-interface-list=\ + LAN wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=Bridge-LAN list=LAN +add interface="ether1 - Unet" list=WAN +/interface wireguard peers +add allowed-address=0.0.0.0/0,::/0 client-allowed-address=::/0 \ + endpoint-address=89.110.101.17 endpoint-port=29185 interface=WG name=\ + MikroVados persistent-keepalive=10s public-key=\ + "64Y25EUZQQt8EIeAJYD8qWt+te8qvGEepnswdBgmzlY=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan1,wlan2 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 interface=WG network=10.8.0.0 +/ip dhcp-client +add interface="ether1 - Unet" name=client1 +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set="=\"Client ID\"" mac-address=DE:4D:72:F3:1A:9F server=\ + masterDHCP +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.81 domain=WORKGROUP gateway=10.30.30.81 netmask=24 ntp-server=\ + 10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=8.8.8.8,8.8.4.4 verify-doh-cert=yes +/ip dns static +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 name=reg.vados.ru type=A +add address=10.30.30.33 match-subdomain=yes name=mikrots.vados.ru type=A +add address=10.30.30.33 name=oxidized.vados.ru type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" name=dns.google type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" name=dns.quad9.net \ + type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 name=MikroYellow type=A +add address=10.30.30.85 name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=10.30.30.20 name=garage type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=10.30.30.100-255 list=KIDS +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test +add address=157.240.247.174 list=Instagram +add address=46.53.178.107 list=Instagram +add address=179.60.195.174 list=Instagram +add address=157.240.205.174 list=Instagram +add address=31.13.24.0/21 list=Instagram +add address=31.13.64.0/18 list=Instagram +add address=45.64.40.0/22 list=Instagram +add address=66.220.144.0/20 list=Instagram +add address=69.63.176.0/20 list=Instagram +add address=69.171.224.0/19 list=Instagram +add address=74.119.76.0/22 list=Instagram +add address=103.4.96.0/22 list=Instagram +add address=129.134.0.0/16 list=Instagram +add address=157.240.0.0/16 list=Instagram +add address=173.252.64.0/18 list=Instagram +add address=179.60.192.0/22 list=Instagram +add address=185.60.216.0/22 list=Instagram +add address=204.15.20.0/22 list=Instagram +add address=157.240.200.63 list=Instagram +add address=185.60.219.63 list=Instagram +add address=129.134.31.12 list=Instagram +add address=66.81.203.132 list=Instagram +add address=185.89.218.12 list=Instagram +add address=31.13.66.63 list=Instagram +add address=84.15.65.162 list=Instagram +add address=68.66.224.28 list=Instagram +add address=157.240.253.63 list=Instagram +add address=83.174.11.224 list=Instagram +add address=157.240.9.52 list=Instagram +add address=157.240.252.174 list=Instagram +add address=157.240.195.63 list=Instagram +add address=31.13.71.52 list=Instagram +add address=57.144.110.192 list=Instagram +add address=157.240.252.17 list=Instagram +add address=84.15.66.97 list=Instagram +add address=217.168.6.33 list=Instagram +add address=31.13.83.52 list=Instagram +add address=157.240.241.63 list=Instagram +add address=129.134.30.12 list=Instagram +add address=185.89.219.12 list=Instagram +add address=157.240.252.10 list=Instagram +add address=157.240.201.63 list=Instagram +add address=66.81.203.197 list=Instagram +add address=179.60.195.52 list=Instagram +add address=66.81.203.7 list=Instagram +add address=216.40.34.41 list=Instagram +add address=157.240.202.63 list=Instagram +add address=157.240.229.63 list=Instagram +add address=157.240.252.63 list=Instagram +add address=31.13.72.53 list=Instagram +add address=124.108.16.224 list=Instagram +add address=157.240.205.63 list=Instagram +add address=92.46.37.96 list=Instagram +add address=157.240.247.63 list=Instagram +add address=157.240.234.63 list=Instagram +add address=157.240.235.63 list=Instagram +add address=87.245.208.97 list=Instagram +add address=216.58.192.0/19 list=Instagram +add address=209.85.128.0/17 list=Instagram +add address=198.105.240.0/20 list=Instagram +add address=173.194.0.0/16 list=Instagram +add address=172.217.0.0/16 list=Instagram +add address=142.250.0.0/15 list=Instagram +add address=108.177.0.0/17 list=Instagram +add address=87.245.197.140 list=Instagram +add address=74.125.0.0/16 list=Instagram +add address=64.233.160.0/19 list=Instagram +add address=157.240.0.1 list=Instagram +add address=157.240.238.63 list=Instagram +add address=157.240.238.174 list=Instagram +add address=157.240.0.63 list=Instagram +add address=157.240.224.63 list=Instagram +add address=157.240.224.174 list=Instagram +add address=157.240.251.36 list=Instagram +add address=157.240.253.12 list=Instagram +add address=157.240.253.35 list=Instagram +add address=157.240.238.13 list=Instagram +add address=157.240.238.56 list=Instagram +add address=157.240.238.175 list=Instagram +add address=57.144.112.141 list=Instagram +add address=157.240.251.60 list=Instagram +add address=157.240.251.128 list=Instagram +add address=157.240.238.5 list=Instagram +add address=157.240.253.13 list=Instagram +add address=157.240.253.5 list=Instagram +add address=157.240.238.2 list=Instagram +add address=157.240.238.37 list=Instagram +add address=157.240.251.5 list=Instagram +add address=157.240.251.34 list=Instagram +add address=57.144.112.1 list=Instagram +add address=157.240.238.54 list=Instagram +add address=129.134.26.123 list=Instagram +add address=157.240.252.3 list=Instagram +add address=31.13.84.4 list=Instagram +add address=157.240.224.12 list=Instagram +add address=157.240.238.4 list=Instagram +add address=157.240.0.13 list=Instagram +add address=3.33.139.32 list=Instagram +add address=157.240.0.35 list=Instagram +add address=157.240.238.14 list=Instagram +add address=157.240.238.60 list=Instagram +add address=57.144.112.145 list=Instagram +add address=157.240.251.35 list=Instagram +add address=151.101.84.159 list=Twitter +add address=pbs.twimg.com list=Twitter +add address=89.110.101.17 comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test +add address=geoip.co list=NoVdsina +add address=x.com list=Twitter +add address=facebook.com list=facebook +add address=fbcd.net list=facebook +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=82.202.162.184 comment=comp-lenta.ru list=NoWG +add address=smtp.mail.me.com.akadns.net. comment=smtp.mail.me.com list=NoWG +add address=17.57.155.37 comment=smtp.mail.me.com.akadns.net list=NoWG +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=NUC disabled=yes list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" disabled=yes list=\ + NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns.vados.ru comment=VDSina-vpn list=Trusted-VPN +add address=vdsina.com comment=VDSina-vpn list=Trusted-VPN +add address=cp.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ns1.vdsina.ru comment=VDSina-vpn list=Trusted-VPN +add address=ghcr.io comment=GitHub list=Trusted-VPN +add address=github.com comment=GitHub list=Trusted-VPN +add address=149.154.164.13 comment=telegra.ph list=FuckRKN +add address=109.70.26.37 comment=grani.ru list=FuckRKN +add address=194.85.61.76 comment=grani.ru list=FuckRKN +add address=104.16.4.81 comment=xhamster.com list=FuckRKN +add address=104.16.3.81 comment=xhamster.com list=FuckRKN +add address=188.114.97.1 comment=lostfilm.tv list=FuckRKN +add address=188.114.96.1 comment=lostfilm.tv list=FuckRKN +add address=172.67.182.196 comment=rutracker.org list=FuckRKN +add address=104.21.32.39 comment=rutracker.org list=FuckRKN +add address=104.247.81.99 comment=lurkmore.to list=FuckRKN +add address=104.20.28.254 comment=dou.ua list=FuckRKN +add address=172.66.164.200 comment=dou.ua list=FuckRKN +add address=66.254.114.79 comment=youporn.com list=FuckRKN +add address=185.110.92.41 comment=pornolab.net list=FuckRKN +add address=185.110.92.40 comment=pornolab.net list=FuckRKN +add address=172.67.172.95 comment=crimerussia.com list=FuckRKN +add address=104.21.71.238 comment=crimerussia.com list=FuckRKN +add address=149.154.167.99 comment=telegram.org list=FuckRKN +add address=149.154.166.110 comment=api.telegram.org list=FuckRKN +/ip firewall filter +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface-list=WAN protocol=tcp src-address=!10.30.30.0/24 \ + src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=\ + 22,8291,2222 in-interface-list=WAN protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface-list=WAN protocol=udp \ + src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=5d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface-list=WAN protocol=udp \ + src-address=!10.30.30.0/24 src-address-list=!Trusted-NTP +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=output comment="Accept Rule for Trusted-NTP Servers" \ + dst-address-list=Trusted-NTP dst-port=123 out-interface-list=WAN \ + protocol=udp +add action=accept chain=input comment=\ + "accept NTP clients on local area network" disabled=yes dst-port=123 \ + in-interface-list=LAN protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server dst-port=13231 out-interface="ether1 - Unet" \ + protocol=udp +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=input disabled=yes dst-port=443 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMP" disabled=yes \ + protocol=icmp +add action=accept chain=input comment=\ + "defconf: accept to local loopback (for CAPsMAN)" disabled=yes \ + dst-address=127.0.0.1 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +add action=drop chain=input disabled=yes in-interface-list=!LAN +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Test sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test new-routing-mark=To-VPN \ + src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address-list=FuckRKN new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Instagram dst-address-list=\ + Instagram new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=Twitter dst-address-list=\ + Twitter new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=YouTube dst-address-list=\ + YouTube new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment=facebook dst-address-list=\ + facebook new-routing-mark=To-VPN src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + dst-address=!10.30.30.0/24 dst-address-list=!Trusted-VPN log-prefix=\ + VPN-all new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=change-mss chain=forward comment="MSS on WG" new-mss=1380 \ + out-interface=WG passthrough=no protocol=tcp routing-mark=To-VPN \ + tcp-flags=syn tcp-mss=1381-65535 +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + in-interface=WG log-prefix=Mark-VPN-FT new-connection-mark=\ + VPN_No_FastTrack passthrough=no +add action=mark-routing chain=prerouting comment="VPN Network" dst-address=\ + 10.8.0.0/24 log-prefix=VPN-Net new-routing-mark=To-VPN passthrough=no \ + src-address=10.30.30.0/24 +/ip firewall nat +add action=redirect chain=dstnat comment=\ + "FORCE DNS TO LOCAL MIKROTIK DNS SERVER" dst-port=53 protocol=tcp \ + src-address=10.30.30.0/24 to-ports=53 +add action=redirect chain=dstnat dst-port=53 protocol=udp src-address=\ + 10.30.30.0/24 to-ports=53 +add action=masquerade chain=srcnat comment="masquerade Default" ipsec-policy=\ + out,none out-interface="ether1 - Unet" out-interface-list=WAN +add action=masquerade chain=srcnat comment=WG dst-address-list=!NoVdsina \ + log-prefix=WG-nat out-interface=WG +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + in-interface="ether1 - Unet" log-prefix=2Amster protocol=tcp \ + routing-mark=!To-VPN to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=81 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp routing-mark=\ + !To-VPN to-addresses=10.30.30.33 to-ports=80 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=vk.com \ + content=vk.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=ok.ru content=\ + ok.ru +add action=add-dst-to-address-list address-list=Instagram \ + address-list-timeout=none-dynamic chain=prerouting comment=Instagram \ + content=instagram.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting comment=Twitter content=twimg.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=x.com +add action=add-dst-to-address-list address-list=Twitter address-list-timeout=\ + none-dynamic chain=prerouting content=twitter.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting comment=YouTube content=youtube.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleapis.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ggpht.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=youtu.be +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=ytimg.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googlevideo.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=gstatic.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=googleusercontent.com +add action=add-dst-to-address-list address-list=YouTube address-list-timeout=\ + none-dynamic chain=prerouting content=nhacmp3youtube.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=me.com \ + content=me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=icloud.com \ + content=icloud.com +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting comment=facebook \ + content=fbcd.net +add action=add-dst-to-address-list address-list=facebook \ + address-list-timeout=none-dynamic chain=prerouting content=facebook.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=comp-lenta.ru \ + content=comp-lenta.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + smtp.mail.me.com content=smtp.mail.me.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gov.ru \ + content=gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + r78.fssp.gov.ru content=r78.fssp.gov.ru +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=api.db-ip.com \ + content=api.db-ip.com +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + api.telegram.org content=api.telegram.org +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=3 dst-address=192.168.0.0/24 gateway=l2tp-vpn +add disabled=no distance=4 dst-address=192.168.5.0/24 gateway=l2tp-vpn +add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WG routing-table=\ + To-VPN scope=30 target-scope=10 +add disabled=no distance=2 dst-address=0.0.0.0/0 gateway=146.120.64.209 \ + routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set graphs-plain=no rest-plain=no webfig-plain=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add interface="ether1 - Unet" type=external +add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add comment="doh, doh-url=https://security.cloudflare-dns.com/dns-query, notif\ + y, name=CloudFlare-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 \ + http-codes="" test-script="" type=simple up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + port=443 test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=Google-DNS IPv4" disabled=yes \ + down-script="" host=8.8.8.8 http-codes="" test-script="" type=simple \ + up-script="" +add comment="doh-fallback, doh-url=https://dns.google/dns-query, doh-cert=GTS \ + Root R1, notify, name=Google-DOH IPv4" disabled=yes down-script="" host=\ + 8.8.4.4 http-codes="" test-script="" type=simple up-script="" +add comment="dns, notify, name=Cuad9-DOH IPv4" disabled=yes down-script="" \ + host=9.9.9.9 http-codes="" test-script="" type=simple up-script="" +add comment="doh-fallback, doh-url=https://dns.quad9.net/dns-query, name=Cuad9\ + -DOH IPv4" disabled=yes down-script="" host=149.112.112.112 http-codes="" \ + test-script="" type=simple up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" test-script="" type=simple \ + up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/history/20260513/20260513162002-Diff-Config.rsc b/MikroMaster/history/20260513/20260513162002-Diff-Config.rsc new file mode 100644 index 0000000..6820574 --- /dev/null +++ b/MikroMaster/history/20260513/20260513162002-Diff-Config.rsc @@ -0,0 +1,4 @@ +1190c1190 +< add disabled=yes forced-ip=89.110.101.17 interface=WG type=external +--- +> add forced-ip=89.110.101.17 interface=WG type=external -- 2.52.0