From 8dc445d9e02d7f004bd8e835cfcd40e0e4b6342b Mon Sep 17 00:00:00 2001 From: vados-dev Date: Sun, 28 Jun 2026 06:20:03 +0300 Subject: [PATCH] Backup for MikroNUC created successfully at Jun 28 06:20:03. --- .../20260628/20260628060004-Config.rsc | 3693 +++++++++++++ MikroMaster/tmp/Diff-Config.rsc | 78 +- .../20260628/20260628062001-Binary.backup | Bin 0 -> 357943 bytes MikroNUC/20260628/20260628062001-Config.rsc | 4834 +++++++++++++++++ .../20260628/20260628062001-Diff-Config.rsc | 13 + 5 files changed, 8578 insertions(+), 40 deletions(-) create mode 100644 MikroMaster/20260628/20260628060004-Config.rsc create mode 100644 MikroNUC/20260628/20260628062001-Binary.backup create mode 100644 MikroNUC/20260628/20260628062001-Config.rsc create mode 100644 MikroNUC/history/20260628/20260628062001-Diff-Config.rsc diff --git a/MikroMaster/20260628/20260628060004-Config.rsc b/MikroMaster/20260628/20260628060004-Config.rsc new file mode 100644 index 0000000..849ec6f --- /dev/null +++ b/MikroMaster/20260628/20260628060004-Config.rsc @@ -0,0 +1,3693 @@ +# 2026-06-28 06:00:07 by RouterOS 7.23.1 +# software id = A8L5-07YF +# +# model = RB952Ui-5ac2nD +# serial number = D3D50CEDCD38 +/interface bridge +add admin-mac=48:8F:5A:8E:1A:BF auto-mac=no dhcpv6-agent-circuit-id=\ + "\$(INTERFACE):\$(VID)" dhcpv6-agent-remote-id="\$(BRIDGEMAC)" name=\ + Bridge-LAN port-cost-mode=short +/interface ethernet +set [ find default-name=ether1 ] comment="WAN - Unet" loop-protect=off name=\ + "ether1 - Unet" rx-flow-control=auto tx-flow-control=auto +set [ find default-name=ether2 ] comment=LAN-2 +set [ find default-name=ether3 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-3 +set [ find default-name=ether4 ] comment=LAN-4 +set [ find default-name=ether5 ] advertise="10M-baseT-half,10M-baseT-full,100M\ + -baseT-half,100M-baseT-full,1G-baseT-full,1G-baseX" comment=LAN-5 \ + loop-protect=on poe-out=off rx-flow-control=auto tx-flow-control=auto +/interface wireless +# managed by CAPsMAN +set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \ + wireless-protocol=802.11 +# managed by CAPsMAN +set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \ + wireless-protocol=802.11 +/interface wireguard +add comment=WG disabled=yes listen-port=13231 mtu=1320 name=WG +/interface list +add include=static name=LAN +add name=Internet +add include=Internet name=WAN +/interface wireless security-profiles +set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk mode=\ + dynamic-keys supplicant-identity=MikroTik +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=HP1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +add name=VADOS-LEN options=HostName +add name=VADOS-NUC options=HostName +add name=MikroNUC options=HostName +add name=master options=HostName +add name=MikroYellow options=HostName +add name="=\"Client ID\"" options=HostName +add name=iVados options=HostName +/ip dns forwarders +add dns-servers=1.0.0.1,1.1.1.1 name=blsp.at verify-doh-cert=no +add comment=Kra dns-servers=1.0.0.1,1.1.1.1 name=slon2.to verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=slon3.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=slon3.cc verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2web.at verify-doh-cert=no +add dns-servers=1.1.1.1,1.0.0.1 name=bs2best.at verify-doh-cert=no +add dns-servers=1.0.0.1,1.1.1.1 name=psrms.is verify-doh-cert=no +/ip ipsec proposal +set [ find default=yes ] disabled=yes +/ip pool +add name=dhcp ranges=10.30.30.83-10.30.30.254 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set interface=Bridge-LAN lease-time=10m \ + name=masterDHCP server-address=10.30.30.81 +/ip smb users +set [ find default=yes ] disabled=yes +add disabled=yes name=vados +/ipv6 dhcp-client option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=DUID value=0x00030001488f5a8e1abc +add code=61 name=clientid +/ipv6 dhcp-server option +add code=119 name=domain-search-list value="0x03'WORKGROUP'0x00" +add code=12 name=HostName value="\$(HOSTNAME)" +add code=61 name=CLIENT_DUID +add code=61 name=CLIENT_MAC +/ppp profile +set *FFFFFFFE use-upnp=no +/routing bgp template +set default disabled=no output.network=bgp-networks +/routing table +add disabled=no fib name=To-VPN +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.86.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.86.pub\";\ + \n\r\ + \n#:local Script AM-setup\ + \n;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n\ + \n\r\ + \n#\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\ + \n\r\ + \n#\r\ + \n\ + \n#root.mnuc.backuper\ + \n\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@10\ + .30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n\ + \n#:local Script AM-GlobalConfig;\ + \n\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n\ + \n#/usb1/mikro_bak_rsa.pub\ + \n#:local FetchFile AM-DOHCert.rsc\ + \n\ + \n\r\ + \n\r\ + \n#\ + \n:global MkDir;\ + \n\r\ + \n\ + \n#:local FetchFile Binary.backup\ + \n:local localDir \"\";\ + \n\ + \n\r\ + \n#\$MkDir \$localDir;\r\ + \n\ + \n#\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add comment=\ + "Lookup IP addresses for RKN list and add them to firewall address-list" \ + dont-require-permissions=no name=AM-RKN-dnsLookup owner=AM-RKN-dnsLookup \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-RKN-dnsLookup\r\ + \n# Script comment: Lookup IP addresses for RKN list and add them to firew\ + all address-list\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Script description: This script is intended to be run periodically, e.\ + g. once a day, to update the IP addresses in the firewall address-list bas\ + ed on the RKN list.\r\ + \n# It resolves the domain names in the RKN list and a\ + dds the corresponding IP addresses to the specified firewall address-list.\ + \r\ + \n# The script also handles CNAME records by following\ + \_them until it finds A records.\r\ + \n# Usage:\r\ + \n# /system/script { run AM-RKN-dnsLookup; }\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:global dnsLookupReady false;\r\ + \n:if ([:typeof \$dnsLookupReady] != \"boolean\") do={ :set dnsLookupReady\ + \_true; }\r\ + \nwhile (!\$dnsLookupReady) do={ :nothing; }\r\ + \n:set dnsLookupReady false;\r\ + \n\r\ + \n:local arrRKN {\r\ + \n \"telegra.ph\"\r\ + \n \"grani.ru\"\r\ + \n \"xhamster.com\"\r\ + \n \"lostfilm.tv\"\r\ + \n \"rutracker.org\"\r\ + \n \"lurkmore.to\"\r\ + \n \"dou.ua\"\r\ + \n \"youporn.com\"\r\ + \n \"pornolab.net\"\r\ + \n \"crimerussia.com\"\r\ + \n \"telegram.org\"\r\ + \n \"api.telegram.org\"\r\ + \n \"facebook.com\"\r\ + \n \"instagram.com\"\r\ + \n \"x.com\"\r\ + \n \"twitter.com\"\r\ + \n \"youtube.com\"\r\ + \n \"googleapis.com\"\r\ + \n \"youtu.be\"\r\ + \n \"googlevideo.com\"\r\ + \n \"gstatic.com\"\r\ + \n \"googleusercontent.com\"\r\ + \n \"nhacmp3youtube.com\"\r\ + \n \"telegram.me\"\r\ + \n \"t.me\";}\r\ + \n\r\ + \n:local ListRKN \"RKN-dnsLookup\";\r\ + \n:local ListComment (\"ListRKN managed by \" . \$ScriptName);\r\ + \n:foreach aListItem in=[/ip/firewall/address-list find list=\$ListRKN] do\ + ={\r\ + \n /ip firewall address-list remove \$aListItem;\r\ + \n}\r\ + \n:foreach aItem in=\$arrRKN do={\r\ + \n# :do {\r\ + \n :retry delay=500ms max=5 on-error={:log error \"dns resolve fail\ + ure [ \$aItem - resolve ip ]\"} command={:resolve \$aItem}\r\ + \n# } on-error={\r\ + \n# :log error \"dns resolve failure [ \$arItem - resolve ip ]\";\r\ + \n# }\r\ + \n :foreach dnsRecord in=[/ip dns cache all find where (name=\$aItem)] \ + do={\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"A\") do={\r\ + \n :local newAddress [/ip dns cache all get \$dnsRecord data];\ + \r\ + \n :do {\r\ + \n /ip firewall address-list add list=\$ListRKN address=\$newA\ + ddress comment=\$aItem;\r\ + \n :log warning \"Successfully adding ip to list A record: \ + \$dnsRecord, address: \$newAddress domain: \$aItem\";\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list A record: \$dn\ + sRecord, address: \$newAddress domain: \$aItem\";\r\ + \n }\r\ + \n }\r\ + \n :if ([/ip dns cache all get \$dnsRecord type]=\"CNAME\") do={\r\ + \n :local cname;\r\ + \n :local nextCname;\r\ + \n :local cnameAddress;\r\ + \n :set cname [/ip dns cache all find where (name=\$aItem && ty\ + pe=\"CNAME\")];\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip dns \ + cache all get \$cname data] && type=\"CNAME\")];\r\ + \n :while (\$nextCname != \"\") do={\r\ + \n :set cname \$nextCname;\r\ + \n :set nextCname [/ip dns cache all find where (name=[/ip \ + dns cache all get \$cname data] && type=\"CNAME\")];\r\ + \n }\r\ + \n :foreach aRecord in=[/ip dns cache all find where (name=[/ip\ + \_dns cache all get \$cname data] && type=\"A\")] do={\r\ + \n :do {\r\ + \n :set cnameAddress [/ip dns cache all get \$aRecord d\ + ata];\r\ + \n /ip firewall address-list add list=\$ListRKN address\ + =\$cnameAddress comment=\$aItem;\r\ + \n :log warning \"Succesfully adding ip to list CNAME r\ + ecord: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \ + \$aItem.\";\r\ + \n# /ip firewall raw add action=add-dst-to-address-list\ + \_address-list=\$ListRKN address-list-timeout=none-dynamic chain=preroutin\ + g comment=\$aItem content=\$aItem;\r\ + \n } on-error={\r\ + \n :log error \"error when adding ip to list CNAME reco\ + rd: \$cname, A record: \$aRecord, address: \$newAddress, from domain: \$aI\ + tem.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n :log error (\$ScriptName . \"System Scheduler for script: \" . \$Scri\ + ptName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add name=\$ScriptName on-event=\"/system/script { \ + run \$ScriptName; }\" comment=\"Update RKN DNS Looup\" interval=00:30:00 p\ + olicy=\"ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon\"\ + \_start-time=startup;\r\ + \n }\r\ + \n:set dnsLookupReady true;\r\ + \ndelay 2s; \r\ + \n:global dnsLookupReady (a);\r\ + \n" +add dont-require-permissions=no name="renameLists " owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local oldName \"Test\";\ + \n:local newName \"Test-IP\";\ + \n/ip firewall address-list\ + \n:foreach i in=[find list=\$oldName] do={\ + \nset \$i list=\$newName;\ + \n}\ + \n" +add dont-require-permissions=no name=IPv6-Settings owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + #############Script Settings##################\ + \n\ + \n:local \"IF-TUN\" \"6to4-tun\"\ + \n:local \"IF-LOC\" \"Bridge-LAN\"\ + \n:local \"POOL-6TO4\" \"poolV6-local\"\ + \n:local \"force-update\" false\ + \n############ use then static ip #######################\ + \n:local \"lease-address\" [/ip address get [find interface=\$\"IF-LOC\"] \ + address]\ + \n#:local \"interface\" \"ext\"\ + \n:local bound 0\ + \n\ + \n###############################################\ + \n\ + \n:local 6to4prefix do={\ + \n :global dec2hex\ + \n :local ipv4 \$1\ + \n :local ipv6 \"2002:\"\ + \n :for i from=0 to=2 step=1 do={ \ + \n :if ( \$i = 2) do={\ + \n :set ipv6 (\$ipv6.\":\")\ + \n }\ + \n :local fp [:find \$ipv4 \".\"]\ + \n :if ( \$fp > 0 ) do={\ + \n :set ipv6 (\$ipv6.[\$dec2hex [:pick \$ipv4 0 \$fp]])\ + \n :set ipv4 [:pick \$ipv4 (\$fp + 1 ) [:len \$ipv4]]\ + \n }\ + \n }\ + \n :return (\$ipv6.[\$dec2hex \$ipv4])\ + \n}\ + \n:local \"str_replace\" do={\ + \n :local \"str-pos\" [:find \$1 \$2]\ + \n :local \"str-len\" [:len \$2]\ + \n :local str \"\"\ + \n :local rest \$1\ + \n :while (\$\"str-pos\" >= 0) do={\ + \n :local t [:pick \$rest 0 \$\"str-pos\"]\ + \n :if ( \$4 > 0 ) do={\ + \n :for i from=1 to=(\$4 - [:len \$t]) step=1 do={\ + \n :set str (\$str.\$5)\ + \n }\ + \n }\ + \n :set str (\$str.\$t.\$3)\ + \n :set rest [:pick \$rest (\$\"str-pos\"+\$\"str-len\") [:len \$re\ + st]]\ + \n :set \"str-pos\" [:find \$rest \$2]\ + \n }\ + \n :return (\$str.\$rest)\ + \n}\ + \n\ + \n:if (\$bound=1) do={\ + \n :local t [:find \$\"lease-address\" \"/\"]\ + \n\ + \n :if ( \$t >= 0 ) do={\ + \n :set \"lease-address\" [:pick \$\"lease-address\" 0 \$t]\ + \n }\ + \n\ + \n :if ( [/interface 6to4 print count-only where name=\$\"IF-TUN\"] = 0\ + ) do={\ + \n /interface 6to4 add !keepalive local-address=\$\"lease-address\"\ + \_mtu=1280 name=\$\"IF-TUN\" remote-address=10.30.30.0\ + \n :set \"force-update\" true\ + \n }\ + \n\ + \n :local \"IPv4-TUN\" [/interface 6to4 get [find name=\$\"IF-TUN\"] lo\ + cal-address];\ + \n\ + \n :if ( \$\"lease-address\" != \$\"IPv4-TUN\" || \$\"force-update\" = \ + true) do={\ + \n /interface 6to4 set [find name=\$\"IF-TUN\"] local-address=\$\"l\ + ease-address\"\ + \n /ipv6 address remove [find interface=\$\"IF-TUN\"]\ + \n /ipv6 address remove [find interface=\$\"IF-LOC\"]\ + \n /ipv6 route remove [find gateway ~ \$\"IF-TUN\" and dst-address=\ + \"::/0\"]\ + \n :local \"pool-prefix\" [\$6to4prefix \$\"lease-address\"]\ + \n :if ( [/ipv6 pool print count-only where name=\$\"POOL-6TO4\"] =\ + \_0) do={ \ + \n /ipv6 pool add name=\$\"POOL-6TO4\" prefix=(\$\"pool-prefix\ + \".\":1::/64\") prefix-length=64\ + \n } else={\ + \n /ipv6 pool set [/ipv6 pool find where name=\$\"POOL-6TO4\"] \ + prefix=(\$\"pool-prefix\".\":1::/64\")\ + \n }\ + \n /ipv6 address add address=(\$\"pool-prefix\".\"::\".[\$MAC2EUI64\ + \_[/interface get [find name=\$\"interface\"] mac-address]].\"/3\") interf\ + ace=\$\"IF-TUN\" advertise=no\ + \n /ipv6 address add eui-64=yes from-pool=\$\"POOL-6TO4\" interface\ + =\$\"IF-LOC\" advertise=yes\ + \n /ipv6 route add dst-address=::/0 gateway=(\"::10.30.30.81%\".\$\ + \"IF-TUN\")\ + \n :local t [/ipv6 address get [find interface=\$\"IF-LOC\"] addres\ + s]\ + \n :set t [:pick \$t 0 [:find \$t \"/\"]]\ + \n :if ( [/ipv6 dhcp-server option print count-only where name=DNS]\ + \_= 0) do={\ + \n /ipv6 dhcp-server option add code=23 name=DNS value=(\"0x\".\ + [\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n } else={\ + \n /ipv6 dhcp-server option set [/ipv6 dhcp-server option find \ + where name=DNS] value=(\"0x\".[\$\"str_replace\" \$t \":\" \"\" 4 \"0\"])\ + \n }\ + \n :if ( [/ipv6 dhcp-server print count-only where interface=\$\"IF\ + -LOC\"] = 0) do={\ + \n /ipv6 dhcp-server add address-pool=\$\"POOL-6TO4\" dhcp-opti\ + on=DNS interface=\$\"IF-LOC\" lease-time=1d name=\$\"IF-LOC\"\ + \n }\ + \n :if ( [ipv6 nd print count-only where interface=\$\"IF-LOC\"] = \ + 0) do={\ + \n /ipv6 nd add advertise-dns=no interface=\$\"IF-LOC\" other-c\ + onfiguration=yes\ + \n }\ + \n }\ + \n}" +add dont-require-permissions=no name=IPv6-GlobalFunc owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global MAC2EUI64 do={\ + \n :local EUI64 \"\"\ + \n :local MAC \$1\ + \n :local HEX2DEC \"0123456789ABCDEF\"\ + \n :for i from=0 to=5 step=1 do={\ + \n :if ( \$i = 0 ) do={\ + \n :set EUI64 [:pick \$MAC 0]\ + \n :set EUI64 (\$EUI64.[:tostr [:pick \$\"HEX2DEC\" ([:find \$\ + \"HEX2DEC\" [:pick \$MAC 1]] ^ 2)]])\ + \n }\ + \n :if ( \$i = 1 || \$i = 3) do={\ + \n :set EUI64 (\$EUI64.\":\")\ + \n }\ + \n :if ( \$i = 2 ) do={\ + \n :set EUI64 (\$EUI64.\"FF:FE\")\ + \n }\ + \n :if ( [:find \$MAC \":\"] = 2 ) do={\ + \n :set MAC [:pick \$MAC 3 [:len \$MAC]]\ + \n :set EUI64 (\$EUI64.[:pick \$MAC 0 2])\ + \n }\ + \n }\ + \n :return (\$EUI64)\ + \n}\ + \n\ + \n:global dec2hex do={\ + \n :local hex \"\"\ + \n :local dec [:tonum \$1]\ + \n :for i from=0 to=4 step=4 do={\ + \n :set hex ([:pick \"0123456789ABCDEF\" ((\$dec>>\$i)&0xf) (((\$de\ + c>>\$i)&0xf)+1)].\$hex)\ + \n }\ + \n :return ([:tostr \$hex])\ + \n}" +/user group +add name=backup policy="ssh,read,write,policy,test,web,sniff,sensitive,api,res\ + t-api,!local,!telnet,!ftp,!reboot,!winbox,!password,!romon" +/ip smb +set enabled=no interfaces=lo +/interface bridge port +add bridge=Bridge-LAN interface=ether5 +add bridge=Bridge-LAN interface=ether2 +add bridge=Bridge-LAN interface=ether4 trusted=yes +add bridge=Bridge-LAN interface=ether3 +add bridge=Bridge-LAN interface=wlan2 +add bridge=Bridge-LAN interface=wlan1 +/interface bridge settings +set use-ip-firewall=yes +/ip firewall connection tracking +set udp-timeout=10s +/ip neighbor discovery-settings +set discover-interface-list=LAN lldp-med=no lldp-poe-power=no +/ip settings +set accept-redirects=yes ipv4-multipath-hash-policy=l4 max-neighbor-entries=\ + 8192 +/ipv6 settings +set disable-ipv6=yes disable-link-local-address=yes forward=no \ + max-neighbor-entries=8192 multipath-hash-policy=l4 +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN request-interval=1m wan-interface-list=WAN +/interface l2tp-server server +set authentication=mschap2 use-ipsec=yes +/interface list member +add interface=ether4 list=WAN +add interface="ether1 - Unet" list=Internet +add disabled=yes interface=WG list=WAN +add interface=Bridge-LAN list=LAN +/interface wireguard peers +add allowed-address=0.0.0.0/0 client-allowed-address=::/0 disabled=yes \ + endpoint-address=109.107.177.79 endpoint-port=29185 interface=WG name=\ + VDSina persistent-keepalive=10s public-key=\ + "zuRsO+dL/j6awaBWZ/NgnHR+bCNUjRWbaHFpdzkNnw4=" +/interface wireless cap +# +set bridge=Bridge-LAN caps-man-addresses=10.30.30.10 \ + caps-man-certificate-common-names=CAPsMAN-51B25E507D07 certificate=\ + CAP-488F5A8E1ABC discovery-interfaces=Bridge-LAN enabled=yes interfaces=\ + wlan2,wlan1 lock-to-caps-man=yes +/ip address +add address=10.30.30.81/24 interface=Bridge-LAN network=10.30.30.0 +add address=10.8.0.2/24 disabled=yes interface=WG network=10.8.0.0 +/ip cloud +set update-time=no +/ip dhcp-client +add add-default-route=special-classless default-route-distance=2 \ + default-route-tables=main:2 dhcp-options=clientid_duid,clientid \ + interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +/ip dhcp-server config +set accounting=no +/ip dhcp-server lease +add address=10.30.30.101 client-id=1:48:8f:5a:8e:ee:a8 mac-address=\ + 48:8F:5A:8E:EE:A8 server=masterDHCP +add address=10.30.30.107 client-id=1:f0:de:f1:91:d:1e mac-address=\ + F0:DE:F1:91:0D:1E server=masterDHCP +add address=10.30.30.83 client-id=1:0:80:77:ec:43:86 mac-address=\ + 00:80:77:EC:43:86 server=masterDHCP +add address=10.30.30.70 dhcp-option=domain-search-list,HostName \ + dhcp-option-set=HP1505n mac-address=00:1E:0B:1A:88:8D server=masterDHCP +add address=10.30.30.50 client-id=1:4:7c:16:36:f5:37 mac-address=\ + 04:7C:16:36:F5:37 server=masterDHCP +add address=10.30.30.71 client-id=1:10:2d:41:2c:20:c2 mac-address=\ + 10:2D:41:2C:20:C2 server=masterDHCP +add address=10.30.30.61 client-id=1:10:8:c1:81:59:5f mac-address=\ + 10:08:C1:81:59:5F server=masterDHCP +add address=10.30.30.72 client-id=1:10:38:1f:d2:5f:13 mac-address=\ + 10:38:1F:D2:5F:13 server=masterDHCP +add address=10.30.30.99 client-id=1:10:b1:df:e9:d0:d5 mac-address=\ + 10:B1:DF:E9:D0:D5 server=masterDHCP +add address=10.30.30.111 client-id=1:fe:2:52:be:3f:16 mac-address=\ + FE:02:52:BE:3F:16 server=masterDHCP +add address=10.30.30.92 client-id=1:d4:6d:6d:fd:e5:49 mac-address=\ + D4:6D:6D:FD:E5:49 server=masterDHCP +add address=10.30.30.93 client-id=1:7e:8b:1e:cb:b8:cb mac-address=\ + CC:42:10:12:46:94 server=masterDHCP +add address=10.30.30.94 client-id=1:50:cc:f8:85:96:a mac-address=\ + 50:CC:F8:85:96:0A server=masterDHCP +add address=10.30.30.82 client-id=1:e4:18:6b:58:34:ab mac-address=\ + E4:18:6B:58:34:AB server=masterDHCP +add address=10.30.30.75 client-id=1:0:27:15:41:97:a9 mac-address=\ + 00:27:15:41:97:A9 server=masterDHCP +add address=10.30.30.77 dhcp-option=HostName dhcp-option-set=StartLife1 \ + mac-address=C4:82:E1:03:49:10 server=masterDHCP +add address=10.30.30.73 client-id=1:10:38:1f:82:81:f2 mac-address=\ + 10:38:1F:82:81:F2 server=masterDHCP +add address=10.30.30.95 client-id=1:88:ae:dd:60:39:54 dhcp-option=HostName \ + dhcp-option-set=VADOS-NUC mac-address=88:AE:DD:60:39:54 server=masterDHCP +add address=10.30.30.98 client-id=1:c8:5b:76:d8:cc:bf dhcp-option=HostName \ + dhcp-option-set=VADOS-LEN mac-address=C8:5B:76:D8:CC:BF server=masterDHCP +add address=10.30.30.96 client-id=iPhone mac-address=4A:91:ED:0E:1F:39 \ + server=masterDHCP +add address=10.30.30.74 client-id=MiTV dhcp-option=HostName dhcp-option-set=\ + MiTV mac-address=20:72:A9:D3:34:36 server=masterDHCP +add address=10.30.30.30 dhcp-option=HostName dhcp-option-set=miller \ + mac-address=F0:75:5D:1E:5F:71 server=masterDHCP +add address=10.30.30.100 client-id=iVados dhcp-option=HostName \ + dhcp-option-set=iVados mac-address=DE:4D:72:F3:1A:9F server=masterDHCP +add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ + ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ + dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ + use-src-mac=yes +/ip dhcp-server network +add address=10.30.30.0/24 caps-manager=10.30.30.10 dhcp-option=\ + domain-search-list dhcp-option-set=domain-search-set dns-server=\ + 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ + 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +/ip dns +set allow-remote-requests=yes cache-max-ttl=1d doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ + verify-doh-cert=yes +/ip dns static +add address=109.107.177.79 comment="VDSina Server DNS" name=ns1.vados.ru \ + type=A +add address=109.107.177.79 name=vds.vados.ru type=A +add comment="Local DNS server for vados.ru" disabled=yes ns=10.30.30.81 \ + regexp=*.vados.ru type=NS +add comment="*.vados.ru Regexp" disabled=yes forward-to=10.30.30.81 regexp=\ + "\".*\\\\.vados\\\\.ru\"" type=FWD +add comment="*.30.30.10.in-addr.arpa Regexp" disabled=yes forward-to=\ + 10.30.30.81 regexp="\".*\\\\.30\\\\.30\\\\.10\\\\.in-addr\\\\.arpa" type=\ + FWD +add address=10.30.30.81 comment=NS.vados.ru.local disabled=yes name=\ + ns.vados.ru.local type=A +add comment="DNS ns.vados.ru.local" disabled=yes match-subdomain=yes name=\ + vados.ru ns=ns.vados.ru.local type=NS +add address=10.30.30.33 comment=reg.vados.ru name=reg.vados.ru type=A +add address=8.8.8.8 comment="Google-dns IPv4 1" match-subdomain=yes name=\ + dns.google type=A +add address=8.8.4.4 comment="Google-dns IPv4 2" name=dns.google type=A +add address=10.30.30.33 comment=AMSTER name=amster.vados.ru type=A +add address=10.30.30.33 name=ros.vados.ru type=A +add address=10.30.30.95 name=vados-nuc type=A +add address=10.30.30.33 name=amster-nuc type=A +add address=10.30.30.33 name=amster type=A +add address=10.30.30.33 name=amster-reg type=A +add address=10.30.30.33 disabled=yes name=mng.vados.ru type=A +add address=10.30.30.33 name=mgr.vados.ru type=A +add address=10.30.30.33 name=prt.vados.ru type=A +add address=10.30.30.33 disabled=yes match-subdomain=yes name=\ + mikrots.vados.ru type=A +add address=10.30.30.30 comment=MILLER name=miller.vados.ru type=A +add address=10.30.30.30 name=MILLER-LEN type=A +add address=10.30.30.30 name=miller type=A +add address=1.0.0.1 comment="CloudFlare-doh IPv4 2" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=1.1.1.1 comment="CloudFlare-doh IPv4 1" disabled=yes name=\ + security.cloudflare-dns.com type=A +add address=9.9.9.9 comment="Cuad9-dns IPv4 1" disabled=yes name=\ + dns.quad9.net type=A +add address=149.112.112.112 comment="Cuad9-dns IPv4 2" disabled=yes name=\ + dns.quad9.net type=A +add address=195.133.25.16 comment="DNS Comss" disabled=yes name=dns.comss.one \ + type=A +add address=10.30.30.81 comment=LocalNet name=MikroVados type=A +add address=10.30.30.10 name=MikroNUC type=A +add address=10.30.30.86 disabled=yes name=MikroYellow type=A +add address=10.30.30.85 disabled=yes name=MikroMic type=A +add address=10.30.30.95 name=VADOS-NUC type=A +add address=10.30.30.98 name=VADOS-LEN type=A +add address=91.192.189.2 comment=Unet-DNS disabled=yes name=ns1.unet.ws type=\ + A +add address=10.30.30.20 disabled=yes name=garage type=A +/ip firewall address-list +add address=91.215.120.206 list=TRUSTED +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=8.8.4.0/24 list=YouTube +add address=8.8.8.0/24 list=YouTube +add address=8.34.208.0/20 list=YouTube +add address=8.35.192.0/20 list=YouTube +add address=23.236.48.0/20 list=YouTube +add address=23.251.128.0/19 list=YouTube +add address=34.0.0.0/15 list=YouTube +add address=34.2.0.0/16 list=YouTube +add address=34.3.0.0/23 list=YouTube +add address=34.3.3.0/24 list=YouTube +add address=34.3.4.0/24 list=YouTube +add address=34.3.8.0/21 list=YouTube +add address=34.3.16.0/20 list=YouTube +add address=34.3.32.0/19 list=YouTube +add address=34.3.64.0/18 list=YouTube +add address=34.4.0.0/14 list=YouTube +add address=34.8.0.0/13 list=YouTube +add address=34.16.0.0/12 list=YouTube +add address=34.32.0.0/11 list=YouTube +add address=34.64.0.0/10 list=YouTube +add address=34.128.0.0/10 list=YouTube +add address=35.184.0.0/13 list=YouTube +add address=35.192.0.0/14 list=YouTube +add address=35.196.0.0/15 list=YouTube +add address=35.198.0.0/16 list=YouTube +add address=35.199.0.0/17 list=YouTube +add address=35.199.128.0/18 list=YouTube +add address=35.200.0.0/13 list=YouTube +add address=35.208.0.0/12 list=YouTube +add address=35.224.0.0/12 list=YouTube +add address=35.240.0.0/13 list=YouTube +add address=57.140.192.0/18 list=YouTube +add address=64.15.112.0/20 list=YouTube +add address=64.233.160.0/19 list=YouTube +add address=66.22.228.0/23 list=YouTube +add address=66.102.0.0/20 list=YouTube +add address=66.249.64.0/19 list=YouTube +add address=70.32.128.0/19 list=YouTube +add address=72.14.192.0/18 list=YouTube +add address=74.125.0.0/16 list=YouTube +add address=104.154.0.0/15 list=YouTube +add address=104.196.0.0/14 list=YouTube +add address=104.237.160.0/19 list=YouTube +add address=107.167.160.0/19 list=YouTube +add address=107.178.192.0/18 list=YouTube +add address=108.59.80.0/20 list=YouTube +add address=108.170.192.0/18 list=YouTube +add address=108.177.0.0/17 list=YouTube +add address=130.211.0.0/16 list=YouTube +add address=136.22.160.0/20 list=YouTube +add address=136.22.176.0/21 list=YouTube +add address=136.22.184.0/23 list=YouTube +add address=136.22.186.0/24 list=YouTube +add address=142.250.0.0/15 list=YouTube +add address=146.148.0.0/17 list=YouTube +add address=152.65.208.0/22 list=YouTube +add address=152.65.214.0/23 list=YouTube +add address=152.65.218.0/23 list=YouTube +add address=152.65.222.0/23 list=YouTube +add address=152.65.224.0/19 list=YouTube +add address=162.120.128.0/17 list=YouTube +add address=162.216.148.0/22 list=YouTube +add address=162.222.176.0/21 list=YouTube +add address=172.110.32.0/21 list=YouTube +add address=172.217.0.0/16 list=YouTube +add address=172.253.0.0/16 list=YouTube +add address=173.194.0.0/16 list=YouTube +add address=173.255.112.0/20 list=YouTube +add address=192.158.28.0/22 list=YouTube +add address=192.178.0.0/15 list=YouTube +add address=193.186.4.0/24 list=YouTube +add address=199.36.154.0/23 list=YouTube +add address=199.36.156.0/24 list=YouTube +add address=199.192.112.0/22 list=YouTube +add address=199.223.232.0/21 list=YouTube +add address=207.223.160.0/20 list=YouTube +add address=208.65.152.0/22 list=YouTube +add address=208.68.108.0/22 list=YouTube +add address=208.81.188.0/22 list=YouTube +add address=208.117.224.0/19 list=YouTube +add address=209.85.128.0/17 list=YouTube +add address=216.58.192.0/19 list=YouTube +add address=216.73.80.0/20 list=YouTube +add address=216.239.32.0/19 list=YouTube +add address=2ip.ru list=Test-IP +add address=wg.vados.ru comment=VDSIna list=TRUSTED +add address=10.8.0.0/24 comment="WG VDSIna" disabled=yes list=TRUSTED +add address=ikus.pesc.ru comment=ikus.pesc.ru list=NoVdsina +add address=love.ru comment=love.ru list=NoVdsina +add address=gosuslugi.ru comment=gosuslugi.ru list=NoVdsina +add address=pochta.ru comment=pochta.ru list=NoVdsina +add address=vdsina.com list=NoVdsina +add address=vdsina.ru list=NoVdsina +add address=youla.ru list=NoVdsina +add address=kupiprodai.ru list=NoVdsina +add address=myip.ru list=Test-IP +add address=geoip.co list=NoVdsina +add address=comp-lenta.ru list=NoVdsina +add address=128.85.102.70 comment=update.microsoft.com list=\ + windowsupdateslist +add address=wu-b-net.trafficmanager.net. comment=\ + ctldl.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=ctldl.windowsupdate.com.delivery.microsoft.com. comment=\ + ctldl.windowsupdate.com list=windowsupdateslist +add address=redir.update.msft.com.trafficmanager.net. comment=\ + update.microsoft.com list=windowsupdateslist +add address=geo.prod.do.dsp.trafficmanager.net. comment=\ + geo.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=13.74.139.29 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12437.d.akamaiedge.net. comment=\ + kv801.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=displaycatalog-rp.md.mp.microsoft.com.akadns.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=rp-consumer-prod-displaycatalog-geomap.trafficmanager.net. \ + comment=displaycatalog-rp.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=sls.update.microsoft.com. comment=slscr.update.microsoft.com \ + list=windowsupdateslist +add address=glb.sls.prod.dcat.dsp.trafficmanager.net. comment=\ + sls.update.microsoft.com list=windowsupdateslist +add address=fe3.delivery.mp.microsoft.com. comment=\ + fe3cr.delivery.mp.microsoft.com list=windowsupdateslist +add address=glb.cws.prod.dcat.dsp.trafficmanager.net. comment=\ + fe3.delivery.mp.microsoft.com list=windowsupdateslist +add address=fe2cr.update.msft.com.trafficmanager.net. comment=\ + fe2cr.update.microsoft.com list=windowsupdateslist +add address=download.windowsupdate.com.delivery.microsoft.com. comment=\ + download.windowsupdate.com list=windowsupdateslist +add address=wu-f-net.trafficmanager.net. comment=\ + download.windowsupdate.com.delivery.microsoft.com list=windowsupdateslist +add address=tsfe.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com. \ + comment=9.au.download.windowsupdate.com list=windowsupdateslist +add address=52.158.227.125 comment=array812.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dspw65.akamai.net. comment=\ + download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.151.58.88 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net. \ + comment=licensing.mp.microsoft.com list=windowsupdateslist +add address=licensing-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-licensing-aks2aks.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-nlu-net.trafficmanager.net. comment=\ + star.f.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.b.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-tlu-net.trafficmanager.net. comment=\ + star.b.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=storeedgefd.xbetservices.akadns.net. comment=\ + storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net. \ + comment=storeedgefd.dsx.mp.microsoft.com.edgekey.net list=\ + windowsupdateslist +add address=e16646.dscg.akamaiedge.net. comment=\ + storeedgefd.dsx.mp.microsoft.com.edgekey.net.globalredir.akadns.net list=\ + windowsupdateslist +add address=40.69.76.189 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=bg.microsoft.map.fastly.net. comment=\ + 3.au.download.windowsupdate.com list=windowsupdateslist +add list=windowsupdateslist +add address=40.69.75.33 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sf.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=cdp-f-ssl-tlu-net.trafficmanager.net. comment=\ + star.sf.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a2033.dscd.akamai.net. comment=\ + star.sb.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.138.242 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-nlu-net.trafficmanager.net. comment=\ + dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=1D.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-b-tlu-net.trafficmanager.net. comment=\ + 1d.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a122.dscg3.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=windowsupdateslist +add address=geover.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e10370.d.akamaiedge.net. comment=\ + geover.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=52.232.182.21 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.95 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=a1683.dscd.akamai.net. comment=\ + dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net. \ + comment=collections.mp.microsoft.com list=windowsupdateslist +add address=a1847.dscd.akamai.net. comment=\ + wildcard.f.tlu.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=13.74.142.6 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=au.download.windowsupdate.com.edgesuite.net. comment=\ + 2.au.download.windowsupdate.com list=windowsupdateslist +add address=a767.dscg3.akamai.net. comment=\ + au.download.windowsupdate.com.edgesuite.net list=windowsupdateslist +add address=52.156.123.84 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.78.254 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=4.au.download.windowsupdate.com.delivery.microsoft.com. comment=\ + 4.au.download.windowsupdate.com list=windowsupdateslist +add address=cl-glcb907925.gcdn.co. comment=\ + 4.au.download.windowsupdate.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.111 comment=array510.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.69.70.43 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com. \ + comment=tsfe.trafficshaping.dsp.mp.microsoft.com list=windowsupdateslist +add address=ts-frontend.trafficmanager.net. comment=\ + tsfe.trafficshaping.dsp.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=40.69.75.248 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.74.84 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=sds.trafficmanager.net. comment=software-download.microsoft.com \ + list=windowsupdateslist +add address=40.69.74.80 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.175.242.182 comment=array804.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=dlc-shim.trafficmanager.net. comment=download.microsoft.com list=\ + windowsupdateslist +add address=e12671.dscd.akamaiedge.net. comment=\ + download.microsoft.com.edgekey.net list=windowsupdateslist +add address=20.187.55.34 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.231 comment=array513.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.222.13 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=e12358.d.akamaiedge.net. comment=\ + kv601.prod.do.dsp.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. comment=\ + tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=dcat-f-tlu-net.trafficmanager.net. comment=\ + tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=a1856.dspw65.akamai.net. comment=\ + tlu.dl.delivery.mp.microsoft.com-c.edgesuite.net list=windowsupdateslist +add address=52.167.164.252 comment=array506.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=13.74.137.54 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=kv501.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + kv501.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=collections-prod-frontdoor-geomap.trafficmanager.net. comment=\ + consumer-collections-aks2eap.md.mp.microsoft.com.akadns.net list=\ + windowsupdateslist +add address=52.167.160.173 comment=array509.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.77.148 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.200.126 comment=array507.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=52.167.167.59 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.172 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=smtp.mail.me.com comment=smtp.mail.me.com list=NoVdsina +add address=40.70.76.5 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.186.119 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.177.176.186 comment=array520.prod.do.dsp.mp.microsoft.com \ + list=windowsupdateslist +add address=40.70.76.27 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.160.43 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.110 comment=array817.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.142.8 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.138.254 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.167.96 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.69.76.215 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.143.200 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.111 comment=array818.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.112 comment=array819.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=13.74.137.53 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.98 comment=array805.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.96 comment=array803.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.104 comment=array811.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.101 comment=array808.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.99 comment=array806.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.17 comment=array802.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.97 comment=array804.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.103 comment=array810.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.16 comment=array801.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=40.70.77.177 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.164.84 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.105 comment=array812.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.107 comment=array814.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.232.161.82 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.108 comment=array815.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=52.167.161.91 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.102 comment=array809.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.109 comment=array816.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.106 comment=array813.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.117 comment=array622.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.107 comment=array612.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.108 comment=array613.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.105 comment=array610.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.113 comment=array618.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.116 comment=array621.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.98 comment=array603.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.114 comment=array619.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.111 comment=array616.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.97 comment=array602.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.106 comment=array611.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.110 comment=array615.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.119 comment=array624.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.135 comment=array514.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.97 comment=array503.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.99 comment=array604.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.61 comment=array504.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.131 comment=array510.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.132 comment=array511.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.96 comment=array601.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.104 comment=array609.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.138 comment=array517.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.60 comment=array501.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.139 comment=array518.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.118 comment=array623.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.113 comment=array820.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.103 comment=array608.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.154.7.100 comment=array807.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.129 comment=array508.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.134 comment=array513.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.62 comment=array505.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.137 comment=array516.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.101 comment=array606.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.96 comment=array502.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.130 comment=array509.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.112 comment=array617.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.100 comment=array605.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.115 comment=array620.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.136 comment=array515.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=purchase.md.mp.microsoft.com.akadns.net. comment=\ + purchase.mp.microsoft.com list=windowsupdateslist +add address=e110219.a.akamaiedge.net. comment=\ + purchase.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=72.153.5.140 comment=array519.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.141 list=windowsupdateslist +add address=72.153.5.63 comment=array506.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.128 comment=array507.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.102 comment=array607.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=storesdk.xbetservices.akadns.net. comment=\ + storesdk.dsx.mp.microsoft.com list=windowsupdateslist +add address=e16646.g.akamaiedge.net. comment=\ + storesdk.dsx.mp.microsoft.com.edgekey.net list=windowsupdateslist +add address=software-download.microsoft.com.delivery.microsoft.com. comment=\ + software-download.microsoft.com list=windowsupdateslist +add address=download.prss.microsoft.com.akamaized.net. comment=\ + software-download.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=72.145.35.109 comment=array614.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=72.153.5.133 comment=array512.prod.do.dsp.mp.microsoft.com list=\ + windowsupdateslist +add address=213.180.192.0/19 comment=YandexDisk list=NoVdsina +add address=87.250.250.50 comment=YandexDisk list=NoVdsina +add address=consumer-prod-bcfd-v7-afd.trafficmanager.net. comment=\ + displaycatalog.mp.microsoft.com list=windowsupdateslist +add address=purchase-europeeap.md.mp.microsoft.com.akadns.net. comment=\ + purchase.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=ne-az-conspurchase-mp.trafficmanager.net. comment=\ + purchase-europeeap.md.mp.microsoft.com.akadns.net list=windowsupdateslist +add address=storeedgefd.dsx.mp.microsoft.com.edgekey.net. comment=\ + cdn.storeedgefd.dsx.mp.microsoft.com list=windowsupdateslist +add address=star.f.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.f.tlu.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=a1996.dscd.akamai.net. comment=\ + wildcard.f.dl.delivery.mp.microsoft.com.edgesuite.net list=\ + windowsupdateslist +add address=cp801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=glb.tas02.sls-prod.dcat.dsp.mp.microsoft.com. comment=\ + tas02.sls.update.microsoft.com list=windowsupdateslist +add address=cp601.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + cp601.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=star.sb.tlu.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedgeextensions.sb.tlu.dl.delivery.mp.microsoft.com list=\ + windowsupdateslist +add address=star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com. \ + comment=msedge.sf.dl.delivery.mp.microsoft.com list=windowsupdateslist +add address=cdp-f-ssl-nlu-net.trafficmanager.net. comment=\ + star.sf.dl.delivery.mp.microsoft.com.delivery.microsoft.com list=\ + windowsupdateslist +add address=tm-pifd-prod-gbl-weight.trafficmanager.net. comment=\ + paymentinstruments.mp.microsoft.com list=windowsupdateslist +add address=10.30.30.33 comment=amster list=NoWG +add address=10.30.30.10 comment=MikroNUC disabled=yes list=NoWG +add address=89.110.101.17 comment=!!!VDSINA!!!! disabled=yes list=NoWG +add address=wg.vados.ru comment=VDSina-vpn list=VDSina +add address=80.85.244.9 list=TRUSTED +add address=disc801.prod.do.dsp.mp.microsoft.com.edgekey.net. comment=\ + disc801.prod.do.dsp.mp.microsoft.com list=windowsupdateslist +add address=185.71.70.78 disabled=yes list=TRUSTED +add address=176.53.203.171 disabled=yes list=TRUSTED +add address=176.53.203.170 disabled=yes list=TRUSTED +add address=176.53.202.194 disabled=yes list=TRUSTED +add address=89.110.101.17 comment="!!!VDSina Server!!!" list=NoVdsina +add address=dns.quad9.net comment=Quad9-dns disabled=yes list=Trusted-DNS +add address=dns.google comment=Google-dns list=Trusted-DNS +add address=security.cloudflare-dns.com comment=CloudFlare-dns list=\ + Trusted-DNS +add address=time.google.com comment=Google-time list=Trusted-NTP +add address=0.ru.pool.ntp.org comment=ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=1.ru.pool.ntp.org disabled=yes list=Trusted-NTP +add address=2.ru.pool.ntp.org comment=2.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=3.ru.pool.ntp.org comment=3.ru.pool.ntp.org disabled=yes list=\ + Trusted-NTP +add address=cp.vdsina.com comment=VDSina-vpn list=VDSina +add address=vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns.vados.ru comment=VDSina-vpn list=VDSina +add address=vdsina.com comment=VDSina-vpn list=VDSina +add address=cp.vdsina.ru comment=VDSina-vpn list=VDSina +add address=ns1.vdsina.ru comment=VDSina-vpn list=VDSina +add address=10.30.30.0/24 comment="Local Network" list=Local-Net +add address=10.8.0.0/24 comment="WireGuard Network" list=Local-Net +add address=146.120.64.208/29 comment="External Net" list=Unet +add address=esia.gosuslugi.ru comment=esia.gosuslugi.ru list=NoVdsina +add address=lk.gosuslugi.ru comment=lk.gosuslugi.ru list=NoVdsina +add address=trudvsem.ru comment=trudvsem.ru list=NoVdsina +add address=10.30.30.30 comment=miller disabled=yes list=NoWG +add address=10.30.30.33 comment="Direct connet to DNS servers" list=\ + Direct-DNS +add address=109.107.177.79 list=VPN-Server +add address=10.30.30.10 list=AWG-Proxy +/ip firewall filter +add action=accept chain=input disabled=yes dst-port=18880 in-interface=\ + Bridge-LAN protocol=tcp src-address=10.30.30.0/24 +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=12h chain=input comment="block honeypot DNS" \ + connection-state=new dst-port=53 in-interface="ether1 - Unet" protocol=\ + udp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input connection-state=new dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!Trusted-DNS +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment=\ + "block honeypot ssh rdp winbox" connection-state=new dst-port=22,8291 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=!TRUSTED +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot asterisk" \ + connection-state=new dst-port=5060 in-interface="ether1 - Unet" protocol=\ + udp +add action=add-src-to-address-list address-list="Honeypot Hacker" \ + address-list-timeout=4w2d chain=input comment="block honeypot NTP" \ + connection-state=new dst-port=123 in-interface="ether1 - Unet" protocol=\ + udp +add action=fasttrack-connection chain=forward comment=\ + "FastTrack for non-VPN connections" connection-mark=!VPN_No_FastTrack \ + connection-state=established,related,new disabled=yes +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=tcp +add action=accept chain=input disabled=yes dst-port=29185 in-interface=\ + "ether1 - Unet" protocol=udp +add action=accept chain=input comment="tcp Accept input DNS queries from LAN" \ + dst-port=53 protocol=tcp src-address=10.30.30.0/24 +add action=accept chain=input comment="udp Accept input DNS queries" \ + dst-port=53 protocol=udp src-address=10.30.30.0/24 +add action=accept chain=output comment="accept WireGuard" disabled=yes \ + dst-address-list=VPN-Server out-interface="ether1 - Unet" protocol=udp \ + src-port=13231 +add action=accept chain=output disabled=yes dst-address-list=VPN-Server \ + dst-port=29185 out-interface="ether1 - Unet" protocol=udp +add action=fasttrack-connection chain=forward comment="defconf: fasttrack" \ + connection-state=established,related,new disabled=yes routing-mark=\ + !To-VPN +add action=accept chain=output disabled=yes protocol=tcp src-port=443 +add action=accept chain=output disabled=yes src-address=127.0.0.1 +add action=accept chain=forward comment="defconf: accept in ipsec policy" \ + disabled=yes ipsec-policy=in,ipsec +add action=accept chain=forward comment="defconf: accept out ipsec policy" \ + disabled=yes ipsec-policy=out,ipsec +add action=accept chain=forward comment=\ + "defconf: accept established,related, untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid in-interface="ether1 - Unet" src-address=\ + !10.30.30.0/24 +add action=drop chain=forward comment=\ + "defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat \ + connection-state=new in-interface="ether1 - Unet" src-address-list=\ + !VDSina +add action=drop chain=forward comment=\ + "Filter Rule to block FB address LIST : )" disabled=yes dst-address-list=\ + facebook +add action=drop chain=forward comment=\ + "Filter Rule to block YOUTUBE address LIST : )" disabled=yes \ + dst-address-list=YouTube +add action=accept chain=input in-interface="ether1 - Unet" protocol=icmp \ + src-address-list=VDSina +add action=accept chain=input connection-state=established disabled=yes +add action=accept chain=input connection-state=related disabled=yes +/ip firewall mangle +add action=mark-routing chain=prerouting comment="Mark Routing main for NoWG" \ + disabled=yes new-routing-mark=main src-address-list=NoWG +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for NoVdsina" disabled=yes dst-address-list=NoVdsina \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for VDSina" disabled=yes dst-address-list=VPN-Server \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "Mark Routing main for MikroNuc" disabled=yes dst-address-list=AWG-Proxy \ + new-routing-mark=main src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=\ + "!!!ERROR Mark Routing main for Unet!!!" disabled=yes dst-address-list=\ + Unet new-routing-mark=main passthrough=no +add action=mark-routing chain=prerouting comment="Test-IP sites" disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=Test-IP new-routing-mark=\ + To-VPN src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment=FuckRKN disabled=yes \ + dst-address=!10.30.30.0/24 dst-address-list=RKN-dnsLookup \ + new-routing-mark=To-VPN passthrough=no src-address=10.30.30.0/24 +add action=mark-routing chain=prerouting comment="AWG for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-routing chain=prerouting comment="VDSIna for All sites" \ + disabled=yes dst-address=!10.30.30.0/24 dst-address-list=!NoVdsina \ + new-routing-mark=To-VPN routing-mark=!main src-address=10.30.30.0/24 \ + src-address-list=!NoWG +add action=mark-connection chain=prerouting comment=\ + "Mark VPN connections to exclude from FastTrack" disabled=yes \ + new-connection-mark=VPN_No_FastTrack routing-mark=*401 +add action=change-mss chain=forward comment="MSS on WG" disabled=yes new-mss=\ + 1380 out-interface=*16 protocol=tcp routing-mark=*401 tcp-flags=syn \ + tcp-mss=1381-65535 +add action=mark-routing chain=prerouting comment="VPN Network" disabled=yes \ + dst-address=10.8.0.0/24 new-routing-mark=*401 src-address=10.30.30.0/24 +/ip firewall nat +add action=dst-nat chain=dstnat comment=amster.vados.ruhttps dst-port=443 \ + fragment=no in-interface="ether1 - Unet" protocol=tcp routing-mark=main \ + to-addresses=10.30.30.33 to-ports=443 +add action=dst-nat chain=dstnat comment="amster.vados.ru For Certbot HTTP" \ + dst-port=80 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=80 +add action=redirect chain=dstnat comment="udp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=udp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=redirect chain=dstnat comment="tcp Redirect DNS in NAT" disabled=\ + yes dst-port=53 protocol=tcp src-address=10.30.30.0/24 src-address-list=\ + !NoWG to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/tcp dst-nat to amster.loc. From VDSina Server" dst-port=53 \ + in-interface="ether1 - Unet" protocol=tcp src-address-list=VPN-Server \ + to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat comment=\ + "53/udp dst-nat to amster.loc. From VDSina Server" dst-port=53 protocol=\ + udp src-address-list=VPN-Server to-addresses=10.30.30.33 to-ports=53 +add action=dst-nat chain=dstnat disabled=yes dst-port=44333 in-interface=\ + "ether1 - Unet" protocol=udp src-address=!10.30.30.0/24 to-addresses=\ + 10.30.30.33 to-ports=44333 +add action=masquerade chain=srcnat comment="Default NAT" out-interface=\ + "ether1 - Unet" routing-mark=!To-VPN src-address=10.30.30.0/24 +add action=dst-nat chain=dstnat comment="amster.vados.ru 3x-ui" disabled=yes \ + dst-port=2904 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2904 +add action=dst-nat chain=dstnat comment=reg.vados.ru disabled=yes dst-port=\ + 5000 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=5000 +add action=dst-nat chain=dstnat comment="Docker swarm" disabled=yes dst-port=\ + 2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=10.30.30.33 \ + to-ports=2377 +add action=dst-nat chain=dstnat comment=npm dst-port=81 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=To-VPN to-addresses=10.30.30.33 \ + to-ports=81 +add action=dst-nat chain=dstnat comment=SSH dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp src-address-list=TRUSTED to-addresses=\ + 10.30.30.33 to-ports=22 +add action=dst-nat chain=dstnat comment="portainer agent" disabled=yes \ + dst-port=2377 in-interface="ether1 - Unet" protocol=tcp to-addresses=\ + 10.30.30.33 to-ports=2377 +add action=dst-nat chain=dstnat disabled=yes dst-port=22 in-interface=\ + "ether1 - Unet" protocol=tcp routing-mark=!To-VPN to-addresses=\ + 10.30.30.33 to-ports=22 +add action=masquerade chain=srcnat comment=WG disabled=yes dst-address-list=\ + !NoVdsina out-interface=WG routing-mark=To-VPN src-address-list=!NoWG +add action=dst-nat chain=dstnat comment="Yandex.DNS Family" disabled=yes \ + dst-port=53 in-interface=Bridge-LAN protocol=udp src-address-list=KIDS \ + time=6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +add action=dst-nat chain=dstnat disabled=yes dst-port=53 in-interface=\ + Bridge-LAN protocol=tcp src-address-list=KIDS time=\ + 6h-15m,sun,mon,tue,wed,thu,fri,sat to-addresses=77.88.8.3 +/ip firewall raw +add action=drop chain=prerouting comment="Drop Honeypot Hackers" \ + in-interface="ether1 - Unet" src-address-list="Honeypot Hacker" +add action=accept chain=prerouting comment="Trusted DNS" disabled=yes \ + in-interface-list=WAN src-address-list=Trusted-DNS +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + extras.getpagespeed.com content=extras.getpagespeed.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=linux.duke.edu \ + content=linux.duke.edu disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtube.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleapis.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ggpht.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=youtu.be \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=ytimg.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googlevideo.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=gstatic.com \ + disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + googleusercontent.com disabled=yes +add action=add-dst-to-address-list address-list=FuckRKN address-list-timeout=\ + none-dynamic chain=prerouting comment="YouTube raw" content=\ + nhacmp3youtube.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=rutube.ru \ + content=rutube.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment="me.com raw" \ + content=me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "icloud.com raw" content=icloud.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com raw" content=smtp.mail.me.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "smtp.mail.me.com.akadns.net raw" content=smtp.mail.me.com.akadns.net \ + disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + "api.db-ip.com raw" content=api.db-ip.com disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=\ + esia.gosuslugi.ru content=esia.gosuslugi.ru disabled=yes +add action=add-dst-to-address-list address-list=NoVdsina \ + address-list-timeout=none-dynamic chain=prerouting comment=gosuslugi.ru \ + content=gosuslugi.ru disabled=yes +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set irc disabled=no +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip ipsec settings +set accounting=no +/ip ipsec policy +set 0 disabled=yes dst-address=0.0.0.0/0 src-address=0.0.0.0/0 +/ip ipsec profile +set [ find default=yes ] dpd-interval=2m dpd-maximum-failures=5 +/ip proxy +set cache-administrator="" max-cache-size=none port=80,443 src-address=\ + 0.0.0.0 +/ip route +add check-gateway=none disabled=yes distance=1 dst-address=0.0.0.0/0 gateway=\ + WG routing-table=To-VPN scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set reverse-proxy disabled=yes +set ssh address=10.30.30.0/24 port=2222 +set winbox address=10.30.30.0/24 +set api address=10.30.30.0/24 disabled=yes +set api-ssl address=10.30.30.0/24 disabled=yes +set www-ssl certificate=Root-YE port=18443 +set www address=10.30.30.0/24 disabled=yes port=18880 +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both publickey-authentication-options=verify-required \ + strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=Bridge-LAN type=internal +add forced-ip=146.120.64.211 interface="ether1 - Unet" type=external +add forced-ip=109.107.177.79 interface=*E type=external +add interface=lo type=internal +add interface=wlan2 type=internal +add interface=wlan1 type=internal +/ipv6 dhcp-client +add add-default-route=yes disabled=yes interface=*F rapid-commit=no request=\ + info use-interface-duid=yes validate-server-duid=no +/ipv6 dhcp-server option sets +add name=domain-search-set options=domain-search-list +add name="=\"Client ID\"" options=HostName +/ipv6 firewall address-list +add address=::/128 comment="defconf: unspecified address" list=bad_ipv6 +add address=::1/128 comment="defconf: lo" list=bad_ipv6 +add address=fec0::/10 comment="defconf: site-local" list=bad_ipv6 +add address=::ffff:0.0.0.0/96 comment="defconf: ipv4-mapped" list=bad_ipv6 +add address=::/96 comment="defconf: ipv4 compat" list=bad_ipv6 +add address=100::/64 comment="defconf: discard only " list=bad_ipv6 +add address=2001:db8::/32 comment="defconf: documentation" list=bad_ipv6 +add address=2001:10::/28 comment="defconf: ORCHID" list=bad_ipv6 +add address=3ffe::/16 comment="defconf: 6bone" list=bad_ipv6 +/ipv6 firewall filter +add action=accept chain=input comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=input comment="defconf: drop invalid" connection-state=\ + invalid +add action=accept chain=input comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=input comment="defconf: accept UDP traceroute" \ + dst-port=33434-33534 protocol=udp +add action=accept chain=input comment=\ + "defconf: accept DHCPv6-Client prefix delegation." dst-port=546 protocol=\ + udp src-address=fe80::/10 +add action=accept chain=input comment="defconf: accept IKE" dst-port=500,4500 \ + protocol=udp +add action=accept chain=input comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=input comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=input comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=input comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +add action=accept chain=forward comment=\ + "defconf: accept established,related,untracked" connection-state=\ + established,related,untracked +add action=drop chain=forward comment="defconf: drop invalid" \ + connection-state=invalid +add action=drop chain=forward comment=\ + "defconf: drop packets with bad src ipv6" src-address-list=bad_ipv6 +add action=drop chain=forward comment=\ + "defconf: drop packets with bad dst ipv6" dst-address-list=bad_ipv6 +add action=drop chain=forward comment="defconf: rfc4890 drop hop-limit=1" \ + hop-limit=equal:1 protocol=icmpv6 +add action=accept chain=forward comment="defconf: accept ICMPv6" protocol=\ + icmpv6 +add action=accept chain=forward comment="defconf: accept HIP" protocol=139 +add action=accept chain=forward comment="defconf: accept IKE" dst-port=\ + 500,4500 protocol=udp +add action=accept chain=forward comment="defconf: accept ipsec AH" protocol=\ + ipsec-ah +add action=accept chain=forward comment="defconf: accept ipsec ESP" protocol=\ + ipsec-esp +add action=accept chain=forward comment=\ + "defconf: accept all that matches ipsec policy" ipsec-policy=in,ipsec +add action=drop chain=forward comment=\ + "defconf: drop everything else not coming from LAN" in-interface-list=\ + !LAN +/ipv6 nd +set [ find default=yes ] advertise-dns=yes disabled=yes interface=Bridge-LAN \ + managed-address-configuration=yes other-configuration=yes pref64=::/64 +/ipv6 nd prefix +add autonomous=no disabled=yes interface=Bridge-LAN on-link=no prefix=none +/ipv6 nd prefix default +set dhcp6-pd-preferred=yes +/ipv6 nd proxy +add disabled=yes interface=lo +/ipv6 nd settings +set router-advertisement-route-distance=100 +/routing settings +set single-process=no +/system clock +set time-zone-name=Europe/Moscow +/system clock manual +set time-zone=+03:00 +/system identity +set name=MikroMaster +/system logging +add action=email disabled=yes regex="* added|changed|removed *" topics=\ + system,info +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes use-local-clock=yes +/system ntp client servers +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +add address=time.google.com disabled=yes +/system package update +set check-certificate=yes-without-crl ip-version=ipv4 +/system scheduler +add comment="Every Day Set Global Environment Variables" name=AM-SetGlobalEnv \ + on-event="/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" interval=1d name=\ + AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Update RKN DNS Looup" disabled=yes interval=20m name=\ + AM-RKN-dnsLookup on-event="/system/script { run AM-RKN-dnsLookup; }" \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +/system watchdog +set watchdog-timer=no +/tool e-mail +set certificate-verification=no from=MikroVados port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool mac-server +set allowed-interface-list=LAN +/tool mac-server mac-winbox +set allowed-interface-list=LAN +/tool netwatch +add certificate=DigiCert-Global-Root-CA check-certificate=no comment="doh, doh\ + -url=https://security.cloudflare-dns.com/dns-query, notify, name=CloudFlar\ + e-doh IPv4 1" disabled=yes down-script="" host=1.1.1.1 http-codes="" \ + interval=10s name="CloudFlare-doh IPv4 1" port=443 test-script="" type=\ + https-get up-script="" +add check-certificate=no comment="doh-fallback, doh-url=https://security.cloud\ + flare-dns.com/dns-query, doh-cert=DigiCert Global Root CA, notify, name=Cl\ + oudFlare-doh IPv4" disabled=yes down-script="" host=1.0.0.1 http-codes="" \ + name="CloudFlare-doh IPv4" port=443 test-script="" type=https-get \ + up-script="" +add comment="dns, notify, name=Google-DNS IPv4" disabled=yes dns-server=\ + 8.8.8.8 down-script="" host=dns.google http-codes="" name=\ + "Google-DNS IPv4" test-script="" type=dns up-script="" +add certificate=GTS-Root-R4 check-certificate=yes comment="doh-fallback, doh-u\ + rl=https://dns.google/dns-query, doh-cert=GTS Root R1, notify, name=Google\ + -DOH IPv4" disabled=yes dns-server=8.8.4.4 down-script="" host=dns.google \ + http-codes="" name="Google-DOH IPv4" port=443 record-type=NS src-address=\ + "" test-script="" type=dns up-script="" +add comment="dns-fallback, notify, name=Cuad9-DOH IPv4" disabled=yes \ + dns-server=9.9.9.9 down-script="" host=dns9.quad9.net http-codes="" \ + interval=10s name="Cuad9-DOH IPv4" src-address=146.120.64.211 \ + test-script="" timeout=800ms type=dns up-script="" +add certificate=DigiCert-Assured-ID-Root-CA comment="doh-fallback, doh-url=htt\ + ps://dns.quad9.net/dns-query, name=Cuad9-DOH IPv4" disabled=yes \ + down-script="" host=149.112.112.112 http-codes="" interval=10s name=\ + "Cuad9-DOH IPv4" port=443 test-script="" type=https-get up-script="" +add comment="dns-fallback, notify, name=ns1.unet.ws" disabled=yes \ + down-script="" host=91.192.189.2 http-codes="" interval=10s name=\ + ns1.unet.ws test-script="" type=simple up-script="" +add check-certificate=yes comment=\ + "doh, doh-url=https://vds.vados.ru/vds-query, name=vds.vados.ru" \ + disabled=yes down-script="" host=109.107.177.79 http-codes="" name=\ + vds.vados.ru port=443 test-script="" type=https-get up-script="" +/user aaa +set accounting=no diff --git a/MikroMaster/tmp/Diff-Config.rsc b/MikroMaster/tmp/Diff-Config.rsc index e99473b..7748453 100644 --- a/MikroMaster/tmp/Diff-Config.rsc +++ b/MikroMaster/tmp/Diff-Config.rsc @@ -1,40 +1,38 @@ -22,24c22,23 -< # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding -< set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ -< ssid=vados wireless-protocol=802.11 ---- -> set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \ -> wireless-protocol=802.11 -26,28c25,26 -< # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding -< set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ -< ssid=vados5g wireless-protocol=802.11 ---- -> set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \ -> wireless-protocol=802.11 -93a92 -> add disabled=no fib name=To-AWG -2678c2677 -< doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33 \ ---- -> doh-max-server-connections=20 servers=10.30.30.33,109.107.177.79 \ -3293c3292 -< connection-state=established,related,new disabled=yes ---- -> connection-state=established,related,new -3359c3358 -< new-routing-mark=*401 routing-mark=!main src-address=10.30.30.0/24 \ ---- -> new-routing-mark=To-AWG routing-mark=!main src-address=10.30.30.0/24 \ -3367c3366 -< new-connection-mark=VPN_No_FastTrack routing-mark=*401 ---- -> new-connection-mark=VPN_No_FastTrack routing-mark=To-AWG -3369c3368 -< 1380 out-interface=*16 protocol=tcp routing-mark=*401 tcp-flags=syn \ ---- -> 1380 out-interface=*16 protocol=tcp routing-mark=To-AWG tcp-flags=syn \ -3372c3371 -< dst-address=10.8.0.0/24 new-routing-mark=*401 src-address=10.30.30.0/24 ---- -> dst-address=10.8.0.0/24 new-routing-mark=To-AWG src-address=10.30.30.0/24 +22,23c22,24 +< set [ find default-name=wlan1 ] country=belarus mode=ap-bridge ssid=vados \ +< wireless-protocol=802.11 +--- +> # channel: 2422/20-Ce/gn(18dBm), SSID: vados, local forwarding +> set [ find default-name=wlan1 ] country=belarus disabled=no mode=ap-bridge \ +> ssid=vados wireless-protocol=802.11 +25,26c26,28 +< set [ find default-name=wlan2 ] country=belarus mode=ap-bridge ssid=vados5g \ +< wireless-protocol=802.11 +--- +> # channel: 5200/20-eCee/ac/P(21dBm), SSID: vados5g, local forwarding +> set [ find default-name=wlan2 ] country=belarus disabled=no mode=ap-bridge \ +> ssid=vados5g wireless-protocol=802.11 +2616,2618c2618,2621 +< add add-default-route=special-classless default-route-distance=2 \ +< default-route-tables=main:2 dhcp-options=clientid_duid,clientid \ +< interface="ether1 - Unet" name=client1 use-peer-dns=no use-peer-ntp=no +--- +> add add-default-route=special-classless default-route-distance=4 \ +> default-route-tables=main:4 dhcp-options=clientid_duid,clientid \ +> interface="ether1 - Unet" name=client1 use-broadcast=never use-peer-dns=\ +> no use-peer-ntp=no +2668,2671d2670 +< add address=10.30.30.10 allow-dual-stack-queue=yes client-id=\ +< ff:0:0:0:df:0:3:0:1:f0:75:5d:1e:5f:85 dhcp-option=HostName \ +< dhcp-option-set=MikroNUC mac-address=F0:75:5D:1E:5F:85 server=masterDHCP \ +< use-src-mac=yes +2675,2676c2674,2675 +< 10.30.30.33,109.107.177.79 domain=WORKGROUP gateway=10.30.30.81 netmask=\ +< 24 ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +--- +> 10.30.30.81,10.30.30.33 domain=WORKGROUP gateway=10.30.30.81 netmask=24 \ +> ntp-server=10.30.30.81,10.30.30.10 wins-server=10.30.30.95,10.30.30.98 +2679c2678 +< doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33,8.8.4.4 \ +--- +> doh-max-server-connections=20 servers=109.107.177.79,10.30.30.33 \ diff --git a/MikroNUC/20260628/20260628062001-Binary.backup b/MikroNUC/20260628/20260628062001-Binary.backup new file mode 100644 index 0000000000000000000000000000000000000000..5575035650387c871e865ba716cc13eab503606a GIT binary patch literal 357943 zcmeEv2V7Ij*6-{jKtho&sEDBnmcUL=RFsY=O`5%=LL?AO0*Im@Htg7Y@4a`h9D8rr zd+*q=E4<&@*#T5M$NRl=?>+B*=BInFY^JPPGqcuz)|%`oTs42aFv|p)BZRbkzbu7T zr_!Y32q6q1#6X4*wFYfcgEp%{dlGaM2SbQ~F@8=!o^*xYFH5U*CX4qc?-iAmm9``u zjS%ujQ5-5l%P?e)qBt~!=m;SSh7e|kDll_YfiP6TKqjbyURhaL$v_ou$Ocuo(b6QU zbX$Uj3OW>O0?F(RP1I^K^{Vt_zf5UzhM!ECY)Q7Y1z9oNTc9Y86{^7OAs^I%HAEFn zoN7FTYRu#cr6g0WuSr{wt&=OVR5FFGEm?RPSvUnD^p&I=*Pve`g!Yin-yno`l5{yj zXgf*Iq#=}sqBtoC!w8-*gfSv12xC}UB8-7r!o?I}ZWOhKj<6;HQ5+DF9AR|m%_mgE zz?^7^fz_oU26Cn$hDkjdqBqA7qR|lB)KJZ1Y8CmlMr9PJ45J{7u5qU!ON7zCR9042 zRcWfwrzo^+8-%&p$pmtVm@nkBgaWaY#p6jtIKtd)m3RvwzXf03f~{!5SGExG7_~kH z&Idit15Dg(K1Vf+#y`duP0~ImQN4R`~i!bm6ZM|FBx7iB)#;kF2|(ig^Yu&0v54tD{X2dP+s~3O+Hw+?q!RYSL5U z;xoe{v|$<1?GtqTPFzleUX~S>8N*IhwM$ebcjzJ&^E<0U{U1}2TXSA;+nneWX^c+H z;rfNB_3}RvJ)ID}Bs=*}WNznR z@_!?9gF^VZ%klQ5>)yQk_DZWmLQ0CxGX&G)cNj zDUm5;%4Dz+V2VIn!Ur^HBa#j!o*T3>#b6bP0Y+*^RBaU+p(qaIG(*)Xz>qL*5=H|| zgFHo+;U`n86zTe&nhd>4ldc1kR$f_I8BW&swz9G^kfh%c>d)}mhY$)U`GEFdsDcjp zpaOpiLT+|=U!~I1Cpa=9G&-SYNMb}tlPY6nWvEjn?EdR<#z=DpHP4$@L}QU(>5kPAv!QBv_{qxjZU8~NmD@IBx^O98AkKZBijd( z_*lG7ubBaYlm-*JOy`%zajkJf>2KEHyI& z;D%Zz*K0CmDKIYK6ISCMhN3v>2w{B?LONtn8!CiQDj*GjK?;QEbTfpM@Ff{88n|S@ zr8h``&EfK(WVJ%xQ?FGeCo8l%_zqLY2)^JBcnS;{2KYj)NoGl8#0YIgax;Ov!%Qh6 zY3Ma04ZUVe1HCqvOmmk4&k1aWU>=(z1XW-Fe(VqeSLOa1roL;02;%CGUGkfmt;Jv~PKmLKXb@nfo0q-peux!?8}BF7N2 zLxd*yAC4i~w;a)G;iyiQM6S^V5LaJq<_{yvM3E*@sbLDitkGtw6}sBAn^DujJTcNR zPmHutyHOCpQVgL&jF@XMPw1pgp&5rh=sq_n%8k&7HS<9EwdSGxJP*v{TJunUo(FjU zJ`V+^C9OJ-aUmwjNC%YzszXky1-Q#e9SdD)jR5wMN}UevG=~{)Q`KTn(V*yI0fN|2 zJt+W7gxu(=biG2GuFzN6JmbpA$bwdqZPc%BAR+{c0sco3fDA(lq{_$=Fw+&PY4f!1=Fw?W2(}b8m(NR zW$HCdNk)b`hxlWxK{}M+o#b=xodeAz}#IBZN611Ud~A80L%+R^OoH z(FuewSA?)e2x0CdP-%h?))XO(1u7Ub3?nhIu0*IMLI~70EP7ibgxVm40uaIi5yHT@ z0N7}U5NeMQu?UVu2*W|VY=juDe1zy!geU@1{R$Ccn2A8}gn8(K5FO7%s4IC-fxoC= z;fx{F8zDx1Dtw_Kq(+D#Pa~CbIv7F|gfs}z?|C5v1}dNr)TaYof6Cgh@;*)6Y3PhK zGFaPk%wRm>PAtza46ZU6rq!l{nEqfrzyL7FyE#JiZ5D*8pvQ*6%EIt>D}?C1o*)DU z1|b^+2F4Z)403`?J>cpHTpA$6Fn2+S?(B?ELr5Kf&`C&r3KE_s@*@fpWOo!HMyq4+ z#0H_`aA(30HRNdq$(zF^4k{!+9cs{_HRzBUbZ`wis0JNF7&b|IRE=kmHRy;MblV!V zPYv3;2JKmc_NYPEA-xTKG8LH$eNKi#*O#2h2{4^WxZItjVP+X=P!PSy=YadVk@Tm^ z%1S9of3B>ol#?{9_GKjfwX(8OP0|2VjAa&EA(VhcaYj->N$#N_G>nSSI4VL#RD(M5 zq#|rQ6=9R82#v=O!(;-6=ub=#dW#_jdWRtf=RHs#FhoCXMgVCB_7R?Zg3D(NG0eYU z23-G@yjNg|kzWay&J@Jplu!)AXcq<1=MBTqZVI9o+9R}=V#wx3MRbs}JJs-a531qs z0M(|oK*)<~NY@zB(Gc>6J3c_@Snj6}`|phl4ej)pH|;4+qq7-kcI zng|ybh8V4Up^bjf4je-a2R3Hlb}}RwO06D!0F#VbvisjIQ_BBZnc5JJs&s{(MLO^P ze&JI8dBUarX9lcIwo0o|D|9-eaC`mjBbWBi6E5{XBV2o3PP!~bt4Y^nR>`;9-!5O1 zf1Z5*Lxa~kMWfecXsQ&0^zV=@R>P9f!M6VM#B1`O8NPNIvOcWL47ElgH);p@-yva2 zO$h^H`Cltx2avE_lbv2u#A$$=K{aGm7ms>FOL-ibN~VmS`0$0(Yzb zb`b->{^yC<^gknFm$Xc^US$w1>)(#ni16?~PuAb9FwFl=D-0_V1haH$5;fr^%g|`` zJ=Gdnsxj`8M=poK3uUA$2s(|d&$ z@-J7<1~Ud(CAXPLWEy~@Rf9;5bkvb6$Db{V22=t z!M#QV4hRpM9XuiAL_|WshjJL!^4bg?^pe3pX!t;s3@U*SIH;_UVG{u4rquk>7+5yQ zlBL!ptEyap;Ie`b+*zax5JK-n1fYruBB%p;Jd6R6HWWw`#j!zXnIX{Vf)F&idcXodL~IHA zg3<&b`W|lvYFgDX;QFKz?oBs@*lyYDCx$gC{&M_AzE55Erg_QT#-90F*Y{w9qSM#9 zKIWd`+B%W5q4a8__ za?@6l>pr%}+*_&jDlXJ(I==mqk7kbt`3$_(Xj)l4^|H(N4cx3UAAZ84VLQ|Ix}E#F z6bEM$+z@{C@xLG&2=Ec(6l4>S-GGn{F}Wei1{;DZ+zhfwm|;CR%i;6T@S@?1d1Ein zX&>U=X8nE3y+>!9ertd8#W({ueS0)|+N$kSr&gyHjop34(-OF$N2yY^n&`w}h=2Uh zS>K5V;(Aq`^$kNNz!0sPq5fNJhBX-Y^|r8cWVa`BcGVcE)W@jY2^kkH8+rl8wjS#>qT@B zC<}N}W} zEZl=p6sOn%9GN?bE0j&Db8Nc>LOU!BE=@uu67_7eKyEa@j7%x)2cu?WN+F=C%hBl- zX|Rz1KEC7~oTm^=fDd?3jYB4eNE5{&^&{!>b_Vf+-y2lAn^kD0R+FLdi_++1nrugd zM#YFYi*bHfq9{&tgy{3z1oVc`7qPVgb{81y@gVDlyN6+`o|{E2R5MYhz*rcu z=7@?gVlUKC0tPz_3FBacAz`E;k&%XUFj5;KL}v|7QyJ+Y8v}Y9Y5S6Z-Y|4z z3T+zfWq@+Mpb!%G#FLvOV5rT2VTueRe_iZD0?@l8O1axhcKru(l`tX;doi%eKH7rqo25sXZkzo^6F&z!!6S8nlXSgV%wt zRC}TtX6I1c)yay($Hh1oCq7-Ata$L1!{PG9d~uh5xx6gg#?*}9hJu-zG#f-i?o=tF zwX&;Rd3*JN-hI}ke5N<_$bLEZT7S#45#n+8BcDpoe#E!i=RS818Onb9Ec)W%P8Zg_ zb7Owa+s9pTK$xW|tLJ&Ggy}DmH8*)1t?Rw#{9*YRyUkHs+xWIk$r;5jE^Ga{-ohX} zfM{DoYYeNT(Wn&66t^~|CN{K(?allaC!=>yYGBQ8QJ00k zsaMDfSh#s?kFDD%c)cDE7UT}Sx$D}8ef$NBqc-+QE>u|Cgz z_8d!hTRh3T`KyYSBM`EIVFQD+5Tb)ax26C+=y%uu|K9cEV2Y1M$Spv@<|&mjiJULR zaSmU|W#hO&CXw*C5;lh|;c(<4g;{^HP zD5#<@LT*e659bJ^5{^PCkO^fRT+YLJLIqzT;7bHzt_be~=#5l(8ra&9cw0dSly38KMB>HD(XZy-k$tsybtM`>@(&~c-tx6TH)<`94 zCQ(6f;4f&@z44)-QS;Y#)+d98CAPs=Feso@S9%zfs^nXxiVcOG55qwJf;z=Oow^!1 zFfai12M7Afw0hqRMOsh1O3QAf;sw;TcmZXqLCf0ETi!}43JP04KeP9d&f^cY!>vpi zO^3A|_TCD^OiU0i`Bu+5;`RnTYiXfojGD zY&P4VnL#yk*)_iYCs-)J+-o)*GeOh>%o^bZm^q~Y!_b|Uw{5jImMuEBu;Yr@1>-ET zi;gT_}*JdRCV8jWv_e;>SGg*wi@GsgY;aMJ)Zh;i~{gTcFRo@m)8?9K({ zA(M?+-gU?IpW`}tK-t!|3+Y!btnFthHdW-c>)xo?>BGuhWj+`6dHwoM?>samy_*N8 z{qE>JkGiDY&Dfo7v-=D7Zs_G@AvT>j%QKzNpINXg{Em0;@)_I@5%gZ8N_%cC|o=a^1yHaB<_;jEa8f_ z_IBoZ7-K4xJRbDug z9ysPTYx9%rc5`QUy3?%lo&b;MET4kV);S3i8c(~G-*%bs#mfshz3Sdr^{CE?^i?5F zBEN_$w?kVu-7bhf)gspPz3-#_9V65dH|O)T)qPtvZ;_w6^yykhhsT#j?A-x;qS zSt;M1?bQ+A)4+4#?Q4&3hUaeHcfQxr}27@F>iJ7 z@%hP<({6z61O-uLJNL%Ju5!Y5{+`eV_57Vq`8}b3Pw0Q{gsw(JJT6Zp!4+a2k0%p~ zWKxcRufX{tIbR_X^LSF8T*Om~1pm~u z_*)@WIOi82Rc~o8fK-*%Y+X%AMFmI|T!(;EbO}OxeneIDd4{EG4PfPGL@fpd6V6G9 zjE{>CjBgvr;R`r82M-Qpv)HvDt>ZMjfOZ%!pspj4mgU#UzXbNUINN~eni^$e)V|>yW&DL%|~_)zP)Ng3+p#+zg$ce?v-7;5q9BfXvF}J zuSJhKn7MXX*zqCT20zNWI|>|I;8W8|dppxgzAXAO8z8kMj% zX!^3fv_Gf#Qj^k$}* ziHR8%tD-1)mXXFVT5miB_cVUTv0=_BdVNLZw z@VjXR>y>a0%pyDpn%;=k5*OpbdHi|YVQgbDS~d5V%24C}PzIAGzaNQpBnd%U%C2(;_HrC zrn5#~>=Hcuc~oRl&((VmY&K!~c0NQeZ;q2%Zp3jX$qTs!P|Ha*|~3P z|A}VJ*A7q3;yy=-aT_|%xwrlFo0|`2ZiBB7Me z5emgZu9z^u3-^eu>e%CYH-D>;))f{`OYtT1pJ~0@B+$e z16s$>cPIcKH27O^Ooo`~_GYBi*!H+B;9@g-^J?L->*LPw(A?g(h76m7)6|#E#{CRH z+UHj#N%%^|xELp$rQjF~5yAg6xcn>c%kDl>`m0Z!dG8w>abEa7KcdrP_rdl{ z4lskUmP1}W7#cCx`^mc@4Wj35x|%WV5C>at(%LM#to&1qUuWF?;mUeRsdw_tzPzcM znJ@0p|Nck*7Jc;cF$MPbwzOGJ9sFs*u91$t^KMw|+fvWL z;W4T-!Dw6Ot>-ql^x7o)L>YbZ-1RWC8|JN_cF#SW`*~fn_(c<>st#TzlKLToMmJv` zJjLVYsuqK0)M;|SW%=Xou3P5J!Og`dUlrzmZr}Yl=h;wcuosV#gqM$1#{XbALw|!l_{^FW<7jM`fi?F=biuY(cCVNg>zTlyQ$td)M>W=WzU$L@%#%tX;1S9ube?)ZMG@DRCI`@3wW;e znzwxJvpFkM?51}-IL@vGV^K-SS5rsf-kJ9}3!jS~U6Q|PKG5L{<;mO=m1ZeUSKW(5 ztbSw8B)n4H?a4jb&%eL<-J^Lu#rN-I?l_R;%stusrC;Rg_v;^?j9IpSX1fH_19=0^ z)2;8gR19?5wyMXw(z+Xh8J1D+mZol+K16Y}U*VlQA-lT0f8z3%h%`DqBKCn2kw*C} z_^B!ZRew+Ozf&3gp60)&`G0MiSK~AupUuOiTnCuHtkv!Ri@xX-1wKxG+?eD?R`4zInzZ9Jw;Z)fcVA%-v)r^|3i~+E$mFrJo+4s@u zMg|^OBo8c-2Uc+4cQ9->z_6Wo0cD{9hEZuDdurM^h)55tfx}`W+3q;gpwsI8R8nkj z+zZlJ*t`C@yo`lW?d$ziY6Jumv2hNE&B29SVHYPWju;>q`Srif-(P9vyPpRv)b9A> zqkr5?jNd!J%>7q3d! z4tBw{H*YO?eD=0JvtCKlIsF|IXbmm~i&rQ59Jo_|XZfCcYeW&;<5@%JibKyXn)BLj zbcYYQ_gHyvSM_{ackX)DnH|T+2W3Zk9VrrNuD(3}d93Ty&aKb)ihf|?^E@KQzWt82 zSN%R}&xwy#G`hsozTFgXijD1icEgtC)Vy1tP{t~Dm~vFIPrXEQSqH2!m!NuKVY+3Le)!_t#&_&`7c>mDLvhG_NX4( zb$vtbUUON?`0CO2Q%TeP+Y@P(OaRgLN7A zhSfjI4&33li)G&>OB4MldQhD~<+T*|s}I-M^`6Q`QuxTjGS`w&$|EXU|}n zE;;f{e0Js4xic)hDf}ku113NG_-IyQVZE>mTX}B>o)pixEPB=9eN1xzU!X0FenQY7 zM)37}a{sBa{w3w}dvgDt-2b)7T@AVTGQNl>5Xt#`C10fAiG>Owk1G~&>)Q;N6}p`0h-a^zB>KqTYwaFK$5T(#-gD#&GuLr9!}T|c+Q5Q_c_lMYbq z=g5G-U9pkRtqf6W6VexEiQ@gE71_*o3aw6&V}&C94HPq2rO$CfG5!fD3T9$_Xk0>E zVtj%TQuzSdBAx=&BBG!$;|)HsZ*bXP2eI?(Dcchcv9py1hnS7wMKk7ryzYDd6nPmp zTi1wSH>+Za6&D{^!y%^9q*uGdz5`-+Oz;Ae8+ZZrAQ`>JzNX<{79Q=etU>SS_IZxbKhx`wl7QlmZHd^6eB(f;#)I(l?%7)zK>J z`3diHk*i||OYW>-Mlo1&#^;(3Y&%%Ud=Z|KX12^s~CmB1Y>wkMu{JH;pfq%CF`vG<{X*+`GuVRdI#=%i#|F z-`#68w)9?ygSN?G^bW^{IV7|x=2i?;&#J6D+qtB}SpJfw%EQ{^t8U8mr8E0d_r$h% zbo}MD;yIBOYfYx`8+GimwesXg|EoDed(<6# zd|UFJNA|OicP%&`$)$juGX>(kEJ^<^i1@9((RxRo#rLpR;StW*O60Q%-UGRy?y?| zufVz*t5!qP_?+EcRy1pODk1;&rI~wXzurJq9{T~B{@_=vfmJPGcPj-$-AZ$JG%sJ@(<$bkn>BSAreq&Y>iBoZ|2*u9f%jNj}dTwZMc6vcAN}?in)kU~2S^ z(QYvd#wJR~zfn0}DlWXce}%=@7t0>EPi$(+OiS$Bq+VH1yjy!u+r&!G8RA; znw$3?6HRiM9Bjt;+-rH6%SyY^^Jer|I<0r-v{7y7pAVl2UF+;9FS4`N`S>2V;~D*> z)3cZ5p%v~MpZbkGdpT5MvUjRxS(bL(sL_J8yRA%4_8IeFiKdZyNgwHfOQ#2GEng+u zjl(rpCO<(iOY0INN<450! zsJPDWv%t}NlFKQ{-NrjL3zNOvx<9zy(84#RLCb=*&ju$CEuGduzkd7l{1KITed~40 zY1hklLcp3xVbkVE4oMH!>Hc2O_2?}xFKpBG`ew7TQJd4(&Oh@n{j{^q@u3$qdCOTh zw^QD~ojPMP|H{7Pb;H{&_nG4{wz8Xd>g{zgZ_LV&Z)xY@$KnDfKPeBtSSAll%pKF2 zGWoi6_8;5Jy7=gaES|Zw=#Zt^&9@^2dd>x(z3bLl+?o}+&*j3GyQ;K>S|F{1Ct^fZk`oDTPrx1#{ zGO-lrDCHuFgw0iO*fK7g!x2ejGAS-%v&8})S1RO*Wg@XiEZ|9DvxA%`ka6WanN-dp zmUFe?lB(q#6K5;s0y!5~$|PKwgwK|U*ixxXz{3?>KF;OHVOPVi;d@xo)xJ^y2Ybzx z1$fwNEI&vmyTtVG-IC1x>($(zs81bWH5b7D468ZA?`AECrJTEADfit^yng<>*@nhF zw=BbkWWz3paPD{Ow_plhKxu;)USvoy4%XoWgh;P8)S&!NTrnOvsZjnQ0LEqWb;4&L~ zwf4rE!lm<5HwT|gzUEO$by;|)^{>SFhtcV^u0 zn!C~42>>DtS)(%-hOrSK{vKf3s%`JYuRX)LzX#aAI>4$e5SJ~H3j{ooQpCo2Y_3Qq zv#c$G)uK?vm5uVAMqEr*?Hj} z1|OnJ6=UBBl-zO0!Eu8tu}O8ZzYyzRZ@K%&ar{?7qLSx(sbAiW`$Ac-={mRV<=HuR z7Hp+TlAQO2Z@GBXpYJ;&`2Bp<%o`)?f3;`M+7yw^X_EAH`?Jy4-9Krsc}u32z3VdM zS$e(gBbr|u()GOlb8626BNp4ljR;FD-kiAEN(oh@d6{*r^HN%W^07X--OY|!?uXEpt3 zX`RgD!q1~d?CtzYn%8qDH*MF0NTUczYgANt!-#fxomp^K)|HX9IZ1lEy}sd;(#EB9TIbW#>eP8~u@Iipd*P;qIN$)p~) zeI}+!yEFcnx2$wsrsx%~_w0LfM-FS;;X(5=2U+Qpne8TE&$f+B?$5rH>^pigwXtvT z>~`#Tbv9e>+R@i_8ogSt=7>Ya1 z@Z4{6i}wE3>%7tx=9NJWh0iD5mv^>fW{b{oT8jo{PSJfz8Mpq}$wmjBeVR4!)WG$x z%vf8#>^{0^_vxu7?TVi``%sEX68bXS`kXs6pyB1Z>y}IWPn#q6FNgXcW5`1-S_TYy zKOmR$cG}TSV+S-XE9$J1e-!9@c+G#SH1W+7J1%efId;_8p{nvf+kW?Z`WrV@|2q}d z@9F=0`v2Fae>J4z$P{du6qhQ+a*k50VB;LIn5&d3IBY(f&yjJZ9Jw5qNu+WGTP6@G z_*}MFD&mUSe4bn?6)O1zq^nKqRzW&)Ti&nRa&R5|DM0w^EqZ%xqJI7xWWx&#;l;7^ zyfqcy{F1>6FjifO;qVvADTL_foR6!{BE&F(_hzNRkCBO&%@Xg;`pIt_oPq;mby0!Q ztl&TvpB=>Ehw^b@2rjfn2wz5f#U9$yufe#7bxiHXy65iR?N9v_b%nB}r12QbK?6sA zV%qVpKQ(zZV#$dBr&mW#7TA9lY*nkDHaZb`Ai`^G+VmbPC3}tz@Avp?iEUbs4dSv+ zhue4A*e`9U74!8w>YM)SWC_C9eQwtq4&!r|XeYfnaVjo#_udu$f6Oe*KR95b$Hj3^ z@}hDnBiB@}XeuvFi4hBLcJI}P{-k;8xbxgy8x{>6YBP11|NACad21Y;AVRVukPE_w{l*yfTd-AZ_DaizAQU+ zsNKCA_SfIE8kmFFyPtQf*c{)z)PL%F_BB&iFSAus9%HYvFLYnshoUIjRNN!@a>Aw= z*{;(9!jE1m?lbP=YQ+VsS!=T%p8eeEkl=M^%ck`!D?Y?7Q4M?HRW4&nB4;J-9zXr? zHnXy@cZs8VE}yUX>a^!X?$c~FDm967k8#fl<@Fn-I6HUQ>)Zj{8y9lTug7&P9^3e4 z%xTA#r|RzW=+dtJA9qBuY~TB*Mr_FPlxOrGG~4V@%#4OP%g=AzxXZsq$cy@%()w|a z9(OKZS8{mH`;NIoua=alM=fr@V`bs|uj5;qZZDNBdNw+v$8%PLZRhuxtY(KCR9YMk zK3}kBS4oEki;50?To-45D~LL}<|<@8%@0H=~!@o)~nsN5u3+9w)}yB;ROWx$;=vI>(_` z3mKE91}`e@q@ADC>PuGRkTV@i5=ZD?P-o=NoN4smW3SQ41X=wf=f(+1YnmYVX*y<)%6pPzHT zIj3mox@gAIDJSfPzqFk4)_u#UioCVHgJ?5)+OPd%Ps~TQt3`SJIyqCXPQSLY|AZ5* z&JCmqA7(yje|L83(W#s9$xl#-%4u+m&y#iU>dd~cIQeDzi&ONq;gVi-w(cY)3yDNk4{>V{YSUl=$u%`vO3oO>zj&_S5v(^PF*-;Zcc}&34)TR zX)kQYxYL>jgQ! zeJ3p$>KeYQe|eInf7^bE)E5Vr-;rXDv-5+tT^KfZaNzRrS!u4OD|=aIZjCzs@_3Hm z_O@$l+usRV-Y`H#(VzGun_nFH{@vQ!ZEWS=cWmrIIj8I+Zyn+{YJ`=<#B+&BWjEU!5pTGQ>guc)($DYi z>v%d+uPqJtY@qv^)a$7Yo;YNc;8<3LJ!|QHv(CgTB_SnMUV?Aju{o3R& zYI^U%*fphH8xLz+wBh~GEAJgHKmD2-d~)`q-Jg5R%-DGCdW*du`-R?aH;Fkwyty!T zMw2O_&72qA#}~H7t;bvMk$Y{9K5h`aN87SB$J4F;{#HGgz75}X zbkGuAQ_p?H15SEBz4vUy-eJ!6yzr9BIkT6QiCUcw*p9v~_mIM_IC<(C z*@im0p6!=U6i?c{TQ)6ekmhrfr4D7!ZCAF{eeK?u{(f5gT`z%P4faP@_C@QVXAf}S zUTt;rX0cD-HS69t5Z&u*we`$PW%~(h2JEy55D%L3bwJ+_Vy7uPdfO6frZp8+j#hYs zsL|2-d#3!JDOi73MEpxfGgq% zWD=na$8n)VBo#^765_Sg5(Ssb$CXkcTci*x1pN7z-M6vJ_~x)yS{(o zvv4r-@uS1S_8jM~+kDg6YrVH!v)JYpBb>S~trvHDY8MAuqs6gb*N*5mcA0zMrae!( zmJgaWb4^*p=j@6DbK7Vh`aGFk&*HAA@uLp|&QCx3RNB1VI{pTqtvRo9mhQSgqWsCo z^Vv)D<8|FfXO_RaI&qB#Z*bR1c4vai)Q1@xiBxL*j9j zS4J|1;hC$~bhkX-!PR|$Vj1J`2G1MIF3f3iE8>BJIxR$4kahHCeujI9y^}{t2fMp1 zZPB4nv)rE8AOZ1_Sdvu*L+r{_P$>&4b)R})_hu@yj+~QX!UHW?LUepyw zD=sD`+$y2$%`mI<8+&k^?XLa9rk?IF>Wii6!#6I&k66sq2DE;?FT^?F?#|MPkfimz zTQ)C7c6s^M|3dWJd*iJFc65=Yw{R^y9oyfv3ESk-sUvG0;AY0= z*G0Dn7s$~*NRYaOY1 z1@xuD_cIf-Bc@Ni)OOtK=T--^dDeOTM=_Q$hmTa13cGpT^th0-N8<3hY4@qNM;4s! z@@zKCZr+vKt<$!=z2D6@Z_ClK2gXayw?^=`%nv#F>2d?7f;-~J56`wvi$9`zu$Vi= z>*2EwEyf**-Z$luSoVN1hdq^=ED9|3TGggy+3hVG-^C@P~6UN|*eVg|*j@UOeAXTUO_-1LHgH{@ANB^%88y_fQ(yf~>a-EQKK4_9K zY0iG`-TKcz$9`0;*`qnbte?Cm|@+wxNjBQ`LtdTiQM?j5?WPWugZM^n=! ztB!u?GAn6r%-Q|tIDKA^KAbXrPNi3)c_)h+4_4Q-}ITizn|}IuCh<7cPI#zkTScDaY&mEe&IqcYgdIF_)jlk2|u9HNsoxS-4ZI zM(4WOmRQiKMVp-0 zwe;?xvz1?cx<$WGB);F-rAaoUYv-wcO>!OYygBQ(4x@)AkjY zyC1r6a>R}ON7Efj+NXRBk*3d_Id%Fym&();ePpu>M!9rsQ0jD6ocLr@exG+2&dS?v zzk2xj!UlMEO_0ax*7UiH9QI!91P+UO;IMGS3$U-G!=m3gyzZz`>jJ-9&;F9L;jbJP zjo1zG21KCRvR3u^m)?rAnl8h?DpJkz!~C}DpYKyJhxAgd?M_)9Jg#U{(?g}_Gm9EL z5T{$!oA=e4uWCjwJvb!c{PLVcP5YtN1Le{AD<;cRq^==}lMj|`t-CZk;`;6oAJz3% z{I#VqQtJtapPe$D&6SmWo-*D3&izfD2F*Wb(qTr0*AlsJ+U&ylB_^ZoUMw!ZNguxB zdd8=O4m;zv)Qwv@zgdyv%~_df$mS+fyWH6m=(9)#mu4RBZ_C@D z^xp7d-Q;iHqF9^F{jRqO?}cld+`GHyJlj7i#QRc5>HN7KJLcK--;tF+Y}Lg!tCMV- zoLQZpGGWW1U5}@)HFFlN2;H-`<0%h{!}%fG7N2pweKdHE@7F7ZtA-_AzwvbVW4rYn zycgGD*E#pCI&omfmHfMVtVU*CU%p+lLnJHqzu0hNo5dFvFB;SL?rlZ-bLXbVWDTe1 z=7oiJ=-j@E?T62GUmdP*|M})!Ct_S`?-6|^qCV7o*2cyGNvpIT}-T@HA4bE&`K$&t~f4=NHn zMtgVmEHo{<)@b$F%S}GqsY`t{DE3?wvzSVsI8*dz-izPU=J&MuiPP_Y`?N8*GJa#= z-x&Be2L6qK|LGW*aAojuE>A2_@|0}3ge#WHWC9_d&0)*rxKb*TiMV2}k}c&(xN=;9 zD`XOZRIU_A*lY<`hD)S!j^Stjwc##sWz>qd;Ek9z!oUzN7iSAZL871_oJY7fYQ@F< z%)Z;4@vrzc?EZD%hD~r_EQ==+h4BMLq3pn*;Hql;T)A`AFn^t_k zW$SvC6@GqE;hcG)$BN9w?Hf-mVjo{JuvNTu?uEu# zyU#RkGOyjtd!=Oqt@sshE+1?;Jom$G(SzOvhlehW@eFFh?Ej>}>evDG^oxcpU9()Y z@z7>|-Zl2pPZh&mU$zK4(ll|}7CSX(cj2o|e%q@&3e-(%`jVRrs90PPG9S-*tPy(@|muyn>s%8FnQlQJvgZ$y-jiYWc!_0 zS5&SZ-tH`t6|D%2>Cw0QmO!tW;?uf&? z`aT-CYF8VpHOl7OItJiKnE_2yEH^ute#dXhvrZ9TEw6axKHu3Xy&Ru___=S)XvDmvoV*bP7 z*5QfTZ5p=;XBUUv=Su%d*F&<1^kNge?RAVmW7dWUEPFf{S zSoJ`Nkq^gIn|qN@8bd)oaA^V;;_!4|pop`a;dE~^xk4$)RO@+gGBp=2)^H(Cux7UWDFphNTX&Ee;CM_*9U8PqkbjBl+jVEoxy%&n&G(cz> zh8mzK4jjx5W9*0FWrZp*Q-olnG;#X1H6$bsbaw=*`qXt3gxpLsGNo#jj2Q9`#)HCj z3T>7`>!;NaLJ|NkZwynE__RR?wIR-vuE1!BIB1;?f5#AF#J~aWR-Qh=krAQM2|c3% zgPRa#!!erXGPO#PuJ4&9k=6aKDnm^@bqYN+6jYe;fO0rH+MAp|aK>|El7=&(-AEda zgEppzBb|*jNWe(bYaG7rgTeDC4u()6Xd1)YzYJ%%1EZ#~Y(CCU_x>RXrMfNf6E}UN zN~vHs{vjE)Dj7qPrqe65A&M-wA5zh(QqiJR2}wUPWKxyDG)<*eE3`i*F|AHwsOiTf zX4OfOC0a?c!ncYOkS!dTPOnO0E7zn+ROu|8LZX$WuyhJNoO?~29#0MmLr=k=1GzOJ zdjLubBWVrsJcS(??6v6k&#h7$l@X!fZ%rkN3s7-W_A& z+K0!*B*uE(}2y=0b1{!HlWVYmUIK*3wqB!QL0@)QIhB>8(7-|%1 z5uz7XR#wuA5PcmnIVu>Kc@bh@CeT!R5n&vDl5xEuBcm@N7RZH6Pz9kAiHx>H7aCM5 z6bJJi7?&xNaZ&&QH5d;kX_!9)Ng8^mfTV|G2nC=h4y6}jm|-@Efl+M`1J$uX3~Ot+ z*uXPFXm;=i=s}adIu<9KW`o>JvLteiE}YCyug>4#CxuYHDTGfHVn!6gPacS(IP_kq zkcwWGdm@`)FNBZxLbQB@ndBo3%BFnF76sU%LWvnzFGOcXBSbWV3T>$ie4F+{^mR03 zV8@*N0!^UQ#e^L>! z3_Q}l;gP8S+ols7z!CM(ktvdNnKD^Tc4mtjoyn@vnZ&F25h6OXCHWkbp^=7RVWdGB z8fj35#xmg`d*gFE3OqOT07mqH3E5V2XeKg>k{Aj#MM>j?v$(9PoV~gyRpq1;0)iYA zXtWtWoW&Oi@OD)l9Z(!ih#HNL{Wg;=R7W>6Xb~z@2VbBNODKdbz*&5b2yaU!a_%JswONbCzOvERA9uSuZ|TW(Mw__`V=r!HB(WlQqhe`U}R>iWjY1uHDj#+ zKHvkj!fFFPxg;QAFv;=4ByJ@tZ)abO#_Q%0>5PgO9>(%7DjHiojSGn_Fo-X*D3UVsti3#sZ#3|S|}3?7l1tY zz}?|nGeX!G0Ha#IpH`EpSEVNtcVkoXyODX}-VFqX84#u=h8V6fz>PhsV8B@*42l_M zFd1|Vp?q@;F^~m@80LhqO)%8NGK%9>S;0U|xL9GRiFp)cIxvbAuOLrZ4NcG5{3FZ6 zqML&u`ic>Oy@7j6;NG`(?%k`o4^C0YQkh{IEi*Ag4yRMa6C4s;b6O;;HByP1d=`SDE&!ooQxmOovHQ70e*5N}g;Gw8yuC_5(4e zY2=?Xsxt8%@o1joDlC_dFW^jr` z&kWM&q1)Yl&P_r%D@da!c(EdRF+93dgOi6`g#0i>&)2l-&4zmm2GPe4uZI$SOaK#z z_|(Etut8ixVvPRK%aU|CGe{y!&CFox6zOtix~9gfnDrWFXp}^y_JuaEzHLMG&^2Ud z8HPh>nna~0N2_CCR4so5Tq6NXVAPJ^LwpP&jEWE}Nf}n45$eEBTPwOzRn{?sB?uTZ zLqBF{w0h#mP51yJf`e53WLf}S#K+3`OsCL;GOSvZ8`q<7Cl`r?J%YtBv11o%w}Brj zS5{W$QGtQ)mr;h*l+i|PB5Q>ECKSbSB^-5i5yG5^g?t5SfDmSmD!`qEmO+U;#EL+t(gdhvYE7mbj>n@SnpklnGgLviV8C(7WYp{gbA;&1T(!y+A!ko?jO4-a0bJl192t`s5*8U4 z7s`r=Wd+LRz&Ro8zbu?mv+%~I#?{~7Q#iF|;Xc$4WU+rw;k25Cdzu(6@!wOp$+v|M zB8&YW7v8XDhnm(bys7E5JvB@JzwJ=7nuRyFeoY+uVf_3>;nslX6grI>JbE$$Cm1K` zGO`G`FEe-)3jxrfWfWv*a1zneQrE`-EQ7o88J$j}!85pn!nHLhT{wy$OGNR8xh(`4sJ;Y&<76o2r=Xi2+<4ek-5+O7ML+Ai3w;`N?A!G@Y8-P3&q0gjizaPLmFbxQy zxm1K&G&InKG=$bV8t4%;ga*Gd&?9LGtpw!(p%R)QR05yTG=zGCf`Phd2xX9I#?lb- zC+i(YLns#9P7qR|A(TL_sm9X~T0y3nKtpH~#AOgdlV}L7AQ=qy*)J z5SmIuC!vz44?CX-}6SjEnoWj&ia&8jk4)ibMNO>ZzWNX9TTA~zzEEKYZ|0qdJA z+kzp$f?)%OVZb&F*dHwToBsg;He~plzZnMXud)SL5Cp7^-+A0eL?p?o>6IYBfkqcI z;y%tj_uO;NJ?GqW-F*OC{FwMs1 z>^LbB1DL;yw#bI-soFn^%-bb1&WGRF(XhVyRXj2E_EwIPN_AZtzpazJn+blpq6>c& zPkIj`^cpQu*&A&@{go(sZ@PX#N+ffSWn~oM= zqA`Q+j?7tHWNCI}qW!Gb`s`=>0)iP*KYPV!Kl}R9he!=Qq}gGP=J##?W@v8OA2$~i zB=Cm}H2y}h5ae${P`bdn6a1S(B&-$ebQ z9PJMV5$N*%I5&<-9MW=cmZqXNWDT!l4c}Nn!zLb&d6GI*6%EoVx?kmGRT#UPXzfxB zEEg_pMtN2xSyc{YrRvi2)*kiM@mQzS-Td^EOP~}^^WNlHFDZ(=5MFp>=oePVlil4H zyN1_E8~MNg^phJw-wV5}&oL8J>x>e9nv}C?usCX)d$7p70CSdwLX&CdvRPq8Dzvh` z1*`IHORHBK(1HeO3Frb1I39C077W7N=m)J-<7oC$s=dMZki}HPGlQkfS2@P!`^#Gu z2B&OEv0oOWmStpnz%qJI!n?-cALY~8B&m|?7~iL#7%a#|n61fp8bd>@r$;gxqe!MU z7cFxr)4I;7;6=oY!nDj8%sk^|@}wxhAGn{DD$ge?heH<)S*x|x?rF%0XMNnvJjS)S#^IQ;Z7E=yAuqaKX?b;cGB z!Wa_HYJEX;a^S}HZ(qf_D!>IXp+f~@#f(p9|9rnNcO(*$^c?MBI{4twPP3KnlaW|>v z1qSgcT1yX2_s#uDl9|r)`Sh(BngMIdG!`@z4Wjo{RB(}$fO3|OP8h~+he9hpL;WQq zZS7UX+qavh-UXnp_rdT4O`<6@9v9Wy_a>Q?38a{WZ)Hg z|LG_93&MfvSX|Hu-R2}D1oNijPwM4FWum3XtdiXJdElE)*e(?S$%ORvf!!JIZf$XQ zUkSa_oMYZ^gcG07lFXYGQI!aEQ4TtLJ1@^O-xnHlg*kyHs6px%in0*3ZlD-db|qt`2G!P zdpCiY35gjUSJkY%zp_%~WuI)v{bC;25XQ;ji?b{#OhlhSCa$HY zX;D_YbLMok%(m=1%b1OE6pf9NOmwe{2{l=+AccJI zPoCfomdK3DidB=S!0YpbUfY&@Akrym_s~dsywmlokp43}F5)s7Mz#TRWFEw2Is(ga zmy4byrby6;sg4ul^+Jv?wv(ilIXK52@+c|jP2cRmyI9VP#3b+HQ8hU?)p1&yJPX_C zMl!}|$)u$zkMpyvFS8pA3FzdZXa)1ew^t#6G|yzTlzRV9ovP0F&x(A82)ZGf zUG{(%6Os337$vK>4i881`1ZkIuy*_I`s!eCXB5Y`*5lQ+)p%`fypi0yI~W|^Iy|^H zI^4Lub~spz?+!NN`1bhrojZ3dngdHput_mbBb;9d`Ce>!f$`H!gsEtM)}%2Q6k!F))@Mr^3V55^=M`a3Q z|3M-(XrHUXfOtKN8xc0IXZY<+po)dpv#|gfFm`2%+Tud-q6Pegr<5duRA)zD`!;@B zj*S(?GMR_mwxswwEy$Jy$6r}tXj#p?Qfbw;d<_?~PPuY|##(MN3l5}c|M1)kbWk>c zN6Fwr*WMgaGyng}8zn;`-Va@QZQOSei`km8b|)*n#$jlC(DOt)j4!>jv^vh`Rc};G zz8@Y$ghKYLj?*6@k~-ds$Imi>2zc@?Ey339Dqirqb#dPy&f(P%=5a&J(zem|+NO<| z8>TeRUB-z0F8cY6>qR+&HuM!j!}p6H?`Joln#h-PO;E4KlR;lGzb3fyGu?Wuh!5+edE30D%fyZw-ndm#tCMw z<6cl5LpxL7w2qxBnad$%H#?+SY<6b(Bpsb^cE)*D^@`-r=4p}iW=Szk5jK;Ro1IBa z8h2b&$#@eR*4`+eXVqqhXKJ&PW~cEa9dCAIb~ZbG{OV`PyNdo8Coz7<2l<@HaI>47 zPRxqof5tiL#o2fmz85zubq3=j4{&pw*UFI?@im99;>jk7?ICr*y#%3;u()OO>49r@ zX=zCcHkt#DgZ4iE;SbxX=czqGV@8(7}7?j<3xrKP1$If(eb`+=H1{tY#KJkHND*aOUH>*dYT zyo^UD@ljIx#*hCb`ln?4c=-o^i;N$L@PP5-ciN2~|LTG!VgC5+2RF=Ttxjh9e1>WJ zmh^*#&$m*B!rH3z#O&ttDk)y<$!wR#*fL))0OxD3%ta6NbrqP6+DeYn>Ue&DAi9+@ zIf%YcCd{W zmNhozEFLAOv^5@^*i6$=k?%b=qqrDbK+e*Ww6EO~Jb1IR6KC^ya(|DbqaUZ`2|zG; z0kJoqnb_=Z?ey^8oTjn4xiU`66Vec>^I0;aI1)qu?@i-(y)yk}GF%(%m~xU=!y=yE zv_|`JT9{~s15ZZrtenPKZzdE5MUV}l7`D)zA*W}0Xveus-dX0_h>^`;2S^XiyaYyW z&SytOJWhIO{HBPbPd`~nvnnYL<59A5mL8_sHEl7adp3x40HC(Poea?f!aC4oZyIMS z(>RNdlH!AE-%!y~#?z!H&JOlZ@HW7iZPk>mkkJl`_&M7oq_TPADGkISBc-G0Ee9W% z#|eCUCZCMWSe7--EPI&39VktuAcNZbE|M97vLO=#DF{51J=v}?h3Ia7b$!{4ixe-+ zVP2r;q%db`kxY`ZBs!V zmY}pGKqAcNS$vwT*%IbBF3mxbWM-V6rsHG`T28YnH)EZ7V1=7Ztg{^}ZxOLoy!xl#-M#Q3R-F8ss1m`}q6cbX<=RX$5c{n_#C$JKCc zuy$*0o$Rd|SA|ofX_bsB*u2tg_>GC;Vj7rSS{{_SbIadNHJ|9+#+|P(D`cW+Ix7#7 z=)Jd1c3P~G2m@wG&Nm3PJRx4MT=?SQm` zqoeM)bqf0K_;ck|C##ELFZ47YCqtqLaw*FLhqN`O>*5SaMRB|0I$cpfdhT5>0HUAG zP9nb}XY2)YyJ7=wJMU}If|V!a7E+j15Wz&;H!m_1n_Gih%Q(ycLvLKsidOth<8yrB z1xzS}5G!ZNC_PM*aX|amBk1siFE;Ctx90x8t}4r4QI%zD2ZyZZGhat}{`Y_T7YMyX z#3^)>Anx)9S_7e%_6PKl|K<O6`694dP(osk5jN8?1<< z>Z5#iUZh9ImFbR_%-UdZySFx2yTkiE!;$%aq&}7h><>ac;XbA1Ov}oF!JzI1MaIc# zI!bz=!DXgLZYSI^(uS=TVM>ZbiUbd$v&Y%Eyf3wJREe=cuhhczJUJ75MEvz@2&M== zXIqA?Qe5m3my!m%NNAa7lW-leh1h#x4HLfQ^9pu}P6IG&9fd~qAqG-ARtIJ`=AEpV z0(tns$*cuuxjcl!yGMez!uB+aCzy@e#?G2;ltu+Xe0B{7jmY>t?0z76EUOCqe%cA5 z^`a|Sj&G2h3vl3D=%X*6l4v0Rnr!U+@7IUsFrJj+O9P!du_SbtW*=i*saaDHf6>yt zIuJN!nam!oP76Wt2btoiH5XQKwZ^YzU+1O?TVevi-|E>rO^SoOOomymTVXH*=d;}& zCs~zN=T)md*1N8368OYv)D0Jw@ z+2}Yg%4kUf3Cb!NQ!D|35bbkGBNP=7Et&63M4IPEH!w6&JefpG<`4fc0N{b}QeCk4{fqS$E=idV}Skki}Iy&*9QoI3lO3#TSFY zzsQCI96KZ7O#%rd?6 z3#4Kg)7hPpIHN{I%GATPu|TXLv3>riy0a;I$IOD*;VQ4Y0G>J)_#Nwt(tqg1dQ>Frv<4E$@^wB_3ObC_Nix3A z0_I6k=y)7ps`yYhq};i0LNy4gB{@igtEsOVw!+KoRPtnibWyv{$qGPN*vV1@vI_%k zi#^)%WnMjec!m}w+arT&(Od9}DDoGOw|qJSY_T3|)3q*>cV${uO44qm9k)QdkmS1f zzPRmio|HFXk*IY6)V(nsMRx}=C> zaJ9hRxL^`@Vj@aAT60rIc=Lia~~HUyzYFD7Gl;6t%y<(4CmdQf*==)!1{k4}g}C}qvt1s|&vN0y!agh;VwwXnJo zon%n}nxS!Zh%_wIn$DdS;2YW(_~1vI-Ybfk3MlRhQG7M1L;s08?5wVO8^KqrXKgfM zV^ABG0B1tQnx2OR*n9aaG*cYW+)s`4H*`#yx(pH69a2X(sNU9peBQgjO}R zpGa_luLXjakGj)20OEu7-38AFZI8i0WWp`G2qC=MY|u2bP;J{rddmEzn-1(BJ=IEq z6?W(C91%X1R;9lowPSGB1fWo&?!oyUoo#kg{`{vYCX_1Wk{XYGeBr%p@e?NOgDK*a0$;2Gs+=OTz z2gxKqTV~=ReY2Rx6Q?fgu2NRL0LPU0Wge3c4+likqj?d-(4&ALvebWUhigo+L4I;A!ZL*yH8YUSI4d-j0uzOIt*NqeyqSL~n|W zz0BwM-~PUOPXD^+IrUW}-+}s{|M&llg1r9M;XkDyFQn^%BQ?l$hn$Fh1DYq%e+Ref zzxMlAbF2FGpkK?#BxLZu81Ch`w0uRmhAZ{%)m*7R6;}EC z2}+hjiHOot1Gu)};O34PiclaB%W^U-Fr(TIy0ml=J1R?N~lDWUzaSgpV zO^PBNxCO=8C2Z!_BgxoPEp0zYuFxm~uYDp}8e9iZjgJ zyhLC_Y0i?#gu;Wi%@~1el_?UY?6HKeC8Oiq^iaW!Jw#A&SQ3v-R|AWRa@0@G@?zQ_ zCo4!czw-FW!`ILH$JKOlgR1uU9M2LuRMlXT9~~hdEm;i^gH#S#L@sl0Jg^}f(l|Ix zSf|ESzUJ_{;3TMo%eBX@K=x`Qk0~v_iEK)Gd~~1baM-gXONw~%DwpGha-MyK6glX3w^c9{=Rd-#9&fk=**@dv~+*e0Js!Qky~sQnb`t9Sqj*tgo&Q?hWp& zN1NtGbnEu5TZ8pmw{Fvz%!G2cDFsOsDfn6=z94FDK{yCe9gA;`Q7c+ zwOh9~);0!r`NisB!D!BrjgjK|d|x;D4MT_HY{;$l@{I-Q&VP(%I=P zx6<>|VBO94wK91}5VAz_TlYE#GdEC1(pg z>*|V!0mX`cN*DvxOjn(4=M~IcYiDhrC>;!>sJX#GE5xrroTux>d9Pd_73-Q`D7uvm zs^j&-e+%mH`-9R#-L2NU+b+v_GJZlCnY>;>eCUqZ0gr68H_D=68wA)sukqIfz@Rmj z-IBg|D;u-Gr(nlrGpkP_pEX=YMV=gr^yul_=ZO1=OB3ZKk@z_W<1+cUcZgy$-88cS zP-Ge*$^K%G0oXwi*Ttsk_+K`c`q;PJFnP&k90=*5iBIEn0#c*h58LZY0UZ&=h|gV# z532+r;$-verbk&`B&GS&!@L+JoL=ZpiBX0RBHDv8V3t^%_&1)M#pk7TsQoQtXP6N$ z&F7VL$YJ?{BhzbdwzWBvXS~$}${aa8PEK+1Wjh;9=Hq1hrE&u$Hy)9lUc#=M5Pv~= z2xxBv^oUeRCVH8aCvkC`#2=B;(^oGw54KI%?qFmXcH?ZEPaji;Mz|eA2wh62s64D@ z_g7ZGX*~vNlw@ThrCIgCe)`cDyUT2DDbq=kA^SvmlFpXu?P+~~Te7$Jh51Qx z-UPEe#%sTO&jPssV3b%`Mb}mxDyl>u$4*Jc(0e<4hGju#D6$i0!DtZP@OVC61Rs6! zM^6|=G!Ch-oTqM?cJgsg&v%R^7ZKFTxG3UtxWPF+5wSY2jTo6^Y0HHCH)HTKUVfmg zt?b-$3F4GgX>DX|R~?(~is?NtUoW91-c<>$3{-!fXR{(HVOhmup(82be9v%-q{ec} zr1&x|D-*@@3i2eMSN$SAT=stElQCYg>T$!+u{vv2BPkPS=VnC7%G~B%ypQ4I{BFEu z^X=vAZRf38kL`H9{4^;h@p)w4F2l0>QEh$~{k*l&{r&!UrBA1VC|R){ToIk1Eg^6d zTuI*W>KS+ORa_tpclinft<_{#p3NnUpx|1l2@hU(!Gb?TQ#(Hv7f}ziV#~MFEim*^ zKsMu?XVlJb=q;6ADYQuNglS{XXshp9k1%78XTyx5{cN0^k{lkIj{He_UA@dMC*G4{ z@(U$frt2c&Vs~WYJi3^cc3(fIlj$ykx`}=e@`cD3N>}X5&j9&I+QBHKn3x8@3-EfD zj;mucjf<0{F#C}QbUV(;7e*nVH%yrx;poFzLc9l?>T^k@?Bp_=_f)`(|4n?baGLY? z>%JFAjPSP+MFq_s7Tn(xgCP6aWgY#^|4Yrazt=F=g64f=?Z0(;?-xioe*47+oq9n& zbr@@R{S&#L26ir(YQr}$)c%uybVWlguUfzX<{}hbx6|6SfHDmm?LU{}F3ZkAWP=Nz zyi2PWKe5tETueL$3VobSgN*WqFM?gKdIcah7SURzZNqgZtKz;(hUI0=t^OI)S_Fb-rey!8eAt8_&vk{$Sm#t@Q_Y`Z(@Ijx3B63YK+m3C|fNDU=;PB?i}@XY_GgNODP< z)mzvZxzWQ+|2QqSvav=*lSaNmWL(atW&amtPD6Edtf@nfAzysnLyPYnBMG$TU(~l| zU{*Ky@P#6CoSZ()+aFKP|Vs+g9e1$cz`$D-nHhfaTApu;iQxsQ;R*$8*#%?;(hZiZDOQb@Kx<_ z-enTvtmE9l$VU*+Bh-U$YF0iwJcW-rZP#I&3ryC=&2V=~-uF?L@(Qr=0k z^l@Azuxjm9@f4?N6sR2}GN^yVdJ&_Ac!^8n`F2RP_I|6c$F=%penhSyf%-8WlcXh% zOS!~*<%(~Y4>_kHC6xSDvGLyqe_aI zaiVG+7DmtwJ{{~Pr>W*fmKmn^dr6VTljoHGrPkcRS4pu2Gg#1Cm?2lzgjX~C-u&Qd z1i(L>r;{k!0d)bmZ(hVX+#xgMxtt^Wdtz zn2Z}3ZO!ha@Oj25Z!FJ}ia#_^{iGblv*c-B>?TJ~-g#9X9mh!Gn-n|qNtMnfeslKQ zZZez1BOhyzCP|!u$0J*Y-yGhHisFXH((YlACWiqwo}_SZzVK<{DOp{@&L8DjMtXx+Z@YZ_d~cU7cS{~niV;TCT7EYvlj?aD zuKb;o$ElB6Iw9dz-<@Ity%+fTEb-a;>nwe@_Bi*K!0Tf2BpdPaR~WskD7@x)Eqs}e zd`SQ+q`J7gvc5kFY8kn(yzi*ym$~56n*WWwQcv?@QC<4}@cea_Vn{-`I;^jdWGk+c zz4NS!eVVF;BzPS<$qVjql=x$C-*(a?j(YNH3d?$xhqS%R3Btyj6U3{5O$9~q)ZV?w z^sOVUr?{Tri}_K4Irf2~53nq49VJ<{SNV;hEM>CuD|m)OVwxa+4*>78=CWx23S3Lv zqvG508;=*cA#7&|vZ%g_eGuKt-GFe3dDe6ChceZMbINWkElC>J4)MBRueuK7zSM+; z`>;ScJt2#vzqlQ6 zUPeoFTa&rUoHu8D--Ak4hXqr{LY4>n5~YxmS@TMzrSr|IJ%WboFLk!U*>j1=u?w zGz9~Ox87m$k^7*msiTHBm>4I(SEc#8U_)6jcl(_HHW{}6&L6q3j_Y#53`yjJvTb4H zjfHj9E*&?)$+7$pNsPQ5iQ#j4&YSs3xhwi=O%20@gheHn(T(q-wmrE#dLBi zTdZj5l7+6PQOS-$ICN~vFEU>+M15pp5p5k3QSwh@U#?qxF0 zqoCGGA%}DF5ggiUTjjzPShXku0Np42h3l_Tuuf9|1;q40+>4qGmdPc&i&YN*a|xdk zrGl4}C&)gARNZm$MGGoqUVNt;fCR+`)+5)Ja+em{6DZl88mkvru++l^6L7^w3wA&X zglBj|=fe1ci6KndPrkvp@daiY=7fHEadtLJi#fRQJ}{MeP_y%kR89dydVATW2i*D!wI9=3KXw@7kn;_AFgYse_}=+Y^lWV(6`SgY~woZJk88Xo_4>3#9oimk^kb8<6COgXTG z5S=+S*>m>Io0qW14UOM`CM8~H!I$VYaBM12DM>1da3x@&Ku8v^>7S%VVE z_vnS4sow6^fHW^R_%WUNUE=aM2U0tJ^dh|mcJQHrn-DwFm&10!BefewIr<4 zTLbwHK%Z%vfmvsr{?Qk^5kjrhP1j!P-NqeX@AvY@2*~~-dV{&3yNc}rR8DwFPCV?H zBBK|&wbr-0ty(pQZ5~;-<8|A6Ac<$G7s{Fi)zmj|*xtfLZbZb%SrOKd{ z;&x>rY13iK8EL$wL0Z>@4;~)>Uzw70Z8{zdR&0r9COg?%NirKmUcDD9B$iM(3t^_k{+{(LO1 zE31rB<_aQYX)LZ2NN#jyMg8JB+K*Tw)ux0l<&%g25nY$J-Xu^-XB;~2p<&3NoXdXvp*_`&T_9lNpn zLfrt?H;&Yx{W!@FVv48q30l8uuu)JYa38zPVc^epuj?Lht95EvzqO@L_?!R~8=e`p zvt`p6iSBGVBTI4cm0ek;WrHo~t!tE2VUZzL(Hz)CFiHBMtGPVhn2sB^+FEm4ZJQ0@P3<7Mr6KnP>d|a1exwE~wo{I5V}=*G4Ys zobvsT=;o67&{QXwWcbsV+Dv)751yASlgi zpiPQisU4D>UPCHXQCVhX5kduaPq;QPid(GvZkVnpW}Y#4<$mfCxzSmTbbx1;*WU1& zjkL_;q5;cN?mdXI2@Z{3fqnsmRD+d)stHb-tvRIdUz$#bmEae94YG19ip-g~?!D`^ z`@I4wjV*w&1@|KUJ>)l~U@H;S7mEa6A)T>ZFs*X#Ln*4JKV5M;MU{(S%+@8qn=el` z_t~iA)4r5(dQu-I0Uw_Wxge;>b-TD%#Xvwli>O&(Z>RvYu4;LkZJ%v;zdm%|>#Z$a zJSZD*;!SP6i7SoD0vPI)ywzMZm=^8OA4^lkyJR#^RU`FCqoohfM(;t$8Qc15olVOO zBza5OU<&o+!~%v-p!SU0Pgv;62R8~xRy zjgS`JUby?s`z5FM*`Pl!V6dS9deMhYlX+wA7umS13NuNvqw0A0#&onGE3Vmm%Ga!~ z4a{3QjWvw69zJ^f7T>ZgL^?sNY*pdA1VB*1{RfUs;a z$YGOL0sxr7>9pa%RQUynyR~-j*1bD-*Y4dWyC_>IbadW{7X*%x(c(B6=^+?(@2D0` zSBtwHMQ2s@VDa;KL5Q68kx5TZ#349Q|E~L=37M+V1`MMSkEPJLKbI zHt8ncpGqS_1J3LwC-qR9PL<&+YxBOdOx=%NeD6JoW-&sMiFprAl)@+p?P6dye9jmmX%~*5d`Narbtz@DIfl;QvYY8ksF$WYFrRrW zYK@!q_M95(?ZUa;N2eQxyV~ZYh-WJsCt0+8O<&|bS(u)8qZ4-&g7hIfy zW9%V$DxdmEa=y%nPP3tO@8(Kux*dT5IYenT>tddVPy_HJIgd=|C&{@*C1O>q65_UL zwzfv^f~Fa(URBJ3M!FE1LmPR0%w+|0`o|5WiR?)Ng$0wPh*nV4$z^BRx`cTyyU{+` z^_`D0gi27%g?(a_C8$&*?L?l-kI{ffM3xd-69l$sSU2fMgMfChI8^pn7(^HZvw+n4 zSx$LGYdsPVQ)0S^sv1;JcaDDZCos_ODF56s5EQ>_h^U@s&idSLF}WlH35EL*ca zy-aDoAxppxWQrcE^5{(&Q2U`cnlxciehKej99cM(rPHA;B){?uZ1yA4MRojE+~GUw zhuP5|=LZO=2XXu&Kj3rzYDld)R1wC>+4nR+`c-j`Xf{gBhD=;$Hb0o8BeVTdvILGL zDOZ^kI7TKh$AAp+#x_8h9`N4c+{JklHMkMtMh)*a9i$iR;ntRXJdDV9OUho)%cwj& zPs*MK43B^fbj-;HhjV1niOU{QjzRqJIIdzBJxmXU4-IeYB_fN$HlgGY60zfYO7~%W zG)^LHMyT@^e=O#`mcjp5?@v?^;W!Pd0qx-or7QLkba1E{*8Zg?gtgZ51Hqhp5G7oK z6-x>>99T4{86=KcyE|@)yfr-+^-03seG6^`sVyzAW23XtSxOS`b$@hgSpCW`bAh58CH`%K2$@e|nH!k7Jj6zXZ zB;G(-ZbRb>G+MiRCbrM&HdI+iBmJhzj#<5K)Xo)6-t%g;vywNh0((aOw?$vkUW<0&HQs>8w!*kQJg5WhHc3 zqpRohsYi6Tbn<)>V`8D{oun+|qr~4L+IbV*%B5BgR=9hur|^T% zy2$w@PZTG5_BlX%;^q$EUh)t6htxt{+tFM8DDbu?Ur-Id)AAWwwu>{fQ?bg*g#b^v zRn0f7)D7?5*`#xV!+Uo(%^7DKAKqKv3SKm& zSM(mKTH~M*(^OAi_ z+Ud7+nC4p?d0g7>M8WNiwaP;iQ5D&Tc$!V;%lwFO)l!E#@ast0`-|!ToXGGFi~6A> znXVsQf%HwVPhU5g;oAX6@=^E&iFx}Gdn+Ch9n50t3@8CMAfP@ZIM+fO-h;S#@0_mn zsyKq>RRJ4S&iA)2T*$9WWEE&#%EX1#QsXW>@s0&M^HXcG18TsRq0*Vhc~M04X~nke zYLMI}&8j3DCrEZq7tPrNknT=2VuR9d{eUFXIs>4IkAie8heeX~j>qF(3Dv~BHJ_V} z^^J`?gN@LKRJ*@4xEpg+OnQ2=J&lZxJO%flURIs1Vdecl-}N4B$OBTe$Vp4N7v3Dl zr9m=n48|Nz;_}$=a1Q32`po(nqZIer@TDCI?~U@ajB*Tm`!(}u_e)MKeqL6|R8j3C zlLeedURRpY=ebXjN9k#jY2(i17lf!-`495@(3?uXj~jHae1EQz_P5_UbepSIZ@)cP z^s*Z9TzYq|Tl0Evu4M}j%QmRFF{`!iygQa~^4nd}8+KzgDQ`XdhuuB)!O7me`Zq;% zSzgsQ(M`(SY11p~31(|c^KV&Fe#HJx;ddZNA|-$HZv2kQ#76c#;o(8;j@bH5A&E~|Uy7x^**nhXlQHg$$WJ^hc^(~7lX!R{6_TR*Dn|ToaN96E zSAl2gg863E%O13p7JCn(_=NmebZsYiAg`aV;_#dQwxk;VEcp_n2BSxfs5kT*lCIg5 z8=Tj)T!fOH7muE^N9e7vT14EV<2cRe z_J;^QP9Cq?ftO(x@E_Zw{38mKfK zgk`+<90Xl)_J=bK7=f8`g;=Q_R$t=*q_~}Tuf=g$^^o&<=&Gp=nyAAVI>Rk9=5BIj z;`WaJc;c?6zN$f3HLTW&ym;!|6yM~e!AKrird3{?Uss#IwOv-ZnVtY2xGKXp=?900 zba{Q4Iz?R1)8iL&WnX4Q+k3muIP?3@R9NZWZjsnV=R zSJkkh9W9yfOhor((e})uS)VI5(yq1f^HI863&IdB?aM|y#5p8Wg`^VFBvS#akXxi% zlqhONxU;VbS(#w|g{*U2M;qyVRgRcfG(YM}#9Ra(qTw6t{E(F}{Uxr%7$PsJ>3$RN zvG*`#+UdP~(O+`nXK`81j*GZVhEWtU*DxDEJ9a*t+l0H(#zX{g zFS>^LyKeOJx-f~pelzIZd;1woSYj)bX{a-NPnEdh9;d8uE9X43OVrInb9u4~uaP0> zOhVW^^}tt<;X}TBKvwZG!JbNWp*pLl@HXn(pKaXQS9xQy6IaN*+cY_= z4N8?2*5KT32CB>=G;}>chaK)BFTx9h?OVDQfqyQ+89nf9o$4l`(KqO;X{3qF^W01^ zq`K%o%;(uywX(Ja$Czxf;RS=dXfA?+(Cis(8Xv+~6q5nFlx^L@8Egb%)#mR)e^2P7 zvAzN@RPumW3xf6^1)dmjbf~8g`OUUDR&^EJpPB$TzE{KxU4f70a$gphIp<5P56!aq z7V6}ALOd7obXUR-Qs@_raC%O=BgHG;i<2aIhMBT`$$Susv|wP>sBsCQ8&6T|YCYs- zOMeN~$D`a!t5c8~*C0E#0MUCO;cY`M!3v6PjciLHH&FTJ_JGLUT1PSm|6nnzqi>b% z;P!H7!S&0ys*=Jx`|VIIgO^M{wNR^$R@8W}6o){FY=r3FuoKqHOMJxh_+G@ZuSF5kWLgk1R)S}P=Ab>4SKEdb{7$}%eSr&g$z}_1&+zc&8)6Y;g znYCJM1m41WzTEctquJ9Kd!JKdhwg`i)|W@<*ON8l;>i4_B+4^7*?IQrR^E8(X4drms~U54pmq|L9YbysaMn48ZwvQQ?RnA(i(Q>0!ZI<9;TTM zv$E{N7L59Vodb_ufCPY&H}(0JRsxR1@yEBOS1(`#TDE5eO<0{MMw&?(hGc@wSZsSj%<)cHoMFr^Gp zh$llR179pE>DQ{o75xOO2&IY85NcY!Aw_!}H++?D1`8@{XTo==<$(1#g{7u*@M37e zJWJ)pY6GoAI}~MsG#2f`Qaz^6A&kp<>!`u!i68&UXNoBDy(y~L7g;^%diN^BYj7^!+COSDz`)DBSvYnn65D^sSv z8#*lMJuCz`1s-g!J6k_9s{<_TTJtmoRi2f}h=);OKwWOTA4)MAO@#Z;pwhi%W{ih_ zBK)J&cn>*+6<#4wN8ZAP~KPpU?G2sAPgdub$+NIVo&o7}v~yA)TvkXwV}d3@gn1{bJg*Sj4a^>-%vdG}i| zqHk#!5@OWVSS2d8L^^~V1_^{YA%WBE+u;jV8(6m|5*J|I&dNfSwT4spdNIt}*sg@z z?+dfFzCRkTZb!FMzmdlx*2>XodQ#*}?+1B4aY2Rdw!hJYubUt-#Rxy8i<95L+=0JX zv$AcT5|gB__^bYPoF5)~XZCVCInmfYX# zOZA#0R*~77HaigC;fF>GPSb$*?(*vD^6K*X@~!1N7G7JN z`|V1EX!Pz~oFxZwF)QNpc{ZQSkCNG_%1@Kg*7GM1w{~CdZvDyY=dZtf{p`uhN3ULd z_2f}>#o?OXDrC%>s>cKYjcw<_>YB$%cTBgl1I=O0Y4#%X1N3&W$@t84c9zVlSyyx^ z)8&ajKR-WT1mD1$j@9~fjK_=T@s?NdcD>>kU-%V?vIfSiDR=_cblNDjZp`gksj_U8 zx?>F8ZARGRFC~);waU`m zF?a3RISqwu5rl83S85-`j-ET?G5`C;7yR#Z%Kw(7w#c)4{{m6zxykM75JXw4nAPNuc09R!_qghOffd5Sx`sRnt8}6T zE9@SxFy8>h=dmmiv^bw=97I5ZTQb4%ylK|^4g)id-wjuB=UV^&E77@@qDWQ|6Lio8VKN!|L>yZ{P6o|0Rp$ps@d>IqXh9FnQ^&_+H_*0;gHEoXo zAC^`HdLe~5(J!LiqfY`wl;ieb0W-kV1_oPMN-|3dnYdj&FkljPUpB1Fx&;kIh}IBlpxkJCbwK+hn{0~dq{D*0XWKpNdD5BJAduYSL8qQ2=!!$Rw_ zSkj_y3D^FmPm(uMtPQQr{`>ttjGZIcYm$;;3X^wfSv8$6cE#{M+3(AmyD6$$2NK9{ z>N<4EyUXr5C`ZRaTCck19bTFcx%n56YFAWaz4QEwJ5#%$$?$JRZh@{jF>PQT(iuvL z{(n*wD*amsm?q4E%+BlUSI)CUDB5& zFPs^$)V09h5{=XH~y`zcGE)nI=ig}7yM9CK&mw8Z^y?%+aDiy%7+VqNLZ zVFo2FZS`f7Wbwfy&5j&Zfj!Yc=u<*w`KNsP6Aw)!p4w!3--vJdfwtyRk;D`diH1#n zNa$d2T*n=jWf4KCnO)k5Spkg4;{_qaAJ@yu>@aqu#yhQgd#%y)PC^kj}TO+zWQ7V z+omy-KxwjUCPBrVBfv}e_SVmcYcqkZng^z%Mg?K@d}Px8!X2TS>1=2Fc~JTDD^?b> zIIO+F1-fO-r}g*_8A8w)Hm8*2#zuJvaWcR!bI4k847Ao)V)m^r&S7O) zfYcqpV-DHdw_pGnDha3+DO#@zXMf4Lzr>N}5dPNPNFudu9EYz8d4NedbnG;6=L&GM zFO1A3dmt88%oEZ+Nn^5R+Q1%VCuc3x`#bAFpK4KYJua}2DSbHAYsf3eY3R(W>EUA-7po-S)S#^Nl9mVfQ}^23}ve+m(3)tk|Lg% zJkt|foYe0)DU;Hlo?2fvJlsdVm{Mdg0VZ3{D%IC8-^ZkBzt*OOg&m zIHJ1%v!yJ-u;hT?SyVC3t$Na1k1lA^Yda4z2an>(B*FRgfHar}lr;Wqp5i>SD`8!7 zT;iv3L3#YV5|_D3g;PoDTfNj8CXZ!no{L}5mli6|n?Lkt--xi~9 z_xJltc>irP2Le>m&}Q^J2WLsga$nMmJ-wAulw|GH$`rwBUCm-T*Bh(|c*rDy7<}eU z?W^0^v|M4^NCFLlY$&-M!ZMU#ND%+?g1yZv@Yaj`pfdFw!_*}w^OA`U<#zeVM4We( zUCX}rS@cw?Pnv2suFNEf%gP{)VS1R3j5ZWc(&~K46pWwJA)kT)EZT4+&b&k$iCnGh zqV;9%ESir+=8Eus`Ud6aWAENKr<4h4YVH!; z_x6B;zcD~I4N6iWIp;b9(~Z80Cu6#&;d|Qw_zSI$h=rjkyt*lYlNr2QrT7>2ZCKVo z2{GlJAg-0&jfsAl6nV61B4Ppf16%eYJdY@056>*KFJI@S{?%u`haGS^Qt3TLyIEAwF9E{A8K1uE9LUy&-nI=AC#0 z@1YrBXmwH6gdj@s{7A8d0Im~&7c@h&ds!>DFKeY3UE0RoS{uS{l{v_NNdiM#9TnZJ0_*kf)gu+wTMmi)u*j$9i%=VgfJmAqh+ zA+H@+FN$#@A$>Ir*2)NRx8zDCB-KkJlRZJgC<@!wv&=|bP5|^CNOycRqctTfb#qb8 zT9=H(Kh6*Mf^MhT$`_dcr!Q%UlQTrw9f}$}y&UJBKe&-0otX%aoWXdNj!u&5BOtk8 z!mNVr-#~60L*_n-CDtd?!?(kW3yD>pCM}2sA((oa4el5z!jZiLk>#=)yz?!PNO$hzDKX&X8JKIH81k`k#!4oXE+? zW18!K45n4{*&Z){1R2XbU5JqFF)pg_Fo@x7US(dk?H+B>oCqN|kV@{z`HY9%y2k+7IWiMEAd z2C%q|7#j^}BlbL3a5&1u2P7@^{@<$t!IV*lYQL9mknM zBM_HOke88gHL2j?^+0BG6pyS;ZL-Rbiz4=vmA13~b*-f#o_Ee=k@$x+JVn!JT4AtW zDXO^dXk}_uSS9FlJFAl7G@clkN|=^c%$gp#WXXjO6vC)QxDnx4^pZY5FkvDU#2AJ; zMFSk7D5Aa~N!=S=&h=^ke8H>-)2?fefb!t$@c?wlx`WeTJ|7((@?|YtWgrl;K`NPr zq8`4!;b_<)c`qRReh1^`#Wfd1VF)^j(g=Ljz zqXb3*v4GWF4UT3$w?u_oB9LMVJF77=@td~Y|)3BK}9SIT@v7TJ z1hD^2Pr^vva}~n+8u69OkJEA#7h~*K7F?yKog<}WYwNuS9lyyXvX?F>xgU{D$uCb9 zKtyx|b(D^s8*%S^dXP^Zp1;o0Q9kB8VhWogMy|1NZbfQFaidPb;3YR(K6zIaF@Ioo zDDO>IROu)_h)44>8bq}xNv>nTi@Tf?R_uCJ;b*44)S+ip}YGV>#opo zTp-2&s7PYu{qxGL?{D0zl}oesavQGPB%hB3+{Y1k(Y>EDijm<9`A2FvY(T< zsE%Fl8;|xk9@~$HX_2^Z_ipWPxnUko^4aXXM`4I|7VfR>KXkKjlrWZ_tnJ_1+P~*U zb&OsW+IxPh$LY~=?=+uO@lnz%(<7aqdt3WkZcLOoG0l#8Np_k{@|h3h`u>(f3u4BK zDPJTkbZ~3`p#x+R7e`4iFXHSd>5bB2H1V5yy1(T}hKm--xLNMj{=-`qXW&5|LT>Hf zb94oUN*AE?((I%+OK5aVzxQtKZ#=b)AcD+mWPSgho0MsO0OFb*=a~=e`u;;9ydqqHpZf|d^^=h6Pgn(ezB75QWm_U`DVoTiiHyf=%B3Rlha4&#vr#n$cp zhmOdlEdKF}qQ{N>hg+^kZu2b75D`XAGM1`5JDPjV-`m*tL7BzH$t3Yc;mv$GOOnxX z?;xH`^4v$n+WwX|n#xk>*5mzqZnh-=s!oDlf#bAFkjC)zyvOMe{U!DY3<09-{j%x! zJdO1qVQM?^QA!7V$vf}1C&afXIFk;%y*0OROjx+5@I&~n;)xyx@d>>*xYZl1dh@rn z|L~#3bqmGUD{MU8-*A)DR$+C}Tlad{c;d6R`a)@G{@z-ovFzUdtgD#nX?Fg`)~78v z4LctaMlQh}X)oB)iP}Vx2zxSbGa=hki9q7bqP&9+tA!Ozh-U1Z2TXyw1{hYmaj_tGEH*uk?aSPivv^5Jazw$&(D~j+-+cr1}fJ zS`O`sIPt@|?Y#E;0cYm-v;D$c-;ZwWcYgSXH@ize`fU0B=I6r)KmMaP`}=Qy{-@u3 z`~EvUM=zXWeo&fkO!ULS795a296Y9f)&~5~D*v;_|E%*rxA>pi{LdZ!$BHp}q93kp z@cVoG54XPdkbga*f7bcsI=@_(mkhxA6E0$fo-})l0lUq0ZgZX6T<12|xx+>7a*?}S zW@@r) zct^L$9HQ-ArIL)XWkj}>=2-O8qj+?jgxAt;+mE|2X+5uIZd4ujk!!XFR{|8@n5mAq zteUNiCTWsYq$}|0iuMB>B4!uVEUUPh^I?&wJkLhQMV_U%0J&HXs&6@$#)< z4=)LFYqWknBPXuYb%I+s=KOWh@^O7DDrF@FUbzL}+A1A}fo8#hNAgji>w(yGN^QN* z&HA*B*0{ewGl@C_Iv$f%Gs80k8?3uW z##bO)AJCff0bNq_T&`tvW-MAzgse6ioTQ^9D>(%&^5ai%e=!}uz$GNLtjY^!9rX@! z?3$snQRR0VcO(|V!!8@efZOM}k6ItEMKYlqF!RjpzIsG@;G-{g`9>6hl?-0*Htsl- zhf7{)LYGX6MV8OUw8rK$XyiSjVK8wJe_#d`byggmZ%kO7Z{zI6<8hIcSa2i=(pfN8 z@sBtP6xMLnh2}G9Z{FOw7r`J6qU2~>hr;WkcHyk`&Uvd;38Bl~7a4?DqT-@Ud0ae#x?H6UIhrZ&s#k_1I6){XLC8Lf-WX<)D~$y6 z!Pk!sBhje1pfNgr7`$m77rff#0IV7$BOY~4C1=Mw;ls<~6J>d1qS{@n9I8f0Vsz^< zM`TGROKb>jM<)-N>WtAnkA?AieyA->_ur^z;`^j z^{A=o+Wy^@?0!C5M2q6~Zc&YtpMZ7FgjkW$EJ40#1d7)^e7 zSSHobHa0q*XD57ib$#vboejc{m!(|^&AWJ+_Z1?I6p+hDEERMVy7`sOe4yG{=pM9> z)aoyk6-CI0=#>7~MqWB|Z9AX_|96T!Pl$wxJL#j*a4JEbP4a_y!iyBwi3A)TS9qk= z!y-)%gZFhyj8cS%-bG3gw;|%T8@(=*qPKOFWYvAMgX~#VdcyaeU{5zMMoI5Mbea@p znrGm6oLJ2N7#AbhEJxM6;3WN?t58b2IQbPqmg$mzs6K2ozo`NH-msbBF4asejIQmh ztm4UpuVNv@x48uwH-ca&12y9iBZW&nPtMRcU-&DA7vsX;bk4T36xV>vvF)NIEZP9W zy&Z1WxM#U9=F#q#PlK6cJUq&?LkUt3zHZ}2-?R$vD28mt8H2cTmoo;nNTb=CPs^{8 zB0UT%*YO@yM4iWJv6YRL?*yOgb@%3nhiQ1@k(xMzdW}UAd_}VE;6`2#j>di+Qc9iVm`MyYDn4kVp|zp@)hffQOkrgJ^iYI zPkbXPpZlN;3^ahPFQbSjt+s@qx*RYwaeu zB9n`F%7J`+oSdekWQPyy=stT)FMGKEinIiu4(g)|oLE>TnXQ>L*2kZ5XghN-%3F zM4~j~*7ZS~VRn5enKUC3S*U*({XAR^IOFE6a;8geQ8Iz?Wv$vGX{OSnRlfXM+u0#9 zadw*A8P;e5l@n{o8nj1`EXnZ!+vmxdkaobLj+5~m$2Q5)<6x85eh4NqzMUpn^&Qgh z9uOM+?%6g3=i2@O-Cp6a;2_a<>!{G~1RDyJB1G6_(BCYdq@(kQ)NsGu-UI#QE9H0= zki|7gP<-(vK{43GE=2hX-W&O#()X<^%`yujYsx#@=tiSn|Kc+ z7t`N+5T!?1UXbmrZqf=z=4}eMQ3Xuk3WHfTaY^SYld?*@8*lJPIBa0v5~y`vEbm|? zsfA5aLrm6M7-uq+Yr=QiASS!Rp~@`ngP455%|Toyy?KEfLLlTR-cq(T+NzYC7n5E| zik4s2<5KjzG51G#c8YtOsv^!xgs2Rs#|4=6bRQa6ErTTWa*-CM7!ve{&FRH{t%?~x z3s&sMsb~CH%C&#A8JF+~xyp5=V8N=8*T>}%U_)MeJj^y}FS@*_(STMP&GL3(LF0xm zL}9~EK%|y^^^0;uEZoB4R0^L$0|9E)3ZJ9s9DCeu31UEQ!d#$oSX^+L0qn9rRzd0BO;y! zOF%4sq=;RS$BX9Y+5hnH7@-;=0}opjI9U{@dKcg0t--B^Jhh_1nc?`cOG}$?;gitB zYMRqUoHC$8mlJb7ou2n`qgM`(lB7SNaKay3gEc=+wJFkBrH2g!GH)iXJ}4`^E);r# zf_8c2F^=y=a*;iT5)&zK+-?)I3khp$3|nk5b{eQ z6h)ovdoV}wavv3w!vJDSU%c9^$xGw9=mPdun6N0fc6x5tn;wzV_VU6A8jpfAAQq<{ zGKaO6tQPa_w>knE*P?Pw%4(enW&o@p*Loz8Boc#rw|4*0G2(vv=1B&FIZh8Gr2%`b zas#Ns$uh=Mn>`a@o83pB`?yDoY?zB?jGymeQ0$sEi9ePqH_cI8wn9ABt!1(JiKMVv z24?k^od3Io-MTRb%=XJXKPk;5JxM%slHKZnnR=3+1-~Rs<_tOAX<8zJ-jv75L7W|# zp}E%=lWzUi zxsu-^aq#AP@bK!fCOE*#1SWs5O=qWL#I~+()~WJBK|@7R#18WD`Ld#&E-l6RJfz`j zNAF@OSG!9<9-kA3uvw!6%dc<0#cJ};O*3(L#jfL+myoHCK8Q$()MH~JO;dC~Lawbf zms`*KT1#$ZA4ka^#-F?^`Q((qa&?&i#M0J&!O&@D>bwXj2CG_B=X=C~l`itM4j;Tg zM^0X&MS%4|@gTFSDf!27X%3PkGcgp0a21m}n@q}NXoJ2k0#Ro613Fg+u?UKq%69>k zdpwkY zB`$aZ@aSp`9h3eFUud^lu-MqO$y$-5WVjNhlEp+-H4>_pa3`}!G?Yzuf1!N>)1sbNx-nc7= z@$iJCWWFipnX%YGz(;ztiL4dwB~Z4>=M2=S=7!)!JbuU+>@vgxAVXRmiEf`R5h&ue zexMdyFF3{DDmc&@@;St*XbnbACi`J?mJ}C4fvBS@XXqP{`usNP8;J)>#s-NCCgY^g zzSXiOl7gwH(VPtY^A>3QfonjDtN(~L{TfZy{JxVOF@1^j5(&-KzRZu1CR0DLZ$d3% zFeXTWHZdlp8yr7qnYcc)lu!h=Q#Br&-Lu}3FMg@Di>QF02L~79Y?XuFJ)5pfhugt@ zNNXj9-FUL;dZZ2d)2zXQZno@fv|`jd;iWMT-U1L3q07FjeCV|*i>Hoawzj!0{Wk5} z-UAmOxUB)i`~*%`JW3#%_sljT7L&3nTCCE(zT<5$U1d6fNIP|!HC}L(7*ti^_%u!@ zxX-1zXKB@X@z@FWAa4+>17e|if@cA3xY`#CK?tyoWIT!{AUy+b0KMzp36rhajE{y) zb%D2|P)Oc_8g{yP8Tt#+Rt`-&;(T$?1S63U8x_=CLhx4eI zF74Xdr9z$wtx2dOaePTmk&Nk^l@cbpNEAfNW;8Df1aF32P2+QuC6v}?%z=|>oUt#Emy6^yP0mOW5c4N13O#PKm!BrZBtBn;zacY4(t`*Oin#URX2sG>a9&#QqvW7V zo4g^8Ux{>S9eb4sr7sK|rqk!j0-xqPbj~G*JF6prcyK6C= z#%8iG(T_O2w@5ji2RtoP7s+r)lOonA>zd!Y+Oi_Q8|&JUJ_g8ksSdCN2^> z;#cFxx`VOCpsQ08Tm2dYw`oVvqSDAblE$k8UeKdsLf(Cz^*(K(3wyPtync~c$x2<- zy`Ef_j|nID8CN$90x-=qM^IV$=_el;Q-`e-H#VxCw$WSm%V6xwrgob z8T=H&>;93z=|_vI15Xx|bbh!$slkMs^5s7kgJ0DS#q;X~Bfc z#jU@O>#8B@mrZ$+&SqZFk*4IjL0MU8=a;_IZJ~{j`}7lXxWUP6@?u4c@oI6!$xhQE&*;#?S8Ku79yp94)ZiGLI^&d zIEf_&{WoZ|NirdYwl&cp)FxS)RPt*MSI3K{=F?A_Oja@KgzGMD10=qOgILA6`G&c> zr|?k`jk93N(JfXt62`;YDBn6v7Yst{H18ojDM#~=Z~exN+_%ZT86*>cLY^WFm}HDh zEFGo(GLI2V(Q!34WwYnVs@ah$`{U&FAx`IO z5~cl2Jx8Kajg!+y^FsI3q_=K)XU&3A_`pSU4y2HD@@i8)J1iz2+qMSYA` zSl}4@VvD5pLCVBW^cAsXwMuse=(#p0)GoUfo%~cvxRPe_=_kK)?a#0OuC!}4ivRjI zcGmvj+W-5X{@S&_dX4AqK1I_#nwM2R{lT?AzgAtlcJ1WawIBSp`6ub*+O;1X{MG*; z{k3a<{)4~uo7b*QuU-3{U;DFb*M9JiPJZp$(Y0&Wf9n)yVGgfdyZ*0u%_P^Zna$t0 z@#!Zw{P0E`HW}j7af$FqYZ~G8gma6)L;oN?S()M_;nxT8$=5|0|IzB8zfS+H4*Ih> zqU`Ol=ID~5o1cCHD2hC<`qOMa>L0|Tlld$uV6Ojuf!kQUGH_B9zy+F|GvkU>2aMsl z3CoFO!L=V%`rs2Q3+F?-!OS3bcFA0JHidwmmj|oi)BrhdycBSW1A-Xx;}>7xFdN#( zv?!G`<$BZ+5$)VxSt;_ePjuHW<}1~7wn7p_jPaV|z^Xp3uZL+C7w19)_B+`eaJhW+ z24KGx6}qHWKmA0r3TQFngda-Q9SejCNJGjOW%_Ga zrvKnC|2DSv?$6u*61@`fO|C%g~QJz)X zPfc{1RL7J_(trQbM5_bv1^RCV8N%$mqT;ik`UPmkt&kW-e#jLx>8&W~Nz$MU`S(k6 z6j#Yve9ph0{WR?0VUdoH62QlQ^&Y>VG>#sSQX~LXAoXB5poVJDXzQDweu9iG0vQzw zptN1su`#qkeP|yvZ0Ty27Zo+dzrz~!mbM87V2CCge;uYrqy!i7w1@nt!@GAjc1)2R zrDau|<75gmdn{Oex!ND+qm!iQr#bGf9;d~yjH`GRq$X59vjXa`DW#3#;v`9CNpX-@ zKAHV*Fa9$k{r~tMGMW9mLT10&PG*0}ZwEB?=fCcaXo`zc7`KzOtcJGm*PYLU#T?!^|1a9>+j$G%`i6i(@$==%MC?2h1Tc;gEFiW z=$`Aod6L0kVe&%bXiPd&2APxw#|^OK5=Ljh_~?KKHTEc!rC9^gd-0rOn z*6#2jZ}U0n8GoeO#sk(T0YoD-Y*{_U!@K>}dqEK|f@hfzuTVRI@~2s-evu!LJrI6U zGydY_B^TEhBqa$aFU=&{<$<(-MO7*-GMsMn5FYy_;iHs7p_n?%FZN8uff= zi?Cv*Sv;!J(`1l+HPT6Sx(w7w?9nFT+* zNq9Qgb_?zH-bXW#mmOuEzo*KI@T*tPdJjWw<*)tE|Cm_k-GBCviFN+_%sPMY56rb| zzQXcp&;od8_y(NwKe};s&dHFp@y*v|VqQsBRrqd4$8p8S-zZp>?I|?TCC+bP>BQNX z*mQ$y-u>spHD&#XIYrMFDN7MR?C(v`e$Mj3L( zwVL2KWg3~_f{SB4{`&?NF9DVD#-Tu5Fz!Js>OA0%`prO8T55&QsC|0cQH z8YI+Wr-cynqj{)v@s4vozzaH8QEd%)s+V};kDO+{dQwx%06?<=7y&QxFRTyBX3N$Y zbg2Snb)-nA5>XhHd6-wQph(b;st+1Ore#r-m$pQcQ4akeo{TWvQvMq=*rfmD76ua2 zi~8|sRXTE+%Q=uC=*BP3oK)sf+Fy`Q>sf9d$K&z2p~PAqi!fXB>Nqdb>fH3qv$YRT zxaD#1ZjjnRHWuTS6kIMW=tGIsAHJO`@1?FAR=gj_RcwVTpZ74^luK#2ikQV)HdsQI zT8C=19?NLTW`1Y{RPBSU)qZv)D{t|1t%W;-hTMQwKci_>xXM=xFx`)O!YEZ(putYA*sGG zot>?pnStqA2)tP{J+tbc({!#PX_n55Zkx}|E$2Pf$Aw2oG-p7OWR8}gi)AlfsgEph zvI(r^RFLo_#jp=2hOzzJtlnNQj?c_(e;jz^D!y*FvyJP&x9PlL>BXDb;6eL`s`Vt* zY3Pf{(v985I)e@IdlOl~LNY#o2Wy4>Td4?$D zc`{^>dG90Dm^QZ`YerUHqaTp6-fmUJi=Sr0ZU?~h9z=X#w#lAtr`-oPT3;(!+nQ-fZOwF#yL+USPn-}i9|?DW z5Uv0QLpVaXF%AX;1`J6YAn*@%5+D%n`wV=$-|xM8RbAcFqm^Wvqp{T&E&Lkdy+{=0~!0p;%;MD==fnL%#kH<7PJ_k0@K(Qu% zAXq}noARBCRnV4DZBk977C|67;0KCrVQ2=0!{C(i5MTlM z%ZiZkr8y{Fdkl(mSs1eYfkL>FDzGGR?MFu=d9tv@Wc&e6Jm8ziKn0b_@yiOeQGf_D zQWG2-l7p7W?hqfrc;zB@^Te}4%td?@-=L`G5c35i0!~-ij&Bu25)%reu3;eoN2Yc| z28ez=XVAkQ^mACnZb-x?q1dV}=ftRuuv)>n3!K7ty5n#Q*&!DgW)-`eCDzt7BCiL9 z)6}u4VR`g=I1vFO5fQa;7->l7;p(bUyi{gpe9pA{OP+~LPoyLuWSp^F&!0jJ14f7L zz?Q@zvs4m?qgrAMrg)+eBEGSX3d0FLiD4Tul)%!2!+b&nBpeMq!CQdzh1amLl_uE6 z4SBySI-aDXsWH(iE=mo06IvtS9Yxp3S19|%heSUVB8?O{V<__g3?jp`g55(m;ZseL z3M3Zexx_}kgAUy`hmC%qZ;@kJtk-QHxCTF1yyc%<|J4J{(H6pOXQ1W~}svtSZ6YTW9y9AaxG8f~pri|4HHA?`Zn8@?%X z^9LV#i@`JUk_>q@RuTlWyfP!s&jj~^OT9*Zww$x z7MZkdx!W~@4=#E*S}u4ApBjHm@X>exe1cJlqcfpFjaF^EOon*P@|a2X4y}0&0L|lO zq3X-jVcjhWJaGpJqEo?&V*q045R|wVK}B@QTaO_s3c{^K!21N;8wU+V5tS!SQNQTe zCSI8gF$>)-cxeNUB9qaSGVzf(pgGz=9LS+SQwhjL6Xb#nu{ZM7@?1vV9u%97gZcta zC6Id=Nl12?xapMS;GC(JOQt{(8426C=Ub%`M8@NyS~iD3zggF*+QpQRUYfNHp9ro< z00cf;eg0x8Py*H`TVmm-oSAm>aqYb5l*6Ls&%p^~BqtKTrW=Nhse$md8_Qg? z5tm*%($kZrR6Rjz6@StctFUTSM`gp?q{TuKf5^vCzIawc#Bi%T^7*Ltqz)a+6(vCv z)50=Tgcml8!3|?d@nCF-Cz1RT;?Es0UHU|I{1^+8%wgjTjsmNQ0k6@1iMLo^sxjwRVDTS^)Al%>0s zCxE#-RiCR@yd@!WsFR@ ziX5FBRGcU{Nb!<*G_@pJepFa=ex9_Gan$Lk=X zsB4X(HRDY(p6Jrrcq0AWw>$!XCv^rsFCvOwOu?9;aH6LM;Y6VZAh4+3I|wm)Z6t9j z1Q5v+R?*?*@sC~{RMoWWaSL3WGlzS}U+3c;ow;;wV|BRK)#^3j;v()g1Y8UXXqFMC*7L_pmO zb_+&{_moOuuPLcPhYY2|*O>_OuZ`!){Mx+JQG%PF+U1 z$U5K{W+)DU2!~L3P|xebqIvMhv7pc9Bg2K?wE!s zPnuvNVi{tmaDzi=3q(C#S%5~V5GW#(r8GfM1zxm((Z*I$ z9-fX$)0N7rAeb|dSaA#+$1aB(D|O;({a?oBfxC!_*2sBsPdN5;&-xO@^b06afTz`^;N@lN8pC;d;h>=;Pf-iRY;GxYz4j?7`RTJth`JnAndm`%{xJX&_huFVwXll*=*#wLHnq;}x^udmMJ8 zF&dT|?rasZ?GW<|r&?16Lvmk2D)-tJH7OFhiNTwNNR#YM?nj4so_yGU+;@pd#Dx4W z8`D3$V7jhFiAJNf192VdHYBNH->85Ikc81z<;!Kej*|hhUwRi?KaS&vM$tQGxJJP@ zU5Fzy3gMTr=K+EMj8H>ifkSW~aUI_&IHfV)wZiuo$L=+R8a(2b`fbR_D4vSlAK|qd z?9&xk@do{zL55IygSgskrt4v4I`JH_A@#ohcmcAE$@lHSdzwouq=My)fJLnMCp!dDA?wZhjO@O2En_Jy|^ z#3#`NuP%qLBz$$l*KP21D}3D!Un%%%401`z6cn6e+G@t|({ zKwx4$iuX_07F^>Pm>uvT_3Jpu3M{N6B1qQbJ~aY2lZw6OIm6ZCXmu4+#8WGNx+=ns%4GvNx!i6Q# zik2kJf+*72U2f1!YEn~Blr;XS0mZ8#WUHz3?MWamo^LR&~6 z4|x})i7nw0$P;00+l~(!o5Wc?-bpLka_j9Pg|lRQZq|Tfo%7&Oh#peQzbV)P6t>JcFracuV`Pjto!YI3(P}UpNi{ zXvn76N^C9&dJ_FBoKV4aax3Ii^J$Wr~7j_;c5E6pz*54$> zCBm60`%54xFe*HQIM@fjLpnt*7}ZLLka99)e7@W zmH4#)!7Esv=eT&=xE2wmgFxhore)!ahR1!!;U&k$Q@6prO}-o&WPJ9yGc&`H4Jhcg z5Ym@vovzZJ}69Sged-lvJh$EE{NlYoE(9A&frV-o!Lv%H4M#ULP$ahFuBUdWLH1Eoowi4X?{7OnEQpjB15*+v)Q247 zqB%WPF=oxFib#2l!PDC-hU=MAnC)%QaOaE8qJ2${kR#SFAq2pa>wl^130SqGJvIap z7g=ewkKf5s-^sfYrwfVWWqi8IbKBk0tdJ7W4^Cp>(jVn;NwTmp0?aqOB%V{MJ;sLg z{0DR1#=Cd|R|Fm40*`iR-$19Tz+($D=SkcQfqfy69AtFVQ%=b53X1eHdWk5dR1#gM zUpePDN`_lb7D`TGJ|Y03e9!VijF0@)o@EzI!Q6r*G1wgD8Yx1Q@nnd;QL%|D>sw_} zHZg^1As{RMw8@=m&ncNc-0Bd=0BPC*ZXj6Dr;lmsrNT!rZRNLe+L!2VCRC=?pgXT= zA7V9lD~(9Go|H!AlxMT+c*vzDu3K!ijj7Py_*O9E%7Rhq&X(hjb1O;2gR|Q$D!*>+ z4jZJ`jd`k28CjG_deX!zumO#3cnST`_Hph0w3@0k_+>p@HC&%s0IX@_ffR$1IqMp# z_1j^;8?%t;6kN~IX862h8lKPnMTdL73oJmo+#o$WMj&g^emJ=p*(B$xmlbIZ>IW@l z_NbVl=IkCxkloF>J#drne0OuZI%?G1A)%zz{-IU zFI7xuMvgcEkdST)7yz`tk7vBrwYD#$l@2oP*pV7l>^RQ=)`0*4ZiXkH5M6wMweh-Z^SA{bD?9~)9f$05m|Lj-#unINcU*CY$ZbF|x8XGCuwjcl zz=Wk*!MQCxBJu(Y!BZXwiVy(Fp%N1e^t&zxe#r}%c03`H48QN$GWzl9l2i8# zCii2??xZ-_-d{GXlFp?^H~j*$s(t$hf=j=Yxb$Y7OJ5M%3`9W2zX6W@i#u14VlB4a zxadd9fdJ=D#e8Cv8QEYt3oT^36QjkC54S*7E17)2V_}PEVWWlDPn-biII^Nmw%8G6?w^y{c=%8DBnU zEWlwdNFrQy%_7Hj<(|m5AwohOr{wYEKJltG;PHYz$XJ?Mhl13hM2a@Zq%Q7Dh`az| zT?63`f-f(DGv6mRb2Nj~C~tiqD)aK^8+x#qOv_-$~Ar)|-- ze6y{BW!gXyYlFNEi;i1t^K5Horp+^L&w|vxZLU*x?C_8P0bm`qZo5*vxl64+Ipc`_0Q()2#UW-PSCv}%%8`6yB0lF3eZ7oc~F|#CwrxptG z+PWqTh^Qn5*{QLfz(_e8z)Jir76sN+-Hr!?$`kcI>RM)X!x&AaaCMr!79QK zCDx(O+~bRINPXJGA!BR!!F!Z2i<}_ao2yn~9tgBr5d>GZY^!YOUA6JWIXIjzj=hWi zfEZ^==5cGyOB^ZJ+E65xL2Dp+#9Fix>OGyC=uu?+l zAJBgm(!*p{22}siSGR&zk*)*2$rFQ1WDf+43@Hb8xrD+;-yx)0{ph3x8lJH9hND2vtfCtuWIuK|Q3bCoIO zgMN3$^(%|j^ebPigvEwuOx!i-xHGO}Dpk`jJ%9XMIXoy_He|iQxVqxT6%?!)TJS1n z>48&=rN>Ckm=NGVK+do!xZK4Cf_qB}3C0T=83=sS4(@>rHhTiH#v>S7 ze=0+-!dM}oyCoutoWHON-P#&znScYLM%R|gauT~Nf#QaOi!?!Pncyl@f6gq2R;hNn zcws>RHJW+7i!|X=+XiT(wQcCPXhJ=?$u5{mZ7Y$H$o(}Mie#F4IMNEnB3lU-E)3h1 zjz+F7jfQy7DhDGQQ7E#uu?W1PkqBiu zoDso}%4SR)8muPiEtg3x zbfuK$q#||nIX3abcp_HW&}fSfj|mSgL`N$Vzvc~C|G=thUg*<<onkxx5Ijl8vW!XCJ+%u7bq7AMNUhNRpW zmd$r^&n!50QBNL?x9f7aQ#ULPHD`cE8gL~ql$5)WxJrN@@`$vWl|t!dF$8VVxCx5G z(-1^NVLf(fiBD(?F%b}3ox|o~o}!RUI_r_iGzAAERvd*xiQSTr>nSPja7|VW*SEk$ z0~VmR9|~4_e7K*+Zdz0VKujMcngo?dG}*>obEfKnNev9R07G8yy2c96GBCvu&sOh>9cqj`Y~@`5?I;aFWzu(-IG(l*cVg1KbTT)|$g$=54nT+(t0p2h zWf@HI5r~;Gd11~h%=3~nE0(Y9xRBP}H>{F}4(NcLCg3CkHcjK5NDRWw&Av4sq>3@B zzEd`Qt00MNJK@trf-j_+!|+2*&MZdz(fa_Yljq0cnD?f2s8syeQ!A+R7M_eHj zdK8o%v}_A(dC;oHd;_n5q~#s#8y|y9_Kr5!6atYa8IC-w67y(m&T+wXkVW;o)V0UN zbqTp^Uj!UQYY5f{n2h#lbb1Uk{0~*j(K~@fU8f62a z^F(JVm&zu@za5E5&YL(TPDEb6ng-fa*>D5MITQ`Y45r9EOs+({axZn>$)j_N!N1%!W&nky887A|MtzjhfI(XsjL zqMVB{NLn%K0~3246|UF?)18b|D>{BojTGC^he|`hiQ`*2O*w}g+@m0mu7PeS%F1zI zgJQh7NjWc4f?Arz)F78H+AUaB1eTK`)a#Thuo(v`<1(w~%dg^9mL z9M7}hK2{ZRiyMPtTM+M0hN5k_wE<}m&Er07HaSS0VgpcaMg^O2t*F)EHlNy>61f{J zo8m}nDrrWDviAgvK@Xs= zNy^n8gR;h(+mX|8URU%hdW;wT>h+T={IQ!^vZjPwCWBG!5g!B276RBYDc9S$Wml>` zh|&OP$56EftELHT6AKR{sFYXAOPSZ;j3yBJDpcrY&>s425}xlSV8@R*gZ^3(G&DmK z65)MfLaIxCSy1gVP!ZLrV7tCt^?caOGdSpzm}-hB6Vw4=66j`HP2&^Vs8-W_YQi2s zJ2ldR@9@iL!;x&H%Yu;r@6!6?iEv3Mh`Xji-;Q zB~xD47oeMfcj)HZK<{2=bdP^%a&FxUPP9=G9UP%Tm>GlsPa8eO05Y_Og5&`>O`yWy zh1?<-5Cw!*wO~>!xIPySo!a0-lH&;XO@kNch^bHIMjL22P8Ez3*vBA^brQmfC;499 z6}V7w_VUhwL|RR^TtQ9HbUjn#{MVLD(svl8z(GTI7u2-l%{hz7VC<)87N!+$yFR+A z0V5xf*^q;-;CR=HmMA*)Ijd-%a>$aC#b6L|CN(|?lz?DYDXjwTB@wu0l3?Tk!!UTs z^8FH8*c5t2JOnf#vEv3oIKFAq0WI!WR1WyR0 z%Ssh0WQByAS5^qETaANRX=(@;nJ9x?2c(watNl)KNmwA^Dm@xZnmdqjQZ;FVY(G*d zqVF-N_@w$Cb*vSvrpNa|^(Id}o)8si;5+y%Pa@EiFgWKAdi& zV-XtL$DhT-iLkcx>vFcLH z!Y;TPM`XEpi-2jKH!lyrRygpF*sX4z&FsxMuB1SL)sJ82Vg}LKVaG5pEe5??hH&D5FPH=$Yg2k zh(0wy>*fhmib24Kpb;PkF&_d(NP~tG9`z-ToE7w3m%9eU2b7V5P)xsy+fEuv91Bq- zus?l&?g=1K)VahFH@;xF7Hr+Z%wU^fULBpF_y*56E1(FC!>JO`jfhSx+w#Tz)Q00aaUhu8uPc7>*^qW^0QcieDiO&@oOU^%r-BCU|vd>r#l+#wf4 zF4}}=yt!^s$&`agLWsafoA!d`IyRo#p$r!Fn$X!S977MRHrm*P5k&k=B_#M4@KV7S>J5PG zARGZ<1#uElqnjr(Df~}kceOYnSwF&=+LX9JF~eZlX=4G44`T?9h0pLFTN`rdM1{R* zYkNwJ7NeI3jqw-^KQKBxc&eFbeLTU_X_6EI3DQCoEo4$$cnt`2VHhTaEU#Bc1>r1T zOt5c^ty{jJ<6*j;rDZXMfeaW{|Oo5vY~0Jh2$Wn}oB!8pJeVc&Q#(22v*uHK34ao1#Tg-K`U= zQ?rvGs4fJZ)geK!fFadRiB!KZm&C|9(TB%P8Il>*1!zv5dGJ=?_?La-I_#X=Msf9|+`+zo<2Mdj^7JCp0^J4UDTPYn8jBbOueNmX*qpfW z1dq)rCB-!s#Yru>I~bG{r>wMAMUoB?DrFaGHRS!(vVpYRJ;GBka`#AYMhFntQyn+U z70|5EDr+IhGPQs~D&d$f2wuUosPehQ1@)YQ(ZK&fKnVKTZ^CU$BHWF)XwF?V0BB|! zOHBzvK*-lL)C0aGYNvif=yB59L8V$~0N^^|;3eAc1~*KQs)es6{E@dTm~Kki2^3@3$|vk*Jz!MRYlVZP5o*W2k7DwApl3J(7Ez#KGu7yyI)C*)b~3e zDP!5PtG>yF=tNhHWkc#>^wi-dK6pXFJtrM7!PW-cDT=C|2tsY*W8?iJJe#K--C#pk z81dj^w9Q2&W<=hNV51F%EV#Kmo_p|(?GQ9BlsGtXQT3f9X}EA5qfmTNKgYuuQcr=G z$}K2;6(R6Y7%}Rmp%ZG_8JOU<8DT%tDHsGN1T9-Qi9YdaY*RVXv!gLbmaYidLQt8N3~*W`2rRFjB7@*yxAVyyQS+i}X_uwr9R z+v-%CghVxCBAr~+#zH^6z)DhQWspV?t(UGCg?VGvOp9`OK%H!~?r>eX3lr@e7h8u@ zRG_AKZ`E~Si37VPFlRI?g>*x0klGDsaW{2`x)u{a52j#_@WJ4R`m;sKPtG_l5idAq z@y_~W#h8UT$u#gX&{et6!(bCEL~lq!i;h65zdUN}71J%)4xXRXj4SA!qGBJ{Fp#*zk(4m}D9VKRBw&a(aveQz zR(05&Vqpk5n7&n?-v!J^D=ipkgqg)P8^g_Ni`8Lgq3J8x5bQ7F$ZOb~SoLMW2KRjk zveOjXu+`g!0#AFbfjNa18tzpKQ%nviyvJ7$8z}z>$h#6`;#z_vY`%lqV+b)3-cg=1 znS9I z9vPsdBDtf5ei;OG6JbQ)rPP`y+&>+!jm8AJqp?7vt2vHbTb@`?y(5khk`GzHuu~0` z9T3m`wdo@(ASF7z(d?A%9wRoE2abY z))F>ghCbNlme}CKttvu?YU9&p!KivBoC6?-^OHNd8u=z%Wg&9KI~s9AS&TB6!nEcw z55^uuT)-Sa{zL9Wao9b^`ySYjDi|*cP*NgdETQl^04Y(Fj-tf@u{9K>MatM{kTI%= zP(Q6rxVoI7AoomR<0uwUYSBGFb!kLER#9MjqA^Ie2$AyvTxj~sv+f#~wjS#&-QmQ& zAf5)V@-ZN~!oN(Ur4%7FVAAtNjHy{PqhON$09ax|1{$s4hQvwYR;m^dL|=h7UmvmV z*;hQb2|*xS?Zjg%Rkz}JCY%oq;~k`#6+2(>TrhkwNKGuoh&b8=sJJF)qlK7 zSf6B~Kth2-vgb18_s5fYGPxTDI8`gNu2IwiHE`ESvcZK^gq^`$wU?SM$y;bTWLf5U z*tC>4>Y+LUl)7SmK=Rdg;P?u#H=Q>iPGD4AX^Fyg4efvfEqQ?8+KPlYPd&)?K)ke3 z;;xAYyYK*(NFZSr^<4p#4i%&49Jr;b7IT3~$(UjlO|*J|49sBK`J#i&oq`u(+L)Y& zqJ3bb6l-L|?TpzBIocqFGSVDn#xX$U_NrziXU39KbtM9+{24P<7wYO04?s(5ii#@= zO-%PW3TYlXRjbpZ+!vSLF!?vQz@(KNTE>X)hnzfgLZ>cCNna3IF@iUEBANfRY1$eV zm6l{{!rg~Q3FIjw@C5=cD}^l@BBkIE%dBFoQb8HhT_{v0<3CHKaSRbtZGRwGuxFm~yBgz#N; zR0lBtHD6d-*;e51gpjC2D@XUA;*Fs}2=)|uB(C`r$r$2V6_Lc!c8|lUC!*VtFrLaz zo9I|lc;+FFOTB~3GdyR6qc&muJ0;d3)BP zg|UY>lqc*d^`Yy@VQrwG+I*M3%@y^Nn6QuT*s+6;_m7S9vGJbKalT{6j>!po0ye;` z0`7i`Z6>iNMvuhJ!g}TYp+2grysLEn0~wqUe#AXU34^HPnA2jBcw3^OTB?F4xV#7h zO-4K}9txf&{cwoJ43$YF^#&B^wURn)V$k&I=qE^c#StUyi83_6ifXf2=2WZTPQ4}5 zuz@*MD+FLX4@0?bV0hX|R*h$g1ELhy9qm=JDdC>Z(OH_n{D>7tF`SgPs3=LIY*o4Q z#0<;@(_O+l&4GstZ=hz2>8`IfKI=$EjJF)rf*-}K$nlSFg>X_p533krw-%Hfz$Y%U z2?dPD@_I{7wRp(!e6uKAJTbGx@{u_K-jG|vD zRQR*ltDmvl@*>2w$;A1T-A&C3hX9;KO$G9(;A5#ibhV8~Lg zM3MbhjT{;2OAhs4H=f)-JUpHp?-{#lk9Mz@TeBz*lodMb-|B}j)h+reBTAjYhEXb&~6i@Vz zjt-CVQ2{z)PZDT+LO&xD#Yv%?2FYY`P;vtiW&|pPyt6>2g$=Q9%!MO91P|?rq90jR zOkXPzhJf~hR%hiv;HQ9s9D+V&tv`L%WVzK_pBjN0Y#!)nUE@9vCt+OHz|dF_pRjxE zqSl8bks9)7qywFn-zcpGT*K8NQy7k_mk3&UI?gC~{Q)2o%uKU4gsTO&NQgMr zJ51n##!BPcLv>8IA3^O2wqc&A1rMfGt74+=Cb`y1waXZgAT4Rn#nghHmkl2$nM-#} zQ(#dp&s#oC*xQKH zUC0rQQTM1uX?jXqps0vW!%7ORPqbArUC?fX`V+21zQYuSR*p_nOvnMeiA#Gur)>5~WW_6h(&=Qz>vc7@EILQ#(nsv}|thvI8eqh=IU5!zKc-8tEqp`TuBB z4?Svd0~KJY9DX2+tys|AKKLeq+s3USRax{K0 zfpXImMvIVF8C?y6z;K1SLm`pMkf41R%>oUm(Vw&2A{q^C=#c`l(veMiR*6sh;p4-h zqredyAgV#75kk1xo%BFGxEV_<8O9ryA?ZT=Aq>BL~S@c65;36LmVqFu{mr7DMh2xqp_Yi9_gH zq)RxZE8@E1A}7fr3poeXv;#k+dL$gha(9l>GZlF<}0}@i_XY{E)fA)TWAc@*McR5;h||Gs~$wN9wRql3k%wl8^NTi6lK0h@bS>j zTabuL6jpmhm~3A9eFHab=&^DK*N#{7EuLyOO+Ri%(aiNX*22*cD8_V0YGC(K>Kxsz z_uq@x5$h&Q9QANm6U$-NMAP#j2`2ELxOrj~GKb&*EU_^a3A7AV>xIJMLdPa-3@2IM zS`MMf3b6;7&=X9`N@0(n`NwVBi;lu!&u|#dOId#eD8WWujnZ)IDAV}?wvCrp}*;lnw64K0Bcab z>h}sp#XR7+qvmWsh<5qnh+FEn3r-OVKVe6~U?98&t_Tq)5S1T3dT#5eIwA&<3fk>J zm>oBIJS%WDM%$U>NwDrQg&yF8zy!gIArS3$$|WV9UdrsXi9IiLg;B`^d=Pd87e?F6Kv1E_$DE;_=ayg9nywGhK1ki-(< zE1a11T2rV{+YHtwU2vds*tC~j3e1St6yHr9kY#u?wkrZw!tf9i*A4+LbApezame%C zP0fMwN0iOZ*)FN|0!ghsgUJJna9;7S<@ugYukZN4?~q=*^S?lP{d1z%4LZG^8Lkh6 z8+inzd+eD_jjmUKOG&OViVohBptM0^8$8?+EIMULper@=T%O==<5n4CtAIsO7|4v} znu~B_JLTv}mS8^6ic*SrOQDtLGMTPqE|cpNBjJ0I;aq{=DYv>$+Ne81x5(`nc7QnH0~(J7>77LzazF^E(dd~w2x05&{)l?vghy+l?rC6NOR z(!`F!If=mCBVNEI1L6hvlOTbtyTorLb0kt1>{Q?Y{I=UTy;IfYyVk&+4iZEMhq!dnnrHw>2w1+@;CeqruVb=HJj(xhxr`9syRVFTVk3YMX&I14LZ z4$O?tnRdSzM$p`0XLiK3Y>}c+mK`$vLBpG;thm%VJ?spPMu76LQ<%rc+T;&dcCpVa zS!LaYBFF?YkpXM>cp{U{wRi07?Ao>;6Ro^?0B_;6BFavjr2AzYZ zzuz_N!kjiT3Fy$W2lrdbF&*Xkf@3e3t`B(&Z4VMrbeD@eVajvnaaFE4%QGNDWpnUC zOf(B5!YAPY-WdS^68~kmysVvujzbpyF}h(8)>{5XA_biU(L3Y@0fA2JPz#hNjYU!e zf<}W1kfOX^wIxwDY-1LZa4$u#Mh%gvplqaK_$etG2{%;GFINOL%kHsf4QsLh!kzkx zpjTJbiE~*G#)L82xOp%faYQrh&@cI@?dhp-7;8F2KFi7tgJ_>^@S%8{|P2>=g3jT8rA1D-ZYMR3F|Nly@VC&GtXTABy= z4&FS_3Y9$NlBhxYdK1#8@dQkv&WI5Y6)b75Px^f!fsav`L$u?T4Gg1bdU%_gb&JV^ zH7EifvwYL-2IX6@n4-79oeBiFdhk0{DH)cnI1PH)v2#F7-h%j<+?SD%)I$uD zD%d8Vkm8|OUm=OWOHoW+_@i}~NXUCtPlX;MhKm=0*5U*=ZQorY9Dqrvq3iB)oL!A4 zn0gh)NIjIStiJ2mqm005U>Jz8L!&eR z7*{-hf_e&~LM-;$eowJT`J7b~y|zDUg1<>dAO)o<;3e{6U}T|#Qk0k;Z@KmMNH+r` z3!Tfo2aZvNw6>(OAkm8v_8Gnr_gtz!%~Bzv2c-9LzATrO90FU9<*~$NvA_yBtb}|$ zE*sZreI9!%GK%4{AXmUjq05#PhQe*j%koaM_)?*=n ztRyOE68s5};d3&yv zw*Z(@qHrse4ueeL4191HWY>x8VDv{Y^f0^ucrDE#iJjcnEGi}U$y%+vIS{BcW4&Xc z4oc`qJT#KG^dxVX+>r+i6My6%Z zPo&=?;;RzGBr)sgGF?LWOtTmq4Mk&BArW>;-bAIPTE7AgrEpj39a4nIHc*H_D#scL zx4bEawhwqMfJv%}AxD-#2?dM8CjsFW^>lA>!V4RaW7Co=ickG@1;i#G!(^PQ-z}R_ zAkZ;#d3=smQMO)7v-+v-UxH6mCzd*hRMhKOPp49z(U4pvkO9mXk5vcIfh~M0n9Ad7 zh`Sm{2#yE|JQPDv!QUaUXws0la;;__CfkM1{|3UX+v$@`y34ag1@R}7bUXimq+1uv zt0mqQ!cE6haMb)a67NdEyawW}3)Mdi`3hACyk>2r65^V z!HI>HXe*j>BR-^hbSvo`5|d6<7n1?ufZr3z27W|Ydj!6xf-w2wduwx~HC%~!*<_7E~G{fcfq5lb(yHYN*EI1>2*y=I2E<^f%33pct>L(a?gTTe; zej+dhZBvN0KQuOw;4LCZqt*edQMl4?TX{B<$p}AeD^v_Ml}rK=L!QNYZ9+r9G*m0$ z`rHMPe5wY-221@WK;t~c7-%m>v>_M-92HcQtv2^p7quCLcje?3?#kn%W;V%yurp;q zn6WsUH0=dF671#IUvU#eY`%gbz?dEZ7DQ}rrm7I}wP{nDZpbrTI6UM9GzXbq{2wL4Zn z@39V9IoGx7o)4)>cXZ`C+Pk_sb|vxGuFm!~w5FiYmFe1*+10))o5Wwcb30cL(?bd> z+0M-FOxLcRJ9A0#b9cw?)dT8~0#p{Fq;k7Ec6B7_XIDpd)vy~-u-iM$GsiQTOg59r zcI2|zoYB#d+qc){+1x&Sw=0v&Wipvvo$Z}7T^(IJyK4XhT7HuUq8VP8dpVEn`v8-Rtk$>lSz}vxdR!l(-BN+O_%y#`;IE z=^vdMIkI0ic~!%bIBmoHz)Oz*zw zNcXB2p!e`V|IoPB-O)5A8=f%=W_rptTd!1L-w^n=O#v2hYK( zm)vz6KUuU~>M?jxa%SNQf$k;KatHHJreL1E@R)A zy(6JoO$az|VvKpFTb^}~G4Z*M{%v54T}i*!X}>ox#s=v*)SjZ>o3-a#wddQQ2P*Ty zb&Ord26LMjyO*)e>;&7!PBd&_Y%ALWU)vbldj4sQZQXPZ{COT@TTY%ld9s0>*a~CV z`qcICxPh_8O}<&OP5*3mLjJsR z=aryo`MYMU_16W)x)~b1FrhWN-l$kOR-;-pW#AsG0zlwCd?!JWDB6NHwPTbyO1#?kG}vKVGPORjr4oZddB{uVK8?t;MgX{ zwg6_s@~qp+*wzL_y={y&wvQd^$?fdSFU@rxnZ9cGl>Iq*!ZHCzWK&K z{>=*?_|DrV-gxEJ|90*j+t1kl=f61XtBtqLzWupvH*A0H_@4Lt(JN;*HT?Sre|pY$ z(s#b<UsY`F?6~}|k7nkqkNxWlAO6hYp>JI9f|`B(?g5t%P;S<2e0cLxn^2ehE3%nXJN}=|!0K#OZ%(~JuX+AAzOnGt`zKq^JnQD> z*_Jmnef_y@7vA{OzcKcG>obqM^=F^H_0@O1xBXv#)%C%>e`=lijdRn37jN9~)rlp)nh13S3WIZe@I~~5x0OA93T)&O6%zL1jINEsV zV?X#D+q?1U&se|o(NDQg-}S#Q+S+q=(;3D4UN-XB=eM^ffA)hL?s;tB3m`(u(`PoNOuX@Dk`rL=VQn=t-<*R33@uv5@Cbj85vvid_rc$vS@`|m^nP$?ZIFaPfF>~lgpQ#=>P+5gPP?mF?s8}}UBc>ls@KJmkgKKI!ztvfHh?_k?cE~(!01MkJ7li4G8ZMfv% zH#eU!KJZ}sBU1xizfbIb;L~^AdF=T|ZvXkim*+OW?UwHp#&7(schfhw?dV~Q-NnAs zp6#pt^XzASw(-mNn6H1<_ML?!x46;w3#@kG$>AzxwZ=Jny&J zP5=3ovmTlGkFFbTS!{U6-ZN93ulU$)b6ERt z>QAfBeLa8UB|{JPjb724{+G%#FYWtr$ERL#|2N-q-wT_5-Z^saH`l%LmmmLMAN?&3 z;?dnb7r(1>_HCE`d;8a3*z&W-ZZtnTd(AK2vT) ze1GL-zq#WjxBj%}Rp(FN^RTi1uTKAE{}m^HdUI~~-Jct}cIx_hf7er=d-lJizw-U! zbHDk$i;lncq8I(mXCFP#HPim`3;y|qFTU&F{`F&Dxq9o^m@)Fc=ib@7;T>=P-mgrP zG4|{Wa_`>#u}|)M##na!<&D>Tv;1E#_`+L1@`j;byrAV}3&-F3zKeeOPhTj0?4Env z%`bo6uIpd5?ZNc-AAImz|M{*xfA#1)|MsIt&;H!y4}b3PX#wm00D&c6JWk3RU4!RoEIzi!|;Z!TQ;wC_Ii`yc)S zo9w#bgMYneGyBe_4}O{F?|9xn@z=GS(e&X5A35~gi>@u)_SnU3=l<-0*B9RRje)l; z41D6QdteO3_kVS^=a!8Bnm_yayEaUGfq%GrOSALvm%h5?&5ukjKK$X^{_zLz->~EK z+dk7jeaF*Yy5*JM-?8}O(|-Eq8_#;q-#+xAjq|-7KfSiEz3H9Xu6gQjI;_u(4*&Vb zzcJT!)(@Za$Y;OOQT@m}K6cE0O7W_PF1_6P%C7cT-njnE+dlb$tFOHASwFhu>G6%FuwFn8_< zyPL5yN7&u#*}06d^BH4M=5&0%4RrGnwsrk!@P%5-S@3HkJF#`$IU}r*oef`SjIhRa zxr1zkWx*C;z;919*0c}f+DPM$X@3K>zfQHkKGOcqn)c1e_@Qm+1LT2fzac#S^{V|1 z;r2K0oSnNRX%v>9L<4pZ(>M-(gKQk_mDu*}X#3}|!5p|qVQ~Pg4WME!E-r!*IwPgt zgS2Y!?}J$3vwZpolX7OIS;==U_xYhJb;m;ToQ7*vw9DIg_1Wr?Hb;PMqAzp2kjY zZ8)2q+`4WPJGpi1dF&*p$MiXQa@(bsPH$r;$>$4=*ruN@nrIp~3!GcGlZv0q*t#tJ zK98|=dHVeZ#@J3am|MpHXB!y1dmW5<-Fn8>oxx6^B?+KBhp}~Nf*kG{LPX3`r3OIl zbx@Hpy#jQI6|SWU`I-t1I4Zpoj0`Gm8L)j5u2jOVfQGcGCCg@c+H`3Gpo!qyf?sxu z)slILu(gQ_zzP5~-~*T}pTlaj({osri|IG4jx7H*EH9wbz%Iab6P7j7Ettz-);6mm z{gEO7n8pqMj9+O|Wlp;omOp4_JvL*xg?1{kj(zex#y)kP(7j|)(810=6V~X&){R)j zvnm&}!JI4rFE(L+m5M&59bl2M6Ai$4pv-10?tN{q*9L5^ZPCk>dEf<{2*x8J2-FPk__xbR30em&U7ufO$^lHVf zlx3f1Q=jnf*+_*9{0Fd7NVPXtt-`!#`cNKL45$%4@b6u0Fn1nf_pW2xM9nSRF1@r- z{w~kIXBgJC1*z-=P#eN<+ohLYy^&$rZ7?vf8G*L|8REaQYP9RA*ozxj* zVMUBe=MRU7nQ%1F?J{YegpH^c(oZ%K@m2v1e-S zZwFkUFKXOZe@%;43l7t?SQqQabC_Cdoj(ujWJfG-$@OgDaP0^wUcIy zeT;qs&i$0&kYkM9OTU57Nw{?|#yX*49?qa~%M44TTF-~LH4P&F{ zAVI!G__>EMc008LTGY>}oo;{~EG%PeA7gBU+IbdZEJf{H!5I4^`VD5nEdAaObD?&6 z0WaxyAGAqjfZhI>+C0D*doBGw$QXNw%78rh5d9ti8ld0cft77u#Tff8)jiA@dl}6I zys-~Z`60&GWk4tZd&U^hD11f$p9#)aGsZp##K9OFWsJR%%8W6_y6N{g=pxkD5ysei z>G!XH)xg*pgSpGmgWH1Nm*F??xU<-E*kBG=_&UZK$0656KAk>l6yW}^fsx7lu1vPG zE%xzF`53N#FzsS~S4KXWaUI)-N9~zR2E@YoyVY%=k{IMGjwoxs;6&o zU}&m;uxH?~-ax0;z(#BUDqRq&G}1FRcJ1(J-)id}8S5V%>KW|U>+RM0JD1B(CZ%i8=Lh-bb;j!_9 zqy1x3efy!p*#z=7*8xa3#RQ?UF`h~)c}Ae zwtpQ)Pl-jfP8iCzkt6#L5A;T11hP=#Z*=tA#`=3l`^TrQ>c3tGRfkq(%YZ#&*_OWq zU7WRlxbOO@v4I=SB`>6bd=>@}0m#pcu zT=<(yX+RWJ`GQboS?Ut(_35MvjXVR553zl+3H;lzd+-c;J1pLA`Os;oYEgkjbNXz? z?p@EWW`nu)sJDRbFE)x;V`g@);HE4m?U{yMcHEM=l--#QjYR@WT=}c7cBxs=Ry3K&{mvK>kn zox;57ChiG;{{@Dun2Mj`D`cRu>3p87^wOUpv!>P z*~nN!g0TkBRX|4p69V*KSXJB_Y*M=?Pho7!?@yjQ`BZwnl`($KCfH2PbA6e&6-}?; z=6R1~Acr9*pT`ZzaI#>Q_%sBhK|ZL;oZ~zECa3DcC47tKG&d@h66LMiRxxJHyvp08 z_mDCwm2CyXH)kD4YEW^VVwEn|-BvVbjB3eG7F@Gv+P-C!JQ!Ztvh(=8%`;uNB+1Kf z<7(O9H|JIvdyEAl7Jwr@hF#3_eROb7Eie6DgIkg3E5b0Uvn-xb8PTt4FIcW)L#A^v z5zZC6?%SV-8@o}AP$l&aSh==z(brN`f z6}I8cm8W1sJSf^k}6y(&`I4C|^ZRZ8V7K*7xO1ZbR+6m?}xb*`iZ zXtY>)c~nNpo7W^X)~S!As(mcCVk}kFgkZ$VwP?B%N1b0Zr?EgBqDHk3HE~G?yClej zdZXS)z>ghp9?_%nTxwbPz780`Q}L|F$@@WMovt&L?VuT*zM-D|vyN@o)Vd82w+rgn zhLM8=5oNk*HE2z_31+f(Nxm*llK-kfNOIMw65|{JhgmhI zjcLpD8u=l!RPlJhaLri@qBlUY7v{NFGR;aGpD|6?K=#^r(K0HgOY*~`JiFC$c?l1a z;Q0*GaBXf(!-)Y@30$*i6?`1VWgcC557+oXffmE#-Vq35cydsNrG)F@bXdf}V<8 zU;jURje#8mh>yJB{EhW^!3LJrc)>=rjer@PvA?JHs?q+j@u|L^@g7u)fhz(R(+#`x z2xjz83R0Xv^|Ms<-r=DG1L)6C4d~YErgXt5%%RnM=5>7sr+RyO5A{zS8WtV}Rpl~m zkQ*S(5jxp4J~+}hfcCX27;vJE3>^AkG>Ta%KC}Teyi;*0F#Vt|jZanHh{L^*-r`Wy zyY+s#ayh*@KMjGB>6AdJv|A`ScF@Wu@pqUNzI{7dnfNbwv4x>Yc4PxP6w3;?2m1G{ z;hO&3tm(M3CWa(rbNo$OYT8cMxz=rZnzgh{IITFu93~Oaz zM%EFdY9zU$2Oy_zBr{@8+B-oj-7z$!%7$sATTqXBD+r<+2n3(ia5_N!e7N@*<_DTS z;(0#OzF)57RpU@f;Bh_<*>M07y=?cc-MjMmCH1m8Y7ypZzv>CZpb!T`p7_r7^>`wK zJ(hcMKknWQ47{|!3AUw8zmP5%#p05p_-*(nglNxzLIcG%q&;^bTEMe>lT(2RH=-tB zVPNYMnyAs7P7k^f`qMggk#Ih3gD~sGiDf3|1Xzwe z=5qkHjiUE8yFxYq)A(J)74iX6ps;PpF?s>GJSW^A6=%_OXR4(($i`^871#32BxYo8 z<4y(cq<5-r!6YIE6;SXMxL8iyqkd?7d}NF-x|Z*oHsr-P=%gZ?1iKdsBxpezEw%iIklW5DAM4YAY6((tsv;z@NzTII6`8F|-?@xLp}A z*Cn+Pl^?av{ z$A*$nI8{u;KS^09<;?}v%1+VD^Gw%H;l!w69=mtt;cOr>5HSxNQ)CnZwg4$`s`A@t zR85WPY0FN7+n1hLkR7^_Cuewc)@e1o;xwP!1J}h!rH6B~Fz4{Z(abe5e& zFoZd05p4EC-k2_|v`X12^3KkVl@*T%j|LJ&yk=3j4NSLec^>3%2K`rp%Pe_Pm8=JI zy-}kiuC_<&_hch87Rm_YN#`vfA#}Eha$@3n!{ZyiHJ>ibxpF{j7bTnGl(xT+O52<(MM!VSsTTPm z$Mel1-6z76>S7Uojph1Pqr?Y|!klHB5qThojP&O@GybCCni}udbg*SMs`i@Yioe7w zhUYChZgF2&0?fG~&L0miB-RM?yR5Tow^W`4!>r-#Y8msvB4blELVqPc?UuSib%>3qMfFSM{#C)U?Il#-;D@F}ZNvv_$N9~1>eCex=bq_T5qiKr zQkI?8XaIImtG3+b)wg5C^bvs~dnfoN3Lz{Q!SP+$OowhC)L^*OT~4*w*mxaV9=13R zJy8$?q!sIoXnST|e&4|K*p)M`A3icV)q7xSeE6#VA>iz%j~^Kt>OU+VK&z*r>uIKB zxTY3*g0YVGVkqvt4eZ&3nGNh>=2vaoEb(O0c9LLoQiOzCwe^^Wi0~z-#uC-wJ zCYNZ+{W;gE&d%ZOf5@FgD`s)lOle52F?v}Q5L+8n2+sp19+c32!Uj06Rot~H#wzZd z>nM@uA(WveDWakNqHYt~&yxc#XRMEyAo;k1!!d!~9uMr0tN{yxyDPHo*cl5jc=JtmPTv5mMr z9X9KK$Ayaw{*7_Dug0to;HF6=eIje8+^unxyF^}htz$*G!C1hRcFh=vC%~C(u$3H} z8+b=O5vu97aS{7!O_$6N$)YR3bZfk3PSK3|%ZlcLS#l~6Rl^JK6EW8X$1YZ_(B|a^xZ49NJVRADe0ccUsoq2Vy;n^g7#^KE zGSb&G-XCfJ6ky3mRRb4>8#vJ4*FV}bJ}``mh3py*ZPnDgI9zkI|KPybcx_!hC>l<) zG@dEz1^cVAA3ZL4v+ES*z2Y=fQGwQCKwzCUro-PMHGCV2*$z#ys>?Nn_ri2Vk0q204=gFEB ztSm*9Y(S4EKl5lp04(LWvx!Nl{#03A9tRN3gytJaI-zt1K{9ZD26l3udSR@X8j7`- zl7W^aMk7}*yqKD_l5<(Rq}moIslKNq6=F{yrSMO&*&~gm8N(Bnl53VMxXKZtVSLml zO;>CQiCgiGidjrXEhy1w%Jnquav2j!6b~`}Re`Mzv)q*jj8oe#F$`bggN9Cd9z{H2 z(z0xb((+sdjD{C9U9T2Vd!7?dh?E18$a5HX;OqJiqKR6paUZpAgK} znHh@0m(;a&*RiC|?W9;c9X3D(u=|n8Z=uUGk3)7V$(pmqVaJ~Bv5RA7!8QFc-?i-7 zBc53tcgCz)dwkBka%_0$T622bnK$i@TzdyFv~5>jJ3b|1ZegIR<$#GbFbLX#{p_vi z><0})`Gn4pBf*XDuu}fOX@c9uo~LNQv(L5Op$nCFsKY9iEF07uxF_^@Xmo4mY^TL> zwhv0{nflUL8}xl0@iwzGlY~raW|2E~2`*!Tlx?6kLMhXY@GxzcEIJvDshv8EKR&ue zjy1&d>H!ZCJ)#S?XEM7^8Cx4*N1m@5zlgka?4{l3dWtQsG;NcE-wSXJ3oql6O7{x* zuXL3{h=c_BiMmmB>(F$R6xM|9GdP4)vZl*c*(jBqLQ?nwQ=XF=8XoCKnmXJ!H8R?N zc(_M|;TD|AQpIrnB|St>>|C5Za{c(B;h`f#`;Qzr&_623JE)*jVGzlNs=gw@ID2^P zEJ1qkZ;U;BMXaK6Ngy$U5gP?fu?PmXb^<&-jsQQso;GDAq$CCURfv-_svR@gHm=MvDm$HqTdpV9xrso;6rpFD}zX6+D82?xGk^V!P%XuS=T6-Qx(&-oMN75cX|LU zf38}dwhgOfqB{q;$D&z;aBy%uSoZ&6@6Cc7NwUN+WY(EgT}NLt-Mw>op}IS}XA=n^ zugZ*_njK^&G7DXKpaEo6SI-PFfe23^ssa(Hh(Km#tA|{ZMA`C3T=6DtmnNAg)9Rq< zLo(U!Y9)#kB}zt_epV)v=~$CK_(3xnMM{4nZCdu8yN7#3c;wa9oL#BWZ9rCp-~Qh7 z_nyCF4CjgGgacT-@d($eS_z4{AJG6cui;=E0YH<`>3gP|xygq?FnG$`;s1yMz)$#s z5~2VEd`!!VtrXxB91d-Re2*6gM+txIMWL*(g>cX){Pe5FSs>t&5+Mcu>$%#6D}@gg z9_fnhTR=;IN~c|mC+(gp*}vBAw03tkyX&j56A{$X`xH;wJuny+2Zh>A)`xh~?twdm zD14_?Z*JAr>fOhU&V%k2^eKIyx)16tcBa&tO@&VrJwWhK(aYss!Ju)9XTFe zm`&O}&`)G*DhCJOEAgwG-eN9rpO$Un9oaeCg?qDeO4pb0;rWmK8@glvukvG`k69f0 z+n|>A$f5JhK{FTIx5jYPnrL(mYUO=D7?R%DapBT7AQ3f(Y1?w%X384$yxg{(v^$e) zmE9;LnVK^;c0fhvREAOFcoRVmm~U#%OQ}E3;vqJaIr=%ApWP*uK>#+Iv5rkchrVkp zg@_TGsq<;&G|S(LUsW%!Sxip83{n)7?F6DH%$g(_HAwM9$}4KA#LFN>vFR^^IEpS} z`eu+KTjDesWF<3FTy;Jv#bu#@Q|}Cw!<{=uvRXPHBEtDBXbqmueL1@_1>iR>a1}O%V1R3AY+XyR6>%*wCSzrGezuyO7+l#On_ zin^#2kVGVX1@v!n2L$+y@m-qCZD^77J;`qzP%H8SXISPvfzN}=CpwZA3F4og4Z0W8hTEKx89D4lN)N;PnRQge%)kEO#dBcn zm?cA?)S^OiZw&(5u0vROZs3dx+Z zy<6XT1PxxJFTi=j4$MOd!4nu|fXPYzC@RBA+6CpTIg&23@zFOCTZaBUCIY3L+L+rK zh^^VPNb!M{15y4|;9ME$`9b}*4%96H>hV$tXcsonhXW^~J>Lv$6h6XdGyxO2rJCvmI*I1@jHQEsVi5lr^tpXA@`G|fM}Fu; zejpt~nQ|QrRG`v3no8VMQfdtNgQPy-FL1K|8+x*@k1aMU$-W$9{1@Ne(s1lX4zRtj zEK~98^P|P9I<)xrI9kN*3#`}=C}obECFa{SL)441RCp`I7*w7E!a!po@@f0NYttZ1 z8>q#-B~Jo)d`cBOswva%WO1`O=oG(~e`QuX3ErlAXdbZ;Nhwq-E?1VpHk)A^li@NL z#C7z?fh6_^tRROkCe$YZn7=|sYUkx{OcJ;d_`1P$Tg;o)q;?F3c28;w?dWA_ut5e5SmEvSdtNdY60^4ou% zr^f@MT9DuV3tr%N)u4e>hqPD1k+S1%O?%uGb*71YWt5{%Oyc|q{hAJ;Kj3m0?@&c& z#7N-7IYz4&X2L#{S?@#xO1Aya9M?6;hClXfRMDlFIo<;pQ7K}UVk)k?K}(!}Vo?wW zxD0Xf;$i8uO{bVH+;QOboD&^&{SoIK@ydrp)GuEL^B4i4^27WD2Tu;JBbNNg4pC4OV*z6bF&*8$5QyA42SgKa8b09-2Xa$^Kn1D(=ys59m_ z*T#Wc8ky0+AZ5q1>5Jq+i~T3iN6H}C9nd2H+kJyWg$@adD=Vlq5j-(~ednuKUVv>5 zA_&^QnQQ5lbTdpiR=v5=YHZdz^=_-vZYHiBuIvX+-;Ag{S5EeAf>4YgOWtG#7-il> zj67HP6*OSarT8A<*C7i`p@6^fK?7%y;6tzTdj$B63rIc`?yrGeeabD+;WsXJ5hhmT zC7$sT@Ee!7{FwGyowd9&uRLYd)hr*R-C618N3h5sWYbdm=`W z*wUUKv)|NV_8$tam$fcX+w|0{2eR|1#cvhN0JvHRpyHMyXGq~f!S6k#7MK=A)B?6} zmegDqFci`bfLQBM=i0m}}&t#SuoG z!1MdS3><$9u_jnBX~gZ6&+_qGi!~JH6I|zeMRHffC5PL5Wj#WOHO*AYmg!n!m(fwP z=O5(UJ8KwaWa?QUIwOg6TH3S-JT!hCQqCDe3&rJ?dsPF!Vpdw*-NM_&#RUVu5Sg%L zR&8-{5ne2oBWq-EJkq@$+sW4&F+)p;;69p%Oei8H{kQ&DK(mVENSptkQ?VVBg}X5U z6)6GwPDG_WEUKb~2Pq5omMoyeF_0Ive=ASW7XfY|Q8G|qkuaG>b;N|p;89-JiugjK zjRU~w82Fb_ot;~lT`WOpNeK82YjFwRoS)o%Lr3oRIU|E@3u4z+?ASLQ=9B}5ml(|v z^mTb*4dPiSV*EK7b+!zM2FW|YxDWkG=`eP_Qn{CveCIe%J!gbGY*9w2W}JEgiekhR zbOd4rveiSY$ecj!z`%U(^y@138zKL9a}{Y5g-;db*DtsBb{`x*cbcv0;Nzp!L-(U6 z^+&Wb|LICI=(lzbS1T(^_vW8JUT^jrAOpX#+30N5R=cg;-A;mUx!iXm*X&8QZUG$PDCak z7{(c(Ai)N(E_F!f_<4(nP@mSJ@p&f@LQ#Ng4lW%a8ssb!xeL7!(a`SpPGfbi9eZqj zF5ZKkb%rG+dupum4o(;9#yy%UAVnSoc2Y)iyU>_YUhX`!;? zTc_l1Vx|}=Nq>5|QkmnIY}2C65}D?48`VcB{pZ+oOs6Q3YpP};fN>dTO6g3aQ%KR;hMy7t3qo(xrq6guCDL2W1ZaPzHc6y zN2=L0*jAuZ+AELitL;Xoo-Qm2)}%tPFhCB<*|8AC36{|HYaG{NB6J}R!MX@)yhV_C zP@cJ9d!dNVDqpc<-}XYm7w`Z`_#4Yh(x3yJr?WTR-;va757so01~kyLRA<~JEHjISpWsU(MiX@atAjwKT)d>3YhkCBmIoHrKdkxREdmGfuM zfw@0PbAOqahaq6vpC1)V zCEE-KX!1~;Aw}>@EizA#3{Mr4D~XjEdL%si*oz#V3RtR#FA*>q?Lx3e+V%M{cMqxo zsZ6x@&gKSqVC=OTohLj+pD@XW#;^1PbKmsLdkV)UD}N(fS>%)x6(x0>h=Wz%mh35O zJtlE60h8ecz|j^&lpKd!y@>LzBt^Un@e9emc)VtHe&?r1Z|f+Mh(*Xd7bHnB15_+N z;hF)Z6B80&QF7pfW7Bm$V`_nvtwEX;u?0-ATtnXjiw~e&$Ea0Nxte6ASZg^1CVwRn z;WYS~1rGsR$?Qhiaw4DA&|&5|2^v-+(|9K+E(RIOWw2KA3E zN4Zg;uN2h$hOr0yTWj0vJlX)JYvREPSWdqycxsrXrmVV0Sj zSDE|V#w6+re*or(AX}d7nH6`KygT~4#}T&4!hJ1|MV^n%BRK8jVTwPD>MUfW2e5>t z*I(2oSTvTr)TqwSE+{@x@o3La65r90#4Fq_N{m;~#5Lb_&7KdJNe7e+&EOe2gHjtP zm~em=ifT(1_S2+LG<@buCZMp{L>oXoKu?=P3}bXumM@PCraYmF6aDV9% z;AEAkt)+Q5>iCEi1Ldhju}LW>$%K98Xq1@hNr09&SxIhWmc6skEIwy!21$=}hf32Z zp>a-8AA=xaQW|0*U6MrhxS$Oj#f=!IQp5n8P8~_}mFir4B4L4JctGR)P!9+mQ#d?$ z{?}ZAHScO$FIXnY(|^K^JK z@N!*`9?l+_Lzh*EiNXa9|H>H1#y^!}sPFF(c3u=+kQ8e&9QX1ka z$NNM|n0LqNi?;Xxiq{hH4U$u4JCliWz*+b%E6fU!RDMd5>|PWC?Vk9XKsbu-i|)Q3 z9GZbmZTL%}g7ArgF+>9DjspLMBeTN7rzGM_l`CH&3iw-j_y=SyMHi5`{h8}|Ar{|A zcz|4XhC|010LOcKeN{#y6QS_B1 z4iZTzA$kCmy#nzTcu+rH?$~xk4p^mKRRCARNxr#VTYJ#hsdu;Pwbo8!XA>u(R7{8- z^OXuJEwi;!!&7UqpgwP9I(od@dRS*s0{NtXXBCTep*n~05WkyKuiI&C*LU~Sp~5Ao zsIJ&obIWPoM@}Jbgv|@7;y`knZ!(u;%}%Q!HCPl&R#daeYSD`#n8P(*Jh{(m>@#)W zuJhP>Fc4+8)KHoi!M+|rjh9U|tvWzmXtyzv$F23%Zo9MFs%_T0ohMC%plbqbs|%_? z#+M2^h`70{g8e`?0R*uGdPxBQMs=aY90#p|AJ~=I`PoWo)Mt;v%Iw^1 zCAIyl+CGYsZ8$L9XY`2w7|Rg;=-HtkFe5eg^8EbWw{(K!TbEc^Ew%`PuWR6JnY}OA zG74iQFxpM{?yyAlpmRf;qICMl6d%YsNhPUgQKz(;H9Z5ycMy4ilx0!wMhj*sG98bK z{7!t%a2{*aZ7fc+Vy~Y{ElY@U#z8_49_5DfCZHs0*IRG^O3_We6Le7bE)FHZDl5Yz zJO+dyxY}-kuo(nSOWvI%r3L}|ntUumPV=VHLIicHE+m@$a&%1FrR)h`>rf~ev_@3G z;zX;e;cB#W2~gD}&>(d%8)UlOUeD27^WC+3r&i;jzYD0gAG|C=s4ykSh~LY-T2i$P zlLgQa!)g4@vamsNynT24!tTv$0*i=qmN}t(9{}MlE;a8)l z(3{{ZaiMsoySQJN_f;{7^B-N`)*W4cid(LU=HtT)S7?0|jxTU2K||G$0*iurNEsf= zrVu5M1=s`6Y?rdr4)TaHSElD<8XRFdb&M66KF`=*n9*6UjB*Y(zO@O&mGmIJwumGt z;xoNmSzZF_vviCeA$gS}dSw8`F|R~8cu1U)<@hVakRN@8tDOKIM4LaAi#8Vu2{RE9 z7x{W^ud~Zz`$KbAo|@J(8bv3#l^$P8xTx|{lF2^Vv|m`JUXxKrm70T znT@yx0`f0?RNvZqveDS-Hpe~J2?x|}V^-(A06n&@KBcaEwC{K-W(jlcV-o%dTds_R ztC(|3Q;2_^A9e7n!7II0*0;0(!-tFXO8n#eDD_>P9$v)663q*o+R!=OA{uZLt<;ev z>Zk7Ym=N|AC-V_~pG)m7DxZwLd^ZpoGRTAzW$^|R;cZJgG)tlV^m1hd4%ZdsaMd9G zG0-h<-!!OE{1TerJ14?H0yq(yfA5%xxT?D8RWxn+AtW|+X3O?fqrY#=tl;QDxasRZSv$0)=mGKWTrw6${`vQXJQ!GSVA~ zaVgb=C@rh0wjr;8Www|N)OwwDmNC6&J*oqoiq{0{U1RlxZ5S&qN#%tCYy$`lucJvX z)bJmd|G5+6EE?{pj?GoH)GKRS1Rt{I_m%*COMjQPI+rO z$~&1OWGJx=*^Kae&M-%&HDK-%_~el5*nrTNNw1xK*MsOhLaPCQpHsCG? zWnIwS1>p=a`_!{Q76PpuMp*M4n&!5!*VGwtN(W<=P#6jkP~D2DS9blrleCv(YpQZ* zn)Sxl8lsy-T!Swg-nH>}%m@xA2Gk|-PGBytC$Kb8CV{7rSw~_smdhM9*cFGAB#vPD z_;U3G$iu=pOdZBf9GXtfs<9E^w?GtZEp@IfS1>g!ivWTJGz%P)dv0u~ZZp;)tOzWn z0jZn>@#imNrRH91%iw!mW@CFf#2)*}*#su>f`bEF5>TeVGd{Kw->X>WO_mh$EbJIQtwwEqwcD!gtnY3oK^fYfw0r7# za}`t#)Ei=D&6zl9_rOwE+%A$A+qI4G=(DlE=nr=vcg)8RYe$bd?SAMkJz5E$csXa} zq}@~R{t~^W4!KFYr^c~op~j)vSJrB459;0ZR^t&f^?cWM!jTzS0~*XQmS86IhNCDj zNA^s36uN%j>#M2nk~f-gxh!rGPu0`|Wg!wXfR@Dd_o-U4m6lGmq;SbDC>QMFsd`a2 zZgL4(q-*P|LWO?nW{#bXy#nfbc z@|Js(t7uL&fIp$E`%MA)?C1dq`{q_-wN>BQZg<-|+s*FU?)LWHPNVbW)Jp}C`vj^; zE8o}SW*^sUod@;ScCC5pCV#3ldHs9kMe;rNAB^`~nufdWwFmX}y)EQuPqiqJXiyCL zdO(MMM7ySKGX`{PceC4Qb|2MRryeon*A?x>`*af$vo&^_dmU&C1%p!!PDS5~bBjyc zNC~#<+q!yzhJgEMXL|$we>U5P<7>!G?d$JoQaI~ zm1&cmwKm;a+;CR?+T7@qhn?z?wfWH_tG@cE@~Hm2iAmix_9UlTUp22vp0&xT8dB#k z&!d~|db{1&-8t)tq}tdp6QS4IjrICkt<{w@5cXW5eJV~}s4^_Lwbz8CVwm!<-T3tM z2(RMQsW#x&quSQP`jf;7#MS{!NCd7=vKYcs?QO_UxX04QUJ8fN$X3l~ZtVO15Bo#Y zal!cpz>?Jvkj`qTHaa({|Co8L3n_XC3#x$~Q7{XSF zl~b7(K0nrEyHjg*I$KP`fpb*v8F50Ox6;Ot>NvXsn{1S$N z9nqkKQG@PRNvQ-WwStmmhLk-lfdNc-zXC?40~6fFXiy4iRAS>7`X#hMby;+o)T{2; zbHJa!YdNY);n#lggDKp3Ly@7)z%lKfQAM+)NxS!}T63gdk~IV~6#tPTKz|VHT0Sb2 zdyZFT_QBKKQi&}fDS_1#^=#jBkH`@XNvRaj=VK?pw0Gp)6djpX*YKm4*=*s?+j4Gf zjIpT|%#2Yl@a)Xm;-9oCm)T^&z%N@_>DCI&&yI%Xi}DcZ19ppl>F*m(>Q-W|-oxpn z`Y|G(|GMIiPJ8vcx0zX)fFPm30z-e13j&pRlQGO?P8*GylgeI<@g<3us_ z8fZ))VH-BhFI{ty5DUet{PIvA+tsXBit-pI@;%oeA~2q6`uT{}ivPf3S#=xSA}L{b zHA7Q{8H0d~gG~{V6qzuEHG@tmDrw-o?Fd*)vdhVLu^^iiyp0$r86b%f2r*sC(@EboO@UZ0Hb_ws zqlJS@<_aJ53W+7>+9ItTCbQlYAi+n;%|hiIo;nVq$;c$1RCbMCf5oi6G+c>uU_b`wPDRUo)f%BCUGr?YvLLs87hl>we#pH$T8lMc8=x$IVGlw!lj z-4XRjn?+Y`k0`ZChlbHC+40GSYledv`0FF{z{Ecu(_ZLs(@6~blD)BdQ|jo&_>Jm44lsLK(zqyGjECk6+Yda)>(hW? z3ug07{X=0J`1+ooYQC$Znx%{E3JUR+k3i5)70Q8v4t<*jGJF+@d`>}`k6PyuQqQ4( z;7~l0&ERO3G$N>~`jGZ0F(IhCYg(AX3CVBU_sk%eAuSWA&kWf;pg~A!Fhlmd5xTks z*!oA{w*oJ)<&gQwg{1RneHGt#w%1p&!6A)Iz~mWOXt%MxhJ|)(<7hzUW-D0I97hA{ zMUKUDqIkBf(hU4V*A#s-kGeGbqxjq&zmJkkPPJU%Ieq2{9NTo{gnOP#mNmCF2yS74F|8$=LnXA( zCH!a7NyvMHMf`zZ4STLPm-wzcwmj;G&@AgpNgKvGJO5$xp6;;uvz$f8iHK9C#?O^w za$i65{6iN45cBf}Bf0~f_WTI!lQ4q*$TcHK6(-LbaO%NK&ejoxZ3->SxrHn}*7k$G z>G7D?876-mQXFO~%=O9cJvJTs27D!`GPafAy-(N##KN?o%N7n0H$%r*2S`w3(7}=^ zqOv$QUor6OkoJHP|MfpA8vxkDzz)%7A~(e7WI>G(c75$ZZD+H-UFR;8uWvVY8oOEV zjY~tvb9~h}@+vqh!TmFEv$vFLaBi{DKo!Z+PMjgx?FT#{0sKnLG)In*tiQ(#e3&S3 zNP8^t-=F5}<3!>80y|^~a()gp}hd7fOQaOZUqbr&bg zzUAc4PXXT7QGowJPykq1K>;2>9#Ed>4`XNX#DLr#k)N^53omkdF3+%48=9Z_9%;{~ zoVSOLmkgfD+tD*x0tO5PjFOlOLrq|=X2CeN@Vh0RXG%(=-BCmxb8&4Et|a^o1vJJ)B-F^e^#izghngOPKY$N`_o4Ei)O$h6WL zYehbog$Jxk9-1i~r@LZnnF-|UI$=aT8sI|lQ?JC6@1kd8oRgMBg5;7Vn)3mH_P~m?P@{gIv_Vh*2zs8ZVAu^xn?$PPe|ZvD;d! zciZ(&r?Ioy?rt=;>fL6&wcS8(6I7mE@RmI_B5&Np>(E4NZ)d08YIo~9wbiXU-X}o? zRrx2K(_V!dn8>EyUEAG#*g!uLD6hJg-on7vWzV;1dDdG-H_uy86S$1-#_kq(CxUt^ zt0Bo6gvplmlVmL^4$OXo5hVDHNtWa(Kx>%QVttci9?aA6%iglbzF}WrQ0FH+ALt0r z?{gNwTaLrCJobZU`;hfsMmQ&t@4LvsTfXOkz8;cfjYf=f7t|zm^0OHzx)#}<{_xjZ zI(y5>_$fK-gLskVu9xnu7>i5ymgAFJa}u8lR+U&s1Z$)~GxJ^nCxfJ5hNEx>URBf2 z9LkskK1A!4bMKb`DMa$W|8}0PzFdG9umZ`?sH>0T{;EiO*`ra(95JtUla(YHrNeQ7qBx^5gbYjlMF+ ztS&#U@e)1Q5|ep4|9CMB!_lD~?d)yLA32}3A3b$iy=MRU_QuM`jO?XM$pIX$p`Eh@ z;Yrj>jfzLd@hPRfjp|Rd!>2wfnf%=yccXt9$5D#*3SigB4dpzccwvrj!7`U{&v{1n)1#dps-D}q$ z*6U4(%iq}P)LV~g>ZsIs`EQ}Bh{2EeLG>kW_jY}~QA0h7vK#86$u+pOUGKCSYYD!I z4^xE?2Gwsc1AA^&7^8rZFoAO5I%K`dhaU{yYe1{F@6w7($!$#w;&WEBRcAiJNrl=hC6dQGN@f>A>_eEY} zbL2q!bdhfr^G|d1D1qPA*mI&IfiD4dsTr~eGOxDkTlHGI&b*OD`a3=GMuTj|!Cjc#Z6VI5QT@o9oZkN}z6EGC}q4^77tF6*~seWc8J zW5>GC;Z0c~MUd5S0J8jRviwO1DFWc$eq3LDu)F(EN5G^^cIDg#4WLqjtDQ?p#T4Ux z@a9n@lt`7hCAlLk23Pa_=Dr>gjV2;)H?h@Qeypc-0nh~vf?6|er6@se7lR7&Hab5`ux$cPS-Fm4EO(~ z9Izi9=Y{!Yx+uibx#K6Du>ozEEA~G++fM&m=BM&m!e#%yRAC38piy$n$Oc))=lZ;osb*hI@2p z6dE`a*X*UQAy0DQM&hZ-wkymUax|~;>*`rdL{5@px%MGpHp15mm80?voJ~gR-T!Ay zMNaMFjjM7h2k-Nf7VJZ#n@UOO=XG<%xpI>l(69>+ca-yUfG-hi;>>Gs4w`f7H8@GP zfemH!XQ`u`+0k4($vIw6ys!s6gW2N2<-~Gjc`lhkMYEq;?TJA^yMk@T`FXN_&^$6< z3Lg_5FQ>%(*qu9p^-L~j&cE!1)M4=4E2o)6O4>9q`6i@3K9>l~dy`_NLB6bEI= zzNFiQD&kLh^hIR3{ul$pr|)s5>>dwg`_;N$Bvgdq+QX%z!LyGB+m9O$9_}q~E``qA z;?`pG$>8Is3v(EJSAT^ghnvuMCZ?FZ#*wwotXk7uzAyn&wWgD5l(%;3pLEu?cK6o1 z7}YvPK}C>Khc0Wrk*=9iIjLI3Ydi@`qlrmR-j-E6t-W@qzTRaS+41h4tC&<9zN8jY zE?7!CtZK!QRrHF_gjVb%Dveq(cA`MHx`k5vkF}Rvsmtn!6t3)ULMojue1%FUVH0%& z%|;Io56gpSD034iK?a3i>|bH(8jWANbOyeGf%A!r({SsUuQafSjEN!a~2aYv>caX?5WY*O@30z36aX`ub*hA;a5cM7q zS(1bU6T;ZdpzEdC^8+(-4k+e}n?XbDp&!t+DTg5SDf?>-RmuF6K!u_=>rk~Hio;Ac znZirWc5yH>3^h==&NxlAB9g-hG^N*7{gwgpNRY(l|+#{pJ^0y#}WVHax z#xnCm2W^^02k@ofE$b0>RwzGCnmXxSp174bXHTi5B1AG5jH6*FrV1445>iytmr5}y zGILd<`4eW~oe>6@!71d{5C<+Y;-CK_i7&8plJ!KE{x>G`th3Z$0}}{XnUJAMgb z8Owt)8kiA@#(@V0ibuG~5UZ6qUgQ%~bMl2F)5;ur*hlKbgXM+>Aq@`&-7cwX#f za)Gp@qgtsX6^J>&s_rZ{lw+R^Hou!MX=#{P00xa1N*kR4vG!6{{E8K=FuVoG=H5>AfkRt zLTu0R4jpRKVBpXIM+#HF2m?7k`7G%m^{)s>jrNZOn8M%0rBMiR14u|cn~cWc0K7S! zeF2#eT>w+xjt0I*iI2(Jo<;tM95|-XZjt@KA0okp6m8=O;suODfcnrGj$BF}bUIDa z-0MJnU}XrzRHtE-0sLtHXf_-ursK*DYXaz_{k%-{*+oSVP5W@-N&xJ}H+;B5I>eZ- zR2Eg$v zJU;3XD`Z5p-}}s4y0^TNL|hzv;;_o!IUO=iLz4!6vWh9puD6%EV6@z=?>vGj$g)xsI#B?lbY}eq;*;z2%JEp@lU5^e{24BAz^?|c z#qn7vh;tLx-~)MDK7B@`hz73gt+YROT}AYe!#zKumvxB#A8|yF=P7XA6ervv?eVM- zp}!v;ngJy?-FG}{lfbkcp9IvR&OydyQ!#MO&QCc9v617{Yyxl+*cOjBfpDi?QXTp& zSMEVDlza2Xc~@-j_=vv$ywcgM0PLX1H-li0RBp?8KWOB zsk+u&sPDC)*bT7O@2>5&TJ@bZW_Zk+Z7YVqGvRaBiKtO7m*0Cv1CP41qriVkt*C1| z!F!0lb`P`#vyfm|lYg2ws`^mG*19(#7TR8Cce}CKs&$y_02_m9BtA*edia&~`bKSU ztJB@8v8+tIsCwyjqdpG&5iPIMz;&?JZBYx1KR(^vQ9DsB^sh9{AS$h|;>t93+MU|Y zT3wncXBV7p)GJ^gve~LVs&!a)KweT3y9))FIuN@zakYf5s5~CIzG*9_xcmVSV<`Sk zviNA+a~+FaBgZuI7521?XSX1#ZzL;X^4DHmWzy~?1(Ls(dlNKKSkwBM-c``Q7X`lO zSYa7fsATu53Nhttaehi#)lt$#o++Abi6EnV`xwt8NonkS%0t8ezXTO!I%wacUK9eG zWdqAZA*3WuiC9ixjh&2yq0n32srcm?pcI;Wa*!Ez!|{DqF z51NV;#+D+FLg#G}(#Nz=!&fy&0WIuoSXSe+&<0M7IcYNZ3BsQy$w1OBLqU3jP(l60 zV}aEMNnk#2H$mYHQr~Ow7YPJ61n`J4=F(mxHZM}qUOdeRbsV9YFqg)A-dTyLD4Z&) z;(T1*?xjjG1jqN8D}@!%3*tcwQsR%kLM%akl|c_4c)y){;7umtKwmIj7l`iL8=Wl( zf!4LXu*yYiWmh(;_J$2FhvMm0EQ=m@$@)&4G{Foj#;xMwysOkrjJX=V692oh%0>lcT1$WbkA722NTU})pb0jY0&$Dq{4J{=`MCUO@2M9 z^iZ9fH>z{-{gdw6R;_{AtuI1T@^qSfsnOqm<4-b;DE!LP zD~?eIVQ#YCd2i|TYA{MzLmck;51)BBeEw-l8~PV{C@bhg96e2!z7X6y4GEYl`7=BM zJTB|Nk9>ZA0O00(rpt7hJane20W$Xd7rgk;?}5pa zO)=X+`k-UGt{ieqd#apShqU)qD^p<^on9 ziVI?-%$@}%bIoavlp*oLATJf`t_klvm^>%dY#n&|R+C8%^hHDi52zbP)B@J|U-_c} zhcV_M?OK}2Qz~65Kwe*=6P7yNcQ!XzpsPmbiAE)Sr5~94rf2FE!r#bN7Aj#;QB??E z9t};)!YC$b6Yq=OzTH#ffhc9A>91%UORGb=VFuK65rIdCsOZ+4W@AN_qzYBcZ4{b7 z*T*LubN#RI2WVXYYBNy9ydD=9ewELqaqShm7n>qX#{hjM6f_s;T9K3Rs zQDpc9ii|?T6^}*`KMNvKGJn`u=5l=2pb zgB;E;#eJ3tM@ptD0Yn$YpSxH=BXpEh`^x)l&R7=Yx!8OXh*IuLaS3rhL7=daa4_tK z&S%sh#ks|$Aqs^Y3Uel?!)|OUbs*1IDl5kP2?>_7q+5(Nd99Ky2NPDyK%mWrB;|;c$M3Y@!mv6}v2+ zi(g{X-ngI8(Ap*i6B~f+ebWtv+$O8+&}hT;56g|_M&lD+Jg0p=)-FJ}f#i&LEM7#; zkaj(Km>7ZVs_BmVj)!8n<2gW-(=!;c5(YssC8i~Q$vT%!VSE^@()ZXcthTZ6x!VOv z+CVzR8-a&*&)|oW@(|+HYaXLo!8SmRB6%7yAo0s*#+QwY$>JsdHT(U5_RWYIBr^Lm zmTQLLOc+?*p=r(7VT8X2uIb@JGsI^mD}wp}D1(1MCD;Odf`3HTXx}ya;S2_kor(N# z24GdJF3dRs)k7Duz2I56!bb(K0=gg2aDcm~J*dpUWUSQHlWLS{Z_I7P+>*NZ~sEY`8+VY_JIJs3! zyA&l$sxZ|%ifEYL3$*~E`YAdJBXcOy?TG5*6};eYU-V@L~w0+ptC<6#ym)T!E(xr4)zh2&(e z@}c@Zu@v5Tm^Ug2fY9o|Ztsd=c;n%W+Wv_>$-kTxQ zW1Ig2N)5*^a1e9wCcrmhh;vvo^h?ob0n5z8puzLqg?`Bg^H9g;t<7U;dlZzcVZ=IE zz?qE>mXuL0z?|S&DF7`xwzI(IcCb|156nJ$1hWak1KtpH)DKwcMYePYOC>8f8mTL= zDEccwS~F~C5tfPRCE34mmE4fEy9g_QgNfIF5vKvId%pKVZG9>3*B?b8wziCqLchd! zav3If;CPh3#%*x=0qboUn)budzOo!E&_Xy0oQRf!k%g_UKr7~p(%d5ZCtDrf#R|3= zLqW9y05kGDM`^TLfkKTY*o9*g)hb(=7bV9NW35)9=0U&*SFOTIxpRE$s&m+D=)g<_ zKvd_UN@$5P^DxkTYg(Yi?ha<;+G?zI2%-yF-vz4mps}-=!sE?WZKp%p^{x6^XNKd? z4B2b0*E;nXvR>b+ck0ld%C8W>E)=UpW2bF}k%mNdMGlID^n?;q4o_o_oJWFB6IlV^ zR)z~+tQLGqTrnzyXCe9UMMPfbXhaPmj+8{f=dL0JDy7*ao&l41A*|Zr;|KkQEzI-S zXB@Z*z8XH_>L|rV!$-qi!-qLDe-!#2u=a9h@DUe!1}P?(Z*lbr9}w)aHN((_YdeD! zZFc3RRw3-*vrLzQ93X@uWs`)&dE6d}rJv^Fp_DHDpx<>8i?#2&Hpmv!vJl%AF;aXw3nW7&@7C|KnrE792$@`?{ z(jW@6rNx|MrA2Z!KT}rwC-L9P42#ruQ1HskuDI_2v_GL{(2mR?+V;I@P&8Cg2UdDC z==i=HIiu7oTxewvi>~861EBcPPvi;~N2W(zd>Rif4HU<3d%OUA)Ah6}yKZ8Y1!)r? zpISaSRQMG49qQU^zPIo6H6U2zsFVhM4xSc=gEY)z%RqQw*P{W*)V^!Sb}I6d8V%O7 z#$n_SHG{#ort9!$%leAM+x(iicGSJLcZ?4<18!>1TVbd-iW`O$3=Rug+z><5&3+7-oe z2c|oQ{S<-Ak{`{);d64Y0ku!=Gmhw%{HUZrd?ZN_pLD6rP>cQn4FU)+g1DRjhE(BV zKXB}(uY;>1P?Gt%Bzh52JS-YyZXxsdMUuF%Pw^`i4c5>{KVA2PZ5ye0d@KV z0NP?W%q(_s-}fU5)I7UcMYJ7h`G?RnLVS82f`UMSVy10EV1LIJHm}k{@hOJmVHW!o zawaNxsA>d-E=M1Tqd|L_4dZR}S`HpM=v@7NmN)MmZRIxT3kA46Kt1wpxDv+8fmSSFdP=cMMnvD<4!;i-_0GNd} z)|Y5MccBp`bi^tOp~gxnD^Nv|)JYHs*GYa{d>4fh9LtY$0Byg4oKQ_S))0r0-6#Sp z;EsoQRHXNneRP#@iAH8%4rxRK9ZbkiUVUss9NJ8GqZzsU#7CA0c+?dAXE8{8(zH)} zG#JJ{nNIX=Yv2k#c~gC&4=GrunFFWrxw%OQl&O{)v}L=*z!eEU`4%PrO)3 zBK^l_$ux7*(!ydt@W-Q7INQ#8Du82O5JAm6a;TjCVFZEd^h8#Be6vqXro}Kd^CDX6 zub-{!3>`S^7qi@bddZUiPBmAIoCwtl#WvdQkkSvxIt9aO)S#r`B%TFhF_byTPLvLc zqkw`dqF@6h!%<`xrjmtQP{s7f%m`n_hz=orJFITesc=k1xNl5@9R$aKt~~#+v@}R8axwDx8`)91 zxsd~o9nfg{4cuZv^lt{3fWJ&1ox9K&72_ctn1KUXo12eXm=JeX_8yK$z&3@X=SKt5@q+-I zx;lXg(8&B|_E=n)1{-2HOB&$p#Cr)zNX?;3!_YlqJ+^(%41yWbGHv|ba@a4pP_!sM zB>w(Bg<}(AFu63MeB$U)=I^sn^EC-svz`x57chJ=5^!J|k1#xw6HuFca7c;mgWrqk zx*yJ_Eo=FD{~}`1h`!I~Lcs^lE;_j7?s3qJ$c~#TE}=?fdSz*4$-u9CM~als#8lzu z#GLpVPQPL}1>zYKA0(Uq(=m=>j}>Q&Z{uBBVD@@WG<;rWH$rxo8yD_|&zET8M?732{Kf??4xdNS9p1@*SY%DWZ(QOMln8|%!>{mO;5ROE1&WjoL-1pm zz(ns^?}6`1?*TDeV?l`somhwSlm8_h`Tq|%`4=4v^1nNx9ye$w!?7DVCA@97d~hiX zL$i-QVuAmRa<78g_Qy@6q1zvKI)ZGcXq@OIP2+qI6o$EO(R~PSXW)0j^;tBRpgbq6 zrH=S4F5R1h4CiwO01f9wN~DU9*f;pFF@CcIu^s0jw&T13dmBGqh9~%iP!T_e1{SfI zMSN4@wxSxl`(v?z8*qwAr_l-f%eP1u)dcn__v2>Jr;$O}&9^9*Zl0CT^D|ZY&GwXY z1O6k?RaeG7pOMd=N6NnrX|D@Uelm+3;>OE?&IDc|WxJCbT1;gKCts>V>VNeeMp@uD zCL7Wr^$a2U0%TrbR+rhI=cg6-bhP5PdE_qExS$k_k78`%&_8g%VjTUA!2FK$ix{z$ z^J&0mtvZol<-l4c?NrJ-m_-lQjA!Xr9G8!;-0^Yw^v;m|gj}MRieXUR3x1Nv9BglOjP#fHq z*pC|agFQJvkS}Y1{LViEg@gf_?p#O4R0^B}h)1y>_+C_k=&lfgxJ7N-iO6B#L=p8M zz(Q*rrq4VjND?2fAN2X33T*S#o)&7clBXPwBmq^&t&9$?maCOiTD=@X4sbJbmdP^s zz!4&R{KlyW=tSWi?oXNuX|0KL_(Kjm@GHrqIdT|B^^q2Kl(<|lQ^&#|9+gS~p&RTi ze{p_DTG2ofDGJsKM<7CCp>eW7TJ?5^u=qS2mSC8qXIjt35V67mF&8CdE&*eyfDZkL z@=|H4nSiwPq!myDHxsiD5p6I+N68AP4XImAHw3tcng;tx!6Cd6YlvW$anoegG>eVJ zGp<{3hpj}uPEo^UaOA@;bL3zH3Y!5R#UE`DG3Oy2TLZn6XOkshpeA@$jXlr}l)&k7 zMC}A46W7RLVE9tKJ9qSMW%1o-{qd(8tLsNQ_tu_#*7!6$TImhPyUv5g!xmj}mew9D zTboNCuQfk?x@}iq^tKl$?K_-MzXVtSL`*_6;^RNKk*DFhSx_@wO`(60HSS?Nj#nZWTT$v=wFaiwr$g*a@35{`h4Vplc?rGMKz4kywY#^ozP7i@ z(o?Rlb~{g+C^O!OhdVSK7h>Iu+G?x%HXsWJTT5`bf(3y#)DQv}7Z>J1?$iuGWV}ia z0Fpb40VG!}I|bqBpKJkw4~iBNYxj0$4TLXib`ED5hDb`E9EQ3ISEy?OJ%ELHEjfzz z!^Tdw`<60?Z-k+1l*`W09L>@f=!Xs>A++^QvMmwaPQNV>7C@}ag_V{0V;azJ&Bsau zd{E&q$_y&C%+}LMIEvlP zjp{vEEfobn)gIpSvW@njqO^K;5-w208gtPNBc_aRz!oT;0#H|QhVk@@GI6I zkL5%ZmLSOkh)!~25r|b4Hp0iGT~|U0tgqgWo5qtq8))E|_k!l#7sra8+lYshhfi2d z7o8wCDF>v!jt7R2iEU*0BC&2K!7*0XXogB8NkaH(cVG40)|3IVDOb*xI;>1rGbc6)=gED3+~oDjW254H^@qy|HF5qcD=e%;cB~4? z=k2G@iJbOhT7Q3GiMjCGbVNNn?D`%97U(QqRlY?TPWkZgFiEwsyF4ydg-S-=uy_V6 z1+uCn5KE>w@%c*io`{|bjQ6oq05rf-Cr`o%d@PyI*W<{#@LtE+LqrxVfnl^}?J_5C zN?ew_B~rRnJIP`7xuB+++pxf_WVs@|*5JbfuA+fPSA7xqe#BCnh(lR@i#Lhvdv-J! z{R(WL_(0ZoRHc;@-NPpej=JF26q0wxfrDRVQpU!hnO}X^4Emwk&(E|C|4H&=DE@Ay z{e3fxtUik!D?t>=+)AaAm^gey@yu-SZTu0%(72Vf*IJEcr@PVEssk|~@7lgKhHKU? zEZMuFFmvd|g;gg6ABWkXB-=gBw7*AwJo~}ZQUCL&BijGG@9cj*^7@}!Vfgve@N>uV zKYuZFKR@*M_wj4)!|Vdl7b7R2A(^k(=}|HFzOL){;WAl$D=d$G2FjM|nU8(op`;Xn zLf+4E%@`&NY6$xecw*va;79&XjB;5fDmKI`KZt%(2A=hHyIyO3va{L6(9wIXE$Emh zZ&edDzl~TJQZsnr^~*f?DEjk3D{qQc+VxJSv9sCkHfx;+N>h^Iy-iq0!F9aZ6l4I~*^YCGKgAag3}7nUDX!=dTf206>VVa?28 z$XiIM!19hOakS(d~Fi{)rI0+KkjR$F^e@2)pcc`y|Y{bv;1_dpmH%8WTdj!&Z0ac!j8*S2fzPQ4|l zwQT!+rR|H=N~Hn=x!Bxnpq}W&a(n4=l4?&DAomJT*(*GjX-ryg$Ajbh_pYA4-<0Jf z5f%aCfAg4t@%o^S@9OT{;w}^_C#QXW8UOn_Lbo9Zo!DAI>e}$236>L1NK9f=cl?49 z*NmuV9g!h5!*RfD%ph9_8nRiYCtg4>6+fVOfoeP9$Tg2d-5K!*yods)H%69`1zWbB z(TKQy7^Y3m;E_)w=NS!Vt$|!4g>)*W8A?Rocw*%QQH>ubsMKk;LrnNM%)3;WMx~{oVpl@X8Bqu0-rn4P(*Ag>E7GPQ86BE|W7<8q!V^_U z@bI&>=L_{u{k4U?(Mn}^VYIXFEYI5y_ImZD-RdC_F5Z^VGpKE;=4WIhI`HQnk3Vuh zZMugm>zmJO&nxz4%lj`ry7!s?apO6(^*S3@Yj?MkXz&&v+zg+Cnzc!t*ELpO=9`NXX-3aws)ZmYCinWi;~;QFdv;c(%4W_si~ZEf{zF&7H+%>-oV){_x(@ z`DfJL|D+Lk&mWFfh6j6d+tz)UF}C}#j!CsdyXvWUiF&2IHk7;uL*Ck5t8FFbrxw1j z*I9$2uRu|e??#=V3Q5zaJVN79auG+2QeCVo<7j_**jvDHuCI0>s8qX-_e7#NnCS>0 zevKFJjy(swU%Qrr!-kr>TU)hGV;3(-MBQ1X?xo>T_#8#28(4g2r@nSvdC>-RaD9C> ziC`S8AZD=`+f~eb-D4@iU_|SC+s#-g)76M`l-(Ak+YcMfZo7>Vp{SvTu%4>U-NRUP zm{S{CT4g5Y-nZj)W+Yx~+P9Z>xiO6UAnzDFZKosu4-gH=C`- zqgtnqYPt54cBj7GU2n7>st^ipECTah!J1v>TZS;&+*{phtQ}Wh6(K-80TJS6d^3Yo zFqR~)*gX^tL|#7`w4MWeTvAC@H4)1YwOkouvH+-()snm=uOK-eU{tHK3$u8GDb9Gk zf<-ar#=)`gk`pPChgkjd%N_T1a>t|V>~4`SijX=Waj7unHbcm&BMoj-mx#P3B(b#o zpWw{8Dg{IIKpPE4#0(-QG(GZ+9vN|yr4mH0`ROcK^G8QK z5fgO7numN$$}k0sZIJ1`&YHM@gAp-49kNiC_QWnJCk(iGSHxY@mxhbICZzkVuM@Z= zBJIv@tF~ExDKL_A%o%v;##EAo=#Mg9hM##aZLUH-eks%Aj5o#`;taWfPtGA5qzFv2 z@^mehI1D1F4t&;EIs0o6;GQ{@C<2F(ARkykFejQ`NKYAY9m!eZ?|f{7w-BUmB$B?sYbI8#|i>xJS~iw;t77 zF9m9l8-*`Ob^-jk*Z~kbfSHG58F_s51+dqkd7Be?3b43@00n69jRb)7n-n9QSa+-% z%Pj`@;i|HYIv^|s{I@}-g&ZUH7MoF7`(s-Y1&?bCa(5@hF-S-li*3^{ZP$T5kY;PQ z!?Xf?!sjBf8eLTKNJ^`n#M>{^se0a{;7hg|tF2l~WG%Q$Is+$El0f!tNW=)dqhme$ zGCjv)wn6$VsYHhD5^7txLjsQz!4JVT(YKD{qE)#FHKff`xyi`D0#n#$=(|BI$!J_5 zzIm5D^8?JH8qMfmsmMUWrpM38TB7cppBl|M=>pfaJ5t8^4N zAuYirnl&I0Bn3jjr6m#H4Q9=eX$|PCAE;LntX}fs0VamPkr6WR72L3d*-HkZC zc{u>2aDxz@W>4i-^K$(Xzs;cyel^f`2ERneM9G3!TxNfsALxEn2Xuck20G|RfE|nT zz;4>&beQN;NCIm4flUJvnU3p2YzA=WI?g}wD|R~M%Mv>sj?6wah{&+Y-p)qZESqPL z#aSZ>EYaS~u{8uBPluz2l#h2Is3WbSlg`ZE5LZNV@@bif~ zg~CL!P?&hPP$;}tC=_lM3KN$Kg{xnD@x>Qc3x%n|-9lk%VxsW#sUPal;{Q_60=g|> zCjvb}$LqUP=!N`!h_D$A5D`q*6%kHY_D{S>js{L(mmshG5$QRe3F%~KnE2^YFA8Tc zyNcO|r*QFHYoN)xn|4z>JUpBgD*;+2h&}=$a)@v)2U-f~$PXbfz>%VevcZ(fAAvGl z5B*>eNy_GElx~mtfnnmoSrP9(af;ybBoIVBI(1ve&jK$p9ghl~6F5cokd*$8HqH=y!!b zNSfrG;7I)M#wK~?LdhgNArdL=6VZM-98qdNqmeZjkHF*%I-Rw`1Jx?8eCE0ZRqbnf zk?)1WDA5+g9EC%o+{=fU@PfZlp~xvY{6A!cscFDB07*X z+MrQA+g(HKJujKSKqxo8Tv-P5c4liLWJJN@kuw4VqG0o7uVDs!5Y7HcuITD z8O7u)Hsw0&cwVB z>7W-2=P?cE&jtVEuM)g~=1GJ>f_FWa;HmL>Sl|&LKv&UC!1g3xp5Bw|>Mk3U9%&%Hirj9@= z%v5PYEs?-x9p9i9Ms&+yk^l`u13)o?YIuYcD=@uMS*aTMh3d2OAG)t*HYo!!h#~*y zDK8;}+ubXmH7SpJm`OcG4b45oZ*e`?U(@TsAWTU1;QOWizzQIoR|ulzI2> zXO4_T82@GVkMqNNT?gy`Du;E}xPbB+2_2vS(y zA3D(t+4NDZ)%3xiV$}?fbw!J(xHoEh=IBeGPkf~i-nd+R%zEYkGDcfc_85!h9SRx^ z@N#7ZlvOLtC*xcI3`fnz%UON}Xb{|g>y+RwNcN~21j^Oly{;wkbuFwb ze1q$cozOLhdehE~Q)K>H{=y8-H z_H2N&Fyz@0jT9hO^f+g@f>0)$fMm&KX;*8m6uJ((+s_i`7^dN`EYRL1-+$nT5dpvE z9~j?X6S`XV0Lz04XueXJGv>j@O~`3^XaNBH?Hcm1Ig6OyTLjL(m&>hOKtVxhYObd& zwcprlac>c3;SpOD-x>!jR$Ph2ic?*(U*(OkH()afHo3B?wXH^dr<2>%x?bsli3v=`;n z^c5XTdLZY=txX+n{o4Y!lIt(@Q0}dQ-aFk;zD)7VBg|2 zgfkMJ%;WQUBLz@#`%q>P%PfjA2uCL(YW=0`RT6L6av|PcJr&-bCM>P+OaISuL*q^4 z;ENKI_P`vw(V-dG)B|zofU3xHU3q(cd}-+Lg>rmRdJwo$^N8uF|2_z_B1Tg9)mZJPVo0SdsqUzst@i_>E5#P^1_6kuy2T3cxQE!27n# z;Zf-NeRkOVxBRe~C@dFB?8PjLwN{H@c}4UcUyprcz1rpd#FRa$7#glLlC%U=3rlFnJxyh>a^Ea;b`X8*!<0tqcn6aNsM2UyTck zR}dutTE1S62IFDRGaXm9{hBB)-+^%olz*j644`*xSR`v8J=8a1+0 zx3!zt?Mc$4K4L7zb{r}3v1(UJa$MQd4Rgj2h&CwnJ-Ypm#n&FSZ2!w?i}=3b1-+-!p>LI2wU*x7_@5hSkZQ?7tC6itD7OlQrCGX*L2CP zk`^*&)No|8<~I0Ut&|sb$vlL6{u?*AkMo@ z^C7Muo7ib%ILkRVoHu5WJG5wFWh}T~88yy`T#g$;As;m3q|BrHtzFGDL)Fr>taXOx1@6@c%Z^Vbs_L=jQ z!_!meXL0U&cJ|P8Wqfi<*|__c4BIxUMr<3SrrH=jIp&qIQkI2q-UXfV{bbUE7he^5 z$*dO0u|j|=4H{2q_wY1H#pn1|*-x1iecE~EHa7KtNa)|TF=7BP)a@1$gTy`|k-_%>D>sEAEP+0}johU`2SZ_jn=|U%htR5dn zjzMu0U-zmOyFDf8R4PiM`{{{7K@z-jjUTE^PNihDSL?cB8EsODCh5FSj+vFt% zdA<~qhwEcFW{^r*4*vjKvl!fl;>mD3v8!HsZB#ag4nAd5PZ~ftu z(^ID=rVdGOY&VPuUMi&f+IR_cmr`A2@`SnpzALz!iP;MI;fnIrIU9w7*tT1eltd?P zNmAh?K*y(NP8~TpF{1=XPp5nCii?m+ri+lCG+J=&Vs8_J)dqg(spZkWH?{uMCjxMn z6UMY_-!QX5UYj4ez!cjFEtB6~E=Inb z<=_-Fzy2>iWNNnXc7ADQ@aq^u%__f?JTZ2PPC7PtUSAc_2$LA(c8nJHjfhc>kAiK( zoRB|mPM6|IxZ2DO@DX%KE|+qZyXA8>VFbl2K=?V?uj)a&=tPVl5ll~ou_7HJ8(I8H z8If7k|EDMB@J=Z1&&^<~G!z|KfT&kj`6YXQ6*sL{-(QyQNAAy!dtL`NsUCg5loaKZ zC@+B2f$t}Or7ANEJL?&a_E(d1Q~A zV|U;Sbiqe&veSwWvZN;dpyM>Jo8i)Qx#_9>cv|n0Sq)vULnPt0Ttw1+oA;ijbQovX zoSHnvUCD}g(fFuuNa8(;8X2|YAz25drBQW2|wH{zc7NG zJA7~=S2u%&(DiiD&MjI78Lq@tWf*R%zPl8dZMG_HOtUSgb&0Px7kDGg3xaA!Xf|Ab zIr5@L(?g?$r7W**gr;;!qc1QC=21fuD@)hpF-2Bo70w3*73ieX+wbW~?bsN`21sUf zkPIOtg!{Qv5~j9ZJ&|0 zH9|JPeyz9Dw6LG)^M>q_>(@Qs3<5ON6wlyY_3Aa_%We-ubk(c++-pPNHqBTboxFT^ z)#-?-?19jNitkJ%&)h~dv>c~ zIs3`y+^j>pP-dl@27Nt$fBSk4aRyEN||f(HLF+~gQK;L zb%4o69EWpxiVb3&C6Mw;Ou|NS+DN-S;|($(*3WRKe`-<{gQXWO7A3ue_{E}e_j(Zn zp_CTisHAf(R1Pnsg}%D6)2NhXvCFJuUh8jp^1wN{=UMjZS)*Y(;X_MiRrivcb;0I-%ePd zIuQ3Nj1o!@)Sb!S2!EaA6H-x6N|Nb=eBJJ+yyk03B=K4jIG2;dWbb98TD2~97`(Ma z6)jP2%4jb5k1v%jJb9u%J#@4(RdcJ2J>wS+`$z5K<#WQxJlzr^B?e{H(CJr5Ul#{E z4f`5S+!2>juEf}{C5VQ~jU+y>pWQ{rY&loNYnEiCK3G>%i?tL&3-QnkknRrUYEYzY zy7iW=tsiaRX+$tAmq@lbnatGuYjA=Ujo|z9a_o689gKM6y*NNx-E!@{S~)BwIF$^dcO(BIgTyxN0TP z`68+ijFC%u+mrEwz%JBKXjN&qikyPL&JzR<^O4uKw6qK6a+LHIEhzvp<(+9MgTS7x zMF-I~XlZL|>9L(&r|E^hp=}OP^h$`_OLBWM*QQmCXk8~6YE=Wd59U^W#bRI=xEsc@ zVhYV{i5oBkN2e3u7p;r2{$EX=3&jaj%##o7;t}vx8&1}cjLQw82SpUTRTQCKVIJMX zaB)MsNm;viJk}2LgdH6T&*wmD>Var*m3QJsx=X%Qwf5=VZu%mvwlOA7f#fYNb^#hu zn)K~84@Q*4vA~+ZDzpUjbj~w<+@{SlmkQ@Z6`yX9U`<<72t;ded^o1Q}qV+(0TThO{0r!H<~Mq53Ft z$}B#0h#kA;;6mt9^iQ$dRQQjT>L(X~4g|+*S(lYgG{=Ybv7FLdC;@lX&4+&Olo=kr z1&9x?(#iOktYvP8j*q=#*Br28$+#XUs!PY0xDw%7iVvkt=(2Fo1!Xqwpevu-1q%82j^g+XsQm(Nd$zs5apFmxA8XaBBUiC}5Y+rMj+O>_DUv6>>WOZG?|D!S>Nj+z>DK1cUwtM^G{$deez z&2C+s<$;Qk(62;}32UD2DHo%H)SpD`Skt^7)={%ir(SNp&In&ypTae$q})>6gjO&* z3U}0Ub1hVkPBt#Iy(iv8_M=_inyhAOq5C_w&r63%*27| z=_g{gkAB-)q$U;_9T>x$D_Wbp(rL~m4|)H#h!AsHy7~Me2>Ws+qJ_^jkiL#X@u}bSvPYJkles{xG-nCOTrbc-p(d$>yqV1 zO)AlZB>KU+se4)1+feE(cM^jeLzIf*{j=&pygB-bgrNqHuF0NlkR zYzkW+=QahrmBAo#%8qLa+pPuKgz5xS0vtFoEZeNd;u%%974pL)lgD#Ly^aM{I)5TO9VA3tTXNUR zTv?txt}V2Sr0|}oj~T=nl8Lqnw}wmOUz+@tM)&R6Gsd6tfaPjk_PMu;F%UhfToSt% zuS@K%?HeHKlOGgr0r8GR((tVNgdJ?Rh=6w#L0u$(wd{78y(2Pm_^lwE3&e}GL>_YE z!g@MQSPuwc<;bPD9<>_tdC&A|yP|{BO8lIZ@Ju6SplwJ0$D77w*U8NcbrwsJPqghr zI=e~jdU$K;lWcaU5Tl(|BINN5=Qu;+pvhG$U(beQ|#CW;;}e|Au#^i zk`k6uP_R)@85r0!jKA?asJ-EP7)6A>iTdeU!&vqyRL&@9BvBw!eSaVCff$hmO;pxG zmNACWzzA#eW#j?*`l84K?=P}Sc|T+Chjd)cP^oWYtpEGnhGtF&zrXGF2ULGq3N?zJ09M!cIT-hGp19om_cAP%-qgq(0F(| zV*`(kHEg$P*tr z5Z~R}caQeHM*Dsw!x+vB^a!Bdr+0ks+2w!y?|yFh(La3O3-|n&U;f{ZIp+`d z{pI$*+4kK}e7O6&!#{cNhCjUgo*(?xzxchkU;dTPk38_f-#J^lco|u8msk1urGF*l zd@tIx=plEAZ^-#m;u~^4Aig2zL*l!aG4{G3w@>><{T&l=kf9th(4)(6G&%W=qRVfL zX(vV6&uwIEZw3qVsGeIHdp}wt`{~Nc->mert2CUgqfTa>s3wvCbT<2o7_{+!bg-Cv zu-5W@(+Tb69QKzr%zEzVvS<4FGr2{}4_k(vJ9A___n>bsj^&EGcVjfTISg6G26~H^ zMutX)`uS&RxHR02_4U5NA4!XYQ@>32Q85`IRA~j!1*s1Efwr$dh zqV;-_cPO?=Mo|aU)yAlCm1=J~qeja^drRX73KItkl>@oslauF$bCWZYStZV_o5vy; zwzpI&3WkjqNB4kX*Q5YU+cfEfrk!NiS`b?Gt$Krw%|#sAJ6L=wokQJi9D0}HP%)iD z!^6b`=L%1rD;zq9iFA2*cu4(CqZ_9n_u%-E<6 z;8H70r=T;hHXxdE(HNJhy@RFKX%`m;i&(GMt23z!!^7y%SP}oy_;W^#2nP=pPEJ>H zImwv8VvbAF4JW4Ve>Lu}r0W8)H{8Y&)x4!9szDm-2#5d0@l%pJClBs8?h4+TT|E^MMf>sq!k> z4tx(qCba_W*c~&@zn$Pgy-F&Z!yYY<6rt~Ee=59M*iBW`T0L`WfNvcuQI@w3`Ub>;I0IIxkP&OlQ2IjhF8befesG?9Ft?ZzcYlZ0BNlD`8gby8+Cza(@4um@wo0 z9IKSqF!qTxY%8mjVMWDK7Gta*`)6^#?`>kKfUymIBCIbSx7;hjdu81Ixe^bXEA`5_ zJpvyLt>60TXdO1dH84NrD&<=lW3XS|!&v5C#xnPj*@{e7o3f8!Le3{J*y2_g3_?o=!+abC=W&0cZ`Dl+1{(x;(KehwhQqE<#kHa`0Bop+^93xc$}mtW62nGc zb3)&iu#It;c}Zb{*+Hb5t4kxU9@>mTK}OB6O+%uEr5Kx=3PH{EW^2YQ-4ujf8*W5A zcoao)Lrn`_9>TM)`m zR272d0NX~8KYp9E_a;^;|2V_gPcn@CD8mK_sM2|6&2}4>BN7nOx*0lVm=DA)_7drC z5eM(x+;rK$nK3dl<5WohZH&Qs*}sV~vhd??kY1m!d3-OW%mpYZl)Hi6Bg0|k*TQFA zkNB?OkU9h>Q50h+STX>ui3-SNq)@e-y5*=U$7+WT=BJ2dV$`}0wM`>X4KazC zvsRIFM(qThOXHrmFEIbkTI`u4)62cxdISdmyG+!GdsL38OCh z*1KV*6bn;NlW~x-XVxGbOEOolF!m&4>|Zm+KEoJ$7mt~#@k`W+Kd*|;?=oZT0mj%b zF~*)|jJ=OBR%VQSfHC$j8O!`8W9+vWW3ZVXCOlW^Z0B*lvFAz~5#pyY&eXctQleL%cr+8FB@>?c#lpc;AaLqKhe+%;NAr zjTZNd_fGM?B;LOObng~_Jc#5yjJ-$v{qq36LiSbu`?uQn=ODIyxX?1FSAPwE{5l@L zp(Y*g#h=S~IF#%P;izjUK8Co9M%@jbL$qh{_$b0?&Grght*XtOe;>ei0@%QMdCzcZ zu4)$GHLF+%4ZmTAq-Du@bD?UxwFS&rw}E5CiLL63`k$w}-eB8cH`q4Vwc5toH??hK zd+&uL%bxoGN~>V;CeiI1%~cx2fBF&nwYRK6+}*K3_(t>ko5S55n}csOZ=f+?iF*Jm z;KUvhK^pGeuyjd`_oCzBV<3e?y_2EP?8Guz&2=2JrXUy<1O$5oWCEZU!Pq*YhCD5t z7NBK(sBa>^Pj?7NfQH|1*(w-#YE8dpJ7K|c;wo#c>9>X9=4)K;EYU(ylVN!u5T)7i z9OQf#p<%pnV=3WR9#KolOzCN76oq61~m@-Iq4P=E!i zE>=OsfGdG0fCki=i8f}JLr*BIG6hz-ZL_X&150hQUPw|w$;~h@otnSwDZxYOn?}vk zv~$qVG-{z~tGScR48?Dn!8~m>lYv0t7@^nnRBIy?R6}hjFo$%^upqX4=5eu!#Dso9 z!lKy{;YSKz$p}saWSpV~zEAyBRJiocJ@E~K^E!dv0MQ-|n+SnWTHOB}s3&*Asv3D)I zMJGcmu&iaghCfnhdUjCogGI048IdvoD}p~#@ZABC+`yYF7=C1cLt9M3 zW8)D-uq}cUgxHiUihOns)6PVCo}>DMN{!d3XP_hzu-o;RP>%&qDWax@I9$N<+Z0l;oSNIzbXCgUs4vzFo^Q@s zmt^+DWeOMD@+APK4Bu_KDmx4rfn&|hMdKDI2uwe$DSeanpEj$(yx~U*2L_;^S%r?S zNQJH+G^&OBa zS_?Ck1K3Z|TbVgJU70|E;DA6)kigp@n9qB@wP=K9Z15(M-P%H6&Ba=M5VQ@Dm{){z z(Krf@;_tTU4QeO!jX4}$6n1XOY>=Wr-0Y_~g{Dq0tCr`pxX|?z>35{YAtfWshi22G zo4#aju!FZ_^o^yCDI^Us5`xe-ji$ni-k=?8YyzY>VAb-%S(Ky+f)M(}J^REOhZKx6 zA_CrLSf%`<3>3>BW@vo?2Ol#1;!H|b*t@^q&FK6~7K&2;yYHdSa{zs|I1vLGfqk7X zjZ@Ao$Ew*0V-+ai;oJp)q!jht@&YU#(2wE;)wb$}2tniv+7cd?Fc#J14>9QAMcq}B z0O^7DZR1RYZ8cQ$1Megt(G2x8f#bTWHKKhkg`P$LMlOk^R#QVQ6h{@TIy9nB&>~Aq zVRp@0(vVXA+{|FqYG$A!gEazBGivjSg<1l>q9tqlXCfQCf5s~1E{1LZj;8LSMLjHc zryZ(6R{^AVGjfqY0~gC+i5rhDJi77d!D9^`y?FHD(T_(KkF|KL!vlwD&;$0L>!MzV z-f{!PCJ5XQyU{4JJ$GWYrJu2#lX{kV+Q^AO;5M4+Fh%Xe9?5ISsewb>0shqDF5EEGs7|QU&o3aVl>S)FM*dY!2@2{^yY#>&G3Sz;ZQ$=8cQ1#sfZLGnB$@NT!&WzKvSZ0OtN{DWf#w1!{ z3tCm)S?OB>Fd0aXQSi;0+C%}es-Zs@Qw-Z`l9KFxcE>dg@UD^vq9*$YIJ3u zL@g<;V%LP>I9gJT9MSn(i(w(A>((DkBm4|PMKd_JlWK>#S+F+(e1 z&I1x?|~5hW*8e6Q6A4QEIHEei44Qa zBmG`sh{N4X!t#SO4X7if;^4l);$X2*9-c$PKQ?`E{MhW`6IvPRP}FI&b^gDea3 ziXb3BMnKTDr-*c$j*d?qnmIcD#Ki2W$;!m^>9q8ZY6O5dr0*LYq<=uN?)c=?k=aw@ zCy%6NALmTdZ8;%r2SNW@5#_{Ndi?wk=+fwf4xAdF$lFc7vD6?9 zhRPhzG(I4FL}ZHhM_8pilwp~2h7I&`^rZ|N*jcYF__Ll7&Kmp9*Djni_E{svG$%Fq`q2QYh_(xdIm!eCd z_hg7h;zFLjpQ4U(M1FZ{GbiU@1yih2g2o66+Q|PcX5)I zj`?MFc8b%5IG@2Wye^Cp^;X?%n`olDZF!E@H0zeKG@&n0fo)n0+PZHBuDxjb1*5JT zp=ov~L36H8m&N-eFV|z2MXQHtnC4JwMFEVZ&^jp;DjeMz!i8D0eSFh^O{1oGk9yHS zu{~)CSWHz#KY(=2R$$d)rZW^ff?RZiJRLz6b*k*IJR!jKpyuV9hKdnK-O~1~#Uag( z5Wgb?<&%`a$Py6>NZxF~dqh4o)L;vZDG|wXL@Zz1zlZTI5lf?BVdBcllrg1t@vw16UZMsk>oeqj)n+Eg} z86%zpKP@g{Xc!TVq2F>ABuL7tlpWiuMU=%$Pq`A}C`P>A1TYUtN)e)qE>{&SRilzH zKoTpH7&<{SKpHMtOc6|tM3zO0q=ZFFkLYD2vhY$fk~=*YFIqm7@v&L9Icv0(2?8BK z&ZTt=}?4b%MPtP zT(o)fzP4Qul>p0CeEALo24|awiiU*9=x;81iaKGMlj{LwLf3atfI_tuHL?1Oyn^MR zoUd1-MQoaGF2%#pf+)=M@>SOj1NcVH!$*Q-QX79g-3ksvg<>JhWp3L*i7KF-m3$8; z$`hHhK&bE^5vVo~xzkpABqd-gPOHbYntpEDqIZ9$QhpC(SGw31rYRwVw4-j&ZxtAJ z_Fd^>ccy~JMvBE^;cgw)roVtM=(qj>b{XK@H)ELv#xhScmiYz7;3DC~FY@==3(zz$ zkL|Oe+g-+iWv(fa(om?oOAg&KcnK3(4=SYwb`WSWHt>)vis5;I+PQ~qdRRKlJ7D8*dp0D?joZ#yk1F zON);gwG1z4-$m_vRQrYp1Q{PLF68%q?HiLA8IBcj`3?0`eot!OPiWuAwC^eH8@jnn z`wV03UQzaEwQ!t_YE!nYg+toYVp4%wmIYXZ7u$HwD^Cb#s97r|4+5}aQh(X`JNX4 z&$Re|uEjsw2RWzHE?M%pLsJ%Pn5T`)+jJ1lrEr%c85!P#S zmc>?_L4a?IcF=Z!#w18$Bf{Zg2Hh*ZT6Y=@KJ>0NN7YV#eW##4F9Y;JQIL45KLY4i1n6Zr&{G9@1$>?Zwr8+%(^VRjLO|{I^8hyheuWDGEF?%w z&@TWwub_Ps4teK@Rqz)P=K{sS^%N@OFA+_mB%c;}OCA&UFC)gUiWpzw+2cAEmHk%` z;X`_aHJ0PG!Wdh=ib(%lMv9T}YC8$#I0;|VNqCi$uuCW5>pBS(p-rD%aUyWPoZ`c`bRsB1uiFZfjQF-r!)q}bz5~#I6g>J&T3!4JV*G`O z@tqVJzKaNdsYei7^+LioD&u=P4X>xrfaa!Xpa{M7Aasm44QP3a zhS#BT8kbwXI_!t}2Yz^G`T5ao4>Ve!+1= zTG>UZXqKSSqpvF@_8!rOG}?19t8L4a^G?hgL;*X4LgGHX#zEJ?o`Q)VK)K&hN?($Hw#m(huQ>dg4i@ Hu?+b?+kNd2 literal 0 HcmV?d00001 diff --git a/MikroNUC/20260628/20260628062001-Config.rsc b/MikroNUC/20260628/20260628062001-Config.rsc new file mode 100644 index 0000000..9aad3a1 --- /dev/null +++ b/MikroNUC/20260628/20260628062001-Config.rsc @@ -0,0 +1,4834 @@ +# 2026-06-28 06:20:03 by RouterOS 7.23.1 +# system id = NmJcEM+8XAP +# +/caps-man channel +add band=2ghz-g/n extension-channel=disabled frequency=2422 name=2G-3 \ + reselect-interval=20m save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXX frequency=5660 name=5G-5660 \ + save-selected=yes +add band=5ghz-a/n/ac extension-channel=XXXXXXXX frequency=5160,5200,5280 \ + name=5G-5160-5280 reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5180 name=5G-36 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5200 name=5G-40 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5220 name=5G-44 \ + reselect-interval=30m save-selected=yes +add band=5ghz-n/ac extension-channel=XXXX frequency=5240 name=5G-48 \ + reselect-interval=30m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2442 name=2G-7 \ + reselect-interval=20m save-selected=yes +add band=2ghz-g/n extension-channel=disabled frequency=2462 name=2G-11 \ + reselect-interval=20m save-selected=yes +/interface ethernet +set [ find default-name=ether1 ] disable-running-check=no name=ether2 +/interface veth +add address=172.19.77.106/30 container-mac-address=5E:0C:7C:E8:98:12 dhcp=no \ + gateway=172.19.77.105 gateway6="" mac-address=5E:0C:7C:E8:98:11 name=\ + veth-AWG-VDSina +add address=172.18.20.5/30 container-mac-address=00:00:00:00:00:00 dhcp=no \ + gateway=172.18.20.6 gateway6="" name=veth-awg +/interface wireguard +add listen-port=13822 mtu=1420 name=wg-AWG-VDSina +/caps-man security +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=xs-Sec +add authentication-types=wpa2-psk encryption=aes-ccm group-encryption=aes-ccm \ + group-key-update=30m name=WPA2 +/disk +add slot=ram tmpfs-max-size=100000000 type=tmpfs +/interface list +add include=dynamic,static name=LAN +add exclude=LAN name=WAN +add exclude=LAN include=WAN name=Internet +/interface wireless security-profiles +set [ find default=yes ] supplicant-identity=MikroMIC +/iot wiliot servers +set *1 address=mqtt.us-east-2.prod.wiliot.cloud name="Wiliot US East" +/ip dhcp-server option +add code=12 name=HostName +add code=119 force=yes name=domain-search-list value="0x03'WORKGROUP'0x00" +/ip dhcp-server option sets +add name=P1505n options=HostName +add name=StartLife1 options=HostName +add name=amsterDev options=HostName +add name=MiTV options=HostName +add name=miller options=HostName +add name=amster options=HostName +add name=garage options=HostName +add name=domain-search-set options=domain-search-list +/ip pool +add name=dhcp ranges=10.30.30.150-10.30.30.200 +/system logging action +add email-start-tls=yes email-to=vados@vados.ru name=email target=email +/system script +add dont-require-permissions=no name=test owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#:local ScriptName [ :jobname ];\r\ + \n:local expSrc;\r\ + \n:local FileName;\r\ + \n:local FilePath;\r\ + \n:local DirPath \"tmpfs/\";\r\ + \n:global WaitForFile;\r\ + \n:global IfThenElse;\r\ + \n\r\ + \n:foreach Script in=([ /system/script find where name~\"Amster-GlobalConf\ + *\" ]) do={\r\ + \n:local ScriptVal [ /system/script/get \$Script ];\r\ + \n\r\ + \n:local expName [ (\$ScriptVal->\"name\") ];\r\ + \n#[/system/script get \$expScript name];\r\ + \n:delay 2s;\r\ + \n\r\ + \n:set expSrc [/system/script print where name=\$expName];\r\ + \n/system/script print where name=\$expName;\r\ + \n#[:put [/system/script get \$expScript source]];\r\ + \n:put [\$expSrc];\r\ + \n:delay 2s;\r\ + \n:set FileName \$expName;\r\ + \n:set FilePath (\$DirPath . \$FileName);\r\ + \n\r\ + \n#:log warning \"\\n----------------------\\n\\\$expSrc = \$expSrc\\n____\ + ______________________________\";\r\ + \n:log info \"\\n\\\$FileName = '\$FileName'\";\r\ + \n:log info \"\\n\\\$FilePath = \$FilePath\";\r\ + \n#:log warning {/system/script/get source=[/system/script/get \$expScript\ + \_source];};\r\ + \n\r\ + \n#\$[/system script get [/system script find name=\"\$FileName\"] source]\ + \r\ + \n\r\ + \n#:local gettingScript \"\$FileName\";\r\ + \n#:execute script=\"[[:parse \\\"[:parse { :put (\"\$[/system script get \ + [/system script find name=\$FileName] source]\"); } \\\"]]\"; \\\r\ + \n\r\ + \n#:execute script={:put \"[:parse \\\"[:parse [/system/script get [/syste\ + m/script find name=\$gettingScript] source];\\\"]]\";} \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n:do {\r\ + \n:local fName (\$FilePath . \".rsc\");\r\ + \n#:delay 3s;\r\ + \n#/file add name=\$fName;\r\ + \n:put [:tostr [\$expSrc]];\r\ + \n/file set \$fName contents=[:put [\$expSrc]];\r\ + \n:delay 3s;\r\ + \n\$WaitForFile \$fName;\r\ + \n(\$FilePath . \".rsc\");\r\ + \n#:delay 2s;\r\ + \n\r\ + \n} on-error={\r\ + \n:log error \"\\nERROR \\\$FilePath = \$FilePath\";\r\ + \n}\r\ + \n#\$WaitForFile (\$FilePath . \".rsc\");\r\ + \n#:execute script={ :put [/system/script get [:put \$FileName] source]; }\ + ;\r\ + \n#/system/script export \$Sscript file=\$FilePath;\r\ + \n#/system/script/export [:put [/system/script/get \$expScript source]] fi\ + le=\$FilePath;\r\ + \n#:execute script={ :put [/system/script/get \$expScript source]; } \\\r\ + \n\r\ + \n#:log warning \"\\n\\\$expScript = \$expScript\";\r\ + \n# \\\r\ + \n# file=(\$FilePath . \".rsc\\00\");\r\ + \n#script={:put [/system/script/get \$FileName source];} file=(\$FilePath\ + \_. \".rsc\\00\");\r\ + \n#/system script export \$src file=(\$FilePath . \$FileName);\r\ + \n}\r\ + \n\r\ + \n:log warning \"\\nComplete!\";\r\ + \n\r\ + \n # :execute script={ :put [ /system/script/get Amster-GlobalConfig sou\ + rce ]; } \\\r\ + \n # file=(\$FilePath . \".conf\\00\");\r\ + \n # \$WaitForFile (\$FilePath . \".conf\");\r\ + \n # :onerror Err {\r\ + \n # /tool/fetch upload=yes url=(\$BackupUploadUrl . \"/\" . \$FileName\ + \_. \".conf\") \\\r\ + \n # user=\$BackupUploadUser password=\$BackupUploadPass src-path=(\ + \$FilePath . \".conf\");\r\ + \n # :set ConfigFile [ /file/get (\$FilePath . \".conf\") ];\r\ + \n # :set (\$ConfigFile->\"name\") (\$FileName . \".conf\");\r\ + \n " +add dont-require-permissions=no name=test1 owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="\ + \r\ + \n#:local runningVer [:find [/system/resource/get version] \"(\"];\r\ + \n\r\ + \n:local runningChannel;\r\ + \n:local runningVersion;\r\ + \n:local ParseCustom;\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n \r\ + \n:global runningChannel [\$ParseCustom [/system/resource/get version] \"(\ + \" \")\" 1];\r\ + \n:log warning [\$runningChannel];\r\ + \n:set runningVersion [\$ParseCustom [/system/resource/get version] \" \" \ + \")\" 2];\r\ + \n:log warning [\$runningVersion];\r\ + \n\r\ + \n\r\ + \n\r\ + \n# :if ([:len \$open] = 0) do={\r\ + \n# :log error \"\$SMP Could not extract installed OS channel from vers\ + ion string: `\$runningOsAndChannel`.\";\r\ + \n# :error \"\$SMP error, check logs\";\r\ + \n# }\r\ + \n# :local rest [:pick \$runningOsAndChannel (\$open+1) [:len \$runningOs\ + AndChannel]];\r\ + \n# :local close [:find \$rest \")\"];\r\ + \n# :local channel [:pick \$rest 0 \$close];\r\ + \n# :return \$channel;\r\ + \n#}" +add dont-require-permissions=no name=01-Amster-Init-Script owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# Amster Initial Script\r\ + \n#\r\ + \n#:global GlobalEnvRemove true; /system/script {run Amster-GlobalEnvRemov\ + e; };\r\ + \n#:delay 1s;\r\ + \n:#global ReloadGlobal true; \r\ + \n\r\ + \n:global AmScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global defOwner \"vados\";\r\ + \n:global AmFirstRun;\r\ + \n\r\ + \n:set AmFirstRun do={\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n #:global ParseKeyValueStore;\r\ + \n #:local AmUpdCRLF true;\r\ + \n #:local IfThenElse;\r\ + \n #:set IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1\ + \_] = true) do={:return \$2}; :return \$3}\r\ + \n #/certificate/settings/set builtin-trust-store=fetch;\r\ + \n #/tool/fetch \"\$scriptsUrl/certs/Root-YE.pem\" dst-path=\"root-ye.p\ + em\";\r\ + \n #/certificate/import file-name=\"root-ye.pem\" passphrase=\"\";\r\ + \n # For basic verification we rename the certificate and print it by f\ + ingerprint. Make sure exactly this one certificate (\"Root-YE\") is shown.\ + \r\ + \n #/certificate/set name=\"Root-YE\" [ find where common-name=\"Root Y\ + E\" ];\r\ + \n #/certificate/print proplist=name,fingerprint where fingerprint=\"e1\ + 4ffcad5b0025731006caa43a121a22d8e9700f4fb9cf852f02a708aa5d5666\";\r\ + \n #:log info \"\\nAmScriptsUrl = \$AmScriptsUrl\";\r\ + \n :local Scripts {\r\ + \n \"Amster-GlobalConfig\"\r\ + \n \"Amster-GlobalFunc\";\r\ + \n# \"Amster-SFTP-backup\"\r\ + \n# \"Amster-BkpEmail-and-upd\";\r\ + \n };\r\ + \n# /system/script/set owner=(\$ScriptVal->\"name\") \\\r\ + \n# source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRLF \$S\ + ourceNew ] \$Script;\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n /system/script { run Amster-GlobalConfig; run Amster-GlobalFunc; }\r\ + \n}\r\ + \n:global AmUpdRun;\r\ + \n:set AmUpdRun do={\r\ + \n #:local UpdScript [ :tostr \$1 ];\r\ + \n #:global ParseKeyValueStore;\r\ + \n :global AmScriptsUrl;\r\ + \n :global defOwner;\r\ + \n :local Scripts {\r\ + \n# \"Amster-GlobalConfig\"\r\ + \n# \"Amster-GlobalFunc\"\r\ + \n# \"Amster-GlobalRemove\"\r\ + \n \"Amster-backup-SFTP\"\r\ + \n \"Amster-SFTP-backup\"\r\ + \n \"Amster-BkpEmail-and-upd\"\r\ + \n \"Amster-TG-Bot\"\r\ + \n \"Amster-TG-Notification\";\r\ + \n };\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :put \"updating \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$defOwner source=([ /too\ + l/fetch (\"\$AmScriptsUrl\" . \$Script . \".rsc\") output=user as-value ]-\ + >\"data\");\r\ + \n /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$\ + Script;\r\ + \n };\r\ + \n# /system/script/add name=\$Script owner=\$AmOwner source=([ /tool/fe\ + tch check-certificate=yes-without-crl (\"\$AmScriptsUrl\" . \$Script . \".\ + rsc\") output=user as-value ]->\"data\"); };\r\ + \n}\r\ + \n\r\ + \n\$AmFirstRun;\r\ + \n#\$AmUpdRun;\r\ + \n\r\ + \n#\$setUpdExist;\r\ + \n#:global setUpdExist;\r\ + \n#:global ParseKeyValueStore;\r\ + \n#:set setUpdExist do={\r\ + \n#:do {\r\ + \n#:global ParseKeyValueStore;\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\\r\?\\n#comment=*\" ] do={\r\ + \n# :local ScriptVal [ /system/script/get \$Script ];\r\ + \n# :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"#comment\"\ + ) ];\r\ + \n# :local scriptName (\$ScriptVal->\"name\");\r\ + \n#:log warning (\"\\n\\\$scriptName = \". \$scriptName);\r\ + \n#: log warning (\"\\n\\\$ScriptInfo = \". \$ScriptInfo);\r\ + \n# }\r\ + \n#} on-error={}\r\ + \n#}\r\ + \n#\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run\ + -count;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;\r\ + \n#;(evl / (evl /docommand=;(evl / (evl /foreachcounter=\$Script;do=;(evl \ + / (evl /localname=\$ScriptVal;value=(evl (evl /system/script/getnumber=\$S\ + cript))) (evl /localname=\$ScriptInfo;value=(evl (<%% \$ParseKeyValueStore\ + \_(> \$ParseKeyValueStore);(-> \$ScriptVal comment)))) (evl /localname=\$s\ + criptName) (evl /setname=\$scriptName;value=(-> #\$ScriptVal name)) (evl /\ + log/errormessage=(. \r\ + \n# \$ ScriptInfo = \$ScriptInfo)));in=(evl (evl /system/script/findwhere\ + =\$name;\$owner;\$policy;\$dont-require-permissions;\$last-started;\$run-c\ + ount;\$source;\$invalid;\$comment;\$.id;\$.nextid;\$.dead;\$.about;(~ \$so\ + urce (. ^#!rsc by Vados \r\ + \n# \? \r\ + \n#));5))));on-error=;(evl /)))\r\ + \n" +add dont-require-permissions=no name="Download cAP's Packages" owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="# +------------------------------+\r\ + \n# | |\r\ + \n# | Mikrotik RouterOS Scripts |\r\ + \n# | _Download cAP's Packages_ |\r\ + \n# | |\r\ + \n# +------------------------------+\r\ + \n# https://github.com/sebastian13/mikrotik-routeros-scripts\r\ + \n#\r\ + \n\r\ + \n# Set a directory path providing the required space\r\ + \n# Add a microSD card https://wiki.mikrotik.com/wiki/Manual:System/Disks\ + \r\ + \n# or setup a RAM-Disk via '/disk/add type=tmpfs tmpfs-max-size=20M slot=\ + ram'\r\ + \n:local dir \"/tmpfs/capsman-packages\";\r\ + \n\r\ + \n\r\ + \n# Set Package Path if required, set policy to none if using 'upgrade-cap\ + s' script\r\ + \n/interface/wifi/capsman/set package-path=\$dir upgrade-policy=none;\r\ + \n/caps-man/manager/set package-path=\$dir upgrade-policy=none;\r\ + \n#require-same-version;\r\ + \n\r\ + \n:local installed [/system package get value-name=version [find where nam\ + e=\"routeros\"]]\r\ + \n\r\ + \n# Delete old downloads\r\ + \n# /file/remove [ find type=package name~\"capsman*\" ]\r\ + \n\r\ + \n# Starting from RouterOS version 7.13, drivers for older wireless and 60\ + GHz interfaces are\r\ + \n# part of the separate \"wireless\" package. The existing \"wifiwave2\" \ + package has been divided\r\ + \n# into distinct packages: \"wifi-qcom\" and \"wifi-qcom-ac\".\r\ + \n# RouterOS >=7.12 is required to upgrade to 7.13.\r\ + \n# https://forum.mikrotik.com/viewtopic.php\?t=202423\r\ + \n\r\ + \n:foreach architecture in={ \"arm\";\r\ + \n# \"arm64\";\r\ + \n \"x86_64\";\r\ + \n \"mipsbe\"} do={\r\ + \n :foreach package in={ \"routeros\";\r\ + \n# \"wifi-qcom-ac\";\r\ + \n# \"wifi-qcom\";\r\ + \n \"container\";\r\ + \n \"wireless\"} do={ :do {\r\ + \n :put \"\"\r\ + \n :put \"Download \$package \$installed for \$architecture\"\r\ + \n /tool fetch mode=https \\\r\ + \n url=\"https://download.mikrotik.com/routeros/\$installed/\$packa\ + ge-\$installed-\$architecture.npk\" \\\r\ + \n dst-path=\"\$dir/\$package-\$installed-\$architecture.npk\"\r\ + \n } on-error={ :put \"Error downloading the file. On a 404, note t\ + hat the package may not exist for the specified architecture!\" }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Script for setup routeros script system" \ + dont-require-permissions=no name=AM-setup owner=AM-setup policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-setup\r\ + \n# Script comment: Script for setup routeros script system\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# :local ScriptName [ :jobname ];\r\ + \n# Additional commands:\r\ + \n#\r\ + \n# For scripts:\r\ + \n#:global NewScript \"script_name\"; \r\ + \n#:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n#/system/script/add name=\$NewScript owner=\$NewScript source=([/tool/fe\ + tch check-certificate=yes-without-crl (\$GlobalScriptsUrl . \$ScriptAdd . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n#:global NewScript (a);\r\ + \n#:global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n#\r\ + \n# For run from terminal:\r\ + \n#/system/script/add name=AM-setup owner=AM-Setup source=([/tool/fetch ch\ + eck-certificate=yes-without-crl \"https://ros.vados.ru/AM-setup.rsc\" outp\ + ut=user as-value ]->\"data\");\r\ + \n#\r\ + \n\r\ + \n:global ScriptUpdatesCRLF \"LF\";\r\ + \n#:if (\$ScriptUpdatesCRLF != false) do={\r\ + \n# :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vad\ + os\" ] do={\r\ + \n# if (\$ScriptUpdatesCRLF = true) do={\r\ + \n# /system/script/set source=[ :tocrlf [ get \$Script source ] ] \$S\ + cript;\r\ + \n# } else={\r\ + \n# /system/script/set source=[ :tolf [ get \$Script source ] ] \$Scr\ + ipt;\r\ + \n# }\r\ + \n# }\r\ + \n#}\r\ + \n\r\ + \n# /import verbose=no \$ScriptName\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global SetupScript [ :jobname ];\r\ + \n:global RemoveMe true;\r\ + \n:global RunOnce (a);\r\ + \n:global InitSetup true;\r\ + \n:global tmpfs false;\r\ + \n\r\ + \n{\r\ + \n :local RmMe [:tobool \$1];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SetupScript;\r\ + \n :global RemoveMe;\r\ + \n :global InitSetup;\r\ + \n :global tmpfs;\r\ + \n\r\ + \n :local UrlSuffix \$Identity;\r\ + \n :local UrlDir \"certs/\";\r\ + \n :local CertUrl (\$GlobalScriptsUrl . \$UrlDir . \$UrlSuffix .\"/\"); \ + \r\ + \n :local CertCommonName \"Root YE\";\r\ + \n :local CertFileName \"Root-YE.pem\";\r\ + \n :local CertFingerprint \"e14ffcad5b0025731006caa43a121a22d8e9700f4fb9c\ + f852f02a708aa5d5666\";\r\ + \n\r\ + \n :if (\$SetupScript = false) do={\r\ + \n :global SetupScript \"AM-setup\";\r\ + \n }\r\ + \n :if (\$RemoveMe != false) do={\r\ + \n :set RemoveMe true;\r\ + \n }\r\ + \n\r\ + \n :log warning (\"\\n\\\$GlobalScriptsUrl = \" . \$GlobalScriptsUrl);\r\ + \n \r\ + \n\r\ + \n :if (!(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" ||\ + \_\\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CertComm\ + onName ] ] > 0)) do={\r\ + \n :put \"Importing certificate...\";\r\ + \n /tool/fetch (\$CertUrl . \$CertFileName) dst-path=\$CertFileName\ + \_as-value;\r\ + \n :delay 1s;\r\ + \n /certificate/import file-name=\$CertFileName passphrase=\"\";\r\ + \n /certificate/set name=\"Root-YE\" [ find where common-name=\"Roo\ + t YE\" ];\r\ + \n :delay 1s;\r\ + \n };\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] != 1) do={\r\ + \n :error \"Something is wrong with your certificates!\";\r\ + \n };\r\ + \n\r\ + \n:local MkTmpfs do={\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\"The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\"Try to removing directory 'tmpfs'.\");\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/remove tmpfs;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n# \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource/g\ + et total-memory ] / 3);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get tmpfs;\r\ + \n :return true;\r\ + \n } delay=222ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\"Creating disk of type tmpfs failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n}\r\ + \n:if (\$tmpfs = true) do={\r\ + \n :put \"Tmpfs variable is true. Checking for tmpfs/scripts directory...\ + \";\r\ + \n :if ([/file find name=\"tmpfs/scripts\"] != \"\") do={\r\ + \n :log info (\$0 . \"Directory tmpfs/scripts exsist.\");\r\ + \n :return \$true;\r\ + \n } else={\r\ + \n :log warning (\$0 . \"Directory tmpfs/scripts does't exsist.\");\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :log error (\$0 . \"Directory tmpfs is not created!\");\r\ + \n :return false;\r\ + \n } else={\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=/tmpfs/scripts;\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get /tmpfs/scripts;\r\ + \n :return true;\r\ + \n } delay=100ms max=10;\r\ + \n } on-error={ }\r\ + \n } do={\r\ + \n :log warning (\$0 . \"Making directory 'scripts' failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n# :return true;\r\ + \n# [ /file/get \$FileName ]\r\ + \n }\r\ + \n# :log error (\$0 . \"Directory tmpfs/scripts does not exsist. Remove\ + \_global variable tmpfs!\");\r\ + \n# :global tmpfs (a);\r\ + \n# return false;\r\ + \n }\r\ + \n}\r\ + \n :put \"Renaming AM-GlobalConfig, if exists...\";\r\ + \n :local ConfOldName (\"AM-GlobalConfig-\" . [ /system/clock/get date ] \ + . [ /system/clock/get time ] . \".rsc\");\r\ + \n /system/script/set name=\$ConfOldName [ find where name=\"AM-GlobalCon\ + fig\" ];\r\ + \n :foreach Script in={ \"AM-GlobalConfig\"; \"AM-GlobalFunc\" } do={\r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetc\ + h check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \ + \".rsc\") output=user as-value ]->\"data\");\r\ + \n \r\ + \n /system/script run \$Script;\r\ + \n :delay 2s;\r\ + \n };\r\ + \n\r\ + \n :local Script \"mod/AM-Certs-By-Ident\";\r\ + \n \r\ + \n :put \"Installing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n /system/script/add name=\$Script owner=\$Script source=([ /tool/fetch \ + check-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".\ + rsc\") output=user as-value ]->\"data\");\r\ + \n /system/script run \$Script;\r\ + \n :global tmpAddCerts;\r\ + \n :while ([ \$tmpAddCerts ] = true) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n :delay 1s;\r\ + \n :put \"Removing \$Script...\";\r\ + \n /system/script/remove [ find where name=\$Script ];\r\ + \n\r\ + \n :if ([ :len [ /certificate/find where fingerprint=\$CertFingerprint ] \ + ] > 0) do={\r\ + \n :put \"Renaming certificate by its common-name...\";\r\ + \n :global CertificateNameByCN;\r\ + \n \$CertificateNameByCN \$CertFingerprint;\r\ + \n };\r\ + \n\r\ + \n :if (\$RemoveMe = true) do={\r\ + \n :put \"Add Scheduler for remove this script...\";\r\ + \n :local OnEvent (\":delay 30s;\\n\" . \"/system/script/remove [ find \ + where name=\\\"\$SetupScript\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \"/system/scheduler/remove [ find where name=\\\ + \"_RemoveSetup\\\" ];\\n\" . \\\r\ + \n \":delay 2s;\\n\" . \":global RemoveMe (a);\\n\");\r\ + \n :local Comment \"_RemoveSetup tmp scheduler for remove setup script.\ + \";\r\ + \n /system/scheduler/add name=\"_RemoveSetup\" comment=\$Comment start-\ + time=startup interval=30s on-event=\$OnEvent;\r\ + \n :log warning (\$0 . \"\\nI've done everything, and now I'm tired..\ + . I'm leaving.\\nThere will be an error below, this is normal.\");\r\ + \n }\r\ + \n :delay 1;\r\ + \n :put \"Loading configuration and functions...\";\r\ + \n :do { \r\ + \n :global ScriptInstallUpdate; \$ScriptInstallUpdate;\r\ + \n :put \"Normal removing temporary global environment variables.\";\ + \r\ + \n :global SetupScript (a);\r\ + \n :global InitSetup (a);\r\ + \n :global RemoveMe (a);\r\ + \n } on-error={\r\ + \n :local ErrorMsg \"Loading configuration and functions error!\";\r\ + \n :log error (\$0 . \$ErrorMsg . :error);\r\ + \n :error \$ErrorMsg;\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Global Config Script" dont-require-permissions=no name=\ + AM-GlobalConfig owner=AM-GlobalConfig policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GlobalConfig\r\ + \n# Script comment: Global Config Script\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# Warning: Dont touch this line!\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global GlobalConfReady false;\r\ + \n#\r\ + \n#\r\ + \n# Global Url For Amster scripts to fetch\r\ + \n# most be defined in AM-Init-Script or AM-setup scripts\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/\";\r\ + \n:global ScriptsUrlSuffix (a);\r\ + \n:global CheckSumsVerify true;\r\ + \n\r\ + \n:global ScriptUpdatesCRLF true;\r\ + \n:global CommentsInScripts true;\r\ + \n\r\ + \n# Debug output:\r\ + \n:global PrintDebug true; #false;\r\ + \n\r\ + \n# Debug output for specific script:\r\ + \n#:set (\$PrintDebugOverride->\"AM-GlobalFunc\") true;\r\ + \n\r\ + \n# Debug logs\r\ + \n# Other actions (disk, email, remote or support) can be used as well.\r\ + \n# I do not recommend using echo - use debug output instead (https://rsc.\ + eworm.de/main/DEBUG.html#debug-output).\r\ + \n#/system/logging/add topics=script,debug action=memory;\r\ + \n\r\ + \n:global MikrotikUpgradeUrl \"https://upgrade.mikrotik.com/routeros\";\r\ + \n:global Domain \"WORKGROUP\";\r\ + \n\r\ + \n:global EmailGeneralTo \"vados@vados.ru\";\r\ + \n#:global EmailGeneralCc \"\";\r\ + \n\r\ + \n# \$ScriptInstallUpdate mod/notification-telegram\r\ + \n:global TelegramTokenId \"8390868324:AAG3_d1hfVR2M6pGAgDK6ZvhOe4J97nyopw\ + \";\r\ + \n:global TelegramChatId \"-1003631309063\"; #\"454403445\";\r\ + \n# Use this to send notifications to a specific topic in group.\r\ + \n#:global TelegramThreadId \"30\";\r\ + \n# Using telegram-chat you have to define trusted chat ids (not group ids\ + !)\r\ + \n# or user names. Groups allow to chat with devices simultaneously.\r\ + \n:global TelegramChatIdsTrusted {\r\ + \n \"454403445\"\r\ + \n \"-1003631309063\"\r\ + \n \"-5124482807\"\r\ + \n \"1087968824\";\r\ + \n};\r\ + \n# \"-5294757340\";\r\ + \n\r\ + \n:global TelegramChatGroups \"(all)\";\r\ + \n#:global TelegramChatGroups \"(all|home|office)\";\r\ + \n\r\ + \n:global NotificationFunctions {\r\ + \n \"email\"\r\ + \n \"telegram\";\r\ + \n};\r\ + \n# Toggle this to disable symbols in notifications.\r\ + \n:global NotificationsWithSymbols true;\r\ + \n:global TerminalColorOutput true;\r\ + \n\r\ + \n:global DetectIpAddrDefault \"https://ipv4.mikrotik.ovh/\";\r\ + \n:global DetectIpAddrFallback \"https://api.ipify.org/\";\r\ + \n\r\ + \n## Update channel. Possible values: stable, long-term, testing, developm\ + ent\r\ + \n:global updateChannel \"stable\";\r\ + \n\r\ + \n:global CertRenewUrl (\$GlobalScriptsUrl . \"certs/\" . \$Identity . \"/\ + \");\r\ + \n:global CertRenewTime 2w;\r\ + \n:global CertRenewPass (a); #{\r\ + \n# \"\";\r\ + \n# \"v3ry-s3cr3t\";\r\ + \n# \"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n:global CertWarnTime 1w;\r\ + \n:global CertIssuedExportPass (a); # {\r\ + \n# \"\";\r\ + \n# \"cert1-cn\"=\"v3ry-s3cr3t\";\r\ + \n# \"cert2-cn\"=\"4n0th3r-s3cr3t\";\r\ + \n#};\r\ + \n\r\ + \n# Script BackupAndUpdate mode, possible values: backup,\r\ + \n# updateOnce - Update once as \"osnotify\" and back \"osnotify\" mode (i\ + n terminal run :set OSUpdateMode updateOnce; \$OSUpdateMode;). \r\ + \n# osupdate - Update if available and creates backups before/after update\ + \_(ignores `forceBackup`)\r\ + \n# Set `forceBackup` to true to always create backups, even\ + \_without updates\r\ + \n# osnotify - Set `forceBackup` to always create backups on every run\r\ + \n:global DevInfoIncludeIP true;\r\ + \n:global BackupAndUpdateMode \"osnotify\"\r\ + \n\r\ + \n:global forceBackup true;\r\ + \n:global BackupPassword \"Peskar55\";\r\ + \n\r\ + \n# SFTP Backup Variables\r\ + \n:global BackupRandomDelay 0;\r\ + \n:global BackupUploadUrl \"sftp://amster.vados.ru/upload/\";\r\ + \n:global BackupUploadUser \$Identity;\r\ + \n:global BackupUploadPass \"root.mnuc.backuper\";\r\ + \n\r\ + \n:global BackupSendBinary true;\r\ + \n:global BackupSendExport true;\r\ + \n:global BackupSendGlobalConfig true;\r\ + \n:global BackupSendScripts true;\r\ + \n\r\ + \n# Remove local file after uploading if no errors\r\ + \n:global BackupRmLocal true;\r\ + \n\r\ + \n# Local Backups Root Directory \r\ + \n:global BackupLocalRoot \"tmpfs\";\r\ + \n\r\ + \n# Encrypt Backup\r\ + \n:global BackupEncrypt true;\r\ + \n\r\ + \n# Sensitive information in Backups\r\ + \n:global BackupSens true;\r\ + \n\r\ + \n# User Export\r\ + \n:global BackupUser true;\r\ + \n\r\ + \n# License Export (not for CHR, will silently skip)\r\ + \n:global BackupLicense false;\r\ + \n\r\ + \n# SSH Keys\r\ + \n:global BackupSshKeys true;\r\ + \n\r\ + \n# Certificate Export\r\ + \n:global BackupCerts true;\r\ + \n\r\ + \n# Certificate Password\r\ + \n:global BackupCertsPasswd \"\";\r\ + \n\r\ + \n# User-Manager Export\r\ + \n:global BackupUserMan false;\r\ + \n\r\ + \n# The Dude Export\r\ + \n:global BackupDude false;\r\ + \n\r\ + \n# User Files to export, comma-separated string or array of strings\r\ + \n# User Files are not removed on backup\r\ + \n# Any directory paths will be removed (/ -> _) on remote file\r\ + \n# Nonpresent files are silently skipped\r\ + \n:global BackupUserList \"autosupout.rif,autosupout.old.rif\";\r\ + \n\r\ + \n# load functions and any custom scripts\r\ + \n# [ /system/script/find where name=\"global-config-ov\ + erlay\" ], \\\r\ + \n# [ /system/script/find where name~\"^global-config-o\ + verlay\\\\.d/.\" ]\r\ + \n#\r\ + \n#:foreach Script in=([ /system/script/find where name=\"Amster-TGglobalV\ + ars\" ], [ /system/script/find where name=\"Amster-TGglobalFunc\" ]) do={\ + \r\ + \n# :onerror Err {\r\ + \n# /system/script/run \$Script;\r\ + \n# } do={\r\ + \n# :log error (\"Loading configuration from configs and functions\"\ + \_. [ /system/script/get \$Script name ] . \" failed: \" . \$Err);\r\ + \n# }\r\ + \n#}\r\ + \n#:log info \"\\ndevMode = \$devMode\";\r\ + \n#:log info \"\\ndevRunning = \$devRunning\";\r\ + \n:foreach Script in=[ /system/script/find where source~\"^#!rsc by Vados \ + GlobalRUN\\r\?\\n\" ] do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n :log error (\"Run script \" . [ /system/script/get \$Script name \ + ] . \" width marker \\\" GlobalRUN\\\" failed: \" . \$Err);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# signal we are ready\r\ + \n:set GlobalConfReady true;\r\ + \n:while (\$GlobalConfReady != true) do={:delay 500ms};\r\ + \n" +add comment="Global functions" dont-require-permissions=no name=AM-GlobalFunc \ + owner=AM-GlobalFunc policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-GglobalFunc\r\ + \n# Script comment: Global functions\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n#:global checkRunJob \$SriptName;\r\ + \n#:global fixCRLF;\r\ + \n#:if (\$fixCRLF != false) do={\r\ + \n#:foreach fixScript in=([ /system/script/find where name~\"*\" ]) do={/s\ + ystem/script/set source=[ :tocrlf [ get \$fixScript source ] ] \$fixScript\ + }\r\ + \n#:if (\$fixCRLF != \"LF\") do={ /system/script/set source=[ :tocrlf [ g\ + et \$fixScript source ] ] \$fixScript};};\r\ + \n#}\r\ + \n:global GlobalFuncReady false;\r\ + \n\r\ + \n# Git commit id & info, expected configuration version\r\ + \n:global CommitId \"main/700/f14f095d\";\r\ + \n:global CommitTAG \"unknown\";\r\ + \n:global CommitInfo \"Autocommit in repo: ros.vados.ru, generated by owne\ + r: root, in 13:30:03 22.06.2026.\";\r\ + \n\r\ + \n# The variables are received right here.\r\ + \n:global GlobalConfVersion 140;\r\ + \n\r\ + \n:global SumsDirAndFileName \"tmp/checksums.json\";\r\ + \n\r\ + \n:global Identity [/system/identity/get name];\r\ + \n:global IdentityShort [:pick \$Identity 0 18];\r\ + \n\r\ + \n:global devBoardName [/system/resource/get board-name];\r\ + \n:global devMode [/system/device-mode/get mode];\r\ + \n:global devCurArch [/system/resource/get architecture-name];\r\ + \n:global devCurVersion [/system/resource/get version];\r\ + \n\r\ + \n# Variables defined in AM-GlobalConfig.rsc\r\ + \n:global TerminalColorOutput;\r\ + \n:global CommentsInScripts;\r\ + \n:global DetectIpAddrDefault;\r\ + \n:global DetectIpAddrFallback;\r\ + \n:global updateChannel;\r\ + \n:global Domain;\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n\r\ + \n# Single functions, without nested functions.\r\ + \n:global MiniDateTimeStamp;\r\ + \n:global MicroDateTimeStamp;\r\ + \n\r\ + \n# Include globals \$PrintDebug and \$PrintDebugOverride\r\ + \n:global LogPrint;\r\ + \n\r\ + \n# DeviceInfo and Updates\r\ + \n:global IsCheckUpdates;\r\ + \n:global WaitCheckUpdates;\r\ + \n:global GetPubIp;\r\ + \n\r\ + \n:global GetArrDeviceInfo;\r\ + \n:global WaitArrDeviceInfo;\r\ + \n\r\ + \n:global devModel;\r\ + \n:global devRunningMode;\r\ + \n\r\ + \n:global devRbRevision;\r\ + \n:global devRbSerialNumber;\r\ + \n:global devRbVerAvail;\r\ + \n\r\ + \n:global runningChannelVersion;\r\ + \n:global runningChannel;\r\ + \n:global runningVersion;\r\ + \n\r\ + \n:global devBuildTime;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n:global currentUpdateChannel;\r\ + \n\r\ + \n:global ScriptInstallUpdate;\r\ + \n\r\ + \n:global DeviceInfo;\r\ + \n\r\ + \n:global OldMode;\r\ + \n\r\ + \n:global ParseKeyValueStore;\r\ + \n:global RandomDelay;\r\ + \n:global GetRandomNumber;\r\ + \n:global EscapeForRegEx;\r\ + \n:global CharacterMultiply;\r\ + \n:global CharacterReplace;\r\ + \n:global CleanFilePath;\r\ + \n:global CleanName;\r\ + \n\r\ + \n:global CommitBrief;\r\ + \n\r\ + \n:global EitherOr;\r\ + \n:global FormatLine;\r\ + \n:global GetRandom20CharAlNum;\r\ + \n:global GetRandom20CharHex;\r\ + \n:global GetRandomNumber;\r\ + \n:global Grep;\r\ + \n:global IfThenElse;\r\ + \n:global MAX;\r\ + \n:global MIN;\r\ + \n:global HumanReadableNum;\r\ + \n\r\ + \n:global IsFullyConnected;\r\ + \n:global IsDNSResolving;\r\ + \n:global IsTimeSync;\r\ + \n:global IsTimeSyncCached;\r\ + \n:global IsTimeSyncResetNtp;\r\ + \n\r\ + \n:global MkDir;\r\ + \n:global RmDir;\r\ + \n:global RmFile;\r\ + \n:global FileGet;\r\ + \n:global Unix2Dos;\r\ + \n:global UrlEncode;\r\ + \n:global WaitForFile;\r\ + \n:global ScriptLock;\r\ + \n:global SendTelegram;\r\ + \n:global NotificationFunctions;\r\ + \n:global SendNotification;\r\ + \n:global SendNotification2;\r\ + \n:global SymbolForNotification;\r\ + \n:global SymbolByUnicodeName;\r\ + \n:global ValidateSyntax;\r\ + \n:global CheckSumsVerify;\r\ + \n:global GlobalConfChanges;\r\ + \n:global GlobalConfMigration;\r\ + \n:global VersionToNum;\r\ + \n:global RequiredRouterOS;\r\ + \n:global ExitError;\r\ + \n:global ExitOnError;\r\ + \n\r\ + \n:global FetchHugeFiles;\r\ + \n:global FetchUserAgentStr;\r\ + \n:global FileExists;\r\ + \n:global CertificateAvailable;\r\ + \n:global CertificateDownload;\r\ + \n:global CertificateNameByCN;\r\ + \n:global CharacterMultiply;\r\ + \n\r\ + \n:global InspectVar;\r\ + \n:global InspectVarRet;\r\ + \n:global ParseCustom;\r\ + \n\r\ + \n:set IsCheckUpdates do={\r\ + \n :local isInfo [:tobool \$1];\r\ + \n :global updateChannel;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :log info (\$0 . \" \\\$isInfo = \" . \$isInfo); \r\ + \n :local CurrentChannel [ /system/package/update/get channel ];\r\ + \n :if ([ :len \$updateChannel ] > 0 && \$CurrentChannel != \$updateChann\ + el) do={\r\ + \n :retry command={/system/package/update set channel=\$updateChannel} \ + \_delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" Set updates channel to: \$updateChannel\");\r\ + \n }\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local Channel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set currentUpdateChannel \$Channel;\r\ + \n :log info (\$0 . \" Update Channel: \" . \$Channel . \".\");\r\ + \n :local StatusPkg \"undefined\";\r\ + \n :log info (\$0 . \" Checking for updates...\");\r\ + \n :retry command={:set \$StatusPkg ([/system/package/update/check-for-up\ + dates without-paging as-value]->\"status\")} \\\r\ + \n delay=300ms max=5 on-error={};\r\ + \n :log info (\$0 . \" \\\$StatusPkg = \" . \$StatusPkg);\r\ + \n :if (\$StatusPkg = \"New version is available\") do={ :set PkgUpdStatu\ + s true; } else={ :set PkgUpdStatus false; }\r\ + \n :set ROsVerAvail [ :tostr [ /system/package/update/get latest-version \ + ] ];\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if (\$isInfo != false || \$PkgUpdStatus = true) do={\r\ + \n :log info (\$0 . \" \\\$PkgUpdStatus = \" . \$PkgUpdStatus);\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :retry command={:set (\$arrDeviceInfo->\"devUpdates\") [ /system/pac\ + kage/update/get ]} delay=500ms max=5 on-error={:log error (\"Error\")};\r\ + \n :return true;\r\ + \n } else={\r\ + \n :return \$PkgUpdStatus;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set WaitCheckUpdates do={\r\ + \n :global IsCheckUpdates;\r\ + \n :global PkgUpdStatus;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n :global arrDeviceInfo;\r\ + \n :local Status \"\";\r\ + \n :local Update;\r\ + \n :local WaitCount 0;\r\ + \n :if ([ \$IsCheckUpdates true ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n :while ((\$Status = \"\" || \$Status = \"finding out latest version...\ + \") && \$WaitCount < 60) do={\r\ + \n :delay 1s;\r\ + \n :set WaitCount (\$WaitCount + 1);\r\ + \n :set Status [ :tostr [ /system/package/update/get status ] ];\r\ + \n }\r\ + \n :set Update [ /system/package/update/get ];\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n :if ((\$Update->\"status\") = \"New version is available\") do={\r\ + \n :set PkgUpdStatus true;\r\ + \n } else={\r\ + \n :set PkgUpdStatus false;\r\ + \n }\r\ + \n :if ([ :typeof \$arrDeviceInfo ] != \"array\") do={\r\ + \n :set arrDeviceInfo [:toarray \$arrDeviceInfo];\r\ + \n }\r\ + \n :set (\$arrDeviceInfo->\"devUpdates\") \$Update;\r\ + \n :if (\$Status = \"\" || \$Status = \"finding out latest version...\") \ + do={\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set WaitArrDeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :while ([ \$GetArrDeviceInfo ] = false) do={\r\ + \n :delay 1s;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set GetArrDeviceInfo do={\r\ + \n :global LogPrint;\r\ + \n :global arrDeviceInfo;\r\ + \n :global devBoardName;\r\ + \n :global devModel;\r\ + \n :global devRunning;\r\ + \n :global devCurArch;\r\ + \n :global devRbRevision;\r\ + \n :global devRbSerialNumber;\r\ + \n :global devBuildTime;\r\ + \n :global runningChannelVersion;\r\ + \n :global runningChannel;\r\ + \n :global runningVersion;\r\ + \n :global currentUpdateChannel;\r\ + \n :global ROsVerAvail;\r\ + \n\r\ + \n :local DeviceInfo;\r\ + \n :local Resource [/system/resource/get];\r\ + \n :local Update [ /system/package/update/get ];\r\ + \n :local VersionString [ :tostr (\$Resource->\"version\") ];\r\ + \n :local ChannelStart [ :find \$VersionString \" (\" ];\r\ + \n :local RouterBoard;\r\ + \n :local IsRouterBoard false;\r\ + \n :local RunningMode \"\";\r\ + \n\r\ + \n :set devCurArch [ :tostr (\$Resource->\"architecture-name\") ];\r\ + \n :set devBuildTime [ :tostr (\$Resource->\"build-time\") ];\r\ + \n :set runningChannelVersion \$VersionString;\r\ + \n :set runningVersion \$VersionString;\r\ + \n :set runningChannel \"\";\r\ + \n\r\ + \n :if ([ :typeof \$ChannelStart ] = \"num\" && \$ChannelStart >= 0) do=\ + {\r\ + \n :set runningVersion [ :pick \$VersionString 0 \$ChannelStart ];\r\ + \n :local ChannelRest [ :pick \$VersionString (\$ChannelStart + 2) [ :\ + len \$VersionString ] ];\r\ + \n :local ChannelEnd [ :find \$ChannelRest \")\" ];\r\ + \n :if ([ :typeof \$ChannelEnd ] = \"num\" && \$ChannelEnd >= 0) do={\ + \r\ + \n :set runningChannel [ :pick \$ChannelRest 0 \$ChannelEnd ];\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([:pick \$devBoardName 0 3] != \"CHR\" or [:pick \$devBoardName 0\ + \_3] != \"x86\") do={\r\ + \n :do {\r\ + \n :set RouterBoard [[ :parse \"/system/routerboard/get\" ]];\r\ + \n# :set RouterBoard [ /system/routerboard/get ];\r\ + \n :if ((\$RouterBoard->\"routerboard\") = true) do={\r\ + \n :set IsRouterBoard true;\r\ + \n }\r\ + \n } on-error={}\r\ + \n }\r\ + \n\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get mode ];\r\ + \n } on-error={\r\ + \n :do {\r\ + \n :set RunningMode [ /system/device-mode/get running ];\r\ + \n } on-error={\r\ + \n :set RunningMode \"\";\r\ + \n }\r\ + \n }\r\ + \n :set devRunning \$RunningMode;\r\ + \n\r\ + \n :if (\$IsRouterBoard = true) do={\r\ + \n :set devModel [ :tostr (\$RouterBoard->\"model\") ];\r\ + \n :set devRbRevision [ :tostr (\$RouterBoard->\"revision\") ];\r\ + \n :set devRbSerialNumber [ :tostr (\$RouterBoard->\"serial-number\") \ + ];\r\ + \n } else={\r\ + \n :set devModel \$devBoardName;\r\ + \n :set devRbRevision \"\";\r\ + \n :set devRbSerialNumber \"\";\r\ + \n }\r\ + \n\r\ + \n :set currentUpdateChannel [ :tostr (\$Update->\"channel\") ];\r\ + \n :set ROsVerAvail [ :tostr (\$Update->\"latest-version\") ];\r\ + \n\r\ + \n :set (\$DeviceInfo->\"board-name\") \$devBoardName;\r\ + \n :set (\$DeviceInfo->\"architecture-name\") \$devCurArch;\r\ + \n :set (\$DeviceInfo->\"model\") \$devModel;\r\ + \n :set (\$DeviceInfo->\"revision\") \$devRbRevision;\r\ + \n :set (\$DeviceInfo->\"serial-number\") \$devRbSerialNumber;\r\ + \n :set (\$DeviceInfo->\"running-mode\") \$devRunning;\r\ + \n :set (\$DeviceInfo->\"build-time\") \$devBuildTime;\r\ + \n :set (\$DeviceInfo->\"running-channel-version\") \$runningChannelVers\ + ion;\r\ + \n :set (\$DeviceInfo->\"running-version\") \$runningVersion;\r\ + \n :set (\$DeviceInfo->\"running-channel\") \$runningChannel;\r\ + \n :set (\$DeviceInfo->\"routerboard\") \$IsRouterBoard;\r\ + \n :set (\$DeviceInfo->\"current-firmware\") [ :tostr (\$RouterBoard->\"\ + current-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"upgrade-firmware\") [ :tostr (\$RouterBoard->\"\ + upgrade-firmware\") ];\r\ + \n :set (\$DeviceInfo->\"package-channel\") \$currentUpdateChannel;\r\ + \n :set (\$DeviceInfo->\"installed-version\") [ :tostr (\$Update->\"inst\ + alled-version\") ];\r\ + \n :set (\$DeviceInfo->\"latest-version\") \$ROsVerAvail;\r\ + \n :set (\$DeviceInfo->\"update-status\") [ :tostr (\$Update->\"status\"\ + ) ];\r\ + \n\r\ + \n :set arrDeviceInfo \$DeviceInfo;\r\ + \n :return \$DeviceInfo;\r\ + \n}\r\ + \n\r\ + \n:set DeviceInfo do={\r\ + \n :global GetArrDeviceInfo;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global IfThenElse;\r\ + \n :global FormatLine;\r\ + \n :global CommitBrief;\r\ + \n\r\ + \n :local License [/system/license/get];\r\ + \n :local Snmp [ /snmp/get ];\r\ + \n :local Info [ \$GetArrDeviceInfo ];\r\ + \n\r\ + \n :if ([ :typeof \$Info ] != \"array\") do={\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :return ( \\\r\ + \n [ \$FormatLine \"Hostname\" \$Identity ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"location\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Location\" (\$Snmp->\"location\") ] . \"\\n\") ]\ + \_. \\\r\ + \n [ \$IfThenElse ([ :len (\$Snmp->\"contact\") ] > 0) \\\r\ + \n ([ \$FormatLine \"Contact\" (\$Snmp->\"contact\") ] . \"\\n\") ] .\ + \_\\\r\ + \n \"Hardware:\\n\" . \\\r\ + \n [ \$FormatLine \" Board\" (\$Info->\"board-name\") ] . \"\\n\" . \ + \\\r\ + \n [ \$FormatLine \" Arch\" (\$Info->\"architecture-name\") ] . \"\\\ + n\" . \\\r\ + \n [ \$FormatLine \" Model\" (\$Info->\"model\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"revision\") ] > 0) \\\r\ + \n (\" \" . (\$Info->\"revision\")) ] . \"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"serial-number\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Serial\" (\$Info->\"serial-number\") ] . \"\ + \\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"nlevel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"nlevel\ + \")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS:\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$License->\"level\") ] > 0) \\\r\ + \n ([ \$FormatLine \" License\" (\"level \" . (\$License->\"level\ + \")) ] . \"\\n\") ] . \\\r\ + \n [ \$FormatLine \" Channel\" (\$Info->\"package-channel\") ] . \"\ + \\n\" . \\\r\ + \n [ \$FormatLine \" Installed\" (\$Info->\"installed-version\") ] .\ + \_\"\\n\" . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"running-channel\") ] > 0) \\\r\ + \n ([ \$FormatLine \" Running\" ((\$Info->\"running-version\") . \ + \" (\" . (\$Info->\"running-channel\") . \")\") ] . \"\\n\") \\\r\ + \n ([ \$FormatLine \" Running\" (\$Info->\"running-version\") ] . \ + \"\\n\") ] . \\\r\ + \n [ \$IfThenElse ([ :len (\$Info->\"latest-version\") ] > 0 && \\\r\ + \n (\$Info->\"installed-version\") != (\$Info->\"latest-version\"))\ + \_\\\r\ + \n ([ \$FormatLine \" Available\" (\$Info->\"latest-version\") ] .\ + \_\"\\n\") ] . \\\r\ + \n [ \$IfThenElse ((\$Info->\"routerboard\") = true && \\\r\ + \n (\$Info->\"current-firmware\") != (\$Info->\"upgrade-firmware\")\ + ) \\\r\ + \n ([ \$FormatLine \" Firmware\" ((\$Info->\"current-firmware\") .\ + \_\" -> \" . (\$Info->\"upgrade-firmware\")) ] . \"\\n\") ] . \\\r\ + \n \"RouterOS-Scripts:\\n\" . \\\r\ + \n [ \$FormatLine \" Commit\" [ \$CommitBrief ] ] . \"\\n\" . \\\r\ + \n [ \$FormatLine \" Version\" \$GlobalConfVersion ]);\r\ + \n}\r\ + \n\r\ + \n:if ([ :typeof \$NotificationFunctions ] != \"array\") do={:set Notifica\ + tionFunctions ({})}\r\ + \n\r\ + \n:set GetRandom20CharAlNum do={\r\ + \n :global EitherOr;\r\ + \n :return [ :rndstr length=[ \$EitherOr [ :tonum \$1 ] 20 ] from=\"ABCDE\ + FGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789\" ];\r\ + \n}\r\ + \n\r\ + \n:set GetRandom20CharHex do={:global EitherOr; :return [ :rndstr length=[\ + \_\$EitherOr [ :tonum \$1 ] 20 ] from=\"0123456789abcdef\" ]; }\r\ + \n:set GetRandomNumber do={:global EitherOr; :return [ :rndnum from=0 to=[\ + \_\$EitherOr [ :tonum \$1 ] 4294967295 ] ]; }\r\ + \n\r\ + \n:global checkRunJob;\r\ + \n:set checkRunJob do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLock; \r\ + \n :if ([ \$ScriptLock \$Script ] = false) do={:return false}\r\ + \n :foreach Job in=[ /system/script/job/find where script=\$Script ] do={\ + :set Job [ /system/script/job/get \$Job ];\r\ + \n :while ([ :typeof (\$Job->\"parent\") ] = \"id\") do={:set Job [ /sy\ + stem/script/job/get [ find where .id=(\$Job->\"parent\") ] ]}\r\ + \n :if ((\$Job->\"type\") = \"login\") do={:return true};}; :return fa\ + lse; \r\ + \n}\r\ + \n\r\ + \n:set InspectVar do={\r\ + \n :global InspectVarRet;\r\ + \n :put [ :tocrlf [ \$InspectVarRet \$1 ] ];\r\ + \n}\r\ + \n\r\ + \n:set CommitBrief do={\r\ + \n :global CommitId;\r\ + \n :global CommitInfo;\r\ + \n :if (\$CommitId = \"unknown\") do={\r\ + \n :return \"unknown\";\r\ + \n }\r\ + \n :return (\$CommitInfo . \"/\" . [ :pick \$CommitId 0 8 ]);\r\ + \n}\r\ + \n\r\ + \n:set InspectVarRet do={\r\ + \n :local Input \$1;\r\ + \n :local Level (0 + [ :tonum \$2 ]);\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :global InspectVarRet;\r\ + \n :local IndentReturn do={\r\ + \n :local Prefix [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Level [ :tonum \$3 ];\r\ + \n :global CharacterMultiply;\r\ + \n :return ([ \$CharacterMultiply \" \" (\$Level * 2) ] . \"-\" . \$Pre\ + fix . \"-> \" . \$Value);\r\ + \n }\r\ + \n :local TypeOf [ :typeof \$Input ];\r\ + \n :local Len [ :len \$Input ];\r\ + \n :local Return [ \$IndentReturn \"type\" \$TypeOf \$Level ];\r\ + \n :if (\$TypeOf = \"array\") do={\r\ + \n :foreach Key,Value in=\$Input do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"key\" \$Key (\$Level + 1) ] . \"\\n\" . \\\r\ + \n [ \$InspectVarRet \$Value (\$Level + 2) ]);\r\ + \n }\r\ + \n } else={\r\ + \n :if (\$TypeOf = \"str\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"len\" \$Len \$Level ]);\r\ + \n :if ([ :typeof [ :find \$Input (\"\\r\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\r\") \"\" ];\r\ + \n }\r\ + \n :if ([ :typeof [ :find \$Input (\"\\n\") ] ] = \"num\") do={\r\ + \n :set Input [ \$CharacterReplace \$Input (\"\\n\") \" \" ];\r\ + \n }\r\ + \n }\r\ + \n :if (\$TypeOf != \"nothing\") do={\r\ + \n :set \$Return (\$Return . \"\\n\" . \\\r\ + \n [ \$IndentReturn \"value\" [ \$IfThenElse ([ :len \$Input ] > 80)\ + \_\\\r\ + \n ([ :pick \$Input 0 77 ] . \"...\") \$Input ] \$Level ]);\r\ + \n }\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set GetPubIp do={\r\ + \n :global DetectIpAddrDefault;\r\ + \n :global DetectIpAddrFallback;\r\ + \n\r\ + \n :local PubIpAddr false;\r\ + \n :local Url \$DetectIpAddrDefault;\r\ + \n :local JobName [ :jobname ];\r\ + \n\r\ + \n :do {\r\ + \n :log debug (\$0 . \" Trying to detect public IP using default serv\ + ice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=50ms max=5 on-error={:log error (\$JobName . \" Failed to \ + detect public IP using default service: \" . \$Url . \".\")}\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed to detect public IP using default serv\ + ice: \" . \$Url . \".\");\r\ + \n :set Url \$DetectIpAddrFallBack;\r\ + \n :log debug (\$0 . \" Trying to detect public IP using fallback ser\ + vice: \" . \$Url . \"...\");\r\ + \n :retry command={:set PubIpAddr ([ /tool/fetch http-method=\"get\"\ + \_check-certificate=yes-without-crl \$Url output=user as-value ]->\"data\"\ + )} \\\r\ + \n delay=200ms max=5 on-error={:log error (\$JobName . \" Failed to\ + \_detect public IP using fallback service: \" . \$Url . \".\")}\r\ + \n };\r\ + \n :local IpLen ([ :len \$PubIpAddr ] -1);\r\ + \n :if (\$PubIpAddr = false) do={:set PubIpAddr \"not-detected\"} else=\ + {:set PubIpAddr [:pick \$PubIpAddr 0 \$IpLen]}\r\ + \n :return \$PubIpAddr;\r\ + \n}\r\ + \n\r\ + \n:set FormatLine do={\r\ + \n :local Key [ :tostr \$1 ];\r\ + \n :local Value [ :tostr \$2 ];\r\ + \n :local Indent [ :tonum \$3 ];\r\ + \n :local Spaces;\r\ + \n :local Return \"\";\r\ + \n :global CharacterMultiply;\r\ + \n :global EitherOr;\r\ + \n :set Indent [ \$EitherOr \$Indent 16 ];\r\ + \n :local Spaces [ \$CharacterMultiply \" \" \$Indent ];\r\ + \n :if ([ :len \$Key ] > 0) do={ :set Return (\$Key . \":\")}\r\ + \n :if ([ :len \$Key ] > (\$Indent - 2)) do={:set Return (\$Return . \"\\\ + n\" . [ :pick \$Spaces 0 \$Indent ] . \$Value);\r\ + \n } else={:set Return (\$Return . [ :pick \$Spaces 0 (\$Indent - [ :len \ + \$Return ]) ] . \$Value)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ParseCustom do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Start [:find [ \$Str ] [:tostr \$2]];\r\ + \n :local End [ :tostr \$3 ];\r\ + \n :local Num [ :tonum \$4 ];\r\ + \n :local Return;\r\ + \n :if ([:len \$Num] = 0) do={:set Num \"0\"}\r\ + \n :local rest [:pick \$Str (\$Start+\$Num) [:len \$Str]]; \r\ + \n :if ([:len \$End ] = 0) do={:set Return [:pick \$Str \$Num \$Start]} e\ + lse={\r\ + \n :set End [:find \$rest \$End];\r\ + \n :set Return [:pick \$rest 0 \$End];\r\ + \n }\r\ + \n:return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set LogPrint do={\r\ + \n :local Severity [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Message [ :tostr \$3 ];\r\ + \n :global PrintDebug;\r\ + \n :global PrintDebugOverride;\r\ + \n :global EitherOr;\r\ + \n :local Debug [ \$EitherOr (\$PrintDebugOverride->\$Name) \$PrintDebug \ + ];\r\ + \n :local PrintSeverity do={\r\ + \n :global TerminalColorOutput;\r\ + \n :if (\$TerminalColorOutput != true) do={:return \$1}\r\ + \n :local Color { debug=96; info=97; warning=93; error=91 };\r\ + \n :return (\"\\1B[\" . \$Color->\$1 . \"m\" . \$1 . \"\\1B[0m\");\r\ + \n}\r\ + \n :local Log ([ \$EitherOr \$Name \"\" ] . \": \" . \$Message);\ + \r\ + \n :if (\$Severity ~ (\"^(custom|debug|error|info)\\\$\")) do={\r\ + \n :if (\$Severity = \"debug\") do={:log debug \$Log}\r\ + \n :if (\$Severity = \"error\") do={:log error \$Log}\r\ + \n :if (\$Severity = \"info\" ) do={:log info \$Log}\r\ + \n } else={:log warning \$Log; :set Severity \"warning\"}\r\ + \n :if (\$Severity != \"debug\" || \$Debug = true) do={:put ([ \$PrintSev\ + erity \$Severity ] . \": \" . \$Message)}\r\ + \n}\r\ + \n\r\ + \n:set CertificateAvailable do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :local UseFor [ :tostr \$2 ];\r\ + \n\r\ + \n :global CertificateDownload;\r\ + \n :global ParseKeyValueStore;\r\ + \n\r\ + \n :if ([ :len \$UseFor ] = 0) do={\r\ + \n :log warning (\$0 . \"The intended use is undefined!\");\r\ + \n :set UseFor \"undefined\";\r\ + \n }\r\ + \n :if ([ /system/resource/get free-hdd-space ] < 8388608 && \\\r\ + \n [ /certificate/settings/get crl-download ] = true && \\\r\ + \n [ /certificate/settings/get crl-store ] = \"system\") do={\r\ + \n :log warning (\$0 . \"This system has low free flash space but \" . \ + \\\r\ + \n \"is configured to download certificate CRLs to system!\");\r\ + \n }\r\ + \n :if ([ :len \$CommonName ] = 0) do={\r\ + \n :log warning (\$0 . \"No CommonName given!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if (((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" || \\\ + \r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \$UseFor || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\r\ + \n [ :len [ /certificate/builtin/find where common-name=\$CommonName\ + \_] ] > 0) do={\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n :log info (\$0 . \"Certificate with CommonName '\" . \$CommonName . \ + \"' not available.\");\r\ + \n :if ([ \$CertificateDownload \$CommonName ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] > 1\ + ) do={\r\ + \n :log info (\$0 . \"There are \" . \$CertCount . \" Certificates with\ + \_CommonName '\" . \$CommonName . \"'. Should be ok.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :local CertVal [ /certificate/get [ find where common-name=\$CommonNam\ + e ] ];\r\ + \n :while ((\$CertVal->\"akid\") != \"\" && (\$CertVal->\"akid\") != (\$C\ + ertVal->\"skid\")) do={\r\ + \n :if ([ :len [ /certificate/find where skid=(\$CertVal->\"akid\") ] ]\ + \_= 0) do={\r\ + \n :local IssuerCN ([ \$ParseKeyValueStore (\$CertVal->\"issuer\") ]-\ + >\"CN\");\r\ + \n :log info (\$0 . \"Certificate chain for '\" . \$CommonName . \"' \ + is incomplete, missing '\" . \$IssuerCN . \"'.\");\r\ + \n :if ([ \$CertificateDownload \$IssuerCN ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :set CertVal [ /certificate/get [ find where skid=(\$CertVal->\"akid\ + \") ] ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateDownload do={\r\ + \n :local CommonName [ :tostr \$1 ];\r\ + \n :global ScriptUpdatesBaseUrl;\r\ + \n :global ScriptUpdatesUrlSuffix;\r\ + \n :global CertificateNameByCN;\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :log info (\$0 . \"Downloading and importing certificate with \" . \\\ + \r\ + \n \"CommonName '\" . \$CommonName . \"'.\");\r\ + \n :local FileName ([ \$CleanName \$CommonName ] . \".pem\");\r\ + \n :do {\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-header\ + -field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n (\$ScriptUpdatesBaseUrl . \"certs/\" . \$FileName . \$ScriptUpdate\ + sUrlSuffix) \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n } on-error={\r\ + \n :log warning (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \\\r\ + \n \"' from repository! Trying fallback to mkcert.org...\");\r\ + \n :do {\r\ + \n :local CertSettings [ /certificate/settings/get ];\r\ + \n :if ([ :len [ /certificate/find where common-name=\"ISRG Root X1\"\ + \_] ] = 0 && \\\r\ + \n !(((\$CertSettings->\"builtin-trust-anchors\") = \"trusted\" \ + || \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") ~ \"fetch\" || \ + \\\r\ + \n (\$CertSettings->\"builtin-trust-store\") = \"all\") && \\\ + \r\ + \n [ :len [ /certificate/builtin/find where common-name=\"ISRG\ + \_Root X1\" ] ] > 0)) do={\r\ + \n :log error (\$0 . \" Required certificate is not available.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n /tool/fetch check-certificate=yes-without-crl mode=https http-head\ + er-field=({ [ \$FetchUserAgentStr \$0 ] }) \\\r\ + \n url=\"https://mkcert.org/generate/\" http-data=[ :serialize to=jso\ + n ({ \$CommonName }) ] \\\r\ + \n dst-path=\$FileName as-value;\r\ + \n \$WaitForFile \$FileName;\r\ + \n :if ([ /file/get \$FileName size ] = 0) do={\r\ + \n \$RmFile \$FileName;\r\ + \n :error false;\r\ + \n }\r\ + \n } on-error={\r\ + \n :log error (\$0 . \" Failed downloading certificate with CommonNam\ + e '\" . \$CommonName . \"'!\");\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n /certificate/import file-name=\$FileName passphrase=\"\" as-value;\r\ + \n :delay 1s;\r\ + \n \$RmFile \$FileName;\r\ + \n :if ([ :len [ /certificate/find where common-name=\$CommonName ] ] = 0\ + ) do={\r\ + \n /certificate/remove [ find where name~(\"^\" . \$FileName . \"_[0-9]\ + +\\\$\") ];\r\ + \n :log warning (\$0 . \" Certificate with CommonName '\" . \$CommonNam\ + e . \"' still unavailable!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :foreach Cert in=[ /certificate/find where name~(\"^\" . \$FileName . \ + \"_[0-9]+\\\$\") ] do={\r\ + \n \$CertificateNameByCN [ /certificate/get \$Cert common-name ];\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CertificateNameByCN do={\r\ + \n :local Match [ :tostr \$1 ];\r\ + \n :global CleanName;\r\ + \n :local Cert ([ /certificate/find where (common-name=\$Match or fingerp\ + rint=\$Match or name=\$Match) ]->0);\r\ + \n :if ([ :len \$Cert ] = 0) do={\r\ + \n :log warning (\$0 .\" No matching certificate found.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local CommonName [ /certificate/get \$Cert common-name ];\r\ + \n /certificate/set \$Cert name=[ \$CleanName \$CommonName ];\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FileExists do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local Type [ :tostr \$2 ];\r\ + \n :global FileGet;\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={ :return false; }\r\ + \n :if ([ :len (\$FileVal->\"size\") ] = 0) do={ :return false; }\r\ + \n :if ([ :len \$Type ] = 0 || \$FileVal->\"type\" = \$Type) do={ :return\ + \_true; }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set Grep do={\r\ + \n :local Input ([ :tostr \$1 ] . \"\\n\");\r\ + \n :local Pattern [ :tostr \$2 ];\r\ + \n :if ([ :typeof [ :find \$Input \$Pattern ] ] = \"nil\") do={:return []\ + }\r\ + \n :do {\r\ + \n :local Line [ :pick \$Input 0 [ :find \$Input \"\\n\" ] ];\r\ + \n :if ([ :typeof [ :find \$Line \$Pattern ] ] = \"num\") do={:return \ + \$Line}\r\ + \n :set Input [ :pick \$Input ([ :find \$Input \"\\n\" ] + 1) [ :len \$\ + Input ] ];\r\ + \n } while=([ :len \$Input ] > 0);\r\ + \n :return [];\r\ + \n}\r\ + \n\r\ + \n:set HumanReadableNum do={\r\ + \n :local Input [ :tonum \$1 ];\r\ + \n :local Base [ :tonum \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :local Prefix \"kMGTPE\";\r\ + \n :local Pow 1;\r\ + \n :set Base [ \$EitherOr \$Base 1024 ];\r\ + \n :local Bin [ \$IfThenElse (\$Base = 1024) \"i\" \"\" ];\r\ + \n :if (\$Input < \$Base) do={:return \$Input}\r\ + \n :for I from=0 to=[ :len \$Prefix ] do={\r\ + \n :set Pow (\$Pow * \$Base);\r\ + \n :if (\$Input / \$Base < \$Pow) do={\r\ + \n :set Prefix [ :pick \$Prefix \$I ];\r\ + \n :local Tmp1 (\$Input * 100 / \$Pow);\r\ + \n :local Tmp2 (\$Tmp1 / 100);\r\ + \n :if (\$Tmp2 >= 100) do={:return (\$Tmp2 . \$Prefix . \$Bin)}\r\ + \n :return (\$Tmp2 . \".\" . \\\r\ + \n [ :pick \$Tmp1 [ :len \$Tmp2 ] ([ :len \$Tmp1 ] - [ :len \$Tmp\ + 2 ] + 1) ] . \\\r\ + \n \$Prefix . \$Bin);\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set CleanFilePath do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CharacterReplace;\r\ + \n :while (\$Path ~ \"//\") do={ :set \$Path [ \$CharacterReplace \$Path \ + \"//\" \"/\" ]; }\r\ + \n :if ([ :pick \$Path 0 ] = \"/\") do={ :set Path [ :pick \$Path 1 [ :le\ + n \$Path ] ]; }\r\ + \n :if ([ :pick \$Path ([ :len \$Path ] - 1) ] = \"/\") do={ :set Path [ \ + :pick \$Path 0 ([ :len \$Path ] - 1) ]; }\r\ + \n :return \$Path;\r\ + \n}\r\ + \n\r\ + \n:set CleanName do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Return \"\";\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :typeof [ find \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqr\ + stuvwxyz0123456789\" \$Char ] ] = \"nil\") do={\r\ + \n :do {:if ([ :len \$Return ] = 0) do={:error true};\r\ + \n :if ([ :pick \$Return ([ :len \$Return ] - 1) ] = \"-\") do={:er\ + ror true}; :set Char \"-\"} on-error={:set Char \"\"}; \r\ + \n };\r\ + \n :set Return (\$Return . \$Char)};\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set RandomDelay do={\r\ + \n :local Time [ :tonum \$1 ];\r\ + \n :local Unit [ :tostr \$2 ];\r\ + \n :global EitherOr;\r\ + \n :global GetRandomNumber;\r\ + \n :global MAX;\r\ + \n :if (\$Time = 0) do={:return false}\r\ + \n :delay ([ \$MAX 10 [ \$GetRandomNumber ([ :tonsec [ :totime (\$Time . \ + [ \$EitherOr \$Unit \"s\" ]) ] ] / 1000000) ] ] . \"ms\");\r\ + \n}\r\ + \n\r\ + \n:set EscapeForRegEx do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"^.[]\\\$()|*+\?{}\\\\\");\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :if ([ :find \$Chars \$Char ]) do={:set Char (\"\\\\\" . \$Char)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set ExitOnError do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :local Error [ :tostr \$2 ];\r\ + \n :global IfThenElse;\r\ + \n :log error (\$Name . \" \" . [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\ + \\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with erro\ + r\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \$E\ + rror) \".\" ]);\r\ + \n}\r\ + \n\r\ + \n:set MiniDateTimeStamp do={\r\ + \n :local mikro [ :tobool \$1 ];\r\ + \n /system/clock;\r\ + \n :local vdate [get date];\r\ + \n :local vtime [get time];\r\ + \n :local vdoff [:toarray \"0,4,5,7,8,10\"];\r\ + \n :local MM [:pick \$vdate (\$vdoff->2) (\$vdoff->3)];\r\ + \n :local M [:tonum \$MM];\r\ + \n :if (\$vdate ~ \".../../....\") do={\r\ + \n :set vdoff [:toarray \"7,11,1,3,4,6\"];\r\ + \n :set M ([:find \"xxanebarprayunulugepctovecANEBARPRAYUNULUGE\ + PCTOVEC\" [:pick \$vdate (\$vdoff->2) (\$vdoff->3)] -1] / 2);\r\ + \n :if (\$M>12) do={:set M (\$M - 12)}\r\ + \n :set MM [:pick (100 + \$M) 1 3];\r\ + \n }\r\ + \n :local yyyy [:pick \$vdate (\$vdoff->0) (\$vdoff->1)];\r\ + \n :local dd [:pick \$vdate (\$vdoff->4) (\$vdoff->5)];\r\ + \n :local HH [:pick \$vtime 0 2];\r\ + \n :local mm [:pick \$vtime 3 5];\r\ + \n :local ss [:pick \$vtime 6 8];\r\ + \n :local Return;\r\ + \n :if (\$mikro = true) do={\r\ + \n :set Return ([:pick \$yyyy 2 4] . [:pick \$dd 0 1] . [:pick \$HH 0\ + \_1] . [:pick \$mm 3 4] . [:pick \$ss 6 7]);\r\ + \n } else={\r\ + \n :set Return ([\$yyyy] . [\$MM] . [\$dd] . [\$HH] . [\$mm] . [\$ss]);\ + \r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set WaitForFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :local WaitTime [ :totime \$2 ];\r\ + \n :global CleanFilePath;\r\ + \n :global EitherOr;\r\ + \n :global MAX;\r\ + \n :set FileName [ \$CleanFilePath \$FileName ];\r\ + \n :local Delay ([ \$MAX [ \$EitherOr \$WaitTime 2s ] 100ms ] / 9);\r\ + \n :do {\r\ + \n :retry {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } delay=\$Delay max=10;\r\ + \n } on-error={ }\r\ + \n :while ([ :len [ /file/find where name=\$FileName ] ] > 0) do={\r\ + \n :do {\r\ + \n /file/get \$FileName;\r\ + \n :return true;\r\ + \n } on-error={ }\r\ + \n :delay \$Delay;\r\ + \n :set Delay (\$Delay * 3 / 2);\r\ + \n }\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set FileGet do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global WaitForFile;\r\ + \n :if ([ \$WaitForFile \$FileName 0s ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n :local FileVal false;\r\ + \n :do {\r\ + \n :set FileVal [ /file/get \$FileName ];\r\ + \n } on-error={ }\r\ + \n :return \$FileVal;\r\ + \n}\r\ + \n\r\ + \n:set RmDir do={\r\ + \n :local DirName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing directory: \". \$DirName);\r\ + \n :local DirVal [ \$FileGet \$DirName ];\r\ + \n :if (\$DirVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n };\r\ + \n :if (\$DirVal->\"type\" != \"directory\") do={\r\ + \n :log error (\$0 . \" Directory '\" . \$DirName . \"' is not a direct\ + ory.\");\r\ + \n :return false;\r\ + \n };\r\ + \n :onerror Err {\r\ + \n /file/remove \$DirName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing directory '\" . \$DirName . \"' failed\ + : \" . \$Err);\r\ + \n :return false;\r\ + \n };\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set RmFile do={\r\ + \n :local FileName [ :tostr \$1 ];\r\ + \n :global FileGet;\r\ + \n :log debug (\$0 . \" Removing file: \". \$FileName);\r\ + \n :local FileVal [ \$FileGet \$FileName ];\r\ + \n :if (\$FileVal = false) do={\r\ + \n :log debug (\$0 . \" ... which does not exist.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if (\$FileVal->\"type\" = \"directory\" || \$FileVal->\"type\" = \"di\ + sk\") do={\r\ + \n :log error (\$0 . \" File '\" . \$FileName . \"' is not a file.\");\ + \r\ + \n :return false;\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/remove \$FileName;\r\ + \n } do={\r\ + \n :log error (\$0 . \" Removing file '\" . \$FileName . \"' failed: \"\ + \_. \$Err); :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MkDir do={\r\ + \n :local Path [ :tostr \$1 ];\r\ + \n :global CleanFilePath;\r\ + \n :global FileGet;\r\ + \n :global RmDir;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :local MkTmpfs do={\r\ + \n :global WaitForFile;\r\ + \n :local TmpFs [ /disk/find where slot=tmpfs type=tmpfs ];\r\ + \n :if ([ :len \$TmpFs ] = 1) do={\r\ + \n :if ([ /disk/get \$TmpFs disabled ] = true) do={\r\ + \n :log info (\$0 . \" The tmpfs is disabled, enabling.\");\r\ + \n /disk/enable \$TmpFs;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :log info (\$0 . \" Creating disk of type tmpfs.\");\r\ + \n \$RmDir \"tmpfs\";\r\ + \n :onerror Err {\r\ + \n /disk/add slot=tmpfs type=tmpfs tmpfs-max-size=([ /system/resource\ + /get total-memory ] / 3);\r\ + \n \$WaitForFile \"tmpfs\";\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Creating disk of type tmpfs failed: \" . \$\ + Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n }\r\ + \n :set Path [ \$CleanFilePath \$Path ];\r\ + \n :if (\$Path = \"\") do={\r\ + \n :return true;\r\ + \n }\r\ + \n :log debug (\$0 . \" Making directory: \" . \$Path);\r\ + \n :local PathVal [ \$FileGet \$Path ];\r\ + \n :if (\$PathVal->\"type\" = \"directory\") do={\r\ + \n :log debug (\$0 . \" ... which already exists.\");\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ :pick \$Path 0 5 ] = \"tmpfs\") do={\r\ + \n :if ([ \$MkTmpfs ] = false) do={\r\ + \n :return false;\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n /file/add type=\"directory\" name=\$Path;\r\ + \n \$WaitForFile \$Path;\r\ + \n } do={\r\ + \n :log warning (\$0 . \" Making directory '\" . \$Path . \"' failed: \ + \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set MAX do={:if (\$1 > \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n:set MIN do={:if (\$1 < \$2) do={:return \$1}\r\ + \n :return \$2;\r\ + \n}\r\ + \n\r\ + \n:set CharacterMultiply do={\r\ + \n :local Str [ :tostr \$1 ];\r\ + \n :local Num [ :tonum \$2 ];\r\ + \n :if (\$Num = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :for I from=1 to=\$Num do={:set Return (\$Return . \$Str)}\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set CharacterReplace do={\r\ + \n :local String [ :tostr \$1 ];\r\ + \n :local ReplaceFrom [ :tostr \$2 ];\r\ + \n :local ReplaceWith [ :tostr \$3 ];\r\ + \n :local Return \"\";\r\ + \n :if (\$ReplaceFrom = \"\") do={:return \$String}\r\ + \n :while ([ :typeof [ :find \$String \$ReplaceFrom ] ] != \"nil\") do={\ + \r\ + \n :local Pos [ :find \$String \$ReplaceFrom ];\r\ + \n :set Return (\$Return . [ :pick \$String 0 \$Pos ] . \$ReplaceWith);\ + \r\ + \n :set String [ :pick \$String (\$Pos + [ :len \$ReplaceFrom ]) [ :len\ + \_\$String ] ];\r\ + \n }\r\ + \n :return (\$Return . \$String);\r\ + \n}\r\ + \n\r\ + \n:set IfThenElse do={\r\ + \n :if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] = true) do={:return \ + \$2};\r\ + \n :return \$3;\r\ + \n}\r\ + \n\r\ + \n:set EitherOr do={\r\ + \n :global IfThenElse;\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:return [ \$IfThenElse (\$1 != 0) \ + \$1 \$2 ]}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:return [ \$IfThenElse (\$1 > 0s)\ + \_\$1 \$2 ]}\r\ + \n# this works for boolean values, literal ones with parentheses\r\ + \n :return [ \$IfThenElse ([ :len [ :tostr \$1 ] ] > 0) \$1 \$2 ];\r\ + \n}\r\ + \n\r\ + \n:set ParseKeyValueStore do={\r\ + \n :local Source \$1;\r\ + \n :if ([ :pick \$Source 0 1 ] = \"{\") do={\r\ + \n :do {\r\ + \n :return [ :deserialize from=json \$Source ];\r\ + \n } on-error={ }\r\ + \n } \r\ + \n :if ([ :typeof \$Source ] != \"array\") do={:set Source [ :tostr \$1 ]\ + }\r\ + \n :local Result ({});\r\ + \n :foreach KeyValue in=[ :toarray \$Source ] do={\r\ + \n :if ([ :find \$KeyValue \"=\" ]) do={\r\ + \n :local Key [ :pick \$KeyValue 0 [ :find \$KeyValue \"=\" ] ];\r\ + \n :local Value [ :pick \$KeyValue ([ :find \$KeyValue \"=\" ] + 1) [\ + \_:len \$KeyValue ] ];\r\ + \n :if (\$Value=\"true\") do={:set Value true}\r\ + \n :if (\$Value=\"false\") do={:set Value false}\r\ + \n :set (\$Result->\$Key) \$Value;\r\ + \n } else={:set (\$Result->\$KeyValue) true}\r\ + \n }\r\ + \n :return \$Result;\r\ + \n}\r\ + \n:set RequiredRouterOS do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :local Required [ :tostr \$2 ];\r\ + \n :local Warn [ :tostr \$3 ];\r\ + \n :global IfThenElse;\r\ + \n :global VersionToNum;\r\ + \n :if (!(\$Required ~ \"^\\\\d+\\\\.\\\\d+((alpha|beta|rc|\\\\.)\\\\d+|)\ + \\\$\")) do={\r\ + \n :log error (\$0 . \" No valid RouterOS version: \" . \$Required);\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$VersionToNum \$Required ] > [ \$VersionToNum [ /system/packag\ + e/update/get installed-version ] ]) do={\r\ + \n :if (\$Warn = \"true\") do={\r\ + \n :log warning (\$0 . \" This \" . [ \$IfThenElse ([ :pick \$Caller \ + 0 ] = (\"\\\$\")) \"function\" \"script\" ] . \\\r\ + \n \" '\" . \$Caller . \"' (at least specific functionality) requir\ + es RouterOS \" . \$Required . \". Please update!\");\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set ValidateSyntax do={\r\ + \n :local Code [ :tostr \$1 ];\r\ + \n :global LogPrint;\r\ + \n :onerror Err {\r\ + \n [ :parse (\":local Validate do={\\n\" . \$Code . \"\\n}\") ];\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Valdation failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set VersionToNum do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :local Multi 0x1000000;\r\ + \n :local Return 0;\r\ + \n :global CharacterReplace;\r\ + \n :set Input [ \$CharacterReplace \$Input \".\" \",\" ];\r\ + \n :foreach I in={ \"zero\"; \"alpha\"; \"beta\"; \"rc\" } do={\r\ + \n :set Input [ \$CharacterReplace \$Input \$I (\",\" . \$I . \",\") ];\ + \r\ + \n }\r\ + \n :foreach Value in=([ :toarray \$Input ], 0) do={\r\ + \n :local Num [ :tonum \$Value ];\r\ + \n :if (\$Multi = 0x100) do={\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={\r\ + \n :set Return (\$Return + 0xff00);\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n } else={\r\ + \n :if (\$Value = \"zero\") do={ }\r\ + \n :if (\$Value = \"alpha\") do={ :set Return (\$Return + 0x3f00); \ + }\r\ + \n :if (\$Value = \"beta\") do={ :set Return (\$Return + 0x5f00); }\ + \r\ + \n :if (\$Value = \"rc\") do={ :set Return (\$Return + 0x7f00); }\r\ + \n }\r\ + \n }\r\ + \n :if ([ :typeof \$Num ] = \"num\") do={ :set Return (\$Return + (\$Va\ + lue * \$Multi)); }\r\ + \n :set Multi (\$Multi / 0x100);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set ScriptLock do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local WaitMax [ :totime \$2 ];\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global ScriptLockOrder;\r\ + \n :if ([ :typeof \$ScriptLockOrder ] = \"nothing\") do={\r\ + \n :set ScriptLockOrder ({});\r\ + \n }\r\ + \n :if ([ :typeof (\$ScriptLockOrder->\$Script) ] = \"nothing\") do={\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :local JobCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :return [ :len [ /system/script/job/find where script=\$Script ] ];\ + \r\ + \n }\r\ + \n :local TicketCount do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :local Count 0;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:set Count (\$Count \ + + 1)}\r\ + \n }\r\ + \n :return \$Count;\r\ + \n }\r\ + \n :local IsFirstTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Check [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if (\$Ticket = \$Check) do={:return true}\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\" && \$Ticket != \$Check) d\ + o={:return false}\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :local AddTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Add [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :while (true) do={\r\ + \n :local Pos [ :len (\$ScriptLockOrder->\$Script) ];\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Pos) \$Add;\r\ + \n :delay 10ms;\r\ + \n :if ((\$ScriptLockOrder->\$Script->\$Pos) = \$Add) do={:return tru\ + e}\r\ + \n }\r\ + \n }\r\ + \n :local RemoveTicket do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :local Remove [ :tostr \$2 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Id,Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :while ((\$ScriptLockOrder->\$Script->\$Id) = \$Remove) do={\r\ + \n :set (\$ScriptLockOrder->\$Script->\$Id);\r\ + \n :delay 10ms;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :local CleanupTickets do={\r\ + \n :local Script [ :tostr \$1 ];\r\ + \n :global ScriptLockOrder;\r\ + \n :foreach Ticket in=(\$ScriptLockOrder->\$Script) do={\r\ + \n :if ([ :typeof \$Ticket ] != \"nothing\") do={:return false}\r\ + \n }\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n }\r\ + \n :if ([ :typeof \$WaitMax ] = \"nil\" ) do={:set WaitMax 0s}\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\r\ + \n :log error (\$0 . \" A script named '\" . \$Script . \"' does not ex\ + ist!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$JobCount \$Script ] = 0) do={\r\ + \n \$LogPrint error \$0 (\"No script '\" . \$Script . \"' is running!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$TicketCount \$Script ] >= [ \$JobCount \$Script ]) do={\r\ + \n :log error (\$0 . \" More tickets than running scripts '\" . \$Scrip\ + t . \"', resetting!\");\r\ + \n :set (\$ScriptLockOrder->\$Script) ({});\r\ + \n /system/script/job/remove [ find where script=\$Script ];\r\ + \n }\r\ + \n :local MyTicket [ \$GetRandom20CharAlNum 6 ];\r\ + \n \$AddTicket \$Script \$MyTicket;\r\ + \n :local WaitInterval (\$WaitMax / 20);\r\ + \n :local WaitTime \$WaitMax;\r\ + \n :while (\$WaitTime > 0 && \\\r\ + \n ([ \$IsFirstTicket \$Script \$MyTicket ] = false || \\\r\ + \n [ \$TicketCount \$Script ] < [ \$JobCount \$Script ])) do={\r\ + \n :set WaitTime (\$WaitTime - \$WaitInterval);\r\ + \n :delay \$WaitInterval;\r\ + \n }\r\ + \n :if ([ \$IsFirstTicket \$Script \$MyTicket ] = true && \\\r\ + \n [ \$TicketCount \$Script ] = [ \$JobCount \$Script ]) do={\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$CleanupTickets \$Script;\r\ + \n :return true;\r\ + \n }\r\ + \n \$RemoveTicket \$Script \$MyTicket;\r\ + \n \$LogPrint debug \$0 (\"Script '\" . \$Script . \"' started more than \ + once\" . \\\r\ + \n [ \$IfThenElse (\$WaitTime < \$WaitMax) \" and timed out waiting for\ + \_lock\" \"\" ] . \"...\");\r\ + \n :return false;\r\ + \n}\r\ + \n\r\ + \n:set SendNotification do={ :onerror Err {\r\ + \n :global SendNotification2;\r\ + \n \$SendNotification2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3;\ + \_silent=\$4 });\r\ + \n} do={:global ExitOnError; \$ExitOnError \$0 \$Err}\r\ + \n}\r\ + \n\r\ + \n:set SendNotification2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n :foreach FunctionName,Discard in=\$NotificationFunctions do={\r\ + \n (\$NotificationFunctions->\$FunctionName) (\"\\\$NotificationFunctio\ + ns->\\\"\" . \$FunctionName . \"\\\"\") \$Notification;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n:set SymbolByUnicodeName do={\r\ + \n :local Name [ :tostr \$1 ];\r\ + \n :global EitherOr;\r\ + \n :global SymbolsExtra;\r\ + \n :local Symbols ({\r\ + \n \"abacus\"=\"\\F0\\9F\\A7\\AE\";\r\ + \n \"alarm-clock\"=\"\\E2\\8F\\B0\";\r\ + \n \"arrow-down\"=\"\\E2\\AC\\87\";\r\ + \n \"arrow-up\"=\"\\E2\\AC\\86\";\r\ + \n \"calendar\"=\"\\F0\\9F\\93\\85\";\r\ + \n \"card-file-box\"=\"\\F0\\9F\\97\\83\";\r\ + \n \"chart-decreasing\"=\"\\F0\\9F\\93\\89\";\r\ + \n \"chart-increasing\"=\"\\F0\\9F\\93\\88\";\r\ + \n \"cloud\"=\"\\E2\\98\\81\";\r\ + \n \"cross-mark\"=\"\\E2\\9D\\8C\";\r\ + \n \"earth\"=\"\\F0\\9F\\8C\\8D\";\r\ + \n \"fire\"=\"\\F0\\9F\\94\\A5\";\r\ + \n \"floppy-disk\"=\"\\F0\\9F\\92\\BE\";\r\ + \n \"gear\"=\"\\E2\\9A\\99\";\r\ + \n \"heart\"=\"\\E2\\99\\A5\";\r\ + \n \"high-voltage-sign\"=\"\\E2\\9A\\A1\";\r\ + \n \"incoming-envelope\"=\"\\F0\\9F\\93\\A8\";\r\ + \n \"information\"=\"\\E2\\84\\B9\";\r\ + \n \"large-orange-circle\"=\"\\F0\\9F\\9F\\A0\";\r\ + \n \"large-red-circle\"=\"\\F0\\9F\\94\\B4\";\r\ + \n \"link\"=\"\\F0\\9F\\94\\97\";\r\ + \n \"lock-with-ink-pen\"=\"\\F0\\9F\\94\\8F\";\r\ + \n \"memo\"=\"\\F0\\9F\\93\\9D\";\r\ + \n \"mobile-phone\"=\"\\F0\\9F\\93\\B1\";\r\ + \n \"pushpin\"=\"\\F0\\9F\\93\\8C\";\r\ + \n \"scissors\"=\"\\E2\\9C\\82\";\r\ + \n \"scroll\"=\"\\F0\\9F\\93\\9C\";\r\ + \n \"smiley-partying-face\"=\"\\F0\\9F\\A5\\B3\";\r\ + \n \"smiley-smiling-face\"=\"\\E2\\98\\BA\";\r\ + \n \"smiley-winking-face-with-tongue\"=\"\\F0\\9F\\98\\9C\";\r\ + \n \"sparkles\"=\"\\E2\\9C\\A8\";\r\ + \n \"speech-balloon\"=\"\\F0\\9F\\92\\AC\";\r\ + \n \"star\"=\"\\E2\\AD\\90\";\r\ + \n \"warning-sign\"=\"\\E2\\9A\\A0\";\r\ + \n \"white-heavy-check-mark\"=\"\\E2\\9C\\85\"\r\ + \n }, \$SymbolsExtra);\r\ + \n :local Magic [ :pick [ /system/clock/get date ] 4 10 ];\r\ + \n :local Special {\r\ + \n \"information-04-01\"=\"\\F0\\9F\\9A\\BB\";\r\ + \n \"large-orange-circle-04-01\"=\"\\F0\\9F\\8D\\8A\";\r\ + \n \"large-orange-circle-10-31\"=\"\\F0\\9F\\8E\\83\";\r\ + \n \"large-red-circle-04-01\"=\"\\F0\\9F\\8D\\92\" };\r\ + \n :if ([ :len (\$Symbols->\$Name) ] = 0) do={\r\ + \n :log warning (\$0 . \"No symbol available for name '\" . \$Name . \"\ + '!\");\r\ + \n :return \"\";\r\ + \n }\r\ + \n :return ([ \$EitherOr (\$Special->(\$Name . \$Magic)) (\$Symbols->\$Na\ + me) ] . \"\\EF\\B8\\8F\");\r\ + \n}\r\ + \n\r\ + \n:set SymbolForNotification do={\r\ + \n :global NotificationsWithSymbols;\r\ + \n :global SymbolByUnicodeName;\r\ + \n :global IfThenElse;\r\ + \n :if (\$NotificationsWithSymbols != true) do={:return [ \$IfThenElse ([\ + \_:len \$2 ] > 0) ([ :tostr \$2 ] . \" \") \"\" ]}\r\ + \n :local Return \"\";\r\ + \n :foreach Symbol in=[ :toarray \$1 ] do={:set Return (\$Return . [ \$Sy\ + mbolByUnicodeName \$Symbol ])}\r\ + \n :return (\$Return . \" \");\r\ + \n}\r\ + \n\r\ + \n:set Unix2Dos do={:return [ :tocrlf [ :tostr \$1 ] ]}\r\ + \n:set UrlEncode do={\r\ + \n :local Input [ :tostr \$1 ];\r\ + \n :if ([ :len \$Input ] = 0) do={:return \"\"}\r\ + \n :local Return \"\";\r\ + \n :local Chars (\"\\n\\r !\\\"#\\\$%&'()*+,:;<=>\?@[\\\\]^`{|}~\");\r\ + \n :local Subs { \"%0A\"; \"%0D\"; \"%20\"; \"%21\"; \"%22\"; \"%23\"; \"\ + %24\"; \"%25\"; \"%26\"; \"%27\";\r\ + \n \"%28\"; \"%29\"; \"%2A\"; \"%2B\"; \"%2C\"; \"%3A\"; \"%3B\"; \ + \"%3C\"; \"%3D\"; \"%3E\"; \"%3F\";\r\ + \n \"%40\"; \"%5B\"; \"%5C\"; \"%5D\"; \"%5E\"; \"%60\"; \"%7B\"; \ + \"%7C\"; \"%7D\"; \"%7E\" };\r\ + \n :for I from=0 to=([ :len \$Input ] - 1) do={\r\ + \n :local Char [ :pick \$Input \$I ];\r\ + \n :local Replace [ :find \$Chars \$Char ];\r\ + \n :if ([ :typeof \$Replace ] = \"num\") do={:set Char (\$Subs->\$Repla\ + ce)}\r\ + \n :set Return (\$Return . \$Char);\r\ + \n }\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set IsDNSResolving do={\r\ + \n :do {:resolve \"api.telegram.org\"} on-error={:return false}\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsFullyConnected do={\r\ + \n :global IsDNSResolving;\r\ + \n :global IsTimeSync;\r\ + \n :if ([ \$IsDNSResolving ] = false) do={:return false};\r\ + \n :if ([ \$IsTimeSync ] = false) do={:return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set IsTimeSync do={\r\ + \n :global IsTimeSyncCached;\r\ + \n :global IsTimeSyncResetNtp;\r\ + \n :if (\$IsTimeSyncCached = true) do={:return true}\r\ + \n :if ([ /system/ntp/client/get enabled ] = true) do={\r\ + \n :if ([ /system/ntp/client/get status ] = \"synchronized\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :if ([ :typeof \$IsTimeSyncResetNtp ] = \"nothing\") do={\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n }\r\ + \n :if (\$Uptime - \$IsTimeSyncResetNtp < 3m) do={:return false}\r\ + \n :log warning \"\$0 The ntp client is configured, but did not sync.\"\ + ;\r\ + \n :set IsTimeSyncResetNtp \$Uptime;\r\ + \n /system/ntp/client/set enabled=no;\r\ + \n :delay 20ms;\r\ + \n /system/ntp/client/set enabled=yes;\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ /system/license/get ]->\"level\" = \"free\" || \\\r\ + \n [ /system/resource/get ]->\"board-name\" = \"x86\") do={\r\ + \n :log debug \"\$0 No ntp client configured, relying on RTC for CHR fr\ + ee license and x86.\";\r\ + \n :return true;\r\ + \n }\r\ + \n :if ([ /ip/cloud/get update-time ] = true) do={\r\ + \n :if ([ :typeof [ /ip/cloud/get public-address ] ] = \"ip\") do={\r\ + \n :set IsTimeSyncCached true;\r\ + \n :return true;\r\ + \n }\r\ + \n :return false;\r\ + \n }\r\ + \n :log debug \"\$0 No time source configured! Returning gracefully...\";\ + \r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:set FetchHugeFiles do={\r\ + \n :local ScriptName [ :tostr \$1 ];\r\ + \n :local Url [ :tostr \$2 ];\r\ + \n :local CheckCert [ :tostr \$3 ];\r\ + \n\r\ + \n :global CleanName;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global MkDir;\r\ + \n :global RmDir;\r\ + \n :global RmFile;\r\ + \n :global WaitForFile;\r\ + \n\r\ + \n :set CheckCert [ \$IfThenElse (\$CheckCert = \"false\") \"no\" \"yes-w\ + ithout-crl\" ];\r\ + \n\r\ + \n :local DirName (\"tmpfs/\" . [ \$CleanName \$ScriptName ]);\r\ + \n :if ([ \$MkDir \$DirName ] = false) do={\r\ + \n \$LogPrint error \$0 (\"Failed creating directory!\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileName (\$DirName . \"/\" . [ \$CleanName \$0 ] . \"-\" . [ \ + \$GetRandom20CharAlNum ]);\r\ + \n :onerror Err {\r\ + \n /tool/fetch check-certificate=\$CheckCert \$Url dst-path=\$FileName \ + \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$ScriptName ] }) as-va\ + lue;\r\ + \n } do={\r\ + \n :if ([ \$WaitForFile \$FileName 500ms ] = true) do={\r\ + \n \$RmFile \$FileName;\r\ + \n }\r\ + \n \$LogPrint debug \$0 (\"Failed downloading from \" . \$Url . \" - \"\ + \_. \$Err);\r\ + \n \$RmDir \$DirName;\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$WaitForFile \$FileName 5s ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"The file downloaded from \" . \$Url . \" did\ + \_not show up.\");\r\ + \n :return false;\r\ + \n }\r\ + \n\r\ + \n :local FileSize [ /file/get \$FileName size ];\r\ + \n :local Return \"\";\r\ + \n :local VarSize 0;\r\ + \n :while (\$VarSize != \$FileSize) do={\r\ + \n :set Return (\$Return . ([ /file/read offset=\$VarSize chunk-size=32\ + 768 file=\$FileName as-value ]->\"data\"));\r\ + \n :set FileSize [ /file/get \$FileName size ];\r\ + \n :set VarSize [ :len \$Return ];\r\ + \n :if (\$VarSize > \$FileSize) do={\r\ + \n :delay 100ms;\r\ + \n }\r\ + \n }\r\ + \n \$RmDir \$DirName;\r\ + \n :return \$Return;\r\ + \n}\r\ + \n\r\ + \n:set FetchUserAgentStr do={\r\ + \n :local Caller [ :tostr \$1 ];\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global CommitBrief;\r\ + \n :global IfThenElse;\r\ + \n :local Resource [ /system/resource/get ];\r\ + \n :return (\"User-Agent: Mikrotik/\" . \$Resource->\"version\" . \" \" .\ + \_\$Resource->\"architecture-name\" . \\\r\ + \n \" \" . \$Caller . \"/Fetch (\" . \$GlobalScriptsUrl . \"; \" . [ \$\ + CommitBrief ] . \")\");\r\ + \n}\r\ + \n\r\ + \n:set ScriptInstallUpdate do={ :onerror Err {\r\ + \n :local Scripts [ :toarray \$1 ];\r\ + \n :local NewComment [ :tostr \$2 ];\r\ + \n :global InitSetup;\r\ + \n\r\ + \n :global CommitId;\r\ + \n :global ScriptUpdatesCRLF;\r\ + \n :global GlobalConfVersion;\r\ + \n :global Identity;\r\ + \n :global CertificateAvailable;\r\ + \n :global CheckSumsVerify;\r\ + \n :global GlobalScriptsUrl;\r\ + \n :global SumsDirAndFileName;\r\ + \n :global GlobalScriptsUrlSuffix;\r\ + \n :global EitherOr;\r\ + \n :global FetchUserAgentStr;\r\ + \n :global Grep;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ParseKeyValueStore;\r\ + \n :global RequiredRouterOS;\r\ + \n :global SendNotification2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global CommentsInScripts;\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Root YE\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, trying wit\ + hout.\");\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=\$Scripts do={\r\ + \n :if ([ :len [ /system/script/find where name=\$Script ] ] = 0) do={\ + \r\ + \n \$LogPrint info \$0 (\"Adding new script: \" . \$Script);\r\ + \n /system/script/add name=\$Script owner=\$Script source=\"#!rsc by \ + Vados\\n\" comment=\$NewComment;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local CommitIdBefore \$CommitId;\r\ + \n :local GlobalConfVersionBefore \$GlobalConfVersion;\r\ + \n :local ReloadGlobal false;\r\ + \n :local DeviceMode [ /system/device-mode/get ];\r\ + \n\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSums ({});\r\ + \n :do {\r\ + \n :local Url (\$GlobalScriptsUrl . \$SumsDirAndFileName . \$GlobalScr\ + iptsUrlSuffix);\r\ + \n \$LogPrint debug \$0 (\"Fetching checksums from url: \" . \$Url);\ + \r\ + \n :set CheckSums [ :deserialize from=json ([ /tool/fetch check-certi\ + ficate=yes-without-crl \\\r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url output\ + =user as-value ]->\"data\") ];\r\ + \n } on-error={ \$LogPrint warning \$0 (\"Err = \" . \$Err); }\r\ + \n }\r\ + \n\r\ + \n :foreach Script in=[ /system/script/find where source~\"^#!rsc by Vado\ + s\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :local ScriptInfo [ \$ParseKeyValueStore (\$ScriptVal->\"comment\") \ + ];\r\ + \n :local SourceNew;\r\ + \n\r\ + \n :foreach Scheduler in=[ /system/scheduler/find where on-event~(\"\\\ + \\b\" . \$ScriptVal->\"name\" . \"\\\\b\") ] do={\r\ + \n :local SchedulerVal [ /system/scheduler/get \$Scheduler ];\r\ + \n :if (\$ScriptVal->\"policy\" != \$SchedulerVal->\"policy\") do={\r\ + \n \$LogPrint warning \$0 (\"Policies differ for script '\" . \$Scr\ + iptVal->\"name\" . \"' and its scheduler '\" . \$SchedulerVal->\"name\" . \ + \"'!\");\r\ + \n }\r\ + \n }\r\ + \n :do {\r\ + \n :if (\$ScriptInfo->\"ignore\" = true) do={\r\ + \n \$LogPrint debug \$0 (\"Ignoring script '\" . \$ScriptVal->\"nam\ + e\" . \"', as requested.\");\r\ + \n :error true;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :local CheckSum (\$CheckSums->(\$ScriptVal->\"name\"));\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Scri\ + ptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :convert transform=md5 to=hex [ :tolf (\$ScriptVal->\"sou\ + rce\") ] ] = \$CheckSum) do={\r\ + \n \$LogPrint debug \$0 (\"Checksum for script '\" . \$ScriptVal-\ + >\"name\" . \"' matches, ignoring.\");\r\ + \n :error true;\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len (\$ScriptInfo->\"certificate\") ] > 0) do={\r\ + \n :if ([ \$CertificateAvailable (\$ScriptInfo->\"certificate\") \"\ + fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading certificate failed, tryi\ + ng without.\");\r\ + \n }\r\ + \n }\r\ + \n :onerror Err {\r\ + \n :local BaseUrl [ \$EitherOr (\$ScriptInfo->\"base-url\") \$Globa\ + lScriptsUrl ];\r\ + \n :local UrlSuffix [ \$EitherOr (\$ScriptInfo->\"url-suffix\") \$G\ + lobalScriptsUrlSuffix ];\r\ + \n :local Url (\$BaseUrl . \$ScriptVal->\"name\" . \".rsc\" . \$Url\ + Suffix);\r\ + \n \$LogPrint warning \$0 (\"Fetching script '\" . (\$ScriptVal->\"\ + name\") . \"' from url: \" . \$Url);\r\ + \n :local Result [ /tool/fetch check-certificate=yes-without-crl \\\ + \r\ + \n http-header-field=({ [ \$FetchUserAgentStr \$0 ] }) \$Url outp\ + ut=user as-value ];\r\ + \n :if (\$Result->\"status\" = \"finished\") do={\r\ + \n :set SourceNew [ :tolf (\$Result->\"data\") ];\r\ + \n } \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Failed fetching script '\" . \$ScriptV\ + al->\"name\" . \"': \" . \$Err);\r\ + \n :if (\$Err != \"Fetch failed with status 404\") do={\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$ScriptVal->\"source\" = \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Removing dummy. Typo on installation\ + \?\");\r\ + \n /system/script/remove \$Script;\r\ + \n :error false;\r\ + \n }\r\ + \n :if (\$CheckSumsVerify = true) do={\r\ + \n :if ([ :len (\$ScriptInfo->\"base-url\") ] = 0 && [ :len (\$Sc\ + riptInfo->\"url-suffix\") ] = 0 && \\\r\ + \n [ :len \$CheckSum ] = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Added the script manually\? Skip u\ + pdates with 'ignore=true' in comment.\");\r\ + \n }\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$SourceNew ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"No update for script '\" . (\$ScriptVal-\ + >\"name\") . \"'.\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local SourceCRLF [ :tocrlf \$SourceNew ];\r\ + \n :if (\$InitSetup != true && ((\$ScriptVal->\"name\") != \"AM-Globa\ + lConfig\" || (\$ScriptVal->\"name\") != \"AM-GlobalFunc\")) do={\r\ + \n :if (\$SourceNew = (\$ScriptVal->\"source\") || \$SourceCRLF = (\ + \$ScriptVal->\"source\")) do={\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\") \ + . \"' source did not change. End of lines set to CRLF.\");\r\ + \n if (\$ScriptUpdatesCRLF = false) do={\r\ + \n :put [ :tolf \$SourceNew ];\r\ + \n \$LogPrint debug \$0 (\"Script '\" . (\$ScriptVal->\"name\"\ + ) . \"' source update end of lines to LF.\");\r\ + \n }\r\ + \n :error false;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if ([ :pick \$SourceNew 0 14 ] != \"#!rsc by Vados\") do={\r\ + \n \$LogPrint warning \$0 (\"Looks like new script '\" . \$ScriptVa\ + l->\"name\" . \"' is not valid (missing shebang = '\$shebang') Ignoring!\"\ + );\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if (\$CommentsInScripts = true) do={\r\ + \n :local CommentLine [ \$Grep \$SourceNew (\"\\23 Script comment:\ + \_\") ];\r\ + \n :if ([ :len \$CommentLine ] = 0) do={\r\ + \n \$LogPrint debug \$0 (\"The search in new script '\" . (\$Scr\ + iptVal->\"name\") . \"' for comment in script body, is not found result Ig\ + noring!\");\r\ + \n :error false;\r\ + \n } else={\r\ + \n :if ([ :len (\$ScriptVal->\"comment\")] = 0 || [ :len (\$Scri\ + ptVal->\"comment\")] != [ :pick \$CommentLine ([ :find \$CommentLine \":\"\ + ] + 2) [ :len \$CommentLine] ]) do={\r\ + \n \$LogPrint debug \$0 (\"Exsiting comment for script '\" . (\ + \$ScriptVal->\"name\") . \"' is '\" . (\$ScriptVal->\"comment\") . \"'.\")\ + ;\r\ + \n :set (\$ScriptVal->\"comment\") [ :pick \$CommentLine ([ :f\ + ind \$CommentLine \":\"] + 2) [ :len \$CommentLine] ];\r\ + \n \$LogPrint debug \$0 (\"New comment (\" . (\$ScriptVal->\"c\ + omment\") . \") for script '\" . (\$ScriptVal->\"name\") . \"' has been ad\ + ded!\");\r\ + \n } else={\r\ + \n \$LogPrint debug \$0 (\"Comment for script '\" . (\$ScriptV\ + al->\"name\") . \"' did not change.\");\r\ + \n :error false;\r\ + \n }\r\ + \n } \r\ + \n }\r\ + \n\r\ + \n :local RequiredROS ([ \$ParseKeyValueStore [ \$Grep \$SourceNew (\ + \"\\23 requires RouterOS, \") ] ]->version);\r\ + \n :if ([ \$RequiredRouterOS \$0 [ \$EitherOr \$RequiredROS \"0.0\" ]\ + \_false ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires RouterOS \" . \\\r\ + \n \$RequiredROS . \", which is not met by your installation. I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n :local RequiredDM [ \$ParseKeyValueStore [ \$Grep \$SourceNew (\"\ + \\23 requires device-mode, \") ] ];\r\ + \n :local MissingDM ({});\r\ + \n :foreach Feature,Value in=\$RequiredDM do={\r\ + \n :if ([ :typeof (\$DeviceMode->\$Feature) ] = \"bool\" && (\$Devi\ + ceMode->\$Feature) = false) do={\r\ + \n :set MissingDM (\$MissingDM, \$Feature);\r\ + \n }\r\ + \n }\r\ + \n :if ([ :len \$MissingDM ] > 0) do={\r\ + \n \$LogPrint warning \$0 (\"The script '\" . (\$ScriptVal->\"name\ + \") . \"' requires disabled \" . \\\r\ + \n \"device-mode features (\" . [ :tostr \$MissingDM ] . \"). I\ + gnoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$ValidateSyntax \$SourceNew ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Syntax validation for script '\" . (\$\ + ScriptVal->\"name\") . \"' failed! Ignoring!\");\r\ + \n :error false;\r\ + \n }\r\ + \n \r\ + \n :log info (\"Updating script: \" . (\$ScriptVal->\"name\") . \" Sc\ + ript comment: \" . (\$ScriptVal->\"comment\"));\r\ + \n\r\ + \n /system/script/set owner=(\$ScriptVal->\"name\") comment=(\$Script\ + Val->\"comment\") \\\r\ + \n source=[ \$IfThenElse (\$ScriptUpdatesCRLF = true) \$SourceCRL\ + F \$SourceNew ] \$Script;\r\ + \n :if (\$ScriptVal->\"name\" = \"AM-GlobalConfig\" || \\\r\ + \n \$ScriptVal->\"name\" = \"AM-GlobalFunc\" || \\\r\ + \n \$ScriptVal->\"name\" ~ (\"^(AM-GlobalFunc\\\\.d|mod)/.\")) d\ + o={\r\ + \n :set ReloadGlobal true;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n :if (\$ReloadGlobal = true) do={\r\ + \n \$LogPrint info \$0 (\"Reloading global configuration and functions.\ + \");\r\ + \n :onerror Err {\r\ + \n :global InitSetup (a);\r\ + \n /system/script {run AM-GlobalConfig; run AM-GlobalFunc;};\r\ + \n } do={\$LogPrint error \$0 (\"Reloading global configuration and fun\ + ctions failed! \" . \$Err)}\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore > \$GlobalConfVersion) do={\r\ + \n \$LogPrint warning \$0 (\"The configuration version decreased from \ + \" . \\\r\ + \n \$GlobalConfVersionBefore . \" to \" . \$GlobalConfVersion . \\\r\ + \n \". Installed an older version\?\");\r\ + \n }\r\ + \n :if (\$GlobalConfVersionBefore < \$GlobalConfVersion) do={\r\ + \n :global GlobalConfChanges;\r\ + \n :global GlobalConfMigration;\r\ + \n :local ChangeLogCode;\r\ + \n :if ([ :len \$ChangeLogCode ] > 0) do={\r\ + \n :if ([ \$ValidateSyntax \$ChangeLogCode ] = true) do={\r\ + \n :onerror Err {\r\ + \n [ :parse \$ChangeLogCode ];\r\ + \n } do={\$LogPrint warning \$0 (\"The changelog failed to run: \" \ + . \$Err)}\r\ + \n } else={\$LogPrint warning \$0 (\"The changelog failed syntax vali\ + dation!\")}\r\ + \n }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Migration (\$GlobalConfMigration->[ :tostr \$I ]);\r\ + \n :do {\r\ + \n :if ([ :typeof \$Migration ] != \"str\") do={\r\ + \n \$LogPrint debug \$0 (\"Migration code for change \" . \$I .\ + \_\" is not available.\");\r\ + \n :error false;\r\ + \n }\r\ + \n :if ([ \$ValidateSyntax \$Migration ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Migration code for change \" . \$I\ + \_. \" failed syntax validation!\");\r\ + \n :error false}\r\ + \n \$LogPrint info \$0 (\"Applying migration for change \" . \$I \ + . \": \" . \$Migration);\r\ + \n :onerror Err {\r\ + \n [ :parse \$Migration ];\r\ + \n } do={\$LogPrint warning \$0 (\"Migration code for change \" .\ + \_\$I . \" failed to run: \" . \$Err)}\r\ + \n } on-error={ }\r\ + \n }\r\ + \n }\r\ + \n :local NotificationMessage (\"The configuration version on \" . \$Id\ + entity . \" increased \" . \\\r\ + \n \"to \" . \$GlobalConfVersion . \", current configuration may nee\ + d modification. \" . \\\r\ + \n \"Please review and update global-config-overlay, then re-run glo\ + bal-config.\");\r\ + \n \$LogPrint info \$0 (\$NotificationMessage);\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nChanges:\ + \");\r\ + \n :for I from=(\$GlobalConfVersionBefore + 1) to=\$GlobalConfVersion\ + \_do={\r\ + \n :local Change (\$GlobalConfChanges->[ :tostr \$I ]);\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n \" . \\\ + \r\ + \n [ \$SymbolForNotification \"pushpin\" \"*\" ] . \$Change);\r\ + \n \$LogPrint info \$0 (\"Change \" . \$I . \": \" . \$Change);\r\ + \n }\r\ + \n } else={\r\ + \n :set NotificationMessage (\$NotificationMessage . \"\\n\\nNews and\ + \_changes are not available.\");\r\ + \n\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$GlobalConfChanges ] > 0) do={ :set GlobalConfChanges; \ + } else={ :global GlobalConfChanges (a); }\r\ + \n :if ([ :len \$GlobalConfMigration ] > 0) do={ :set GlobalConfMigrati\ + on; } else={ :global GlobalConfMigration (a); }\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n\r\ + \n# load modules\r\ + \n:foreach Script in=[ /system/script/find where name ~ \"^(global-functio\ + ns\\\\.d|mod)/.\" ] do={\r\ + \n :local ScriptVal [ /system/script/get \$Script ];\r\ + \n :if ([ \$ValidateSyntax (\$ScriptVal->\"source\") ] = true) do={\r\ + \n :onerror Err {\r\ + \n /system/script/run \$Script;\r\ + \n } do={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' f\ + ailed to run: \" . \$Err);\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint error \$0 (\"Module '\" . \$ScriptVal->\"name\" . \"' fai\ + led syntax validation, skipping.\");\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n# Add and fix global scheduler\r\ + \n:put \"Add or/and fix Global scheduler...\";\r\ + \n:local OnEvent \"/system/script { run AM-GlobalConfig; run AM-GlobalFunc\ + ; }\";\r\ + \n:local Comment \"Every Day Set Global Environment Variables\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-SetGlobalEnv\" ] ] \ + = 0) do={\r\ + \n /system/scheduler/add name=\"AM-SetGlobalEnv\" comment=\$Comment on-ev\ + ent=\$OnEvent start-time=startup;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" comment ] != \$Comment)\ + \_do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" comment=\$Comment;\r\ + \n}\r\ + \n:if ([ /system/scheduler/get \"AM-SetGlobalEnv\" on-event ] != \$OnEvent\ + ) do={\r\ + \n /system/scheduler/set \"AM-SetGlobalEnv\" on-event=\$OnEvent;\r\ + \n}\r\ + \n# Add Update Script scheduler\r\ + \n:put \"Add or/and fix Update Script scheduler\";\r\ + \n:set OnEvent \":global ScriptInstallUpdate; \\\$ScriptInstallUpdate;\";\ + \r\ + \n:set Comment \"Every Day Check For Update Scripts\";\r\ + \n:if ([ :len [ /system/scheduler/find where name=\"AM-ScriptInstallUpdate\ + \" ] ] = 0) do={\r\ + \n/system/scheduler/add name=\"AM-ScriptInstallUpdate\" comment=\$Comment \ + start-time=startup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady;\r\ + \n :retry { :if (\$GlobalConfReady != true) do={ :error (\"Global configs\ + \_not ready.\"); }; } delay=100ms max=5;\r\ + \n\r\ + \n:log warning (\"This script \$ScriptName Loaded \" . \\\r\ + \n [ \$IfThenElse (\$CommitId != \"unknown\") ([ \$CommitBrief ] . \" \ + \") ] . \\\r\ + \n \"on \" . \$devBoardName . \"\\nRouterOS: \" . \$devCurVersion . \"\ + \\nArchitecture: \" . \$devCurArch . \"\\nIdentity: \" . \$Identity);\r\ + \n # signal we are ready\r\ + \n:set GlobalFuncReady true;\r\ + \n:set ExitOK true;\r\ + \n\r\ + \n:log info (\$0 . \"Global configs ready!\");\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=fetchCustom owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + \r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.10.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.10.pub\";\r\ + \n#\r\ + \n#root.mnuc.backuper\r\ + \n\r\ + \n#/tool/fetch mode=https url=(\$GlobalScriptsUrl . \".bak/mikro_bak_rsa@1\ + 0.30.30.81.pub\") dst-path=\"/mikro_bak_rsa@10.30.30.81.pub\";\r\ + \n#:local Script AM-GlobalConfig;\r\ + \n#/system/script/add name=\$Script owner=\$Script source=([ /tool/fetch c\ + heck-certificate=yes-without-crl url=(\$GlobalScriptsUrl . \$Script . \".r\ + sc\") output=user as-value ]->\"data\");\r\ + \n#/usb1/mikro_bak_rsa.pub\r\ + \n#:local FetchFile AM-DOHCert.rsc\r\ + \n\r\ + \n:global GlobalScriptsUrl \"https://ros.vados.ru/tmp/\";\r\ + \n:global MkDir;\r\ + \n\r\ + \n:local FetchFile Binary.backup\r\ + \n:local localDir \"[usb1]/scripts/\";\r\ + \n\r\ + \n\$MkDir \$localDir;\r\ + \n\r\ + \n/tool/fetch mode=https url=(\$GlobalScriptsUrl . \$FetchFile) dst-path=(\ + \$localDir . \$FetchFile);\r\ + \n" +add dont-require-permissions=yes name=MkTmpfs owner=vados policy=\ + ftp,read,write,policy,test,sniff,sensitive source=\ + ":global MkDir;\r\ + \n\r\ + \n\$MkDir /usb1/tmpfs;" +add dont-require-permissions=no name=CreateContainer owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + local contIF \"veth1\";\r\ + \n:local contIP \"10.10.10.10/24\";\r\ + \n:local contGW \"10.10.10.1\";\r\ + \n#/interface/veth/add name=\$contIF address=\$contIP gateway=\$contGW;\r\ + \n:local contBridgeIF \"Bridge-DOC\";\r\ + \n:local contBridgeIP \"10.10.10.1/24\";\r\ + \n/interface/bridge/add name=\$contBridgeIF;\r\ + \n/ip/address/add address=\$contBridgeIP interface=\$contBridgeIF;\r\ + \n/interface/bridge/port/add bridge=\$contBridgeIF interface=\$contIF;\r\ + \n/container/config/set ram-high=768M registry-url=https://registry-1.dock\ + er.io tmpdir=sata1/tmp\r\ + \n" +add dont-require-permissions=no name=carkeeperbot owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/mounts/add list=carkeeper_configs/.profile src=sata1/carkeeper/c\ + onfigs/.profile dst=/root/.ashrc;\r\ + \n/container/mounts/add list=carkeeper_configs/php.ini src=sata1/carkeeper\ + /configs/php.ini dst=/etc/php82/php.ini;\r\ + \n#/container/mounts/add list=carkeeper_configs src=sata1/carkeeper/config\ + s dst=/configs;\r\ + \n/container/mounts/add list=carkeeper_app src=sata1/carkeeper/app dst=/ap\ + p;\r\ + \n/container/mounts/add list=carkeeper_scripts src=sata1/carkeeper/scripts\ + \_dst=/scripts;\r\ + \n/container/mounts/add list=carkeeper_configs/sshd_config src=sata1/carke\ + eper/configs/sshd_config dst=/etc/ssh/sshd_config;\r\ + \n\r\ + \n/container/mounts/add list=carkeeper_tmp src=sata1/carkeeper/tmp dst=/va\ + r/tmp;\r\ + \n/container/mounts/add list=carkeeper_sync src=sata1/carkeeper/sync dst=/\ + var/sync;\r\ + \n" +add comment="Enable or disable ip addresses based on bridge port state" \ + dont-require-permissions=no name=mod/AM-IPbridge owner=mod/AM-IPbridge \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-IPbridge\r\ + \n# Script comment: Enable or disable ip addresses based on bridge port st\ + ate\r\ + \n# Copyright (c) 2005-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n# Add this Script scheduler\r\ + \n:if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) do\ + ={\r\ + \n:log warning (\"SystemScheduler for script: \" . \$ScriptName . \" is NO\ + T SET! Fix It Now!\");\r\ + \n:local OnEvent \"/system/script/run \$ScriptName;\";\r\ + \n:local Comment \"Every Day Check For Fake Bridges\";\r\ + \n/system/scheduler/add name=\$ScriptName comment=\$Comment start-time=sta\ + rtup interval=1d on-event=\$OnEvent;\r\ + \n}\r\ + \n\r\ + \n:foreach Bridge in=[ /interface/bridge/find ] do={\r\ + \n :local BrName [ /interface/bridge/get \$Bridge name ];\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName ] ] > \ + 0) do={\r\ + \n :if ([ :len [ /interface/bridge/port/find where bridge=\$BrName and \ + inactive=no ] ] = 0) do={\r\ + \n /ip/address/disable [ find where !dynamic interface=\$BrName ];\r\ + \n } else={\r\ + \n /ip/address/enable [ find where !dynamic interface=\$BrName ];\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n" +add comment="Use Telegram to chat with your Router and send commands" \ + dont-require-permissions=no name=mod/AM-TG-Bot owner=mod/AM-TG-Bot \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Bot\r\ + \n# Script comment: Use Telegram to chat with your Router and send command\ + s\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global Identity;\r\ + \n :global TelegramChatActive;\r\ + \n :global TelegramChatGroups;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdsTrusted;\r\ + \n :global TelegramChatOffset;\r\ + \n :global TelegramChatRunTime;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramRandomDelay;\r\ + \n :global TelegramTokenId;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global EscapeForRegEx;\r\ + \n :global FileExists;\r\ + \n :global GetRandom20CharAlNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global LogPrintVerbose;\r\ + \n :global MAX;\r\ + \n :global MIN;\r\ + \n :global MkDir;\r\ + \n :global RandomDelay;\r\ + \n :global RmDir;\r\ + \n :global ScriptLock;\r\ + \n :global SendTelegram2;\r\ + \n :global SymbolForNotification;\r\ + \n :global ValidateSyntax;\r\ + \n :global WaitForFile;\r\ + \n :global WaitFullyConnected;\r\ + \n\r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$WaitFullyConnected;\r\ + \n\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$ScriptName ] ] = 0) \ + do={\r\ + \n /system/scheduler/add start-time=startup interval=30s name=\$ScriptN\ + ame on-event=\"/system/script/run \$ScriptName;\" comment=\"Telegram Chat \ + Bot\";\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramChatOffset ] != \"array\") do={\r\ + \n :set TelegramChatOffset { 0; 0; 0 };\r\ + \n }\r\ + \n :if ([ :typeof \$TelegramRandomDelay ] != \"num\") do={\r\ + \n :set TelegramRandomDelay 0;\r\ + \n }\r\ + \n\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Downloading required certificate \ + failed.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n \$RandomDelay \$TelegramRandomDelay;\r\ + \n\r\ + \n :local Data false;\r\ + \n :for I from=1 to=4 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl outpu\ + t=user \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/get\ + Updates\?offset=\" . \\\r\ + \n \$TelegramChatOffset->0 . \"&allowed_updates=%5B%22message%22%\ + 5D\") as-value ]->\"data\");\r\ + \n :set TelegramRandomDelay [ \$MAX 0 (\$TelegramRandomDelay - 1) ]\ + ;\r\ + \n } do={\r\ + \n :if (\$I < 4) do={\r\ + \n \$LogPrint debug \$ScriptName (\"Fetch failed, \" . \$I . \". \ + try: \" . \$Err);\r\ + \n :set TelegramRandomDelay [ \$MIN 15 (\$TelegramRandomDelay + 5\ + ) ];\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n \$LogPrint warning \$ScriptName (\"Failed getting updates.\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local UpdateID 0;\r\ + \n :local Uptime [ /system/resource/get uptime ];\r\ + \n :foreach Update in=(\$JSON->\"result\") do={\r\ + \n :set UpdateID (\$Update->\"update_id\");\r\ + \n \$LogPrintVerbose debug \$ScriptName (\"Update \" . \$UpdateID . \":\ + \_\" . [ :serialize to=json \$Update ]);\r\ + \n\r\ + \n :local Message (\$Update->\"message\");\r\ + \n :local IsAnyReply ([ :typeof (\$Message->\"reply_to_message\") ] = \ + \"array\");\r\ + \n :local IsMyReply (\$TelegramMessageIDs->[ :tostr (\$Message->\"reply\ + _to_message\"->\"message_id\") ]);\r\ + \n :if ((\$IsMyReply = 1 || \$TelegramChatOffset->0 > 0 || \$Uptime > 5\ + m) && \$UpdateID >= \$TelegramChatOffset->2) do={\r\ + \n :local Trusted false;\r\ + \n :local Chat (\$Message->\"chat\");\r\ + \n :local From (\$Message->\"from\");\r\ + \n :local Command (\$Message->\"text\");\r\ + \n :local ThreadId [ \$IfThenElse (\$Message->\"is_topic_message\") (\ + \$Message->\"message_thread_id\") \"\" ];\r\ + \n\r\ + \n :foreach IdsTrusted in=(\$TelegramChatId, \$TelegramChatIdsTrusted\ + ) do={\r\ + \n :if (\$From->\"id\" = \$IdsTrusted || \\\r\ + \n \$From->\"username\" = \$IdsTrusted || \\\r\ + \n \$Chat->\"id\" = \$IdsTrusted) do={\r\ + \n :set Trusted true;\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Trusted = true) do={\r\ + \n :local Done false;\r\ + \n :if (\$Command = \"\?\") do={\r\ + \n \$LogPrint info \$ScriptName (\"Sending notice for update \" .\ + \_\$UpdateID . \".\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=([ \$IfThenElse ([ :len (\$From->\"first_name\") ] >\ + \_0) (\"Hello \" . (\$From->\"first_name\") . \"!\\n\\n\") ] . \\\r\ + \n \"Online\" . [ \$IfThenElse \$TelegramChatActive \" (and a\ + ctive!)\" ] . \", awaiting your commands!\") });\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && [ :pick \$Command 0 1 ] = \"!\") do={\r\ + \n :if (\$Command ~ (\"^! *(\" . [ \$EscapeForRegEx \$Identity ] \ + . \"|@\" . \$TelegramChatGroups . \")\\\$\")) do={\r\ + \n :set TelegramChatActive true;\r\ + \n } else={\r\ + \n :set TelegramChatActive false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Now \" . [ \$IfThenElse \$Tele\ + gramChatActive \"active\" \"passive\" ] . \\\r\ + \n \" from update \" . \$UpdateID . \"!\");\r\ + \n :set Done true;\r\ + \n }\r\ + \n :if (\$Done = false && (\$IsMyReply = 1 || (\$IsAnyReply = false\ + \_&& \\\r\ + \n \$TelegramChatActive = true)) && [ :len \$Command ] > 0) do\ + ={\r\ + \n :if ([ \$ValidateSyntax \$Command ] = true) do={\r\ + \n :local State \"\";\r\ + \n :local File (\"tmpfs/telegram-chat/\" . [ \$GetRandom20CharA\ + lNum 6 ]);\r\ + \n :if ([ \$MkDir \"tmpfs/telegram-chat\" ] = false) do={\r\ + \n \$LogPrint error \$ScriptName (\"Failed creating directory\ + !\");\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n \$LogPrint info \$ScriptName (\"Running command from update \ + \" . \$UpdateID . \": \" . \$Command);\r\ + \n :execute script=(\":do {\\n\" . \$Command . \"\\n} on-error=\ + { /file/add name=\\\"\" . \$File . \".failed\\\" };\" . \\\r\ + \n \"/file/add name=\\\"\" . \$File . \".done\\\"\") file=(\$\ + File . \"\\00\");\r\ + \n :if ([ \$WaitForFile (\$File . \".done\") [ \$EitherOr \$Tel\ + egramChatRunTime 20s ] ] = false) do={\r\ + \n :set State ([ \$SymbolForNotification \"warning-sign\" ] .\ + \_\"The command did not finish, still running in background.\\n\\n\");\r\ + \n }\r\ + \n :if ([ \$FileExists (\$File . \".failed\") ] = true) do={\r\ + \n :set State ([ \$SymbolForNotification \"cross-mark\" ] . \ + \"The command failed with an error!\\n\\n\");\r\ + \n }\r\ + \n :local Content ([ /file/read chunk-size=32768 file=\$File as\ + -value ]->\"data\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=true; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n \$State . [ \$IfThenElse ([ :len \$Content ] > 0) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"Output:\\n\" .\ + \_\$Content) \\\r\ + \n ([ \$SymbolForNotification \"memo\" ] . \"No output.\") \ + ]) });\r\ + \n \$RmDir \"tmpfs/telegram-chat\";\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName (\"The command from update \" .\ + \_\$UpdateID . \" failed syntax validation!\");\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\ + \"); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \ + \\\r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \ + \"Telegram Chat\"); \\\r\ + \n message=([ \$SymbolForNotification \"gear\" ] . \"Command:\ + \\n\" . \$Command . \"\\n\\n\" . \\\r\ + \n [ \$SymbolForNotification \"cross-mark\" ] . \"The comma\ + nd failed syntax validation!\") });\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n :local MessageText (\"Received a message from untrusted contact \ + \" . \\\r\ + \n [ \$IfThenElse ([ :len (\$From->\"username\") ] = 0) \"without\ + \_username\" (\"'\" . \$From->\"username\" . \"'\") ] . \\\r\ + \n \" (ID \" . \$From->\"id\" . \") in update \" . \$UpdateID . \ + \"!\");\r\ + \n :if (\$Command ~ (\"^! *\" . [ \$EscapeForRegEx \$Identity ] . \ + \"\\\$\")) do={\r\ + \n \$LogPrint warning \$ScriptName \$MessageText;\r\ + \n \$SendTelegram2 ({ origin=\$ScriptName; chatid=(\$Chat->\"id\"\ + ); silent=false; \\\r\ + \n replyto=(\$Message->\"message_id\"); threadid=\$ThreadId; \\\ + \r\ + \n subject=([ \$SymbolForNotification \"speech-balloon\" ] . \"\ + Telegram Chat\"); \\\r\ + \n message=(\"You are not trusted.\") });\r\ + \n } else={\r\ + \n \$LogPrint info \$ScriptName \$MessageText;\r\ + \n }\r\ + \n }\r\ + \n } else={\r\ + \n \$LogPrint debug \$ScriptName (\"Already handled update \" . \$Upd\ + ateID . \".\");\r\ + \n }\r\ + \n }\r\ + \n :set TelegramChatOffset ([ :pick \$TelegramChatOffset 1 3 ], \\\r\ + \n [ \$IfThenElse (\$UpdateID >= \$TelegramChatOffset->2) (\$UpdateID +\ + \_1) (\$TelegramChatOffset->2) ]);\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add comment="Script send Notifications in Telegram" dont-require-permissions=\ + no name=mod/AM-TG-Notifications owner=mod/AM-TG-Notifications policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: mod/AM-TG-Notifications\r\ + \n# Script comment: Script send Notifications in Telegram\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# requires device-mode, fetch, scheduler\r\ + \n:global FlushTelegramQueue;\r\ + \n:global GetTelegramChatId;\r\ + \n:global NotificationFunctions;\r\ + \n:global PurgeTelegramQueue;\r\ + \n:global SendTelegram;\r\ + \n:global SendTelegram2;\r\ + \n# flush telegram queue\r\ + \n:set FlushTelegramQueue do={ :onerror Err {\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global CertificateAvailable;\r\ + \n :global IsFullyConnected;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$IsFullyConnected ] = false) do={\r\ + \n \$LogPrint debug \$0 (\"System is not fully connected, not flushing.\ + \");\r\ + \n :return false;\r\ + \n }\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local AllDone true;\r\ + \n :local QueueLen [ :len \$TelegramQueue ];\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueue\ + \" ] ] > 0 && \$QueueLen = 0) do={\r\ + \n \$LogPrint warning \$0 (\"Flushing Telegram messages from scheduler,\ + \_but queue is empty.\");\r\ + \n }\r\ + \n :foreach Id,Message in=\$TelegramQueue do={\r\ + \n :if ([ :typeof \$Message ] = \"array\" ) do={\r\ + \n :onerror Err {\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl out\ + put=user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . (\$Message->\"tokenid\") .\ + \_\"/sendMessage\") \\\r\ + \n http-data=(\$Message->\"http-data\") as-value ]->\"data\");\r\ + \n :set (\$TelegramQueue->\$Id);\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json v\ + alue=\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint debug \$0 (\"Sending queued Telegram message failed: \ + \" . \$Err);\r\ + \n :set AllDone false;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$AllDone = true && \$QueueLen = [ :len \$TelegramQueue ]) do={\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ]\ + ;\r\ + \n :set TelegramQueue;\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# get the chat id\r\ + \n:set GetTelegramChatId do={ :onerror Err {\r\ + \n :global TelegramTokenId;\r\ + \n :global CertificateAvailable;\r\ + \n :global LogPrint;\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority - \ + G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\"\ + );\r\ + \n :return false;\r\ + \n }\r\ + \n :local Data;\r\ + \n :onerror Err {\r\ + \n :set Data ([ /tool/fetch check-certificate=yes-without-crl output=us\ + er \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TelegramTokenId . \"/getUpd\ + ates\?offset=0\" . \\\r\ + \n \"&allowed_updates=%5B%22message%22%5D\") as-value ]->\"data\");\ + \r\ + \n } do={\r\ + \n \$LogPrint warning \$0 (\"Fetching data failed: \" . \$Err);\r\ + \n :return false;\r\ + \n }\r\ + \n :local JSON [ :deserialize from=json value=\$Data ];\r\ + \n :local Count [ :len (\$JSON->\"result\") ];\r\ + \n :if (\$Count = 0) do={\r\ + \n \$LogPrint info \$0 (\"No message received.\");\r\ + \n :return false;\r\ + \n }\r\ + \n :local Message (\$JSON->\"result\"->(\$Count - 1)->\"message\");\r\ + \n \$LogPrint info \$0 (\"The chat id is: \" . (\$Message->\"chat\"->\"id\ + \"));\r\ + \n :if ((\$Message->\"is_topic_message\") = true) do={\r\ + \n \$LogPrint info \$0 (\"The thread id is: \" . (\$Message->\"message_\ + thread_id\"));\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set (\$NotificationFunctions->\"telegram\") do={\r\ + \n :local Notification \$1;\r\ + \n :global Identity;\r\ + \n :global IdentityExtra;\r\ + \n :global TelegramChatId;\r\ + \n :global TelegramChatIdOverride;\r\ + \n :global TelegramMessageIDs;\r\ + \n :global TelegramQueue;\r\ + \n :global TelegramThreadId;\r\ + \n :global TelegramThreadIdOverride;\r\ + \n :global TelegramTokenId;\r\ + \n :global TelegramTokenIdOverride;\r\ + \n :global CertificateAvailable;\r\ + \n :global CharacterReplace;\r\ + \n :global EitherOr;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global ProtocolStrip;\r\ + \n :global SymbolForNotification;\r\ + \n :global UrlEncode;\r\ + \n :local EscapeMD do={\r\ + \n :local Text [ :tostr \$1 ];\r\ + \n :local Mode [ :tostr \$2 ];\r\ + \n :local Excl [ :tostr \$3 ];\r\ + \n :global CharacterReplace;\r\ + \n :global IfThenElse;\r\ + \n :local Chars {\r\ + \n \"body\"={ \"\\\\\"; \"`\" };\r\ + \n \"plain\"={ \"_\"; \"*\"; \"[\"; \"]\"; \"(\"; \")\"; \"~\"; \"`\"\ + ; \">\";\r\ + \n \"#\"; \"+\"; \"-\"; \"=\"; \"|\"; \"{\"; \"}\"; \".\"; \ + \"!\" };\r\ + \n }\r\ + \n :foreach Char in=(\$Chars->\$Mode) do={\r\ + \n :if ([ :typeof [ :find \$Excl \$Char ] ] = \"nil\") do={\r\ + \n :set Text [ \$CharacterReplace \$Text \$Char (\"\\\\\" . \$Char)\ + \_];\r\ + \n }\r\ + \n }\r\ + \n :if (\$Mode = \"body\") do={:return (\"```\\n\" . \$Text . \"\\n```\ + \")}\r\ + \n :return \$Text;\r\ + \n }\r\ + \n :local ChatId [ \$EitherOr (\$Notification->\"chatid\") \\\r\ + \n [ \$EitherOr (\$TelegramChatIdOverride->(\$Notification->\"origin\")\ + ) \$TelegramChatId ] ];\r\ + \n :local ThreadId [ \$EitherOr (\$Notification->\"threadid\") \\\r\ + \n [ \$EitherOr (\$TelegramThreadIdOverride->(\$Notification->\"origin\ + \")) \\\r\ + \n [ \$IfThenElse ([ :len (\$TelegramChatIdOverride->(\$Notification->\ + \"origin\")) ] = 0) \$TelegramThreadId ] ] ];\r\ + \n :local TokenId [ \$EitherOr (\$TelegramTokenIdOverride->(\$Notificatio\ + n->\"origin\")) \$TelegramTokenId ];\r\ + \n :if ([ :len \$TokenId ] = 0 || [ :len \$ChatId ] = 0) do={:return fals\ + e}\r\ + \n :if ([ :typeof \$TelegramMessageIDs ] = \"nothing\") do={:set Telegram\ + MessageIDs ({})}\r\ + \n :local Truncated false;\r\ + \n :local Text (\"*__\" . [ \$EscapeMD (\"[\" . \$IdentityExtra . \$Ident\ + ity . \"] \" . \\\r\ + \n (\$Notification->\"subject\")) \"plain\" ] . \"__*\\n\\n\");\r\ + \n :local LenSubject [ :len \$Text ];\r\ + \n :local LenMessage [ :len (\$Notification->\"message\") ];\r\ + \n :local LenLink ([ :len (\$Notification->\"link\") ] * 2);\r\ + \n :local LenSum (\$LenSubject + \$LenMessage + \$LenLink);\r\ + \n :if (\$LenSum > 3968) do={\r\ + \n :set Text (\$Text . [ \$EscapeMD ([ :pick (\$Notification->\"message\ + \") 0 (3840 - \$LenSubject - \$LenLink) ] . \"...\") \"body\" ]);\r\ + \n :set Truncated true;\r\ + \n } else={:set Text (\$Text . [ \$EscapeMD (\$Notification->\"message\")\ + \_\"body\" ])}\r\ + \n :if (\$LenLink > 0) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"link\" ] .\ + \_\\\r\ + \n \"[\" . [ \$EscapeMD [ \$ProtocolStrip (\$Notification->\"link\") \ + ] \"plain\" ] . \"]\" . \\\r\ + \n \"(\" . [ \$EscapeMD (\$Notification->\"link\") \"plain\" ] . \")\ + \");\r\ + \n }\r\ + \n :if (\$Truncated = true) do={\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"scissors\"\ + \_] . \\\r\ + \n [ \$EscapeMD (\"The message was too long and has been truncated, c\ + ut off _\" . \\\r\ + \n ((\$LenSum - [ :len \$Text ]) * 100 / \$LenSum) . \"%_!\") \"plain\ + \" \"_\" ]);\r\ + \n }\r\ + \n :local HTTPData (\"chat_id=\" . \$ChatId . \"&disable_notification=\" \ + . (\$Notification->\"silent\") . \\\r\ + \n \"&reply_to_message_id=\" . (\$Notification->\"replyto\") . \"&mes\ + sage_thread_id=\" . \$ThreadId . \\\r\ + \n \"&disable_web_page_preview=true&parse_mode=MarkdownV2\");\r\ + \n :onerror Err {\r\ + \n :if ([ \$CertificateAvailable \"Go Daddy Root Certificate Authority \ + - G2\" \"fetch\" ] = false) do={\r\ + \n \$LogPrint warning \$0 (\"Downloading required certificate failed.\ + \");\r\ + \n :error false;\r\ + \n }\r\ + \n :local Data ([ /tool/fetch check-certificate=yes-without-crl output=\ + user http-method=post \\\r\ + \n (\"https://api.telegram.org/bot\" . \$TokenId . \"/sendMessage\") \ + \\\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) as-va\ + lue ]->\"data\");\r\ + \n :set (\$TelegramMessageIDs->[ :tostr ([ :deserialize from=json value\ + =\$Data ]->\"result\"->\"message_id\") ]) 1;\r\ + \n } do={\r\ + \n \$LogPrint info \$0 (\"Failed sending Telegram notification: \" . \$\ + Err . \" - Queuing...\");\r\ + \n :if ([ :typeof \$TelegramQueue ] = \"nothing\") do={:set TelegramQue\ + ue ({})}\r\ + \n :set Text (\$Text . \"\\n\" . [ \$SymbolForNotification \"alarm-cloc\ + k\" ] . \\\r\ + \n [ \$EscapeMD (\"This message was queued since _\" . [ /system/cloc\ + k/get date ] . \\\r\ + \n \" \" . [ /system/clock/get time ] . \"_ and may be obsolete.\") \ + \"plain\" \"_\" ]);\r\ + \n :set (\$TelegramQueue->[ :len \$TelegramQueue ]) { tokenid=\$TokenId\ + ;\r\ + \n http-data=(\$HTTPData . \"&text=\" . [ \$UrlEncode \$Text ]) };\r\ + \n :if ([ :len [ /system/scheduler/find where name=\"_FlushTelegramQueu\ + e\" ] ] = 0) do={\r\ + \n /system/scheduler/add name=\"_FlushTelegramQueue\" interval=1m sta\ + rt-time=startup \\\r\ + \n on-event=(\":global FlushTelegramQueue; \\\$FlushTelegramQueue;\ + \");\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n# purge the Telegram queue\r\ + \n:set PurgeTelegramQueue do={\r\ + \n :global TelegramQueue;\r\ + \n /system/scheduler/remove [ find where name=\"_FlushTelegramQueue\" ];\ + \r\ + \n :set TelegramQueue;\r\ + \n}\r\ + \n# send notification via telegram - expects at least two string arguments\ + \r\ + \n:set SendTelegram do={ :onerror Err {\r\ + \n :global SendTelegram2;\r\ + \n \$SendTelegram2 ({ origin=\$0; subject=\$1; message=\$2; link=\$3; sil\ + ent=\$4 });\r\ + \n} do={\r\ + \n :global ExitOnError; \$ExitOnError \$0 \$Err;\r\ + \n} }\r\ + \n# send notification via telegram - expects one array argument\r\ + \n:set SendTelegram2 do={\r\ + \n :local Notification \$1;\r\ + \n :global NotificationFunctions;\r\ + \n (\$NotificationFunctions->\"telegram\") (\"\\\$NotificationFunctions->\ + \\\"telegram\\\"\") \$Notification;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=testIfThenElseAndEitherOr owner=vados \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source=":local ExitOK false;\r\ + \n:local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local ExitError;\r\ + \n#:local IfThenElse;\r\ + \n#:local EitherOr;\r\ + \n\r\ + \n:local one 11;\r\ + \n:local two 8;\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n:local Test; # [ :totime \"22s\" ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n\r\ + \n:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set Test [ \$EitherOr \$Test \"\" ];\r\ + \n:log warning (\"\\\$ Test = \" . \$Test);\r\ + \n\r\ + \n:set ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :local IfThenElse;\r\ + \n :if (\$ExitOK = \"false\") do={\r\ + \n :log error (\$Name [ \$IfThenElse ([ :pick \$Name 0 1 ] = \"\\\$\") \ + \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n\r\ + \n#:log warning ([ \$IfThenElse (\$one != 0) \$one \$two ]);\r\ + \n\r\ + \n:set ExitOK true;\r\ + \n\$ExitError \$ExitOK \$ScriptName \"Err test custom\";" +add comment="Update and Backup send notification to EMail" \ + dont-require-permissions=no name=AM-Backup-UpdateEmail owner=\ + AM-Backup-UpdateEmail policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="#\ + !rsc by Vados\r\ + \n# RouterOS script: AM-Backup-UpdateEmail\r\ + \n# Script comment: Update and Backup send notification to EMail\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version>=6.43.7\r\ + \n# requires device-mode, fetch\r\ + \n#\r\ + \n# Updated: 15/04/2025\r\ + \n# Website: https://github.com/beeyev\r\ + \n# Notification e-mail (Make sure you have configured Email settings in T\ + ools -> Email)\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n:local IfThenElse do={:if ([ :tostr \$1 ] = \"true\" || [ :tobool \$1 ] \ + = true) do={:return \$2}; :return \$3;}\r\ + \n:local EitherOr do={\r\ + \n :if ([ :typeof \$1 ] = \"num\") do={:if ((\$1 != 0) = true) do={:retur\ + n \$1} else={:return \$2};}\r\ + \n :if ([ :typeof \$1 ] = \"time\") do={:if ((\$1 > 0s) = true) do={:retu\ + rn \$1} else={:return \$2};}\r\ + \n :if ([ :len [ :tostr \$1 ] ] > 0) do={:return \$1} else={:return \$2};\ + \r\ + \n}\r\ + \n:local ExitError do={\r\ + \n :local ExitOK [ :tostr \$1 ];\r\ + \n :local Name [ :tostr \$2 ];\r\ + \n :local Error [ :tostr \$3 ];\r\ + \n :if (\$ExitOK = \"false\") do={:log error (\$Name [ \$IfThenElse ([ :p\ + ick \$Name 0 1 ] = \"\\\$\") \\\r\ + \n \"Function\" \"Script\" ] . \" '\" . \$Name . \"' exited with er\ + ror\" . \\\r\ + \n [ \$IfThenElse (!(\$Error ~ \"^(|true|false)\\\$\")) (\": \" . \ + \$Error) \".\" ]);}\r\ + \n}\r\ + \n\r\ + \n:global LogPrint;\r\ + \n:global EditSchedulers;\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n:local SchedInterval \"7d\";\r\ + \n:local SchedStartTime \"03:41:27\";\r\ + \n:local SchedComment \"Every 7 Day Check For Update and Backup send notif\ + ication to EMail.\";\r\ + \n\r\ + \n# Function to add or edit schedulers for scripts, to ensure they are set\ + \_up correctly\r\ + \n# How to use:\r\ + \n# Call this function with the following parameters:\r\ + \n# 1. \$1 - Scheduler name (usually same as script name) [*]\r\ + \n# 2. \$2 - Interval (e.g. \"1d\" (default is \"1d\")) [**]\r\ + \n# 3. \$3 - Start Time (e.g. \"00:00:00\", default is current time) [**]\ + \r\ + \n# 4. \$4 - Comment (optional, default: \"Scheduler for script: \")\ + \_[**]\r\ + \n# 5. \$5 - On Event command (e.g. \"/system/script { run ; }\" (de\ + fault is \"/system/script { run \$SchedName; }\")) [**]\r\ + \n# 6. \$6 - Policy (e.g. \"ftp,reboot,read,write,policy,test,password,sni\ + ff,sensitive,romon\" (default is the same)) [**]\r\ + \n# 7. \$7 - Start Date (e.g. \"jan/01/1970\", default is current date) [*\ + *]\r\ + \n# Notes:\r\ + \n# * - Scheduler name is required, and is used to identify the scheduler\ + \_to create or edit. It is usually the same as the script name (\$ScriptNa\ + me).\r\ + \n# ** - If optional parameters are not provided, default values will be u\ + sed.\r\ + \n# This allows for quick setup with minimal parameters, while still \ + providing flexibility for customization.\r\ + \n# Example usage:\r\ + \n# :if ([ \$EditSchedulers \"my-script\" ] = false) do={:set ExitOK false\ + ; :error true;}\r\ + \n# :if ([ \$EditSchedulers \"my-script\" \"1d\" \"03:41:27\" \"My custom \ + scheduler comment\" false false \"jan/01/1970\" ] = false) do={:set ExitOK\ + \_false; :error true;}\r\ + \n\r\ + \n:set EditSchedulers do={\r\ + \n :local SchedName [ :tostr \$1 ];\r\ + \n :if ([ :len \$SchedName ] = 0) do={ :return false; }\r\ + \n :local Interval [ :tostr \$2 ];\r\ + \n :if ([ :len \$Interval ] = 0) do={ :set Interval \"1d\"; }\r\ + \n :local StartTime [ :tostr \$3 ];\r\ + \n :if ([ :len \$StartTime ] = 0) do={ :set StartTime [/system/clock/get \ + time]; }\r\ + \n :local Comment [ :tostr \$4 ];\r\ + \n :if ([ :len \$Comment ] = 0) do={ :set Comment \"Scheduler for script:\ + \_\$SchedName\"; }\r\ + \n :local OnEvent [ :tostr \$5 ];\r\ + \n :if ([ :len \$OnEvent ] = 0) do={ :set OnEvent \"/system/script { run \ + \$SchedName; }\"; }\r\ + \n :local Policy [ :tostr \$6 ];\r\ + \n :if ([ :len \$Policy ] = 0) do={ :set Policy \"ftp,reboot,read,write,p\ + olicy,test,password,sniff,sensitive,romon\"; }\r\ + \n :local StartDate [ :tostr \$7 ];\r\ + \n :if ([ :len \$StartDate ] = 0) do={ :set StartDate [/system/clock/get \ + date]; }\r\ + \n\r\ + \n :onerror Err {\r\ + \n # Check if scheduler exists, if not - create it\r\ + \n :if ([ :len [ /system/scheduler/find where name=\$SchedName ] ] = 0)\ + \_do={\r\ + \n :log warning (\$SchedName . \"System Scheduler for script: \" . \$\ + SchedName . \" is NOT SET! Fix It Now!\");\r\ + \n /system/scheduler/add comment=\$Comment interval=\$Interval name=\ + \$SchedName on-event=\$OnEvent policy=\$Policy start-date=\$StartDate star\ + t-time=\$StartTime;\r\ + \n }\r\ + \n # Check if scheduler parameters are correct, if not - fix them\r\ + \n :if ([ /system/scheduler/get \$SchedName comment ] != \$Comment) do=\ + {\r\ + \n /system/scheduler/set \$SchedName comment=\$Comment;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName interval ] != \$Interval) d\ + o={\r\ + \n /system/scheduler/set \$SchedName interval=\$Interval;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName on-event ] != \$OnEvent) do\ + ={\r\ + \n /system/scheduler/set \$SchedName on-event=\$OnEvent;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName policy ] != \$Policy) do={\ + \r\ + \n /system/scheduler/set \$SchedName policy=\$Policy;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-date ] != \$StartDate\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-date=\$StartDate;\r\ + \n }\r\ + \n :if ([ /system/scheduler/get \$SchedName start-time ] != \$StartTime\ + ) do={\r\ + \n /system/scheduler/set \$SchedName start-time=\$StartTime;\r\ + \n }\r\ + \n } do={:log error (\$SchedName . \"Failed to add/modify scheduler for '\ + \" . \$SchedName . \"' failed: \" . \$Err); :return false};\r\ + \n :return true;\r\ + \n}\r\ + \n\r\ + \n:if ([ \$EditSchedulers \$ScriptName \$SchedInterval \$SchedStartTime \$\ + SchedComment ] = false) do={\r\ + \n :log error (\$ScriptName . \"Failed to add/modify scheduler for \" . \ + \$ScriptName . \"!\");\r\ + \n :set ExitOK true;\r\ + \n :error true;\r\ + \n}\r\ + \n\r\ + \n# Local Function CheckOSUpdateMode\r\ + \n:local CheckOSUpdateMode;\r\ + \n:set CheckOSUpdateMode do={\r\ + \n :local NewMode [ :tostr \$1 ];\r\ + \n :if ([ :len \$NewMode ] = 0) do={\r\ + \n :log error (\$0 . \"/nFunction /\$CheckOSUpdateMode received empty v\ + alue!\");\r\ + \n :return false;\r\ + \n :error true;\r\ + \n }\r\ + \n\r\ + \n :global BackupAndUpdateMode;\r\ + \n :global OldMode [ :tostr \$BackupAndUpdateMode ];\r\ + \n :if (\$NewMode != \$BackupAndUpdateMode && \$NewMode = \"updateOnce\")\ + \_do={\r\ + \n :set BackupAndUpdateMode [ :tostr \$NewMode ];\r\ + \n :log info (\$0 . \"/nOk. /\$BackupAndUpdateMode set to: '\" . \$NewM\ + ode . \"'.\\nYou're a good boy! ))\\nI'm launching the update in 5 seconds\ + .\");\r\ + \n :delay 5;\r\ + \n /system/script { run \$ScriptName; };\r\ + \n } else={\r\ + \n :log warning (\$0 . \"/nFunction /\$CheckOSUpdateMode received value: \ + '\" . \$NewMode . \"', but is may be only \\\"updateOnce\\\"!\");\r\ + \n :return false;\r\ + \n }\r\ + \n :return true;\r\ + \n :error false;\r\ + \n}\r\ + \n\r\ + \n# :if ([ :len [ /system/scheduler/find where name=\"running-from-backup\ + -partition\" ] ] > 0) do={\r\ + \n# \$LogPrint warning \$ScriptName (\"Running from backup partition, r\ + efusing to act.\");\r\ + \n# :set ExitOK true;\r\ + \n# :error false;\r\ + \n# }\r\ + \n\r\ + \n:global EmailGeneralTo;\r\ + \n:global BackupAndUpdateMode;\r\ + \n:global forceBackup;\r\ + \n:global BackupPassword;\r\ + \n:global BackupSens;\r\ + \n:global updateChannel;\r\ + \n\r\ + \n:global DevInfoIncludeIP;\r\ + \n\r\ + \n# Installs patch updates only (BackupAndUpdateMode = \"osupdate\").\r\ + \n# Works for `stable` and `long-term` channels.\r\ + \n# Updates only if MAJOR.MINOR match (e.g. 6.43.2 > 6.43.6 allowed, 6.44.\ + 1 skipped).\r\ + \n# Sends info if a newer (non-patch) version is found.\r\ + \n:local installOnlyPatchUpdates false;\r\ + \n:local scriptVersion \"26.04.30\";\r\ + \n:local copyrightUrl \"https://www.github.com/vados-dev/\";\r\ + \n#Script messages prefix\r\ + \n:local SMP \"BkpAndUpdate:\";\r\ + \n\r\ + \n:local exitErrorMessage \"\$SMP script stopped due to an error. Please c\ + heck logs for more details.\";\r\ + \n:log info \"\\n\\n\$SMP Script \\\"Mikrotik RouterOS automatic backup & \ + update\\\" v.\$scriptVersion started.\";\r\ + \n:log info \"\$SMP Script Mode: `\$BackupAndUpdateMode`, Update channel: \ + `\$updateChannel`, Force backup: `\$forceBackup`, Install only patch updat\ + es: `\$installOnlyPatchUpdates`\";\r\ + \n\r\ + \n## vv FUNCTIONS vv ##\r\ + \n:global WaitCheckUpdates; \$WaitCheckUpdates;\r\ + \n:global MiniDateTimeStamp;\r\ + \n:local MDTSFix [\$MiniDateTimeStamp];\r\ + \n:global Identity;\r\ + \n:global IdentityShort;\r\ + \n:global devBoardName;\r\ + \n:global runningVersion;\r\ + \n:global runningChannel;\r\ + \n:global devModel;\r\ + \n:global devRbSerialNumber;\r\ + \n:global ROsVerAvail;\r\ + \n:global PkgUpdStatus;\r\ + \n\r\ + \n# Checks if two RouterOS version strings differ only by the patch versio\ + n\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.2.4\"] # Output: true\r\ + \n# :put [\$FuncIsPatchUpdateOnly \"6.2.1\" \"6.3.1\"] # Output: false\r\ + \n:local FuncIsPatchUpdateOnly do={\r\ + \n :local ver1 \$1;\r\ + \n :local ver2 \$2;\r\ + \n # Extract the major and minor components from a version\r\ + \n :local extractMajorMinor do={\r\ + \n :local ver \$1;\r\ + \n :local dot1 [:find \$ver \".\"];\r\ + \n :if (\$dot1 = -1) do={:return \$ver}\r\ + \n :local major [:pick \$ver 0 \$dot1];\r\ + \n :local rest [:pick \$ver (\$dot1 + 1) [:len \$ver]];\r\ + \n :local dot2 [:find \$rest \".\"];\r\ + \n :local minor \$rest;\r\ + \n :if (\$dot2 >= 0) do={:set minor [:pick \$rest 0 \$dot2]}\r\ + \n :return (\$major . \".\" . \$minor);\r\ + \n }\r\ + \n\r\ + \n# Compare the major and minor components of both version strings\r\ + \n:if ([\$extractMajorMinor \$ver1] = [\$extractMajorMinor \$ver2]) do={:r\ + eturn true}\r\ + \n :return false;\r\ + \n}\r\ + \n# Creates backups and returns array of names\r\ + \n# Possible arguments:\r\ + \n# \$1 - file name, without extension\r\ + \n# \$2 - password (optional)\r\ + \n# \$3 - sensitive data in config (optional, default: false)\r\ + \n# Example:\r\ + \n#:put [\$FuncCreateBackups \$backupName]\r\ + \n:local FuncCreateBackups do={\r\ + \n :local backupName [ :tostr \$1 ];\r\ + \n :local BackPass \$2;\r\ + \n :local BackSens \$3;\r\ + \n\r\ + \n #Script messages prefix\r\ + \n :local SMP \"BkpAndUpdate:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` started, input:\ + \_`\$backupName`\");\r\ + \n\r\ + \n # validate required parameter: backupName\r\ + \n :if ([:typeof \$backupName] != \"str\" or [:len \$backupName] = 0) do=\ + {\r\ + \n :log error \"\$SMP parameter 'backupName' is required and must be a \ + non-empty string\";\r\ + \n# :log warning \"\$SMP parameter '\\\$backupName' is required and mus\ + t be a non-empty string.\\nI set '\\\$backupName' to 'default-backup'\";\r\ + \n# :set \$backupName \"default-backup\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n\r\ + \n :local backupFileSys \"\$backupName.backup\";\r\ + \n :local backupFileConfig \"\$backupName.rsc\";\r\ + \n :local backupNames {\$backupFileSys;\$backupFileConfig};\r\ + \n\r\ + \n ## Perform system backup\r\ + \n :if ([:len \$BackPass] = 0) do={\r\ + \n :log info (\"\$SMP starting backup without password, backup name: `\ + \$backupName`\");\r\ + \n /system backup save dont-encrypt=yes name=\$backupName;\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting backup with password, backup name: `\$ba\ + ckupName`\");\r\ + \n /system backup save password=\$BackPass name=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP system backup created: `\$backupFileSys`\");\r\ + \n ## Export config file\r\ + \n :if (\$BackSens = true) do={\r\ + \n :log info (\"\$SMP starting export config with sensitive data, backu\ + p name: `\$backupName`\");\r\ + \n # Since RouterOS v7 it needs to be explicitly set that we want to ex\ + port sensitive data\r\ + \n :if ([:pick [/system resource get version] 0 1] < 7) do={\r\ + \n :execute \"/export compact terse file=\$backupName\";\r\ + \n } else={\r\ + \n :execute \"/export compact show-sensitive terse file=\$backupName\ + \";\r\ + \n }\r\ + \n } else={\r\ + \n :log info (\"\$SMP starting export config without sensitive data, ba\ + ckup name: `\$backupName`\");\r\ + \n /export compact hide-sensitive terse file=\$backupName;\r\ + \n }\r\ + \n :log info (\"\$SMP Config export complete: `\$backupFileConfig`\");\r\ + \n :log info (\"\$SMP Waiting a little to ensure backup files are written\ + \");\r\ + \n :delay 20;\r\ + \n :if ([:len [/file find name=\$backupFileSys]] > 0) do={\r\ + \n :log info (\"\$SMP system backup file successfully saved to the file\ + \_system: `\$backupFileSys`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP system backup was not created, file does not exi\ + st: `\$backupFileSys`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :if ([:len [/file find name=\$backupFileConfig]] > 0) do={\r\ + \n :log info (\"\$SMP config backup file successfully saved to the file\ + \_system: `\$backupFileConfig`\");\r\ + \n } else={\r\ + \n :log error (\"\$SMP config backup was not created, file does not exi\ + st: `\$backupFileConfig`\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info (\"\$SMP global function `FuncCreateBackups` finished. Creat\ + ed backups, system: `\$backupFileSys`, config: `\$backupFileConfig`\")\r\ + \n :return \$backupNames;\r\ + \n}\r\ + \n# Sends an email\r\ + \n# Parameters:\r\ + \n# \$1 - to (email address)\r\ + \n# \$2 - subject\r\ + \n# \$3 - body\r\ + \n# \$4 - file attachments (optional; pass \"\" if not needed)\r\ + \n#\r\ + \n# Example:\r\ + \n# \$FuncSendEmailSafe \"admin@domain.com\" \"Backup Done\" \"Backup comp\ + lete.\" \"backup1.backup\"\r\ + \n:local FuncSendEmailSafe do={\r\ + \n :global EmailGeneralTo;\r\ + \n :local emailSubject \$2;\r\ + \n :local emailBody \$3;\r\ + \n :local emailAttachments \$4;\r\ + \n :local SMP \"Bkp&Upd:\";\r\ + \n :local exitErrorMessage \"\$SMP script stopped due to an error. Please\ + \_check logs for more details.\";\r\ + \n :log info \"\$SMP Attempting to send email to `\$EmailGeneralTo`\";\r\ + \n # SAFETY: wait for any previously queued email to finish\r\ + \n :local waitTimeoutPre 60;\r\ + \n :local waitCounterPre 0;\r\ + \n :while (([/tool e-mail get last-status] = \"resolving-dns\" or [/tool \ + e-mail get last-status] = \"in-progress\")) do={\r\ + \n :if (\$waitCounterPre >= \$waitTimeoutPre) do={\r\ + \n :log error \"\$SMP Email send aborted: previous send did not compl\ + ete after \$waitTimeoutPre seconds\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n :log info \"\$SMP Waiting for previous email to finish (status: \$[/\ + tool e-mail get last-status])...\";\r\ + \n :delay 1; \r\ + \n :set waitCounterPre (\$waitCounterPre + 1);\r\ + \n }\r\ + \n # Send the email\r\ + \n :do {\r\ + \n /tool e-mail send to=\$EmailGeneralTo subject=\$emailSubject body=\$\ + emailBody file=\$emailAttachments;\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Email send command failed to execute. Check logs \ + and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n # Wait for send status to change from \"in-progress\" / \"resolving-dn\ + s\"\r\ + \n :local waitTimeout 60;\r\ + \n :local waitCounter 0;\r\ + \n :local emailStatus \"\";\r\ + \n :log info \"\$SMP Waiting for email to be sent, timeout in `\$waitTime\ + out` seconds...\";\r\ + \n :while (\$waitCounter < \$waitTimeout) do={\r\ + \n :set emailStatus [/tool e-mail get last-status];\r\ + \n :if (\$emailStatus != \"in-progress\" and \$emailStatus != \"resolvi\ + ng-dns\") do={\r\ + \n :log info \"\$SMP Email send status received: \$emailStatus\";\r\ + \n # exit loop\r\ + \n :set waitCounter \$waitTimeout;\r\ + \n } else={:delay 1; :set waitCounter (\$waitCounter + 1)}\r\ + \n }\r\ + \n # Final decision based on last status\r\ + \n :if (\$emailStatus = \"succeeded\") do={\r\ + \n :log info \"\$SMP Email successfully sent to `\$EmailGeneralTo`\";\ + \r\ + \n } else={\r\ + \n :log error \"\$SMP Email failed to send. Status: `\$emailStatus`. Ch\ + eck logs for more details and verify email settings.\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n# Global variable to track current update step\r\ + \n# They need to be initialized here first to be available in the script\r\ + \n:global buGlobalVarTargetOsVersion;\r\ + \n:global buGlobalVarScriptStep;\r\ + \n:local scriptStep \$buGlobalVarScriptStep;\r\ + \n:do {\r\ + \n /system/script/environment remove buGlobalVarScriptStep;\r\ + \n} on-error={}\r\ + \n:if ([:len \$scriptStep] = 0) do={\r\ + \n :set scriptStep 1;\r\ + \n}\r\ + \n## ^^ FUNCTIONS ^^ ##\r\ + \n#\r\ + \n# Initial validation\r\ + \n## Check email settings\r\ + \n:if ([:len \$EmailGeneralTo] < 3) do={\r\ + \n :log error (\"\$SMP Parameter `\\\$EmailGeneralTo` is not set, or cont\ + ains invalid value. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Values will be defined later in the script\r\ + \n:local emailServer \"\";\r\ + \n:local emailFromAddress [/tool e-mail get from];\r\ + \n:log info \"\$SMP Validating email settings...\";\r\ + \n:do {\r\ + \n :set emailServer [/tool e-mail get server];\r\ + \n} on-error={\r\ + \n # This is a workaround for the RouterOS v7.12 and older versions\r\ + \n :set emailServer [/tool e-mail get address];\r\ + \n}\r\ + \n:if (\$emailServer = \"0.0.0.0\") do={\r\ + \n :log error (\"\$SMP Email server address is not correct: `\$emailServe\ + r`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n:if ([:len \$emailFromAddress] < 3) do={\r\ + \n :log error (\"\$SMP Email configuration FROM address is not correct: `\ + \$emailFromAddress`, check `Tools -> Email`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Script mode validation\r\ + \n:if (\$BackupAndUpdateMode != \"backup\" and \$BackupAndUpdateMode != \"\ + osupdate\" and \$BackupAndUpdateMode != \"updateOnce\" and \$BackupAndUpda\ + teMode != \"osnotify\") do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$BackupAndUpdateMode` is not \ + set, or contains invalid value: `\$BackupAndUpdateMode`. Script stopped.\"\ + );\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Update channel validation\r\ + \n:if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\" \ + and \$updateChannel != \"testing\" and \$updateChannel != \"development\")\ + \_do={\r\ + \n :log error (\"\$SMP Script parameter `\\\$updateChannel` is not set, o\ + r contains invalid value: `\$updateChannel`. Script stopped.\");\r\ + \n :error \$exitErrorMessage;\r\ + \n}\r\ + \n# Verify if script is set to install patch updates and if the update cha\ + nnel is valid\r\ + \n:if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \"\ + updateOnce\") and \$installOnlyPatchUpdates = true) do={\r\ + \n :if (\$updateChannel != \"stable\" and \$updateChannel != \"long-term\ + \") do={\r\ + \n :log error (\"\$SMP Patch-only updates enabled, but update channel `\ + \$updateChannel` is invalid. Only `stable` and `long-term` are supported. \ + Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n \r\ + \n :if (\$runningChannel != \"stable\" and \$runningChannel != \"long-ter\ + m\") do={\r\ + \n :log error (\"\$SMP Script is set to install only patch updates, but\ + \_the installed RouterOS version is not from `stable` or `long-term` chann\ + el: `\$runningChannel`. Script stopped\");\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n}\r\ + \n#\r\ + \n\r\ + \n:local rawTime [/system clock get time];\r\ + \n:local rawDate [/system clock get date];\r\ + \n\r\ + \n:local deviceOsVerAndChannelRunning [/system/resource/get version];\r\ + \n\r\ + \n:local backupNameTemplate (\"backup_v\" . \$runningVersion . \"_\" .\ + \_\$runningChannel . \"_\" . \$MDTSFix);\r\ + \n:local backupNameBeforeUpdate (\$backupNameTemplate . \"_before_update\"\ + );\r\ + \n:local backupNameAfterUpdate (\$backupNameTemplate . \"_after_update\")\ + ;\r\ + \n\r\ + \n## Email body template\r\ + \n:local mailSubjectPrefix \"\$SMP Device - `\$IdentityShort`\";\r\ + \n:local mailBodyCopyright \"Mikrotik RouterOS automatic backup & update \ + (ver. \$scriptVersion) \\n\$copyrightUrl\";\r\ + \n:local changelogUrl \"Check RouterOS changelog: https://mikrotik.com\ + /download/changelogs/\";\r\ + \n:local mailBodyDeviceInfo \"\";\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"Device information:\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\n-------------------\ + --\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nName: \$Identity\")\ + ;\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nModel: \$devModel\"\ + );\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBoard: \$devBoardNa\ + me\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nSerial number: \$de\ + vRbSerialNumber\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterOS version: v\ + \$deviceOsVerAndChannelRunning\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nBuild time: \$[/sys\ + tem/resource/get build-time]\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nRouterboard FW Avai\ + lable: \$ROsVerAvail\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nDevice date-time: \ + \$rawDate \$rawTime (\$[/system/clock/get time-zone-name ])\");\r\ + \n:set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nUptime: \$[/system/\ + resource/get uptime]\");\r\ + \n## IP address detection\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local PublicIpAddress [ \$GetPubIp ];\r\ + \n :set mailBodyDeviceInfo (\$mailBodyDeviceInfo . \"\\nPublic IP address\ + : \" . \$PublicIpAddress . \".\");\r\ + \n :log info \"\$SMP Public IP address detected: \$PublicIpAddress\";\r\ + \n} \r\ + \n\r\ + \n:local mailAttachments [:toarray \"\"];\r\ + \n:if (\$scriptStep = 1 or \$scriptStep = 3) do={\r\ + \n :if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP Waiting for one minute before continuing to the f\ + inal step.\");\r\ + \n :delay 1m;\r\ + \n }\r\ + \n}\r\ + \n\r\ + \n## STEP 1: Create backups, check for new RouterOS, and send email\r\ + \n## Steps 2\C3\A23 run only if auto-update is enabled and a new version i\ + s available\r\ + \n:if (\$scriptStep = 1) do={\r\ + \n :global BackupPassword;\r\ + \n :global BackupSens;\r\ + \n :local isNewOsUpdateAvailable false;\r\ + \n :local isLatestOsAlreadyInstalled true;\r\ + \n :local isOsNeedsToBeUpdated false;\r\ + \n :local isUpdateCheckSucceeded false;\r\ + \n :local isEmailNeedsToBeSent false;\r\ + \n :local mailSubjectPartAction \"\";\r\ + \n :local mailPtBodyAction \"\";\r\ + \n :local mailPtSubjectBackup \"\";\r\ + \n :local mailPtBodyBackup \"\";\r\ + \n # Checking for new version\r\ + \n :if (\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"osnotify\" or \$BackupAndUpdateMode = \"updateOnce\") do={\r\ + \n :log info (\"\$SMP Setting update channel to `\$updateChannel`\");\r\ + \n /system/package/update/set channel=\$updateChannel;\r\ + \n :log info (\"\$SMP Checking for new RouterOS version. Current instal\ + led version is: `\$runningVersion`\");\r\ + \n \$LogPrint debug \$ScriptName (\"Checking for updates...\");\r\ + \n \r\ + \n# /system/package/update/check-for-updates without-paging as-value;\ + \r\ + \n# /system/package/update check-for-updates;\r\ + \n :delay 5s;\r\ + \n :set PkgUpdStatus [ /system/package/update/get status ];\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :set ROsVerAvail [/system/package/update/get latest-version];\r\ + \n }\r\ + \n\r\ + \n :if (\$PkgUpdStatus = \"New version is available\") do={\r\ + \n :log info (\"\$SMP New RouterOS version is available: `\$ROsVerAva\ + il`\");\r\ + \n :set isNewOsUpdateAvailable true;\r\ + \n :set isLatestOsAlreadyInstalled false;\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"New RouterOS available\";\r\ + \n :set mailPtBodyAction \"New RouterOS version is available, curren\ + t version: v\$runningVersion, new version: v\$ROsVerAvail. \\n\$changelogU\ + rl\";\r\ + \n } else={\r\ + \n :if (\$PkgUpdStatus = \"System is already up to date\") do={\r\ + \n :log info (\"\$SMP No new RouterOS version is available, the lat\ + est version is already installed: `v\$runningVersion`\");\r\ + \n :set isUpdateCheckSucceeded true;\r\ + \n :set mailSubjectPartAction \"No os update available\";\r\ + \n :set mailPtBodyAction \"No new RouterOS version is available, t\ + he latest version is already installed: `v\$runningVersion`\";\r\ + \n } else={\r\ + \n :log error (\"\$SMP Failed to check for new RouterOS version. Pa\ + ckage check status: `\$PkgUpdStatus`\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :set mailSubjectPartAction \"Error unable to check new os versio\ + n\";\r\ + \n :set mailPtBodyAction \"An error occurred while checking for a \ + new RouterOS version.\\nStatus returned: `\$PkgUpdStatus`\\n\\nPlease revi\ + ew the logs on the device for more details and verify internet connectivit\ + y.\";\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n # Checking if the script needs to install new os version\r\ + \n :if ((\$BackupAndUpdateMode = \"osupdate\" or \$BackupAndUpdateMode = \ + \"updateOnce\") and \$isNewOsUpdateAvailable = true) do={\r\ + \n :if (\$installOnlyPatchUpdates = true) do={\r\ + \n :if ([\$FuncIsPatchUpdateOnly \$runningVersion \$ROsVerAvail] = tr\ + ue) do={\r\ + \n :log info \"\$SMP New RouterOS version is available, and it is a\ + \_patch update. Current version: v\$runningVersion, new version: v\$ROsVer\ + Avail\";\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n } else={\r\ + \n :log info \"\$SMP The script will not install this update, becau\ + se it is not a patch update. Current version: v\$runningVersion, new versi\ + on: v\$ROsVerAvail\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThis update wil\ + l not be installed, because the script is set to install only patch update\ + s.\");\r\ + \n }\r\ + \n } else={\r\ + \n :set isOsNeedsToBeUpdated true;\r\ + \n }\r\ + \n }\r\ + \n # Checking If the script needs to create a backup\r\ + \n :if (\$forceBackup = true or \$BackupAndUpdateMode = \"backup\" or \$i\ + sOsNeedsToBeUpdated = true) do={\r\ + \n :log info (\"\$SMP Starting backup process.\");\r\ + \n :set isEmailNeedsToBeSent true;\r\ + \n :local backupName \$backupNameTemplate;\r\ + \n # This means it's the first step where we create a backup before the\ + \_update process\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :set backupName \$backupNameBeforeUpdate;\r\ + \n #Email body if the purpose of the script is to update the device\r\ + \n :set mailSubjectPartAction \"Update preparation\";\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nThe update proces\ + s for device '\$Identity' is scheduled to upgrade RouterOS from version v.\ + \$runningVersion to version v.\$ROsVerAvail (Update channel: \$updateChann\ + el)\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nPlease note: The \ + update will proceed only after a successful backup.\");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nA final report wi\ + th detailed information will be sent once the update process is completed.\ + \");\r\ + \n :set mailPtBodyAction (\$mailPtBodyAction . \"\\nIf you do not rec\ + eive a second email within the next 10 minutes, there may be an issue. Ple\ + ase check your device logs for further information.\");\r\ + \n }\r\ + \n :do {\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupName \$BackupPas\ + sword \$BackupSens];\r\ + \n :set mailPtSubjectBackup \"Backup created\";\r\ + \n :set mailPtBodyBackup \"System backups have been successfully crea\ + ted and attached to this email.\";\r\ + \n } on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :set mailPtSubjectBackup \"Backup failed\";\r\ + \n :set mailPtBodyBackup \"The script failed to create backups. Pleas\ + e check device logs for more details.\";\r\ + \n :log warning \"\$SMP Backup creation failed. Update process will b\ + e canceled if automatic update is enabled\";\r\ + \n }\r\ + \n }\r\ + \n :if (\$isEmailNeedsToBeSent = true) do={\r\ + \n :log info \"\$SMP Preparing to send email...\";\r\ + \n :local mailStep1Subject \$mailSubjectPrefix;\r\ + \n :local mailStep1Body \"\";\r\ + \n # subject\r\ + \n :if (\$mailSubjectPartAction != \"\") do={:set mailStep1Subject (\$\ + mailStep1Subject . \" - \" . \$mailSubjectPartAction)}\r\ + \n :if (\$mailPtSubjectBackup != \"\") do={:set mailStep1Subject (\$ma\ + ilStep1Subject . \" - \" . \$mailPtSubjectBackup)}\r\ + \n # body\r\ + \n :if (\$mailPtBodyAction != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyAction . \"\\n\\n\")}\r\ + \n :if (\$mailPtBodyBackup != \"\") do={:set mailStep1Body (\$mailStep1\ + Body . \$mailPtBodyBackup . \"\\n\\n\")}\r\ + \n :set mailStep1Body (\$mailStep1Body . \$mailBodyDeviceInfo . \"\\n__\ + ________\\n\" . \$mailBodyCopyright);\r\ + \n :set mailStep1Body (\$mailStep1Body . \"\\n[*** TEST START ***]\\n\\\ + \$DeviceInfo: \" . [ \$DeviceInfo ] . \"\\n[*** TEST END ***]\\n\");\r\ + \n # Send email with backups\r\ + \n :do {\$FuncSendEmailSafe \$EmailGeneralTo \$mailStep1Subject \$mailS\ + tep1Body \$mailAttachments} on-error={\r\ + \n :set isOsNeedsToBeUpdated false;\r\ + \n :log error \"\$SMP The script will not proceed with the update pro\ + cess, because the email was not sent.\";\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2s;\r\ + \n }\r\ + \n :if (\$isOsNeedsToBeUpdated = true) do={\r\ + \n :global OldMode;\r\ + \n :log info \"\$SMP everything is ready to install new RouterOS, going\ + \_to start the update process and reboot the device.\";\r\ + \n :do {\r\ + \n :local nextStep 2;\r\ + \n :if (\$isCloudHostedRouter = true) do={\r\ + \n :log info \"\$SMP The device is a cloud hosted router, the secon\ + d step updating the Routerboard firmware will be skipped.\";\r\ + \n :set nextStep 3;\r\ + \n }\r\ + \n :local scheduledCommand (\":delay 5s; /system/scheduler remove BKP\ + UPD-NEXT-BOOT-TASK; \\\r\ + \n :global buGlobalVarScriptStep \$nextStep; :global buGlobalVarTarg\ + etOsVersion \\\"\$ROsVerAvail\\\"; \\\r\ + \n :delay 10s; /system/script { run \$ScriptName; }\");\r\ + \n /system/scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\$schedu\ + ledCommand start-time=startup interval=0;\r\ + \n /system/package/update install;\r\ + \n } on-error={\r\ + \n # Failed to install new os version, remove the task and variables\ + \r\ + \n :do {\r\ + \n /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\r\ + \n :set BackupAndUpdateMode \$OldMode;\r\ + \n :delay 2;\r\ + \n :do {\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \"ERROR Remove\ + \_global variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n# :if ([ :len \$OldMode ] > 0) do={\r\ + \n# :do {\r\ + \n# :global OldMode (a);\r\ + \n# } on-error={\r\ + \n# :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Re\ + move global variable \\\$OldMode failed!\");\r\ + \n# }\r\ + \n# }\r\ + \n } on-error={\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Pleas\ + e check device logs for more details. \\\r\ + \n \\nAnd Failed to remove task and variables! Check it!\";\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove \ + task and global variables!\");\r\ + \n }\r\ + \n :log error \"\$SMP Failed to install new RouterOS version. Please \ + check device logs for more details.\";\r\ + \n :local mailUpdateErrorSubject (\$mailSubjectPrefix . \" - Update f\ + ailed\");\r\ + \n :local mailUpdateErrorBody \"The script was unable to install new \ + RouterOS version. Please check device logs for more details.\";\r\ + \n # Send email with error\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailUpdateErrorSubject \$ma\ + ilUpdateErrorBody \"\";\r\ + \n :error \$exitErrorMessage;\r\ + \n }\r\ + \n }\r\ + \n}\r\ + \n## STEP 2: (Post-reboot) Upgrade RouterBOARD firmware\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und\r\ + \n:if (\$scriptStep = 2) do={\r\ + \n :log info \"\$SMP The script is in the second step, updating Routerboa\ + rd firmware.\";\r\ + \n :log info \"\$SMP Upgrading routerboard firmware from v.\$deviceRbCurr\ + entFw to v.\$deviceRbUpgradeFw\";\r\ + \n /system routerboard upgrade;\r\ + \n :delay 2;\r\ + \n :log info \"\$SMP routerboard upgrade process was completed, going to \ + reboot in a moment!\";\r\ + \n ## Set task to send final report on the next boot\r\ + \n /system scheduler add name=BKPUPD-NEXT-BOOT-TASK on-event=\":delay 2; \ + :global buGlobalVarScriptStep 3; \\\r\ + \n :global buGlobalVarTargetOsVersion \\\"\$buGlobalVarTargetOsVersion\\\ + \"; :delay 10s; /system/script { run \$ScriptName; }; \\ \r\ + \n :delay 5s; /system/scheduler remove BKPUPD-NEXT-BOOT-TASK;\" start-ti\ + me=startup interval=0;\r\ + \n :delay 2;\r\ + \n /system reboot;\r\ + \n}\r\ + \n\r\ + \n## STEP 3: Final report (after second reboot, with delay).\r\ + \n## Runs only if auto-update is enabled and a new RouterOS version was fo\ + und.\r\ + \n:if (\$scriptStep = 3) do={\r\ + \n :log info (\"\$SMP The script is in the third step, sending final repo\ + rt.\");\r\ + \n :local targetOsVersion \$buGlobalVarTargetOsVersion;\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"buGlobalVarTargetOsV\ + ersion\"];\r\ + \n :global buGlobalVarTargetOsVersion (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR Remove glob\ + al variable \\\$buGlobalVarTargetOsVersion failed!\");\r\ + \n }\r\ + \n\r\ + \n :if ([ :len \$OldMode ] != 0) do={\r\ + \n :do {\r\ + \n# /system/script/environment remove [find name=\"OldMode\"];\r\ + \n :global OldMode (a);\r\ + \n } on-error={\r\ + \n :set \$mailSubjectPrefix (\$mailSubjectPrefix . \" ERROR! Remove\ + \_global variable \\\$OldMode failed!\");\r\ + \n }\r\ + \n }\r\ + \n :if ([:len \$targetOsVersion] = 0) do={\r\ + \n :log warning \"\$SMP Something is wrong, the script was unable to ge\ + t the target updated OS version from the global variable.\";\r\ + \n }\r\ + \n :local mailStep3Subject \$mailSubjectPrefix;\r\ + \n :local mailStep3Body \"\";\r\ + \n :if (\$targetOsVersion = \$runningVersion) do={\r\ + \n :log info \"\$SMP Successfully verified new RouterOS version: target\ + : `\$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update completed - \ + Backup created\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"RouterOS and routerboard upg\ + rade process was completed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\nNew RouterOS version: v.\ + \$targetOsVersion, routerboard firmware: v.\$deviceRbCurrentFw\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"\\n\$changelogUrl\\nBackups \ + of the upgraded system are in the attachment of this email.\\n\\n\$mailBod\ + yDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n :set mailAttachments [\$FuncCreateBackups \$backupNameAfterUpdate \$\ + BackupPassword \$BackupSens];\r\ + \n } else={\r\ + \n :log error \"\$SMP Failed to verify new RouterOS version: target: `\ + \$targetOsVersion`, current: `\$runningVersion`\";\r\ + \n :set mailStep3Subject (\$mailStep3Subject . \" - Update failed\");\r\ + \n :set mailStep3Body (\$mailStep3Body . \"The script was unable to ver\ + ify that the new RouterOS version was installed, target version: `\$target\ + OsVersion`, current version: `\$runningVersion`\\nCheck device logs for mo\ + re details.\\n\\n\$mailBodyDeviceInfo\\n\\n\$mailBodyCopyright\");\r\ + \n }\r\ + \n \$FuncSendEmailSafe \$EmailGeneralTo \$mailStep3Subject \$mailStep3Bod\ + y \$mailAttachments;\r\ + \n :if ([:len \$mailAttachments] > 0) do={\r\ + \n :log info \"\$SMP Cleaning up backup files from the file system...\"\ + ;\r\ + \n /file remove \$mailAttachments;\r\ + \n :delay 2;\r\ + \n }\r\ + \n :log info (\"\$SMP Final report email sent successfully, and the scrip\ + t has finished.\");\r\ + \n}\r\ + \n:log info (\"\$SMP the script has finished, script step: `\$scriptStep` \ + \\n\\n\");\r\ + \n\r\ + \n} do={:global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err}\r\ + \n" +add dont-require-permissions=no name=testGetPubIP owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source=":\ + global DevInfoIncludeIP;\r\ + \n:global CharacterReplace;\r\ + \n:global EscapeForRegEx;\r\ + \n:global UrlEncode;\r\ + \n\r\ + \n:if ([ \$DevInfoIncludeIP ] = true) do={\r\ + \n :global GetPubIp;\r\ + \n :local Char (\"\\n\\r\");\r\ + \n :local PublicIpAddress [\$GetPubIp];\r\ + \n# :if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 2) ] = \ + \"\\n\") do={:error true}; :set error falseon-error={:set PublicIpAddress \ + (\$PublicIpAddress . Char)};\r\ + \n#:if ([ :pick \$PublicIpAddress ([ :len \$PublicIpAddress ] - 1) ] = \"/\ + n\") do={\r\ + \n#:log warning \"N is = //n\"; \r\ + \n# :set PublicIpAddress [ \$CharacterReplace \$PublicIpAddress \$Char \"\ + \" ];\r\ + \n#}\r\ + \n# :set PublicIpAddress [ \$UrlEncode \$PublicIpAddress ];\r\ + \n#:local IpLen ([ :len \$PublicIpAddress ] -1);\r\ + \n#:set PublicIpAddress [:pick \$PublicIpAddress 0 \$IpLen];\r\ + \n :log warning \"Public IP address detected: \$PublicIpAddress , len = \ + \$IpLen\";\r\ + \n}\r\ + \n" +add comment="download, import and update firewall address-lists" \ + dont-require-permissions=no name=AM-FwAddrLists owner=AM-FwAddrLists \ + policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + source="#!rsc by Vados\r\ + \n# RouterOS script: AM-FwAddrLists\r\ + \n# Script comment: download, import and update firewall address-lists\r\ + \n# Copyright (c) 2007-2026 Vados \r\ + \n#\r\ + \n#\r\ + \n# requires RouterOS, version=7.19\r\ + \n# https://ros.vados.ru/doc/fw-addr-lists.md\r\ + \n:local ExitOK false;\r\ + \n:onerror Err {\r\ + \n :global GlobalConfReady; :global GlobalFuncReady;\r\ + \n :retry { :if (\$GlobalConfReady != true || \$GlobalFuncReady != true) \ + \\\r\ + \n do={ :error (\"Global config and/or functions not ready.\"); }; } \ + delay=500ms max=50;\r\ + \n :local ScriptName [ :jobname ];\r\ + \n\r\ + \n :global GlobalScriptsUrl;\r\ + \n :local ListsDirName (\"fw-addr-lists.d/\" . [ /system identity get nam\ + e ] . \"/\");\r\ + \n :local ListsUrl (\$GlobalScriptsUrl . \$ListsDirName);\r\ + \n :local ListsIndex \"index.lst\";\r\ + \n :local AddrListsTimeOut 1d;\r\ + \n :local CheckCerts false;\r\ + \n\r\ + \n :global CertificateAvailable;\r\ + \n :global EitherOr;\r\ + \n :global FetchHugeFiles;\r\ + \n :global HumanReadableNum;\r\ + \n :global IfThenElse;\r\ + \n :global LogPrint;\r\ + \n :global NetMask4;\r\ + \n :global NetMask6;\r\ + \n :global ScriptLock;\r\ + \n \r\ + \n :local FindDelim do={\r\ + \n :local ValidChars \"0123456789.:/ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghi\ + jklmnopqrstuvwxyz-\";\r\ + \n :for I from=0 to=[ :len \$1 ] do={\r\ + \n :if ([ :typeof [ :find \$ValidChars [ :pick (\$1 . \" \") \$I ] ] \ + ] != \"num\") do={\r\ + \n :return \$I;\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :local GetBranch do={\r\ + \n :global EitherOr;\r\ + \n :return [ :pick [ :convert transform=md5 to=hex [ :pick \$1 0 [ \$Ei\ + therOr [ :find \$1 \"/\" ] [ :len \$1 ] ] ] ] 0 2 ];\r\ + \n }\r\ + \n \r\ + \n :if ([ \$ScriptLock \$ScriptName ] = false) do={\r\ + \n :set ExitOK true;\r\ + \n :error false;\r\ + \n }\r\ + \n\r\ + \n :local ListComment (\"managed by \" . \$ScriptName);\r\ + \n :local Url (\$ListsUrl . \$ListsIndex);\r\ + \n :local tmpIndex false;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :set tmpIndex [ :tolf [ \$FetchHugeFiles \$ScriptName \$Url \$Chec\ + kCerts ] ];\r\ + \n :if (\$tmpIndex = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list \ + index, \" . \$I . \". try from: \" . \$Url);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n :if (\$tmpIndex = false) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading address-list inde\ + x from: \" . \$Url);\r\ + \n :set tmpIndex \"\";\r\ + \n }\r\ + \n\r\ + \n :foreach List in=[ :deserialize \$tmpIndex delimiter=\"\\n\" from=dsv \ + options=dsv.plain ] do={\r\ + \n# :set List (\$List->0);\r\ + \n :local ListName;\r\ + \n :local Delim [ \$FindDelim \$List ];\r\ + \n :if (\$Delim = 0) do={ :set List \"\"; };\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$List);\r\ + \n :if ([ :len \$List ] = 0) do={\r\ + \n :log error (\$ScriptName . \" Failed parsing address-list index en\ + try: \" . \$List);\r\ + \n } else={\r\ + \n :set ListName [ :pick \$List 0 \$Delim ];\r\ + \n }\r\ + \n :log warning (\$ScriptName . \" Parsing address-list index entry: \"\ + \_. \$ListName . \" - Ok.\");\r\ + \n :local ListUrl (\$ListsUrl . \$ListName);\r\ + \n :local CntAdd 0;\r\ + \n :local CntRenew 0;\r\ + \n :local CntRemove 0;\r\ + \n :local IPv4Addresses ({});\r\ + \n :local IPv6Addresses ({});\r\ + \n :local Failure false;\r\ + \n :local Data false;\r\ + \n :local TimeOut \$AddrListTimeOut;\r\ + \n\r\ + \n :for I from=1 to=5 do={\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data [ :tolf [ \$FetchHugeFiles \$ScriptName \$ListUrl \$Ch\ + eckCerts ] ];\r\ + \n :if (\$Data = false && \$I < 5) do={\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\ + \" . \$ListName . \"', \" . \$I . \". try from: \" . \$ListUrl);\r\ + \n :delay ((\$I * \$I) . \"s\");\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :if (\$Data = false) do={\r\ + \n :set Data \"\";\r\ + \n :set Failure true;\r\ + \n :log warning (\$ScriptName . \" Failed downloading for list '\" . \ + \$ListName . \"' from: \" . \$ListUrl);\r\ + \n } else={\r\ + \n :log warning (\$ScriptName . \" Downloaded \" . [ \$HumanReadableN\ + um [ :len \$Data ] 1024 ] . \"B for list '\" . \$ListName . \"' from: \" .\ + \_\$ListUrl);\r\ + \n }\r\ + \n\r\ + \n :foreach Line in=[ :deserialize \$Data delimiter=\"\\n\" from=dsv op\ + tions=dsv.plain ] do={\r\ + \n :set Line (\$Line->0);\r\ + \n :local Address;\r\ + \n :if ([ :pick \$Line 0 1 ] = \"{\" && [ :pick \$Line ([ :len \$Line\ + \_] - 1) ] = \"}\") do={\r\ + \n :do {\r\ + \n :set Address [ :tostr ([ :deserialize from=json \$Line ]->\"ci\ + dr\") ];\r\ + \n } on-error={ }\r\ + \n } else={\r\ + \n :set Address ([ :pick \$Line 0 [ \$FindDelim \$Line ] ] . (\$L\ + ist->\"cidr\"));\r\ + \n }\r\ + \n :do {\r\ + \n :local Branch;\r\ + \n :if (\$Address ~ \"^[0-9]{1,3}\\\\.[0-9]{1,3}\\\\.[0-9]{1,3}\\\\\ + .[0-9]{1,3}(/[0-9]{1,2})\?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 32;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n :set Address [ :tostr (([ :toip \$Net ] & [ \$NetMask4 \$CID\ + R ]) . [ \$IfThenElse (\$CIDR < 32) (\"/\" . \$CIDR) ]) ];\r\ + \n }\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[0-9a-zA-Z]*:[0-9a-zA-Z:\\\\.]+(/[0-9]{1,3})\ + \?\\\$\") do={\r\ + \n :local Net \$Address;\r\ + \n :local CIDR 128;\r\ + \n :local Slash [ :find \$Address \"/\" ];\r\ + \n :if ([ :typeof \$Slash ] = \"num\") do={\r\ + \n :set Net [ :toip6 [ :pick \$Address 0 \$Slash ] ]\r\ + \n :set CIDR [ :pick \$Address (\$Slash + 1) [ :len \$Address ]\ + \_];\r\ + \n }\r\ + \n :set Address (([ :toip6 \$Net ] & [ \$NetMask6 \$CIDR ]) . \"/\ + \" . \$CIDR);\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n :if (\$Address ~ \"^[\\\\.a-zA-Z0-9-]+\\\\.[a-zA-Z]{2,}\\\$\") d\ + o={\r\ + \n :set Branch [ \$GetBranch \$Address ];\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address) \$TimeOut;\r\ + \n }\r\ + \n } on-error={ }\r\ + \n }\r\ + \n \r\ + \n\r\ + \n :foreach Entry in=[ /ip/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ip/firewall/address-list/get \$Entry address ];\ + \r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv4 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ip/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv4Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv4 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ip/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach Entry in=[ /ipv6/firewall/address-list/find where \\\r\ + \n list=\$ListName comment=\$ListComment ] do={\r\ + \n :local Address [ /ipv6/firewall/address-list/get \$Entry address ]\ + ;\r\ + \n :local Branch [ \$GetBranch \$Address ];\r\ + \n :local TimeOut (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :if ([ :typeof \$TimeOut ] = \"time\") do={\r\ + \n :log warning (\$ScriptName . \" Renewing IPv6 address \" . \$Add\ + ress . \\\r\ + \n \" in list '\" . \$ListName . \"' with \" . \$TimeOut . \".\ + \");\r\ + \n /ipv6/firewall/address-list/set \$Entry timeout=\$TimeOut;\r\ + \n :set (\$IPv6Addresses->\$Branch->\$Address);\r\ + \n :set CntRenew (\$CntRenew + 1);\r\ + \n } else={\r\ + \n :if (\$Failure = false) do={\r\ + \n :log warning (\$ScriptName . \" Removing IPv6 address \" . \$A\ + ddress . \\\r\ + \n \" from list '\" . \$ListName . \".\");\r\ + \n /ipv6/firewall/address-list/remove \$Entry;\r\ + \n :set CntRemove (\$CntRemove + 1);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv4Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv4 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ip/firewall/address-list/add list=\$ListName comment=\$ListCo\ + mment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv4 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :foreach BranchName,Branch in=\$IPv6Addresses do={\r\ + \n :log warning (\$ScriptName . \" Handling branch: \" . \$BranchName\ + );\r\ + \n :foreach Address,Timeout in=\$Branch do={\r\ + \n :log warning (\$ScriptName . \" Adding IPv6 address \" . \$Addre\ + ss . \\\r\ + \n \" to list '\" . \$ListName . \"' with \" . \$Timeout . \".\ + \");\r\ + \n :onerror Err {\r\ + \n /ipv6/firewall/address-list/add list=\$ListName comment=\$List\ + Comment \\\r\ + \n address=\$Address timeout=\$Timeout;\r\ + \n :set CntAdd (\$CntAdd + 1);\r\ + \n } do={\r\ + \n :log warning (\$ScriptName . \" Failed to add IPv6 address \" \ + . \$Address . \\\r\ + \n \" to list '\" . \$ListName . \"': \" . \$Err);\r\ + \n }\r\ + \n }\r\ + \n }\r\ + \n\r\ + \n :log info (\$ScriptName . \" list: \" . \$ListName . \\\r\ + \n \" (\" . [ \$HumanReadableNum (\$CntAdd + \$CntRenew) 1000 ] . \ + \")\" . \\\r\ + \n \" -- added: \" . [ \$HumanReadableNum \$CntAdd 1000 ] . \\\r\ + \n \" - renewed: \" . [ \$HumanReadableNum \$CntRenew 1000 ] . \\\r\ + \n \" - removed: \" . [ \$HumanReadableNum \$CntRemove 1000 ]);\r\ + \n }\r\ + \n} do={\r\ + \n :global ExitError; \$ExitError \$ExitOK [ :jobname ] \$Err;\r\ + \n}\r\ + \n" +add dont-require-permissions=no name=awg-env owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/envs/add list=awg-proxy-env key=AWG_LISTEN value=\":55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_REMOTE value=\"109.107.17\ + 7.79:55055\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JC value=\"9\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMIN value=\"105\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_JMAX value=\"920\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S1 value=\"90\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S2 value=\"136\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S3 value=\"45\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_S4 value=\"27\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H1 value=\"472437748-4724\ + 38637\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H2 value=\"707808381-7078\ + 09250\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H3 value=\"1609078552-160\ + 9079495\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_H4 value=\"1012329484-101\ + 2329741\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I1 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I2 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I3 value=\"\ + \"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I4 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_I5 value=\"\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_SERVER_PUB value=\"o5IgCl\ + 1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=\"\ + \n/container/envs/add list=awg-proxy-env key=AWG_CLIENT_PUB value=[/interf\ + ace/wireguard/get [find name=wg-awg-proxy] public-key]" +add dont-require-permissions=no name=awg-container-add owner=vados policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon source="/\ + container/add file=sata1/tmp/awg-proxy-amd64.tar.gz interface=veth-awg-pro\ + xy envlist=awg-proxy-env \\\ + \n hostname=awg-proxy root-dir=sata1/awg-proxy logging=yes shm-size=4M \ + start-on-boot=yes\ + \n/container/start [find where tag~\"awg-proxy\"]" +/user group +add name=backup policy="telnet,ssh,ftp,read,write,policy,test,sniff,sensitive,\ + !local,!reboot,!winbox,!password,!web,!api,!romon,!rest-api" +/app +set cinny firewall-redirects=8094:80:tcp:web +set goaway container-command-lines=goaway:none:docker.io/pommee/goaway:latest +set home-assistant container-command-lines=\ + home-assistant:none:lscr.io/linuxserver/homeassistant +set n8n firewall-redirects=5678:5678:tcp:web +set nextcloud container-command-lines="db:none:docker.io/postgres:17,redis:non\ + e:docker.io/valkey/valkey:/bin/sh -c 'valkey-server --port 6379 --appendon\ + ly yes --requirepass \$VALKEY_PASSWORD',server:none:docker.io/nextcloud:ap\ + ache" +set pihole environment="pihole:FTLCONF_dns_listeningMode=all,pihole:FTLCONF_we\ + bserver_api_password=password" +set redlib firewall-redirects=8087:8080:tcp:web +set solr container-command-lines=solr:none:docker.io/solr:latest +set uptime-kuma container-command-lines=\ + uptime-kuma:none:docker.io/louislam/uptime-kuma:1 +/app settings +set auto-update=yes disk=*7 lan-bridge=*3 registry-mirrors="https://reg.vados.\ + ru:5000/:https://reg.vados.ru/,https://registry-1.docker.io" +/caps-man aaa +set called-format=ssid +/caps-man access-list +add action=reject allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-120..-80 ssid-regexp="" +add action=accept allow-signal-out-of-range=10s disabled=no interface=all \ + signal-range=-79..120 ssid-regexp="" +/caps-man configuration +add channel.band=2ghz-b/g/n country=no_country_set datapath=xs-DataPath mode=\ + ap name=xs-2G rx-chains=0,1,2,3 security=xs-Sec ssid=vados tx-chains=\ + 0,1,2,3 +add channel.band=5ghz-a/n/ac country=no_country_set datapath=xs-DataPath \ + installation=any mode=ap name=xs-5G rx-chains=0,1,2,3 security=xs-Sec \ + ssid=vados5g tx-chains=0,1,2,3 +add channel.band=2ghz-b/g/n .control-channel-width=20mhz .extension-channel=\ + XX .frequency=2422,2442,2462 .reselect-interval=20m country=belarus \ + datapath=DataPath datapath.client-to-client-forwarding=yes \ + .local-forwarding=yes hw-protection-mode=rts-cts installation=any name=2G \ + rx-chains=0,1,2,3 security=WPA2 ssid=vados tx-chains=0,1,2,3 +add channel.band=5ghz-a/n/ac .control-channel-width=20mhz .extension-channel=\ + XXXX .frequency=5180,5200,5220,5240,5260 .reselect-interval=20m \ + .skip-dfs-channels=yes country=belarus datapath=DataPath \ + datapath.client-to-client-forwarding=yes .local-forwarding=yes \ + hw-protection-mode=rts-cts installation=any name=5G security=WPA2 ssid=\ + vados5g +/caps-man datapath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + xs-DataPath +add bridge=*3 client-to-client-forwarding=yes local-forwarding=yes name=\ + DataPath +/caps-man manager +set ca-certificate=CAPsMAN-CA-51B25E507D07 certificate=CAPsMAN-51B25E507D07 \ + enabled=yes require-peer-certificate=yes +/caps-man manager interface +set [ find default=yes ] forbid=yes +add disabled=no interface=*DF +/caps-man provisioning +add action=create-dynamic-enabled hw-supported-modes=g,gn,b \ + master-configuration=2G name-format=prefix-identity name-prefix=2G +add action=create-dynamic-enabled hw-supported-modes=an,ac,a \ + master-configuration=5G name-format=prefix-identity name-prefix=5G +add action=create-dynamic-enabled disabled=yes hw-supported-modes=ac,an,a \ + master-configuration=2G name-format=prefix-identity name-prefix=5ghz-ac +add action=create-dynamic-enabled disabled=yes hw-supported-modes=an \ + master-configuration=5G name-format=prefix-identity name-prefix=5ghz-an +/certificate settings +set crl-store=system +/container config +set layer-dir=/sata1 memory-high=200.0MiB memory-max=4096.0MiB registry-url=\ + https://registry-1.docker.io tmpdir=/sata1/tmp username=amsternl +/container envs +add key=HANDSHAKE_TIMEOUT list=amneziawg value=60 +add key=LOCAL_NET list=amneziawg value=10.9.0.0/24 +add key=PING_TARGET list=amneziawg value=8.8.8.8 +/container mounts +add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +/ip smb +set enabled=no +/ipv6 settings +# ipv6 neighbor configuration has changed, please restart the device in order to apply the new settings +set allow-fast-path=no disable-ipv6=yes disable-link-local-address=yes +/interface detect-internet +set detect-interface-list=WAN internet-interface-list=Internet \ + lan-interface-list=LAN wan-interface-list=WAN +/interface wifi cap +set discovery-interfaces=*DF +/interface wifi capsman +set package-path=/tmpfs/capsman-packages upgrade-policy=none +/interface wireguard peers +add allowed-address=0.0.0.0/0 endpoint-address=172.19.77.106 endpoint-port=\ + 51820 interface=wg-AWG-VDSina name=peer19 persistent-keepalive=10s \ + public-key="o5IgCl1/G6xbl6j7sPaP4ZNYREeYOmqZjKbm+v0b9jU=" +/ip address +add address=10.30.30.10/24 interface=ether2 network=10.30.30.0 +/ip dhcp-client +add disabled=yes interface=ether2 name=client1 +/ip dhcp-server +add add-arp=yes address-pool=dhcp always-broadcast=yes bootp-support=none \ + dhcp-option-set=domain-search-set disabled=yes interface=*3 lease-script=\ + lease-script lease-time=10m name=nucDHCP server-address=10.30.30.10 +/ip dns +set allow-remote-requests=yes doh-max-concurrent-queries=100 \ + doh-max-server-connections=20 servers=109.107.177.79,8.8.4.4 \ + verify-doh-cert=yes +/ip firewall nat +add action=masquerade chain=srcnat src-address=172.19.77.104/30 +/ip firewall service-port +set ftp disabled=yes +set tftp disabled=yes +set sip disabled=yes +set pptp disabled=yes +set rtsp disabled=no +/ip route +add check-gateway=none disabled=no distance=1 dst-address=0.0.0.0/0 gateway=\ + 10.30.30.81 routing-table=main scope=30 target-scope=10 +/ip service +set ftp disabled=yes +set telnet disabled=yes +set www disabled=yes +set reverse-proxy disabled=yes +set ssh port=2222 +set www-ssl port=4443 +set api disabled=yes +set api-ssl disabled=yes +/ip service webserver +set acme-plain=no crl-plain=no graphs-plain=no graphs-secure=no index-plain=\ + no index-secure=no rest-plain=no rest-secure=no scep-plain=no \ + webfig-plain=no webfig-secure=no +/ip ssh +set forwarding-enabled=both password-authentication=no \ + publickey-authentication-options=verify-required strong-crypto=yes +/ip upnp +set enabled=yes +/ip upnp interfaces +add interface=*3 type=external +add interface=*B5 type=internal +/ipv6 firewall address-list +add address=2400:cb00::/32 list=CLOUDFLARE-IP-Address +add address=2606:4700::/32 list=CLOUDFLARE-IP-Address +add address=2803:f800::/32 list=CLOUDFLARE-IP-Address +add address=2405:b500::/32 list=CLOUDFLARE-IP-Address +add address=2405:8100::/32 list=CLOUDFLARE-IP-Address +add address=2a06:98c0::/29 list=CLOUDFLARE-IP-Address +add address=2c0f:f248::/32 list=CLOUDFLARE-IP-Address +/system clock +set time-zone-autodetect=no time-zone-name=Europe/Moscow +/system identity +set name=MikroNUC +/system note +set show-at-login=no +/system ntp client +set enabled=yes +/system ntp server +set enabled=yes manycast=yes multicast=yes +/system ntp client servers +add address=10.30.30.81 +add address=0.ru.pool.ntp.org +add address=1.ru.pool.ntp.org +add address=2.ru.pool.ntp.org +add address=3.ru.pool.ntp.org +/system scheduler +add comment="Every Day Set Global Environment Variables" disabled=yes name=\ + AM-SetGlobalEnv on-event=\ + "/system/script { run AM-GlobalConfig; run AM-GlobalFunc; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Update Scripts" disabled=yes interval=1d \ + name=AM-ScriptInstallUpdate on-event=\ + ":global ScriptInstallUpdate; \$ScriptInstallUpdate;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Every Day Check For Fake Bridges" disabled=yes interval=1d name=\ + mod/AM-IPbridge on-event="/system/script/run mod/AM-IPbridge;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment="Telegram Chat Bot" disabled=yes interval=30s name=mod/AM-TG-Bot \ + on-event="/system/script/run mod/AM-TG-Bot;" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-time=startup +add comment=\ + "Every 7 Day Check For Update and Backup send notification to EMail." \ + disabled=yes interval=1w name=AM-Backup-UpdateEmail on-event=\ + "/system/script { run AM-Backup-UpdateEmail; }" policy=\ + ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \ + start-date=2026-06-25 start-time=03:41:27 +/tool e-mail +set certificate-verification=no from=MikroNUC port=587 \ + server=smtp.mail.me.com tls=starttls user=vadossio@icloud.com +/tool netwatch +add disabled=yes down-script=\ + ":local msg \"Host MikroYellow is DOWN\";\r\ + \n\$TGSendMessage \$msg;" host=10.30.30.86 http-codes="" interval=10s \ + test-script="" type=simple up-script=\ + ":global TGSendMessage;\r\ + \n\$TGSendMessage \"Host MikroYellow is UP\";" +/user aaa +set accounting=no diff --git a/MikroNUC/history/20260628/20260628062001-Diff-Config.rsc b/MikroNUC/history/20260628/20260628062001-Diff-Config.rsc new file mode 100644 index 0000000..81a4eba --- /dev/null +++ b/MikroNUC/history/20260628/20260628062001-Diff-Config.rsc @@ -0,0 +1,13 @@ +29,30d28 +< add address=172.18.20.5/30 container-mac-address=00:00:00:00:00:00 dhcp=no \ +< gateway=172.18.20.6 gateway6="" name=veth-awg +4707,4713c4705 +< https://registry-1.docker.io tmpdir=/sata1/tmp username=amsternl +< /container envs +< add key=HANDSHAKE_TIMEOUT list=amneziawg value=60 +< add key=LOCAL_NET list=amneziawg value=10.9.0.0/24 +< add key=PING_TARGET list=amneziawg value=8.8.8.8 +< /container mounts +< add dst=/config list=awg-conf src=/sata1/amnezia/amneziawg +--- +> https://registry-1.docker.io tmpdir=/sata1/pull username=amsternl -- 2.52.0